$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft File: 0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft (raw, json) Hash identifier: k2y9TTPc7Svm2mON3uCMipBKkzpMwb6X5EtB4DgpDSw= Subject key identifier: 47:5C:8F:1F:96:9F:0A:CF:53:F5:30:8A:C1:BF:EB:9A:BD:9B:24:51 Authority key identifier: D1:8F:98:A4:1C:0A:DC:8C:81:84:B8:26:A7:1F:3E:F2:7F:19:53:23 Certificate issuer: /CN=A91F1B39/serialNumber=D18F98A41C0ADC8C8184B826A71F3EF27F195323 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft Manifest number: 0127 Signing time: Wed 01 May 2024 05:21:14 +0000 Manifest this update: Wed 01 May 2024 05:21:13 +0000 Manifest next update: Wed 08 May 2024 05:21:13 +0000 Files and hashes: 1: 0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl (hash: GC5alVQ11adkizHiiy2lPI0cb+/w7cS6OK4KVNu32i0=) 2: C18E7856446C11EDA55DB951C4F9AE02.roa (hash: f3dkko2SsUhOvSSMI7rmurbucL4yK02dZgoRDuXpmPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1B39/serialNumber=D18F98A41C0ADC8C8184B826A71F3EF27F195323 Validity Not Before: May 1 05:21:13 2024 GMT Not After : May 8 05:21:13 2024 GMT Subject: CN=6631d14a-e323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:2d:14:92:10:5a:b7:c2:98:3a:ea:eb:0f: c3:33:0a:02:76:34:af:31:35:2c:55:92:b4:19:f3: cf:86:c9:11:89:41:fe:18:16:4c:af:19:37:61:d7: 74:30:65:05:3d:b7:73:c0:52:09:fb:7f:b4:2e:37: b0:05:57:45:eb:f2:1f:06:fa:ca:64:5f:b1:c4:51: 74:80:98:6f:04:29:87:fe:6d:52:34:ad:bd:3b:40: 73:07:39:39:09:af:d4:f1:f7:42:b4:84:90:c7:72: f9:cf:7b:1b:b4:73:29:03:5a:dc:b3:0d:9a:b4:6c: 78:38:31:e8:55:71:d5:0a:52:8b:bf:88:fa:31:e3: 21:c8:9d:81:f6:4d:9b:eb:1d:4f:81:a0:38:dd:bf: f9:ca:1c:db:94:6c:cb:7e:5d:2d:dd:d8:e3:8a:94: 78:37:8b:3c:2e:9f:cd:6a:42:48:0a:3c:ff:d6:30: 48:13:b7:56:bb:36:f2:a2:50:1e:34:f1:b1:6c:dc: dd:ef:7d:c3:05:a2:bf:53:30:bc:b8:c4:57:90:0b: 40:7d:13:77:d1:7d:e5:6e:96:54:dd:7f:36:0b:47: b7:de:63:3f:1d:5b:d8:df:85:a1:a2:32:4d:19:4d: 50:22:f8:75:e2:cf:bc:a2:a0:fb:dc:67:26:f7:eb: 2a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5C:8F:1F:96:9F:0A:CF:53:F5:30:8A:C1:BF:EB:9A:BD:9B:24:51 X509v3 Authority Key Identifier: keyid:D1:8F:98:A4:1C:0A:DC:8C:81:84:B8:26:A7:1F:3E:F2:7F:19:53:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:21:c0:ea:74:a3:e6:bd:f4:a6:76:d0:4e:be:c5:77:68:8d: a3:8c:e0:ff:c5:2a:c4:71:8c:35:19:aa:7d:8b:8f:3c:ab:81: f8:67:e5:7e:e0:7a:33:2d:9b:bb:46:91:cf:a8:90:a8:89:72: 9b:a5:88:5f:dd:a3:e5:a6:4e:28:61:da:eb:4b:b5:0d:38:9f: 94:24:d0:3b:16:ed:e1:78:66:1f:d6:fe:7e:4e:05:79:20:7f: 55:54:90:ae:93:43:21:3f:78:1c:e2:4f:73:41:7a:ae:5a:80: ec:6a:4d:28:94:3d:e9:7d:d5:23:f0:15:b8:c9:ec:8e:b3:9d: 5e:67:3d:1d:7b:81:02:20:48:24:6d:93:80:10:ba:1b:f2:df: a5:f6:1c:69:d9:a5:3d:2a:8f:41:fa:90:99:ae:91:2a:df:47: 41:c4:4b:4f:c8:59:ce:7a:be:70:e8:96:69:b2:df:60:4f:94: 11:d2:47:d6:fb:4b:da:a1:47:d1:98:aa:de:88:3e:09:bf:b4: 27:60:6a:97:54:a2:b7:00:f8:20:56:bd:bf:d9:ad:27:63:8d: 55:53:25:c2:11:ff:74:8b:dd:87:70:ad:a3:69:84:ca:52:d3: fe:fb:b9:6c:8d:56:fe:ce:c8:54:6f:1b:3e:a6:7d:46:f4:34: 82:5d:2d:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFCMzkxMTAvBgNVBAUTKEQxOEY5OEE0MUMwQURDOEM4MTg0QjgyNkE3MUYzRUYy N0YxOTUzMjMwHhcNMjQwNTAxMDUyMTEzWhcNMjQwNTA4MDUyMTEzWjAYMRYwFAYD VQQDEw02NjMxZDE0YS1lMzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuItFJIQWrfCmDrq6w/DMwoCdjSvMTUsVZK0GfPPhskRiUH+GBZMrxk3Ydd0 MGUFPbdzwFIJ+3+0LjewBVdF6/IfBvrKZF+xxFF0gJhvBCmH/m1SNK29O0BzBzk5 Ca/U8fdCtISQx3L5z3sbtHMpA1rcsw2atGx4ODHoVXHVClKLv4j6MeMhyJ2B9k2b 6x1PgaA43b/5yhzblGzLfl0t3djjipR4N4s8Lp/NakJICjz/1jBIE7dWuzbyolAe NPGxbNzd733DBaK/UzC8uMRXkAtAfRN30X3lbpZU3X82C0e33mM/HVvY34WhojJN GU1QIvh14s+8oqD73Gcm9+sqcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdcjx+W nwrPU/UwisG/65q9myRRMB8GA1UdIwQYMBaAFNGPmKQcCtyMgYS4JqcfPvJ/GVMj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUIzOS9CNzY5OUQyQzQ0 NjkxMUVEQkU0RTc5NENDNEY5QUUwMi8wWS1ZcEJ3SzNJeUJoTGdtcHg4LThuOFpV eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBZLVlwQndLM0l5QmhMZ21weDgtOG44WlV5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUIzOS9CNzY5OUQyQzQ0NjkxMUVEQkU0RTc5NENDNEY5QUUwMi8wWS1ZcEJ3SzNJ eUJoTGdtcHg4LThuOFpVeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdIcDqdKPmvfSmdtBOvsV3aI2jjOD/xSrEcYw1Gap9i488q4H4Z+V+ 4HozLZu7RpHPqJCoiXKbpYhf3aPlpk4oYdrrS7UNOJ+UJNA7Fu3heGYf1v5+TgV5 IH9VVJCuk0MhP3gc4k9zQXquWoDsak0olD3pfdUj8BW4yeyOs51eZz0de4ECIEgk bZOAELob8t+l9hxp2aU9Ko9B+pCZrpEq30dBxEtPyFnOer5w6JZpst9gT5QR0kfW +0vaoUfRmKreiD4Jv7QnYGqXVKK3APggVr2/2a0nY41VUyXCEf90i92HcK2jaYTK UtP++7lsjVb+zshUbxs+pn1G9DSCXS0N -----END CERTIFICATE-----Generated at Wed May 1 05:55:46 2024 by rpki-client on console-ams.rpki-client.org