$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json) Hash identifier: 2UnaaLbg6qd/ieqBRY4KZAa5f4XHellJbb6GDrFplfc= Subject key identifier: E1:67:E9:95:AE:60:89:52:2E:E7:94:42:AB:65:84:5B:AB:7A:D4:58 Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Certificate serial: 099A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft Manifest number: 0FB3 Signing time: Tue 30 Apr 2024 21:12:37 +0000 Manifest this update: Tue 30 Apr 2024 21:12:37 +0000 Manifest next update: Tue 07 May 2024 21:12:37 +0000 Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: /YJ82hiHmQsJERw5fhUNdn3hTMG/IQDvcRBrx0R6gPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2458 (0x99a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Validity Not Before: Apr 30 21:12:37 2024 GMT Not After : May 7 21:12:37 2024 GMT Subject: CN=66315ec5-40e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:23:7a:ea:85:a2:37:af:72:13:f4:1e:16:22: f0:1c:32:67:9a:1c:4c:cc:b1:db:50:a2:cf:73:48: 02:21:26:1a:a8:34:e3:03:bf:0c:29:ae:0a:ef:48: 9c:d4:69:a1:37:ed:e5:3e:ba:cf:f9:ed:3d:03:bb: 46:47:08:87:90:bf:6e:5f:bf:fa:1d:24:a6:62:b8: ec:9a:b3:4b:ad:f8:05:4b:85:dd:67:fa:4f:18:b8: 03:10:7c:96:d0:9b:3b:2b:be:f2:95:b3:a6:96:dc: 37:04:be:f6:5e:65:87:13:bf:58:76:9d:f8:f5:ac: f5:df:b8:27:24:6a:92:d5:e4:fb:49:aa:a3:74:ad: 83:1e:c3:14:72:3a:5f:e0:9a:cd:e8:e4:82:54:f7: d2:ec:b8:6c:e9:6d:3c:c5:01:e4:92:ac:0d:ef:8e: 3f:42:2d:8a:50:de:d8:12:33:65:18:3d:7b:87:77: e6:d4:ce:1f:2a:dd:e3:4d:ce:0a:e1:77:bb:85:27: cd:7f:76:19:7e:7a:fc:e2:cf:83:c3:31:28:e8:15: e0:89:72:ec:06:a1:2c:9d:22:19:6a:7f:39:9a:24: 0b:1a:54:67:13:73:29:02:d7:3e:a6:65:80:90:5e: 71:d1:f3:cd:d4:5c:85:58:f6:95:df:05:98:d3:2c: c3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:67:E9:95:AE:60:89:52:2E:E7:94:42:AB:65:84:5B:AB:7A:D4:58 X509v3 Authority Key Identifier: keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b3:75:12:4d:e4:d8:b8:78:f0:b3:35:0b:cc:2e:f5:4f:f4: b0:2a:2a:59:e5:16:84:7c:64:e1:38:2a:df:96:94:80:e5:11: 33:eb:4b:0a:a2:b3:58:6c:1e:85:c5:17:da:a0:df:1a:45:6b: c7:b6:4c:45:96:41:b1:28:c0:e1:48:87:91:8f:6f:85:f8:32: 52:c7:00:6b:71:49:12:2b:2c:c9:71:5d:cf:a9:59:d7:b1:f2: 31:17:6a:7f:52:c5:d6:05:72:84:17:53:0b:58:76:c0:3a:8f: f2:b1:74:a9:50:28:8f:4b:2f:9a:ea:b9:1e:98:39:53:aa:66: 0f:df:cc:06:00:f8:b8:d8:73:4c:54:ff:b2:e7:72:6b:b7:19: 9d:d1:40:47:08:6f:46:47:d4:4a:f3:a9:0e:26:e2:e8:db:e3: c5:f6:44:c8:52:75:f7:83:c2:9f:55:4f:3a:87:d9:40:47:a4: b0:95:12:a7:48:32:c3:df:40:e5:20:d9:b4:1a:6b:63:9d:50: ec:20:24:36:c0:90:45:4e:72:d4:40:0a:67:88:93:da:cd:a5: d9:80:e4:86:30:05:9d:7e:02:a2:49:69:79:dc:cb:67:0e:9a: 26:b5:17:8e:8c:d7:ba:fa:37:1f:26:c0:da:44:f9:f1:f4:bb: 8d:75:1c:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz RTRDRjM2NDQwHhcNMjQwNDMwMjExMjM3WhcNMjQwNTA3MjExMjM3WjAYMRYwFAYD VQQDEw02NjMxNWVjNS00MGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiN66oWiN69yE/QeFiLwHDJnmhxMzLHbUKLPc0gCISYaqDTjA78MKa4K70ic 1GmhN+3lPrrP+e09A7tGRwiHkL9uX7/6HSSmYrjsmrNLrfgFS4XdZ/pPGLgDEHyW 0Js7K77ylbOmltw3BL72XmWHE79Ydp349az137gnJGqS1eT7SaqjdK2DHsMUcjpf 4JrN6OSCVPfS7Lhs6W08xQHkkqwN744/Qi2KUN7YEjNlGD17h3fm1M4fKt3jTc4K 4Xe7hSfNf3YZfnr84s+DwzEo6BXgiXLsBqEsnSIZan85miQLGlRnE3MpAtc+pmWA kF5x0fPN1FyFWPaV3wWY0yzDFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFn6ZWu YIlSLueUQqtlhFuretRYMB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBas3USTeTYuHjwszULzC71T/SwKipZ5RaEfGThOCrflpSA5REz60sK orNYbB6FxRfaoN8aRWvHtkxFlkGxKMDhSIeRj2+F+DJSxwBrcUkSKyzJcV3PqVnX sfIxF2p/UsXWBXKEF1MLWHbAOo/ysXSpUCiPSy+a6rkemDlTqmYP38wGAPi42HNM VP+y53Jrtxmd0UBHCG9GR9RK86kOJuLo2+PF9kTIUnX3g8KfVU86h9lAR6SwlRKn SDLD30DlINm0GmtjnVDsICQ2wJBFTnLUQApniJPazaXZgOSGMAWdfgKiSWl53Mtn DpomtReOjNe6+jcfJsDaRPnx9LuNdRzS -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:20 2024 by rpki-client on console-fra.rpki-client.org