$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft File: rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft (raw, json) Hash identifier: Yk9BdndSjjM09GIcCvBRLdi6/J1Dk0SyY7l/OANI9+0= Subject key identifier: 5F:62:71:40:68:FB:52:CE:48:B4:EC:5E:EB:FB:D2:B7:2C:D3:17:34 Authority key identifier: AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2 Certificate issuer: /CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2 Certificate serial: 0A78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft Manifest number: 0A6E Signing time: Thu 02 May 2024 20:25:07 +0000 Manifest this update: Thu 02 May 2024 20:25:07 +0000 Manifest next update: Thu 09 May 2024 20:25:07 +0000 Files and hashes: 1: rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl (hash: gdTiC9JXMkfgAy1F4MwtQvL0/tWsZwj8jvIMKOQIt/8=) 2: FB6D5292263C11EEB9F5DB43C4F9AE02.roa (hash: tGjhsdRE4mpF1N0qbepC7ow/yzGd/4QJr9ZNX8lYpdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2680 (0xa78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2 Validity Not Before: May 2 20:25:07 2024 GMT Not After : May 9 20:25:07 2024 GMT Subject: CN=6633f6a3-0b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a7:ad:08:0c:71:b3:fd:58:cb:3a:9e:39:58: c8:3c:b2:a7:56:97:57:05:7f:9e:0c:12:bb:8c:dd: ad:21:8e:f6:41:0d:35:2f:62:44:da:9c:3b:31:dc: 07:93:93:38:5c:61:3a:8b:e5:84:7b:2f:68:0b:10: 14:12:ba:33:65:4d:06:02:5d:16:3b:ef:1a:3f:8b: 86:25:83:87:62:0f:62:bb:34:fd:01:f7:72:b1:be: 37:43:a7:8b:66:d5:bf:86:55:27:e3:eb:0a:94:16: b4:f6:a7:60:ac:3f:85:8b:7d:f5:51:94:84:7d:c7: 5d:51:3d:5f:53:90:74:a0:bd:ea:f6:30:e3:33:4e: 96:e9:b1:69:2e:5a:f2:22:06:89:ea:85:91:75:54: 12:c9:36:12:e1:c1:2c:64:a6:9e:72:21:31:93:e5: 87:97:61:eb:26:0c:c6:ac:c4:a7:60:ab:8d:d9:74: 38:de:c5:14:26:3a:94:79:9f:5d:57:26:2f:9a:de: 2e:59:40:93:a2:70:19:39:29:96:3b:f7:52:e8:4e: 93:4d:8e:89:4c:c5:b3:5f:40:1e:bf:f7:43:49:de: 43:01:4c:0d:97:b6:58:3b:a7:1c:54:ce:70:71:23: ad:5a:06:41:41:e5:33:da:9c:de:0c:9d:c7:23:c6: 2e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:62:71:40:68:FB:52:CE:48:B4:EC:5E:EB:FB:D2:B7:2C:D3:17:34 X509v3 Authority Key Identifier: keyid:AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:bf:ca:86:46:9b:c4:d9:21:11:87:87:c6:32:08:26:62:fc: 48:9c:24:f2:0a:b1:09:35:88:b1:ba:65:da:47:0b:96:a0:c3: ce:1c:c4:4c:03:b1:3f:37:be:83:c5:71:24:ab:64:a6:05:94: 39:b8:d6:4c:c3:99:a7:e8:56:b8:74:a6:8f:dd:80:dc:68:c0: 6e:d4:84:4f:9d:39:8a:41:49:df:70:06:3d:bd:1c:29:45:aa: 4f:29:38:dc:f1:15:4d:f2:f9:fc:b1:d7:5f:52:9c:f9:a1:3c: 49:b6:97:d4:fa:c3:7b:97:b2:1a:f5:bc:ee:84:59:e1:7e:9a: e6:3e:55:26:7c:01:20:03:35:2c:02:4c:e4:f6:c5:8d:83:9d: 5d:88:b6:89:87:9f:57:36:46:45:1b:47:11:2e:43:78:c2:25: 65:d1:bf:e4:2f:46:bb:bb:25:a9:fa:d0:c6:7d:6c:4b:cc:f4: ca:d2:07:79:9d:9e:5a:bc:83:be:98:d9:da:3b:6a:ae:37:55: 93:51:29:d6:b2:8b:e6:41:1f:72:a3:a2:6c:b5:fe:4e:8e:49: ad:2b:c7:34:67:20:9b:72:5f:15:7a:a5:c8:d4:b3:16:16:c8: cf:a6:cd:d8:b8:ec:0c:11:4e:f4:28:2c:b6:b7:76:12:fe:e5: c3:61:ae:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY4QjYxMTAvBgNVBAUTKEFEODRGNEJDQkVCM0M5MzY1RjI4MjcxNTNCQTY5Q0VE MkE5OTEyRTIwHhcNMjQwNTAyMjAyNTA3WhcNMjQwNTA5MjAyNTA3WjAYMRYwFAYD VQQDEw02NjMzZjZhMy0wYjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraetCAxxs/1YyzqeOVjIPLKnVpdXBX+eDBK7jN2tIY72QQ01L2JE2pw7MdwH k5M4XGE6i+WEey9oCxAUErozZU0GAl0WO+8aP4uGJYOHYg9iuzT9Afdysb43Q6eL ZtW/hlUn4+sKlBa09qdgrD+Fi331UZSEfcddUT1fU5B0oL3q9jDjM06W6bFpLlry IgaJ6oWRdVQSyTYS4cEsZKaeciExk+WHl2HrJgzGrMSnYKuN2XQ43sUUJjqUeZ9d VyYvmt4uWUCTonAZOSmWO/dS6E6TTY6JTMWzX0Aev/dDSd5DAUwNl7ZYO6ccVM5w cSOtWgZBQeUz2pzeDJ3HI8YugQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9icUBo +1LOSLTsXuv70rcs0xc0MB8GA1UdIwQYMBaAFK2E9Ly+s8k2XygnFTumnO0qmRLi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjhCNi80MEU3RkFCQTNB QTYxMUVBQUM4RjE4NzVDNEY5QUUwMi9yWVQwdkw2enlUWmZLQ2NWTzZhYzdTcVpF dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVDB2TDZ6eVRaZktDY1ZPNmFjN1NxWkV1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjhCNi80MEU3RkFCQTNBQTYxMUVBQUM4RjE4NzVDNEY5QUUwMi9yWVQwdkw2enlU WmZLQ2NWTzZhYzdTcVpFdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIv8qGRpvE2SERh4fGMggmYvxInCTyCrEJNYixumXaRwuWoMPOHMRM A7E/N76DxXEkq2SmBZQ5uNZMw5mn6Fa4dKaP3YDcaMBu1IRPnTmKQUnfcAY9vRwp RapPKTjc8RVN8vn8sddfUpz5oTxJtpfU+sN7l7Ia9bzuhFnhfprmPlUmfAEgAzUs Akzk9sWNg51diLaJh59XNkZFG0cRLkN4wiVl0b/kL0a7uyWp+tDGfWxLzPTK0gd5 nZ5avIO+mNnaO2quN1WTUSnWsovmQR9yo6Jstf5OjkmtK8c0ZyCbcl8VeqXI1LMW FsjPps3YuOwMEU70KCy2t3YS/uXDYa72 -----END CERTIFICATE-----Generated at Thu May 2 22:28:59 2024 by rpki-client on console-ams.rpki-client.org