$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft File: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json) Hash identifier: YHhSyPpZlDNYO6PjJsZrNA/b2f46GpzNdYJgFRoueIY= Subject key identifier: EE:7E:16:1E:5D:0A:DA:C5:8A:9B:E4:F8:99:AA:3D:22:79:B1:50:74 Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 Certificate issuer: /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft Manifest number: 62 Signing time: Fri 17 May 2024 07:45:58 +0000 Manifest this update: Fri 17 May 2024 07:45:58 +0000 Manifest next update: Fri 24 May 2024 07:45:58 +0000 Files and hashes: 1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: TOYX9mrYt/hB39xEw9BUXbnOgf7DB3rJum2hUFe90A4=) 2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: ZGdA796ml3VKylLB4w8czh682N3cMD4buo243Xsl1pA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Validity Not Before: May 17 07:45:58 2024 GMT Not After : May 24 07:45:58 2024 GMT Subject: CN=66470b36-b208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:b8:2b:30:4d:37:46:68:71:03:80:f9:59: 70:36:96:7a:36:2f:3c:a6:a6:47:fb:87:50:8a:b4: 82:be:5c:86:a2:13:49:18:da:7b:c6:e9:3d:51:fd: 51:4a:2a:dc:1a:dc:3f:ff:62:1c:3c:ca:27:54:19: 26:10:a6:e5:b4:29:de:7f:c4:6d:0d:b4:c1:4c:bc: 3d:ac:f6:cb:a8:39:91:c9:4f:b6:2f:21:fa:e1:26: 19:98:90:68:3c:c9:aa:c7:ce:4c:39:80:dc:96:90: 85:cd:c7:8a:a1:d0:35:7e:2d:6e:63:f8:a2:d2:0a: 2c:25:a7:79:59:fa:e9:f7:46:32:35:89:89:7b:bb: d1:73:9f:19:92:95:2b:87:5d:03:e4:5e:a7:5c:37: 87:25:ad:5b:3f:8e:e2:13:d0:86:98:8b:b2:dd:0e: 2f:75:67:59:f0:ba:e1:80:9f:57:02:57:bf:fa:12: 5f:e3:e6:2c:0d:5e:91:65:91:ca:ce:ed:77:46:a5: cf:8c:b7:a1:6b:2f:d7:e1:c1:ee:16:1c:b5:e8:e0: 86:40:59:63:0d:7f:89:93:c1:76:f2:6d:4a:97:2e: 1f:91:b4:35:13:0a:7d:02:4f:8f:ec:2f:c7:e5:5a: c4:ff:fa:e0:75:f1:74:fe:24:a4:0f:ef:9c:ee:46: c6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7E:16:1E:5D:0A:DA:C5:8A:9B:E4:F8:99:AA:3D:22:79:B1:50:74 X509v3 Authority Key Identifier: keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:aa:7f:c3:d6:bd:47:03:b6:5e:5b:c4:22:f9:c7:0d:66:a5: b4:fe:77:a0:86:05:b9:54:3c:a6:1d:03:54:66:0b:98:bd:4e: d1:bd:63:30:82:0a:a2:61:d6:aa:f8:f4:40:d7:63:5f:ee:04: ee:bf:39:02:56:7c:dd:6b:4e:e6:bb:cc:37:ad:ff:53:44:e2: 6d:e0:1f:d3:08:41:76:ff:a6:90:23:48:1d:76:cb:a5:d9:6c: 66:83:39:3b:7c:65:64:2e:24:f9:7b:17:69:12:53:ba:db:e0: f3:b2:90:74:54:ab:8b:32:53:37:7b:ad:0f:3f:07:9c:fc:b9: 09:94:a9:3b:93:43:e9:90:3f:a7:86:0f:04:f7:70:5a:53:c6: 91:a0:ad:79:21:dd:b0:14:5e:65:67:a1:d4:3f:05:e2:3a:a1: bf:46:74:40:e0:63:0d:bc:7d:a3:ea:b6:e6:10:47:18:3a:9a: ab:29:95:f4:e1:35:f0:fd:bd:5c:db:f2:40:ed:bc:2e:61:28: 1a:25:4b:15:65:c4:2c:32:1f:88:13:06:77:d8:8b:5b:48:c6: 32:eb:ae:37:20:b2:88:64:c9:b7:e1:ec:c9:6b:c8:00:10:16: 0e:69:e8:ea:fc:43:3d:10:16:88:40:dd:da:bd:e5:ad:b1:b3: 93:8f:80:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Q0RCMzExMC8GA1UEBRMoNjNBMjlBQkQ4N0Y0QTFGRTU1Q0JGMkEwRjQwOTc1MEFD MzRBQzIzNTAeFw0yNDA1MTcwNzQ1NThaFw0yNDA1MjQwNzQ1NThaMBgxFjAUBgNV BAMTDTY2NDcwYjM2LWIyMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBMLgrME03RmhxA4D5WXA2lno2Lzympkf7h1CKtIK+XIaiE0kY2nvG6T1R/VFK Ktwa3D//Yhw8yidUGSYQpuW0Kd5/xG0NtMFMvD2s9suoOZHJT7YvIfrhJhmYkGg8 yarHzkw5gNyWkIXNx4qh0DV+LW5j+KLSCiwlp3lZ+un3RjI1iYl7u9FznxmSlSuH XQPkXqdcN4clrVs/juIT0IaYi7LdDi91Z1nwuuGAn1cCV7/6El/j5iwNXpFlkcrO 7XdGpc+Mt6FrL9fhwe4WHLXo4IZAWWMNf4mTwXbybUqXLh+RtDUTCn0CT4/sL8fl WsT/+uB18XT+JKQP75zuRsZXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7n4WHl0K 2sWKm+T4mao9InmxUHQwHwYDVR0jBBgwFoAUY6KavYf0of5Vy/Kg9Al1CsNKwjUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDREIzLzkzMDVEMkUwODJB RjExRUVCRUM1OTc1OUM0RjlBRTAyL1k2S2F2WWYwb2Y1VnlfS2c5QWwxQ3NOS3dq VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTZLYXZZZjBvZjVWeV9LZzlBbDFDc05Ld2pVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD REIzLzkzMDVEMkUwODJBRjExRUVCRUM1OTc1OUM0RjlBRTAyL1k2S2F2WWYwb2Y1 VnlfS2c5QWwxQ3NOS3dqVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKeqf8PWvUcDtl5bxCL5xw1mpbT+d6CGBblUPKYdA1RmC5i9TtG9YzCC CqJh1qr49EDXY1/uBO6/OQJWfN1rTua7zDet/1NE4m3gH9MIQXb/ppAjSB12y6XZ bGaDOTt8ZWQuJPl7F2kSU7rb4POykHRUq4syUzd7rQ8/B5z8uQmUqTuTQ+mQP6eG DwT3cFpTxpGgrXkh3bAUXmVnodQ/BeI6ob9GdEDgYw28faPqtuYQRxg6mqsplfTh NfD9vVzb8kDtvC5hKBolSxVlxCwyH4gTBnfYi1tIxjLrrjcgsohkybfh7MlryAAQ Fg5p6Or8Qz0QFohA3dq95a2xs5OPgBk= -----END CERTIFICATE-----Generated at Fri May 17 08:13:54 2024 by rpki-client on console-fra.rpki-client.org