$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft File: CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json) Hash identifier: lcRobu+NIFqpMn6vA4auY+FoKKah26tiqqkBo/ubHGw= Subject key identifier: 40:50:39:84:8C:77:7B:A5:62:33:A0:0D:6B:43:CF:08:44:C8:FC:A5 Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Certificate serial: 0E36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft Manifest number: 0E2B Signing time: Tue 30 Apr 2024 18:43:58 +0000 Manifest this update: Tue 30 Apr 2024 18:43:58 +0000 Manifest next update: Tue 07 May 2024 18:43:58 +0000 Files and hashes: 1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: RJduXbIHBF2PX37gC1xET0hIDwxkIrQSODJ2gnK10q8=) 2: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: 02Gzx78skBC3A5z4FgwAljuDa/r2bhVIgxNZ9hamRSk=) 3: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: yxqOrTWG1l4E66Ldnkh3RH8ccpHwkvnioa7/AvcJV9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3638 (0xe36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Validity Not Before: Apr 30 18:43:58 2024 GMT Not After : May 7 18:43:58 2024 GMT Subject: CN=66313bee-2e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d2:79:c4:c1:93:53:b2:f4:78:72:88:82:fb: ad:18:ee:50:67:27:d9:61:5a:a1:6f:e8:f1:24:d2: 84:08:db:5d:9f:9a:af:c8:8a:10:43:6b:51:f1:a0: a1:94:ef:c9:c6:4f:76:67:bb:0c:a2:02:d6:3c:5c: e4:57:0d:24:c1:f6:e7:86:31:37:56:24:99:b7:a6: 5b:9d:ff:d5:5d:01:ce:45:95:f6:d0:a3:cd:55:50: 02:23:b0:d8:8d:8f:f9:ac:a9:98:39:79:b3:05:2a: 7d:86:c6:97:21:77:4f:70:36:66:33:8f:64:28:3a: 3e:25:33:31:65:4d:4d:31:f7:14:86:4e:0f:ad:32: bd:73:85:5f:93:4e:20:ff:d0:2c:bd:65:2c:78:94: 08:49:14:45:94:03:59:c6:41:75:45:06:6f:f4:22: 22:ff:24:28:9c:90:e3:ca:a7:62:8c:2f:2a:05:7a: ad:3f:b1:e9:8d:2e:71:0b:34:16:b4:72:8c:ec:05: 7c:0e:69:1d:41:0f:6f:31:33:03:ed:d3:4b:cb:06: dd:e1:2c:ae:aa:d3:1d:77:9a:13:c1:7e:f0:69:99: 87:64:95:dd:01:bd:e9:18:03:e8:c7:67:ac:83:42: 1a:e1:06:0f:14:6e:d0:88:a0:25:63:c5:81:99:52: 99:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:50:39:84:8C:77:7B:A5:62:33:A0:0D:6B:43:CF:08:44:C8:FC:A5 X509v3 Authority Key Identifier: keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:25:b7:98:f3:07:27:56:e6:62:f0:9a:f4:34:4b:0c:f5:8d: 83:6b:59:fd:6f:8e:2a:b7:ca:77:2e:bb:c8:a0:b0:4f:de:77: b5:e6:07:4b:91:ad:48:89:0d:2a:5c:20:b1:b8:dd:57:45:8a: 75:51:ce:f5:30:aa:d7:27:64:4d:74:62:eb:d5:0a:a8:53:d3: 76:2c:06:a0:86:b0:99:b4:97:5b:07:11:0e:4a:11:7e:2e:63: 61:61:e7:9b:bd:d7:9c:f4:00:f8:30:87:38:da:64:ba:b3:80: 25:d9:ef:e8:26:1a:38:be:d3:2d:ff:62:b2:0d:a5:b2:cd:f6: d7:fb:69:f4:92:a6:7f:ad:2d:05:44:b2:1b:e8:61:9b:83:a9: 21:2b:36:83:57:83:80:18:3a:d0:d5:e2:8e:e0:2b:d7:cd:27: d0:49:37:9e:08:da:ac:c1:bb:30:cb:c8:ee:5c:8f:78:b7:ac: 25:b3:96:65:42:c5:d1:e8:ba:78:9d:e9:f9:2b:d6:ed:fe:e7: 89:4a:4c:0b:70:fa:7c:cf:02:46:ba:6b:ff:9a:c4:a0:f7:87: e8:01:33:6e:c3:7c:f6:15:93:ed:ed:06:6a:2d:89:45:4f:72: f9:d6:71:35:08:02:63:6c:bf:38:90:04:ee:c5:b7:9d:cb:65: cf:90:81:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExNTUxMTAvBgNVBAUTKDBCMjU2MUM0QjU3REE4MUQ3MEYzOTcyNEIwREUyQzcx MDE3NDlGNUQwHhcNMjQwNDMwMTg0MzU4WhcNMjQwNTA3MTg0MzU4WjAYMRYwFAYD VQQDEw02NjMxM2JlZS0yZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNJ5xMGTU7L0eHKIgvutGO5QZyfZYVqhb+jxJNKECNtdn5qvyIoQQ2tR8aCh lO/Jxk92Z7sMogLWPFzkVw0kwfbnhjE3ViSZt6Zbnf/VXQHORZX20KPNVVACI7DY jY/5rKmYOXmzBSp9hsaXIXdPcDZmM49kKDo+JTMxZU1NMfcUhk4PrTK9c4Vfk04g /9AsvWUseJQISRRFlANZxkF1RQZv9CIi/yQonJDjyqdijC8qBXqtP7HpjS5xCzQW tHKM7AV8DmkdQQ9vMTMD7dNLywbd4SyuqtMdd5oTwX7waZmHZJXdAb3pGAPox2es g0Ia4QYPFG7QiKAlY8WBmVKZOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBQOYSM d3ulYjOgDWtDzwhEyPylMB8GA1UdIwQYMBaAFAslYcS1fagdcPOXJLDeLHEBdJ9d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE1NS81Mzk5OEEzNDdF QjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFCMXc4NWNrc040c2NRRjBu MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N5Vmh4TFY5cUIxdzg1Y2tzTjRzY1FGMG4xMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTE1NS81Mzk5OEEzNDdFQjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFC MXc4NWNrc040c2NRRjBuMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFJbeY8wcnVuZi8Jr0NEsM9Y2Da1n9b44qt8p3LrvIoLBP3ne15gdL ka1IiQ0qXCCxuN1XRYp1Uc71MKrXJ2RNdGLr1QqoU9N2LAaghrCZtJdbBxEOShF+ LmNhYeebvdec9AD4MIc42mS6s4Al2e/oJho4vtMt/2KyDaWyzfbX+2n0kqZ/rS0F RLIb6GGbg6khKzaDV4OAGDrQ1eKO4CvXzSfQSTeeCNqswbswy8juXI94t6wls5Zl QsXR6Lp4nen5K9bt/ueJSkwLcPp8zwJGumv/msSg94foATNuw3z2FZPt7QZqLYlF T3L51nE1CAJjbL84kATuxbedy2XPkIFc -----END CERTIFICATE-----Generated at Tue Apr 30 21:38:07 2024 by rpki-client on console-fra.rpki-client.org