$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft File: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft (raw, json) Hash identifier: uRMsoG6nNa/p9MnF0zIHHD53721y9JO5/0dRmUtl3tM= Subject key identifier: 5E:76:B9:80:2A:13:11:94:07:8C:BD:DE:C5:D9:7D:FB:DF:38:B8:E6 Authority key identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 Certificate issuer: /CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Certificate serial: 05B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft Manifest number: 05B6 Signing time: Fri 03 May 2024 00:17:54 +0000 Manifest this update: Fri 03 May 2024 00:17:54 +0000 Manifest next update: Fri 10 May 2024 00:17:54 +0000 Files and hashes: 1: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl (hash: tqDGO7dXDTGPQAcDtZo/CCkobSwE8mLLZDIqcPu5E6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1462 (0x5b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Validity Not Before: May 3 00:17:54 2024 GMT Not After : May 10 00:17:54 2024 GMT Subject: CN=66342d32-ec89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:85:57:33:6d:84:da:fc:55:61:15:ce:06:38: 61:fa:29:6a:a4:a2:be:3f:fd:9f:ce:4f:c5:1b:5b: 65:59:9a:97:b4:02:6b:f2:46:a7:98:1c:cc:2a:9f: a5:76:ef:22:94:3d:2b:d2:ce:77:6e:75:83:33:b6: ff:da:84:15:e5:4f:1e:77:eb:65:34:91:f7:4c:20: a4:7e:9c:b0:04:7e:00:9e:68:13:5d:f9:b5:42:5a: 67:0d:3c:67:51:15:85:e9:42:8b:f5:f0:1a:72:12: 85:27:5d:16:d9:58:18:29:bc:09:60:a2:a9:af:58: aa:35:a5:6a:49:bb:27:03:58:61:9f:81:7a:36:cd: 01:96:88:9a:7e:9f:10:55:20:ed:5e:67:94:22:93: cd:fd:e3:1a:10:c9:d3:66:03:6f:5f:4f:64:e7:fa: 3e:04:15:43:a3:28:12:9f:16:f8:55:b8:e0:38:67: 2a:da:29:05:56:e6:9c:b4:9a:1e:1b:b0:37:87:c2: 2f:4a:10:de:ec:07:a4:ed:58:16:83:9d:3b:cc:e7: b1:d5:0a:38:b5:84:02:e7:17:69:a0:67:e1:ad:39: 0b:98:c4:96:f2:22:d6:d2:01:45:f5:c6:e8:73:1c: 6f:9d:65:34:df:4d:a0:e0:d8:63:82:91:c2:87:9f: 57:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:76:B9:80:2A:13:11:94:07:8C:BD:DE:C5:D9:7D:FB:DF:38:B8:E6 X509v3 Authority Key Identifier: keyid:C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:41:11:34:0d:a5:8e:df:1c:c8:df:9e:ea:b0:87:51:a2:fe: 38:a9:b1:f1:9d:94:d9:7d:ac:ac:1d:ef:20:20:c1:5b:f7:b0: a2:0b:3c:a1:b6:00:ab:a3:6e:57:2c:fb:4d:78:bc:ba:1a:2a: a5:81:ca:df:b2:f0:4f:64:3f:50:46:97:b2:79:69:f3:08:48: 5a:2d:01:ba:86:cc:ac:d0:8b:9c:b4:43:71:b2:a1:59:a0:ef: 64:43:78:8a:fb:57:3c:cd:70:28:69:57:0e:e3:21:7d:12:a4: fb:d5:1c:b6:69:9d:62:dc:f6:c4:2e:95:1c:52:be:58:ab:19: cf:65:91:9f:b0:49:19:fc:35:6a:48:92:f0:56:45:bb:d5:1a: cb:eb:3a:9c:ac:9c:28:6e:b9:8a:7b:0b:67:20:7d:9e:a8:26: 98:e7:69:95:24:45:19:7f:63:e4:69:b1:e0:04:d1:92:4d:00: 49:f6:29:e6:86:e8:d3:21:13:72:f7:39:3e:83:28:be:aa:cd: a8:d3:1e:8e:2d:18:b8:7b:97:8b:41:2f:69:e3:a6:48:78:c4: 72:cf:f0:65:4a:b3:07:c8:1a:7a:62:00:72:55:dd:5b:97:e1: c1:dd:91:99:b0:65:20:e6:db:0a:34:4d:22:78:4c:33:65:5b: 7d:42:4d:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEM4OEQ1NUI3QkZENTQzODhCNjEwMjA2QUE0MTFEMkUx OTk3NzkwMTcwHhcNMjQwNTAzMDAxNzU0WhcNMjQwNTEwMDAxNzU0WjAYMRYwFAYD VQQDEw02NjM0MmQzMi1lYzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoVXM22E2vxVYRXOBjhh+ilqpKK+P/2fzk/FG1tlWZqXtAJr8kanmBzMKp+l du8ilD0r0s53bnWDM7b/2oQV5U8ed+tlNJH3TCCkfpywBH4AnmgTXfm1QlpnDTxn URWF6UKL9fAachKFJ10W2VgYKbwJYKKpr1iqNaVqSbsnA1hhn4F6Ns0Bloiafp8Q VSDtXmeUIpPN/eMaEMnTZgNvX09k5/o+BBVDoygSnxb4VbjgOGcq2ikFVuactJoe G7A3h8IvShDe7Aek7VgWg507zOex1Qo4tYQC5xdpoGfhrTkLmMSW8iLW0gFF9cbo cxxvnWU0302g4NhjgpHCh59XcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF52uYAq ExGUB4y93sXZffvfOLjmMB8GA1UdIwQYMBaAFMiNVbe/1UOIthAgaqQR0uGZd5AX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC8xQjg4RDJBMDc0 RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0aTJFQ0JxcEJIUzRabDNr QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJMVZ0N19WUTRpMkVDQnFwQkhTNFpsM2tCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC8xQjg4RDJBMDc0RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0 aTJFQ0JxcEJIUzRabDNrQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2QRE0DaWO3xzI357qsIdRov44qbHxnZTZfaysHe8gIMFb97CiCzyh tgCro25XLPtNeLy6GiqlgcrfsvBPZD9QRpeyeWnzCEhaLQG6hsys0IuctENxsqFZ oO9kQ3iK+1c8zXAoaVcO4yF9EqT71Ry2aZ1i3PbELpUcUr5YqxnPZZGfsEkZ/DVq SJLwVkW71RrL6zqcrJwobrmKewtnIH2eqCaY52mVJEUZf2PkabHgBNGSTQBJ9inm hujTIRNy9zk+gyi+qs2o0x6OLRi4e5eLQS9p46ZIeMRyz/BlSrMHyBp6YgByVd1b l+HB3ZGZsGUg5tsKNE0ieEwzZVt9Qk04 -----END CERTIFICATE-----Generated at Fri May 3 00:48:31 2024 by rpki-client on console-ams.rpki-client.org