$ rpki-client -vvf rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft File: MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft (raw, json) Hash identifier: /L/vzvHU462SB+P1PWh/ruEOuaz1/9PbiTVQYUPtsqM= Subject key identifier: 1E:E1:B7:3B:27:04:23:19:9B:6A:3B:5E:43:D8:68:29:A9:06:52:61 Authority key identifier: 31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88 Certificate issuer: /CN=A91F378B/serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft Manifest number: 21 Signing time: Wed 15 May 2024 08:43:42 +0000 Manifest this update: Wed 15 May 2024 08:43:41 +0000 Manifest next update: Wed 22 May 2024 08:43:41 +0000 Files and hashes: 1: MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl (hash: ENnYJc64D4uYaHjgf4T6NCdtgNjY+1B3dtJaqRdZfSA=) 2: 4FCB21E6E05211EE8AEC805CC4F9AE02.roa (hash: 0MtwCciVuO81difEPZPl8SOQdXiTFdE21V7yrUDjvPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F378B/serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388 Validity Not Before: May 15 08:43:41 2024 GMT Not After : May 22 08:43:41 2024 GMT Subject: CN=664475bd-bc8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:dd:49:26:04:b2:d7:56:27:55:db:ac:45: ac:58:b4:68:1d:e5:2a:f7:88:37:84:a6:58:6e:c1: 5d:27:e1:56:de:d2:5c:7c:12:b4:9c:84:23:80:26: cb:3e:98:c4:4e:1e:a7:eb:03:7e:19:51:b3:8f:7e: c9:e4:6b:32:67:c6:d2:78:08:5b:b7:4f:6b:92:a2: 11:5e:15:0e:98:5a:e8:28:2f:6a:7f:da:7e:8d:e2: 68:d9:b2:f0:c4:c1:c7:39:f6:f5:d7:3b:9b:4a:0b: 81:72:c8:7b:ca:18:dd:6e:6d:53:6b:d9:f2:49:28: 63:e3:35:96:55:ba:dc:7c:c4:d0:41:be:f3:b1:a5: 31:47:3a:91:e0:df:76:1e:fa:34:25:11:6a:23:e5: 6a:c5:63:87:75:64:eb:4a:39:22:fa:a0:f9:cf:45: 45:2d:fc:31:06:ce:93:6a:22:ff:c2:60:d1:a7:ea: ab:6e:a1:25:17:2e:a5:d3:62:f8:8d:5b:a5:4b:f5: 57:4c:a9:27:2c:bb:10:e7:c2:08:4d:7e:d3:dd:61: 46:60:fc:56:6a:0f:77:47:2c:ea:eb:db:f7:6d:b2: cb:ee:5e:ea:12:52:39:10:87:c6:66:64:f3:4b:1c: 85:67:18:6e:1f:00:7b:ab:2b:8c:25:72:fb:96:c5: fc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E1:B7:3B:27:04:23:19:9B:6A:3B:5E:43:D8:68:29:A9:06:52:61 X509v3 Authority Key Identifier: keyid:31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b7:e8:7b:ee:c5:af:8f:88:62:70:7b:43:78:d5:28:82:29: 29:58:25:93:93:54:ef:cc:46:ba:b9:76:7a:4a:37:a0:aa:5f: 07:f0:40:bf:3c:ec:e0:12:e1:31:32:ab:16:10:b8:e1:27:42: 72:d4:69:64:69:e1:e8:ed:40:81:55:ac:58:11:10:0d:92:de: 88:66:a7:1e:cb:63:c6:58:6c:b2:c8:57:7a:8c:a7:97:73:b3: 0d:22:bc:96:56:07:af:67:ab:b7:6e:50:93:65:e4:8a:e6:59: a4:23:87:fe:9c:ab:ff:08:fc:02:6c:0b:94:e5:fe:ee:8f:d3: af:88:29:ef:14:d4:e4:28:06:27:48:ad:f1:3e:c9:1e:24:ef: 40:18:fd:ee:7b:38:33:05:c3:50:9e:71:73:7e:5e:4f:3b:68: 1e:6c:bd:e5:50:cb:5d:34:de:c9:4d:cc:01:58:15:5d:03:fe: 52:02:3c:ba:80:ae:1f:e4:7c:9d:13:99:e8:1f:92:ac:0b:1b: 8e:92:14:43:7a:fd:5d:17:ab:e8:c9:23:b7:2f:5d:f1:c6:88: d4:0e:4d:86:25:ea:2c:7a:44:7f:85:7c:f5:3d:d3:55:a7:20: 83:fd:2d:a6:1e:fc:71:d0:4c:c6:45:50:af:6f:32:9a:40:9e: bb:19:94:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Mzc4QjExMC8GA1UEBRMoMzE4NTUzRUQwOUMyMDA5NThDQjE1RENDRTI3N0NDNDhB QTQyQTM4ODAeFw0yNDA1MTUwODQzNDFaFw0yNDA1MjIwODQzNDFaMBgxFjAUBgNV BAMTDTY2NDQ3NWJkLWJjOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0ut1JJgSy11YnVdusRaxYtGgd5Sr3iDeEplhuwV0n4Vbe0lx8ErSchCOAJss+ mMROHqfrA34ZUbOPfsnkazJnxtJ4CFu3T2uSohFeFQ6YWugoL2p/2n6N4mjZsvDE wcc59vXXO5tKC4FyyHvKGN1ubVNr2fJJKGPjNZZVutx8xNBBvvOxpTFHOpHg33Ye +jQlEWoj5WrFY4d1ZOtKOSL6oPnPRUUt/DEGzpNqIv/CYNGn6qtuoSUXLqXTYviN W6VL9VdMqScsuxDnwghNftPdYUZg/FZqD3dHLOrr2/dtssvuXuoSUjkQh8ZmZPNL HIVnGG4fAHurK4wlcvuWxfxDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHuG3OycE IxmbajteQ9hoKakGUmEwHwYDVR0jBBgwFoAUMYVT7QnCAJWMsV3M4nfMSKpCo4gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzNzhCL0MxM0FBNzc2RTA1 MTExRUVCNUIwOTI1QkM0RjlBRTAyL01ZVlQ3UW5DQUpXTXNWM000bmZNU0twQ280 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVlWVDdRbkNBSldNc1YzTTRuZk1TS3BDbzRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz NzhCL0MxM0FBNzc2RTA1MTExRUVCNUIwOTI1QkM0RjlBRTAyL01ZVlQ3UW5DQUpX TXNWM000bmZNU0twQ280Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGC36Hvuxa+PiGJwe0N41SiCKSlYJZOTVO/MRrq5dnpKN6CqXwfwQL88 7OAS4TEyqxYQuOEnQnLUaWRp4ejtQIFVrFgREA2S3ohmpx7LY8ZYbLLIV3qMp5dz sw0ivJZWB69nq7duUJNl5IrmWaQjh/6cq/8I/AJsC5Tl/u6P06+IKe8U1OQoBidI rfE+yR4k70AY/e57ODMFw1CecXN+Xk87aB5sveVQy1003slNzAFYFV0D/lICPLqA rh/kfJ0TmegfkqwLG46SFEN6/V0Xq+jJI7cvXfHGiNQOTYYl6ix6RH+FfPU901Wn IIP9LaYe/HHQTMZFUK9vMppAnrsZlMQ= -----END CERTIFICATE-----Generated at Wed May 15 11:17:44 2024 by rpki-client on console-ams.rpki-client.org