$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json) Hash identifier: R/E8WtJeHgh1JnNeqmJ0pWrq02XpZABQfitKQrvISLg= Subject key identifier: 29:37:87:AA:C8:7C:B5:60:8C:34:0D:AD:10:F1:D7:ED:69:F2:52:4A Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Certificate serial: 33C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft Manifest number: 33C0 Signing time: Mon 06 May 2024 15:15:57 +0000 Manifest this update: Mon 06 May 2024 15:15:56 +0000 Manifest next update: Mon 13 May 2024 15:15:56 +0000 Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: h1IwVIRJnqBmlOhBvYHpOPECsAE4JhpOUPZs99lCPfA=) 2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: p0J4iQWOSRUXxYwANu5RD+0254OeMFaT1rF1HZWFpI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13251 (0x33c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Validity Not Before: May 6 15:15:56 2024 GMT Not After : May 13 15:15:56 2024 GMT Subject: CN=6638f42d-393b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:4a:3d:58:43:4f:6f:7e:6e:41:e1:3d:b4: 59:a8:a3:c7:4c:74:cc:ac:90:28:dd:87:19:56:b3: 2f:4d:0c:da:45:fb:3e:2e:38:ea:09:77:9e:38:2b: 21:83:00:27:c5:fb:89:52:3a:01:6b:37:f7:42:35: 30:3a:cf:48:75:48:93:ec:e1:34:6d:db:fb:d7:2f: 63:8f:d3:86:e2:75:6c:48:65:67:7f:1a:35:f2:36: a8:5e:67:41:47:fc:fc:3c:5d:12:19:b5:8a:a1:12: cf:6d:97:f9:7e:ab:b8:f9:98:3d:12:cb:ea:23:c5: 56:b1:78:6b:6f:49:3a:ae:e8:4c:2e:3c:05:7e:6b: fb:7a:d7:3f:1e:c7:3e:9f:ed:33:a9:f9:f0:09:53: 9a:24:1e:e1:99:8e:a8:6a:24:bc:11:a0:8c:3b:48: 75:3d:41:30:c4:d4:9c:49:bc:73:25:a9:0b:70:8a: d5:36:4b:e8:97:ff:94:01:46:84:f4:f7:f6:0b:d2: b4:29:d6:f3:26:27:d4:22:13:98:ce:0f:25:f4:05: 2b:b1:bf:76:54:74:9d:b6:5c:98:c6:59:41:57:59: 54:92:e0:9f:c7:d7:56:59:44:f4:63:4d:48:c5:f2: 67:9f:54:33:f9:db:92:23:d0:d7:06:e0:17:4c:46: a1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:37:87:AA:C8:7C:B5:60:8C:34:0D:AD:10:F1:D7:ED:69:F2:52:4A X509v3 Authority Key Identifier: keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:58:a1:40:1c:de:68:d6:fc:07:e8:0d:27:df:11:e9:6f:90: fb:fe:24:aa:af:60:d3:5d:a9:4d:55:1a:70:cf:12:ff:bf:7e: 83:20:d9:56:15:04:17:d1:0b:48:8f:3e:82:12:5f:cb:6b:a4: 3c:3d:01:f7:87:61:e5:17:97:3e:0b:95:98:b9:2d:e3:a3:dd: eb:4e:2a:05:9d:6c:8f:10:06:bb:5c:27:d9:a9:db:a8:26:47: ba:c6:3e:49:ae:e2:be:cb:c7:df:31:78:f3:81:ef:2b:cf:43: cc:9a:b8:78:26:cd:aa:c0:c2:69:21:c0:12:6e:a6:4c:f2:9b: 98:fe:2a:e3:c5:90:fc:c1:98:c5:96:47:30:1b:3c:a1:a3:68: 36:40:dd:a2:a3:d3:73:39:64:01:9c:21:80:19:6f:8b:56:54: 7a:06:61:a9:7b:c9:b3:fb:22:88:3a:a4:1e:cc:5a:25:7f:06: ad:39:09:9e:ed:f8:5c:c9:19:0a:82:7f:c1:b1:cd:d0:f0:c2: 8e:0a:2a:54:ef:6e:14:32:4f:f3:19:c6:9f:6f:bf:78:45:9b: e3:8b:9f:c4:44:21:db:16:7e:ab:d7:e8:73:14:5d:20:b2:a5: 82:6d:5a:70:fa:66:01:53:d0:79:f0:21:e4:35:0e:21:0b:dc: 74:01:b4:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKDYzMkM4REUwMjIwQjhDMTBCNDFGRjQ5QkZGOEI0MzJD RjhGRkQyNTQwHhcNMjQwNTA2MTUxNTU2WhcNMjQwNTEzMTUxNTU2WjAYMRYwFAYD VQQDEw02NjM4ZjQyZC0zOTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhRKPVhDT29+bkHhPbRZqKPHTHTMrJAo3YcZVrMvTQzaRfs+LjjqCXeeOCsh gwAnxfuJUjoBazf3QjUwOs9IdUiT7OE0bdv71y9jj9OG4nVsSGVnfxo18jaoXmdB R/z8PF0SGbWKoRLPbZf5fqu4+Zg9EsvqI8VWsXhrb0k6ruhMLjwFfmv7etc/Hsc+ n+0zqfnwCVOaJB7hmY6oaiS8EaCMO0h1PUEwxNScSbxzJakLcIrVNkvol/+UAUaE 9Pf2C9K0KdbzJifUIhOYzg8l9AUrsb92VHSdtlyYxllBV1lUkuCfx9dWWUT0Y01I xfJnn1Qz+duSI9DXBuAXTEahRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCk3h6rI fLVgjDQNrRDx1+1p8lJKMB8GA1UdIwQYMBaAFGMsjeAiC4wQtB/0m/+LQyz4/9JU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy80NDlCQTUwNjFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpCQzBIX1NiXzR0RExQal8w bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l5eU40Q0lMakJDMEhfU2JfNHRETFBqXzBsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy80NDlCQTUwNjFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpC QzBIX1NiXzR0RExQal8wbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1WKFAHN5o1vwH6A0n3xHpb5D7/iSqr2DTXalNVRpwzxL/v36DINlW FQQX0QtIjz6CEl/La6Q8PQH3h2HlF5c+C5WYuS3jo93rTioFnWyPEAa7XCfZqduo Jke6xj5JruK+y8ffMXjzge8rz0PMmrh4Js2qwMJpIcASbqZM8puY/irjxZD8wZjF lkcwGzyho2g2QN2io9NzOWQBnCGAGW+LVlR6BmGpe8mz+yKIOqQezFolfwatOQme 7fhcyRkKgn/Bsc3Q8MKOCipU724UMk/zGcafb794RZvji5/ERCHbFn6r1+hzFF0g sqWCbVpw+mYBU9B58CHkNQ4hC9x0AbRe -----END CERTIFICATE-----Generated at Mon May 6 17:43:28 2024 by rpki-client on console-ams.rpki-client.org