$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json) Hash identifier: lKmam5Ioft2L2UllUuuo8gLrKKoOSrUTJfcLFcnc5Cw= Subject key identifier: 9C:5E:ED:4C:29:66:15:6C:6B:3F:62:75:29:51:5A:59:F6:E6:F4:8F Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Certificate serial: 0D31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft Manifest number: 0D2A Signing time: Fri 26 Apr 2024 18:41:22 +0000 Manifest this update: Fri 26 Apr 2024 18:41:22 +0000 Manifest next update: Fri 03 May 2024 18:41:22 +0000 Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: dck0g3LoIQuj8WJpP1aOam8KuMP2VkWi+dcpgZxRwZo=) 2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: X/Sdq5hIJBEWvLlKJlrKk+UmqaZwGN/XOEju9L4WvGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 18:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3377 (0xd31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Validity Not Before: Apr 26 18:41:22 2024 GMT Not After : May 3 18:41:22 2024 GMT Subject: CN=662bf552-df75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:89:74:da:b0:77:63:72:82:ee:86:ff:9a: 55:23:dc:e1:83:3e:46:32:fe:a9:b5:81:31:94:88: 46:dd:67:a5:8d:9b:39:e8:01:f2:d4:d8:f7:ec:c5: 0b:b4:44:17:fa:af:fe:2d:d3:1c:de:c5:31:1d:1d: 15:be:83:53:0d:77:71:99:43:38:81:c6:33:e0:52: 47:ca:73:fc:9a:72:60:48:97:35:9e:a1:77:32:d6: ad:ad:6d:4d:09:a9:3d:66:42:a3:6d:9b:84:32:c8: bb:d2:9f:15:ca:fd:76:7e:86:33:f6:88:4b:b4:8e: 38:22:05:8f:ce:b7:dc:1e:8b:d1:b3:2b:ca:ef:02: 1f:09:a8:19:2c:97:03:b8:8b:72:5a:35:24:e8:32: 48:82:25:f5:d7:bf:77:2f:d3:6e:fa:44:d3:39:a9: 02:76:01:e2:fc:48:dc:63:bb:e7:6e:01:27:1a:3b: 20:82:62:de:aa:47:e4:03:e1:de:93:76:9e:35:c9: 39:8b:ac:11:45:35:ab:d2:b6:9d:5b:21:e7:e7:fd: 7a:2e:d6:7d:a9:2b:ed:24:89:23:1c:66:47:4a:99: 77:5d:76:93:53:6d:32:f9:00:a0:b1:39:b3:fb:73: 0c:de:0c:03:48:7b:7c:b6:f2:7e:22:bd:80:89:f9: 03:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5E:ED:4C:29:66:15:6C:6B:3F:62:75:29:51:5A:59:F6:E6:F4:8F X509v3 Authority Key Identifier: keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5c:49:6b:0a:d8:ce:a6:f4:c5:88:ae:ce:dd:21:c6:d9:de: 84:34:32:de:31:cd:23:4f:2e:f6:7d:18:e7:4b:1c:6d:97:d4: 6e:f0:87:5a:61:d2:3f:d5:72:90:c9:26:c5:5d:3b:05:60:7e: 97:4b:e8:99:55:90:b5:7f:c6:b9:a5:06:08:e3:45:fa:88:59: 53:00:fa:d8:8f:af:82:d7:20:56:39:a2:16:61:2b:52:55:81: e1:2d:1f:2b:36:91:93:f7:15:b0:d6:e5:27:4f:51:21:e2:37: af:65:d8:0e:0d:26:b4:d5:ae:fb:1a:27:ac:63:a8:6f:bf:aa: f3:63:f2:f0:19:b3:71:32:ba:c0:e0:9e:5f:54:b1:0b:af:3e: 55:47:41:b1:15:ed:f1:22:a7:c6:1c:bd:61:c3:51:21:fb:1d: e6:74:3e:84:ed:ca:d1:51:b9:1e:24:d6:76:56:57:4c:3c:ef: 74:98:c3:78:66:b0:d8:29:63:27:6e:30:10:73:db:1d:fe:48: 7a:c6:f6:7e:26:31:f7:8f:ea:fb:ce:c1:89:12:2f:94:1a:03: 2f:cc:67:99:1c:97:72:8d:2b:f4:03:17:75:a4:a8:0c:f8:72: b5:4e:a8:60:1c:a8:17:ea:09:13:ce:17:65:ff:1c:8c:04:8e: 89:d4:e6:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF M0UyMjc4ODcwHhcNMjQwNDI2MTg0MTIyWhcNMjQwNTAzMTg0MTIyWjAYMRYwFAYD VQQDEw02NjJiZjU1Mi1kZjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6OJdNqwd2Nygu6G/5pVI9zhgz5GMv6ptYExlIhG3WeljZs56AHy1Nj37MUL tEQX+q/+LdMc3sUxHR0VvoNTDXdxmUM4gcYz4FJHynP8mnJgSJc1nqF3MtatrW1N Cak9ZkKjbZuEMsi70p8Vyv12foYz9ohLtI44IgWPzrfcHovRsyvK7wIfCagZLJcD uItyWjUk6DJIgiX11793L9Nu+kTTOakCdgHi/EjcY7vnbgEnGjsggmLeqkfkA+He k3aeNck5i6wRRTWr0radWyHn5/16LtZ9qSvtJIkjHGZHSpl3XXaTU20y+QCgsTmz +3MM3gwDSHt8tvJ+Ir2AifkDVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxe7Uwp ZhVsaz9idSlRWln25vSPMB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI5NC8wQ0I1RUFGQUFFQkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3 NEJvY08zZFFJY2pqNGllSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdXElrCtjOpvTFiK7O3SHG2d6ENDLeMc0jTy72fRjnSxxtl9Ru8Ida YdI/1XKQySbFXTsFYH6XS+iZVZC1f8a5pQYI40X6iFlTAPrYj6+C1yBWOaIWYStS VYHhLR8rNpGT9xWw1uUnT1Eh4jevZdgODSa01a77GiesY6hvv6rzY/LwGbNxMrrA 4J5fVLELrz5VR0GxFe3xIqfGHL1hw1Eh+x3mdD6E7crRUbkeJNZ2VldMPO90mMN4 ZrDYKWMnbjAQc9sd/kh6xvZ+JjH3j+r7zsGJEi+UGgMvzGeZHJdyjSv0Axd1pKgM +HK1TqhgHKgX6gkTzhdl/xyMBI6J1ObH -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:58 2024 by rpki-client on console-ams.rpki-client.org