$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/Ylqq9zGZpzq5q4J_1cENJJLk4mU.mft File: Ylqq9zGZpzq5q4J_1cENJJLk4mU.mft (raw, json) Hash identifier: HNQHq6Ksej3u2D6vHEhK0hnCJlrUGzQjMoEGO2rzuFc= Subject key identifier: 78:11:D2:2C:CF:65:3D:54:24:E5:FB:F4:A9:1C:BF:BA:EF:70:F2:E8 Authority key identifier: 62:5A:AA:F7:31:99:A7:3A:B9:AB:82:7F:D5:C1:0D:24:92:E4:E2:65 Certificate issuer: /CN=A91F4610/serialNumber=625AAAF73199A73AB9AB827FD5C10D2492E4E265 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ylqq9zGZpzq5q4J_1cENJJLk4mU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/Ylqq9zGZpzq5q4J_1cENJJLk4mU.mft Manifest number: D3 Signing time: Fri 03 May 2024 06:16:59 +0000 Manifest this update: Fri 03 May 2024 06:16:58 +0000 Manifest next update: Fri 10 May 2024 06:16:58 +0000 Files and hashes: 1: Ylqq9zGZpzq5q4J_1cENJJLk4mU.crl (hash: nEN6AHfQjy8Sw41cWhOHWr3DZ7JHKq0mYG1ccXMYpuM=) 2: 2607B6B4F0E611ED81467C6DC4F9AE02.roa (hash: Qh7poIcf8kqE7HJMU53oc/wfwbAW1vnMJfzpHhcx6g8=) 3: 8E62A81C2C1511EEB8210121C4F9AE02.roa (hash: UqUy0xWN//X5UY6S3PqbOuZupOLEQ1k0LJJH6xkIzpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/Ylqq9zGZpzq5q4J_1cENJJLk4mU.crl rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/Ylqq9zGZpzq5q4J_1cENJJLk4mU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ylqq9zGZpzq5q4J_1cENJJLk4mU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4610/serialNumber=625AAAF73199A73AB9AB827FD5C10D2492E4E265 Validity Not Before: May 3 06:16:58 2024 GMT Not After : May 10 06:16:58 2024 GMT Subject: CN=6634815a-6150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:36:32:10:c3:8d:19:c5:7b:24:05:0a:69:d1: d8:0c:cb:21:a9:f6:69:fa:ec:69:e3:93:5a:c9:c2: f8:dc:ed:0a:93:79:7b:07:61:2b:9d:1f:4f:5f:fa: 7a:b4:d1:7a:81:88:79:79:ac:9e:65:75:49:2d:46: 54:2d:ee:d8:b8:e3:9f:0d:8a:57:2a:57:43:2a:df: af:70:bd:95:1c:92:b4:21:e9:ac:62:e4:87:39:80: 3a:56:d5:7b:14:2b:cd:2e:d6:8d:bb:7d:d5:b6:72: 64:c2:98:61:93:32:a3:e1:be:75:8c:19:82:78:12: 35:a0:5b:f0:e8:42:e7:3a:a4:96:8f:da:f5:72:60: e3:42:27:7c:5c:35:36:6b:86:02:48:00:8a:60:fc: 34:66:5a:b1:ad:4f:ae:9a:1e:10:fc:dd:fc:27:e1: e3:e7:b6:8f:bd:1f:2a:bc:a3:4b:c4:24:94:69:42: 65:7e:93:03:f3:14:0a:bf:df:0a:6f:47:dd:25:3a: 78:a5:cb:21:61:81:fd:9b:ae:a6:f3:87:b2:ed:05: d6:9b:cb:d9:cb:14:77:66:c3:0d:a1:a7:2b:b1:ea: 07:6b:ad:66:51:d6:76:4a:44:19:ba:f9:9b:73:8d: 9b:2e:9c:36:57:94:20:7d:af:6c:9c:de:23:c0:9a: 9b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:11:D2:2C:CF:65:3D:54:24:E5:FB:F4:A9:1C:BF:BA:EF:70:F2:E8 X509v3 Authority Key Identifier: keyid:62:5A:AA:F7:31:99:A7:3A:B9:AB:82:7F:D5:C1:0D:24:92:E4:E2:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/Ylqq9zGZpzq5q4J_1cENJJLk4mU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ylqq9zGZpzq5q4J_1cENJJLk4mU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/Ylqq9zGZpzq5q4J_1cENJJLk4mU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:48:aa:fc:03:e6:4c:bf:67:1f:8c:47:6e:02:75:2e:7a:b7: da:18:e9:24:01:30:23:17:ef:ba:a2:55:61:36:a8:71:ed:a3: e4:c2:12:a4:35:ee:c1:77:9a:aa:07:19:99:d9:e7:41:85:cf: 6b:3d:d5:89:2f:7a:f5:a0:e1:9e:04:29:36:f1:fa:e5:52:72: 44:e3:ad:3b:1f:a2:26:df:da:90:18:b8:e7:3d:4b:ca:ce:55: 4e:68:81:c2:67:29:0d:e2:4e:66:76:bb:b7:a4:c7:bf:9a:0a: f5:1d:93:70:af:ae:18:cd:6f:06:b8:5d:51:b0:62:a1:83:06: 08:a5:c8:c6:53:72:4e:31:08:1e:24:65:8a:15:6b:21:db:fd: 4f:67:9a:68:ff:c3:56:7f:88:6b:0f:ba:c9:cf:cf:4a:90:06: ef:c5:26:4f:ec:33:7d:e2:46:ac:74:25:32:64:23:62:29:e7: 7d:ef:4a:28:b9:b4:f7:af:ae:d2:e3:61:19:62:07:d0:ec:ec: 1c:96:ad:05:79:e0:26:16:61:c4:3f:64:c2:9e:ea:fa:68:a8: f7:a3:f7:ef:79:97:84:5c:32:7f:6d:e6:ca:7a:ab:a2:dc:fa: d5:3f:85:51:79:db:dd:af:59:28:c4:43:a0:63:f3:38:ec:b7: 44:6b:59:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ2MTAxMTAvBgNVBAUTKDYyNUFBQUY3MzE5OUE3M0FCOUFCODI3RkQ1QzEwRDI0 OTJFNEUyNjUwHhcNMjQwNTAzMDYxNjU4WhcNMjQwNTEwMDYxNjU4WjAYMRYwFAYD VQQDEw02NjM0ODE1YS02MTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jYyEMONGcV7JAUKadHYDMshqfZp+uxp45NaycL43O0Kk3l7B2ErnR9PX/p6 tNF6gYh5eayeZXVJLUZULe7YuOOfDYpXKldDKt+vcL2VHJK0IemsYuSHOYA6VtV7 FCvNLtaNu33VtnJkwphhkzKj4b51jBmCeBI1oFvw6ELnOqSWj9r1cmDjQid8XDU2 a4YCSACKYPw0ZlqxrU+umh4Q/N38J+Hj57aPvR8qvKNLxCSUaUJlfpMD8xQKv98K b0fdJTp4pcshYYH9m66m84ey7QXWm8vZyxR3ZsMNoacrseoHa61mUdZ2SkQZuvmb c42bLpw2V5Qgfa9snN4jwJqbnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgR0izP ZT1UJOX79Kkcv7rvcPLoMB8GA1UdIwQYMBaAFGJaqvcxmac6uauCf9XBDSSS5OJl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDYxMC85MEU3NjI0OENF QTYxMUVEQTVGMDkxNDJDNEY5QUUwMi9ZbHFxOXpHWnB6cTVxNEpfMWNFTkpKTGs0 bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lscXE5ekdacHpxNXE0Sl8xY0VOSkpMazRtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDYxMC85MEU3NjI0OENFQTYxMUVEQTVGMDkxNDJDNEY5QUUwMi9ZbHFxOXpHWnB6 cTVxNEpfMWNFTkpKTGs0bVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSSKr8A+ZMv2cfjEduAnUuerfaGOkkATAjF++6olVhNqhx7aPkwhKk Ne7Bd5qqBxmZ2edBhc9rPdWJL3r1oOGeBCk28frlUnJE4607H6Im39qQGLjnPUvK zlVOaIHCZykN4k5mdru3pMe/mgr1HZNwr64YzW8GuF1RsGKhgwYIpcjGU3JOMQge JGWKFWsh2/1PZ5po/8NWf4hrD7rJz89KkAbvxSZP7DN94kasdCUyZCNiKed970oo ubT3r67S42EZYgfQ7Owclq0FeeAmFmHEP2TCnur6aKj3o/fveZeEXDJ/bebKequi 3PrVP4VRedvdr1koxEOgY/M47LdEa1m8 -----END CERTIFICATE-----Generated at Fri May 3 08:21:41 2024 by rpki-client on console-ams.rpki-client.org