$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft File: RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json) Hash identifier: 7zzmNUWXhS/gm4G/TnCoLTtB0auL0dtZimwoAd17aPo= Subject key identifier: 88:E6:56:3E:57:A1:C8:E1:59:2E:0C:94:F4:94:8F:C2:BE:1D:88:C2 Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Certificate serial: 0379 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft Manifest number: 035F Signing time: Sun 05 May 2024 03:04:44 +0000 Manifest this update: Sun 05 May 2024 03:04:44 +0000 Manifest next update: Sun 12 May 2024 03:04:44 +0000 Files and hashes: 1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: wuKG8ptSWAliZKJCBM3/sZwM/4sj8QpdneSyMyIq2Hw=) 2: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: T1xeJuM61tXFrRrs4nBlTF2LptDqgwUMRZIt/7strSc=) 3: BC148566D22B11EE9443A443C4F9AE02.roa (hash: FZdTfIp41BVBApC35umt8ppBjYpTNPxUV8RxbpvDzeE=) 4: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: 0J8SdaDRINyzPp/xIzQE+b8eGyuYZeldnTsZAsVMjpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 889 (0x379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Validity Not Before: May 5 03:04:44 2024 GMT Not After : May 12 03:04:44 2024 GMT Subject: CN=6636f74c-8713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:24:04:bc:67:88:ff:cd:0d:b3:98:a1:94:7c: 37:64:77:32:fa:f0:59:58:15:bb:e2:a7:db:d7:fa: 93:24:e5:51:3f:51:f4:d8:e8:71:03:d8:2d:02:04: 67:1d:2d:2c:04:b3:d1:80:13:5f:83:72:19:49:6e: d9:42:58:af:5d:c3:95:60:9b:3b:96:02:b8:fd:1d: b5:36:c0:96:62:11:2d:45:89:ea:ac:bd:34:65:19: c6:5b:3d:77:9b:bb:d8:fd:91:82:31:4d:fb:cf:73: 8e:cf:15:68:aa:5d:59:71:93:49:4e:f5:5b:ff:6a: 2f:b9:7a:85:72:7c:49:47:cc:2b:86:c1:7f:61:9b: 0f:9a:79:47:64:a0:f0:f9:a3:35:76:bc:14:68:e7: ee:6f:ff:a2:7b:50:3d:27:95:df:b3:76:26:59:fe: 2b:f1:38:64:40:8e:27:13:30:93:28:87:a8:36:8c: 97:7b:3a:aa:53:f6:0d:be:1a:53:14:1b:62:fa:fa: e4:98:05:26:fa:3a:33:39:eb:58:5c:3f:86:f5:e2: 27:65:e1:ca:10:6a:1f:64:f3:5d:03:32:93:af:1c: 7d:dd:95:0c:16:8b:2c:25:45:97:76:c2:5a:bc:26: ca:23:df:9c:24:43:cb:e2:36:c0:5c:7f:14:83:63: 14:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E6:56:3E:57:A1:C8:E1:59:2E:0C:94:F4:94:8F:C2:BE:1D:88:C2 X509v3 Authority Key Identifier: keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:d5:e0:c4:df:24:84:84:3e:e1:d6:ce:ad:1d:e3:8b:cc:b5: 81:b8:71:32:81:7b:84:ce:d4:0b:7d:d9:c0:d2:1f:fe:b5:2a: 29:3e:5d:a5:ec:78:c0:9d:8b:14:eb:da:3b:64:ba:e8:1d:0c: b5:de:ce:0e:0b:2c:9f:57:c5:4c:33:64:65:b7:2a:8d:62:b4: 71:d2:89:9b:1b:ce:60:6b:10:18:28:65:4f:a3:61:26:ec:30: fb:28:5b:d8:ba:a3:60:f6:8b:54:e4:f6:eb:ae:e2:d9:9e:84: a3:ad:7c:3e:0c:54:ce:fc:a5:0a:71:74:fe:da:b0:1f:5a:e5: b6:33:3d:91:b0:81:88:5a:59:eb:26:31:87:e3:0c:34:d3:36: 2a:8a:51:e1:1b:9c:3f:1a:71:1b:4a:8b:79:6e:d7:5a:a9:66: 5e:cd:4d:02:2e:54:00:88:43:18:fd:19:3e:a9:52:86:b7:f0: 56:9f:e4:91:fa:f6:0a:d2:2e:30:8b:a7:c8:5a:bf:16:2d:34: 50:60:55:32:8e:db:56:6f:d9:46:12:25:a6:ba:63:61:e2:d6: ef:c8:2c:d7:ff:4f:70:08:fe:f7:e8:5d:1e:32:f5:58:d3:f3: ee:d9:d4:49:6b:23:34:27:2b:ff:7f:2e:1d:2e:84:e3:62:10: 98:09:87:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFBRjUxMTAvBgNVBAUTKDQ1ODRBRUEyMzk0QzQ2RDY5MzRFNjNFRDY4ODdENDcy NkZERjdBMTMwHhcNMjQwNTA1MDMwNDQ0WhcNMjQwNTEyMDMwNDQ0WjAYMRYwFAYD VQQDEw02NjM2Zjc0Yy04NzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCQEvGeI/80Ns5ihlHw3ZHcy+vBZWBW74qfb1/qTJOVRP1H02OhxA9gtAgRn HS0sBLPRgBNfg3IZSW7ZQlivXcOVYJs7lgK4/R21NsCWYhEtRYnqrL00ZRnGWz13 m7vY/ZGCMU37z3OOzxVoql1ZcZNJTvVb/2ovuXqFcnxJR8wrhsF/YZsPmnlHZKDw +aM1drwUaOfub/+ie1A9J5Xfs3YmWf4r8ThkQI4nEzCTKIeoNoyXezqqU/YNvhpT FBti+vrkmAUm+jozOetYXD+G9eInZeHKEGofZPNdAzKTrxx93ZUMFossJUWXdsJa vCbKI9+cJEPL4jbAXH8Ug2MU/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjmVj5X ocjhWS4MlPSUj8K+HYjCMB8GA1UdIwQYMBaAFEWErqI5TEbWk05j7WiH1HJv33oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUFGNS9FOTlGNTIzQTZF QzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0YVRUbVB0YUlmVWNtX2Zl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZU3VvamxNUnRhVFRtUHRhSWZVY21fZmVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUFGNS9FOTlGNTIzQTZFQzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0 YVRUbVB0YUlmVWNtX2ZlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC21eDE3ySEhD7h1s6tHeOLzLWBuHEygXuEztQLfdnA0h/+tSopPl2l 7HjAnYsU69o7ZLroHQy13s4OCyyfV8VMM2RltyqNYrRx0ombG85gaxAYKGVPo2Em 7DD7KFvYuqNg9otU5PbrruLZnoSjrXw+DFTO/KUKcXT+2rAfWuW2Mz2RsIGIWlnr JjGH4ww00zYqilHhG5w/GnEbSot5btdaqWZezU0CLlQAiEMY/Rk+qVKGt/BWn+SR +vYK0i4wi6fIWr8WLTRQYFUyjttWb9lGEiWmumNh4tbvyCzX/09wCP736F0eMvVY 0/Pu2dRJayM0Jyv/fy4dLoTjYhCYCYee -----END CERTIFICATE-----Generated at Sun May 5 03:47:50 2024 by rpki-client on console-fra.rpki-client.org