$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft File: YcuQhfAv-PpF5zL1gDQPQkngDKI.mft (raw, json) Hash identifier: EEv1zYvb/OrxYNVn2yz9rIBFt07dgg0CNe0XGBSl1rQ= Subject key identifier: 5E:D2:87:1D:0F:3A:FF:8F:55:E7:2A:03:FA:82:06:64:FE:FB:1E:ED Authority key identifier: 61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 Certificate issuer: /CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Certificate serial: 10B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft Manifest number: 10B0 Signing time: Fri 26 Apr 2024 17:54:33 +0000 Manifest this update: Fri 26 Apr 2024 17:54:32 +0000 Manifest next update: Fri 03 May 2024 17:54:32 +0000 Files and hashes: 1: YcuQhfAv-PpF5zL1gDQPQkngDKI.crl (hash: SNVFwKVFF0laoZg60u3oypuViwRH5jKp0GrSVrlNVZE=) 2: BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa (hash: W8Pn/sq38ZFH49tNBuEJsAdeSaButY/8Fr7mt/fCMSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 17:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4280 (0x10b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Validity Not Before: Apr 26 17:54:32 2024 GMT Not After : May 3 17:54:32 2024 GMT Subject: CN=662bea58-4958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ba:9a:cf:c5:3a:05:6f:71:bf:38:ba:ef:46: e6:be:62:7e:2c:4e:e5:81:72:bb:09:e0:78:e6:64: 01:fe:07:ed:df:4f:05:6f:7c:c2:2f:64:0d:b2:82: 51:4d:3d:05:b3:9a:3b:32:da:47:e9:d1:92:62:6d: 31:54:12:40:3a:c2:a1:e0:5c:c3:6e:60:5c:8d:65: 68:92:2a:fe:38:b2:6d:50:88:1f:f8:ac:f3:bc:35: c8:db:2b:59:e4:75:33:cf:9c:2f:dc:39:d9:b2:8d: cb:70:63:c1:24:cc:6d:30:10:aa:00:79:75:5e:08: ac:d7:a8:d1:a8:84:76:13:40:f5:8e:65:28:30:31: 6a:9b:04:6f:09:5b:92:64:95:43:85:2d:8b:5b:5e: 4c:27:3b:c1:4f:4e:13:15:92:fd:1b:8c:0d:29:36: 97:46:3b:da:29:f6:c0:ac:0e:29:cb:86:ba:19:01: 5e:85:37:6f:d9:40:4a:98:48:c1:b0:69:6e:e1:1f: 51:59:12:20:d8:66:63:16:02:d2:5d:ab:a7:24:91: 5e:cf:f9:d6:16:fd:c0:27:1e:59:90:b0:0d:4f:8c: ef:09:b2:c8:ee:88:59:40:df:4a:8e:89:65:4d:de: 66:b2:6f:d9:e9:f4:cd:ca:ad:37:1e:75:2a:dc:ac: 64:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D2:87:1D:0F:3A:FF:8F:55:E7:2A:03:FA:82:06:64:FE:FB:1E:ED X509v3 Authority Key Identifier: keyid:61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:e3:e2:6d:41:05:72:95:dd:b4:a7:ee:e7:af:ff:cf:3b:dc: 3f:d8:66:10:6d:f4:d1:ac:0b:8e:02:e2:29:f5:ad:71:f9:66: 15:a3:83:66:c3:f9:33:c5:9c:5b:61:f3:c9:e2:56:99:4f:ce: 4f:e6:21:8d:3b:9b:bc:55:b6:cf:c5:f6:d5:57:e1:4c:bf:6d: f1:09:7f:b7:08:28:7b:48:ea:0b:8f:f2:4a:fb:23:92:bb:cd: 79:14:a8:56:47:0d:9e:f5:0f:87:3c:49:38:ce:9f:b9:e3:46: f7:bc:66:a6:9c:14:98:7e:8c:1b:42:a5:55:4e:b0:51:f5:72: 55:50:c8:48:1c:db:6a:3b:b7:79:db:08:ee:9a:2b:d1:a6:07: b1:db:7e:dd:2d:6c:d0:be:e1:7f:49:de:cf:0b:fa:0b:f9:77: a6:c6:0e:ed:d8:7e:7e:1f:00:99:f5:5a:85:20:6e:0a:0f:f2: ad:ec:ec:bf:e2:45:18:d2:9b:c4:56:d4:ea:17:f5:c2:5c:ac: 30:6f:99:45:4f:ac:eb:7e:d6:4e:90:c1:96:7b:76:92:1c:02: 74:3b:a2:32:b8:b3:52:71:1c:a0:16:4b:a0:62:60:31:65:e6: 62:b3:4b:6e:82:96:a6:95:9e:c4:4e:33:f2:93:5a:4d:48:f7: 15:5c:d9:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCMjUxMTAvBgNVBAUTKDYxQ0I5MDg1RjAyRkY4RkE0NUU3MzJGNTgwMzQwRjQy NDlFMDBDQTIwHhcNMjQwNDI2MTc1NDMyWhcNMjQwNTAzMTc1NDMyWjAYMRYwFAYD VQQDEw02NjJiZWE1OC00OTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorqaz8U6BW9xvzi670bmvmJ+LE7lgXK7CeB45mQB/gft308Fb3zCL2QNsoJR TT0Fs5o7MtpH6dGSYm0xVBJAOsKh4FzDbmBcjWVokir+OLJtUIgf+KzzvDXI2ytZ 5HUzz5wv3DnZso3LcGPBJMxtMBCqAHl1Xgis16jRqIR2E0D1jmUoMDFqmwRvCVuS ZJVDhS2LW15MJzvBT04TFZL9G4wNKTaXRjvaKfbArA4py4a6GQFehTdv2UBKmEjB sGlu4R9RWRIg2GZjFgLSXaunJJFez/nWFv3AJx5ZkLANT4zvCbLI7ohZQN9Kjoll Td5msm/Z6fTNyq03HnUq3KxkNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7Shx0P Ov+PVecqA/qCBmT++x7tMB8GA1UdIwQYMBaAFGHLkIXwL/j6Recy9YA0D0JJ4Ayi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0IyNS8yQzYwREZEOEZE QTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1QcEY1ekwxZ0RRUFFrbmdE S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ljdVFoZkF2LVBwRjV6TDFnRFFQUWtuZ0RLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0IyNS8yQzYwREZEOEZEQTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1Q cEY1ekwxZ0RRUFFrbmdES0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB4+JtQQVyld20p+7nr//PO9w/2GYQbfTRrAuOAuIp9a1x+WYVo4Nm w/kzxZxbYfPJ4laZT85P5iGNO5u8VbbPxfbVV+FMv23xCX+3CCh7SOoLj/JK+yOS u815FKhWRw2e9Q+HPEk4zp+540b3vGamnBSYfowbQqVVTrBR9XJVUMhIHNtqO7d5 2wjumivRpgex237dLWzQvuF/Sd7PC/oL+Xemxg7t2H5+HwCZ9VqFIG4KD/Kt7Oy/ 4kUY0pvEVtTqF/XCXKwwb5lFT6zrftZOkMGWe3aSHAJ0O6IyuLNScRygFkugYmAx ZeZis0tugpamlZ7ETjPyk1pNSPcVXNmj -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:40 2024 by rpki-client on console-ams.rpki-client.org