$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft File: YtERnxiOP3wTVfZTngZDbaJo_50.mft (raw, json) Hash identifier: 5KyYzUJzbpXeGnMILuVVLPyw3Qq66ZHNy+TAitnEOlo= Subject key identifier: 96:E0:C3:F4:84:CE:32:B4:11:D9:85:7A:D0:5A:1D:0C:47:01:C5:66 Authority key identifier: 62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D Certificate issuer: /CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D Certificate serial: 02F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft Manifest number: 02DE Signing time: Sun 05 May 2024 03:37:32 +0000 Manifest this update: Sun 05 May 2024 03:37:32 +0000 Manifest next update: Sun 12 May 2024 03:37:32 +0000 Files and hashes: 1: YtERnxiOP3wTVfZTngZDbaJo_50.crl (hash: YQLF8/5P/qHuSHxgXKzsutYL2Wad56dGvoyVOQYxF/I=) 2: 09BF3678E79211EEAB391A25C4F9AE02.roa (hash: TAqzM/o5kmZAGS85OPfzRaqbd9McOojjCZUennqdfLk=) 3: 280B8550FD3611EEB7932778C4F9AE02.roa (hash: bDbJ87ipqiwcG7zxt+gAwcwIrAiA78u4Ql7Ru5jiD90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D Validity Not Before: May 5 03:37:32 2024 GMT Not After : May 12 03:37:32 2024 GMT Subject: CN=6636fefc-95b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6f:4f:f1:ab:46:2e:78:5a:94:17:f8:ec:12: 16:45:02:ba:ac:db:3d:9f:e1:c3:c4:94:2c:da:03: 6f:96:b4:76:48:22:3b:b6:77:4b:ba:1f:fb:cf:6d: 78:d4:c1:82:cc:4a:1c:c5:31:a8:36:46:f7:4c:f2: 1b:03:a9:e5:32:63:da:55:2a:6b:d4:6e:8d:db:a6: 43:5b:e0:6e:61:65:b1:d3:29:56:e6:0b:e1:5d:3f: 07:15:71:83:dc:2a:5b:52:c3:7d:f8:5a:bd:d9:ef: a8:40:5d:20:74:5d:a9:1e:cb:8d:77:02:7e:ea:8f: 3e:9f:ba:e7:5c:7a:ee:b8:6f:42:6a:f8:9b:b5:a1: a7:a5:8e:9e:1c:be:f1:4c:7b:c1:14:97:23:b1:0a: 9d:13:c6:2f:04:d0:5f:eb:d5:ad:81:02:69:be:9c: 07:80:c6:64:e2:5b:b5:ad:ee:d4:6e:ac:a3:73:29: 4e:ed:a2:6d:7e:f2:e7:60:a3:89:c2:68:93:fd:68: ba:02:af:c1:01:40:07:fc:0c:db:16:0b:a3:7d:8c: f1:46:74:c5:6b:66:fc:03:53:9d:87:d8:1b:8b:82: 78:18:05:5b:4c:7d:24:7f:2c:67:72:ca:e6:d1:31: cd:d9:37:33:b5:22:4a:e4:68:35:d9:99:45:c3:b4: 52:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E0:C3:F4:84:CE:32:B4:11:D9:85:7A:D0:5A:1D:0C:47:01:C5:66 X509v3 Authority Key Identifier: keyid:62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6a:7f:de:59:07:9f:75:76:4d:4c:65:5e:96:50:bf:2f:61: 8e:42:61:ba:38:b9:20:90:27:bf:b7:83:0d:7b:09:93:e1:ff: 4c:04:2b:b0:5e:e2:dc:0c:6c:79:f4:62:2b:e4:0b:e7:98:db: 43:36:19:ce:5c:d3:0b:0a:fa:18:12:9e:cf:31:d9:50:e9:ca: b4:05:f3:4b:c4:f2:65:60:25:49:e7:b0:7a:36:84:7e:ea:b9: a6:dc:a9:a0:21:b0:91:dd:76:ec:b7:82:05:22:ea:5b:ce:25: 0a:6d:54:7f:e5:08:a5:47:2e:45:ce:62:30:b4:ef:11:42:e5: 31:c2:62:fd:9b:13:d7:97:fc:ea:07:84:d0:28:7c:09:16:68: 90:a3:dc:2e:82:fd:5e:7b:70:58:0a:84:bd:b0:fe:f1:c1:d2: 4d:b8:fa:06:c3:ed:25:98:e5:6f:f6:c0:a4:e6:2d:7b:b9:11: 2b:3a:a3:2e:a3:36:b1:c6:16:5a:99:b2:71:a4:63:ac:31:44: 5b:c7:40:d9:13:60:e2:46:8f:a8:a6:93:e1:ca:c4:9f:4f:91: 10:5e:c3:15:13:11:9c:fc:85:02:e6:03:7e:37:5f:b6:6c:d9: 0f:62:42:09:b5:f0:12:36:ec:ec:e8:81:dd:37:32:4a:ec:dc: 50:36:8d:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyNjYxMTAvBgNVBAUTKDYyRDExMTlGMTg4RTNGN0MxMzU1RjY1MzlFMDY0MzZE QTI2OEZGOUQwHhcNMjQwNTA1MDMzNzMyWhcNMjQwNTEyMDMzNzMyWjAYMRYwFAYD VQQDEw02NjM2ZmVmYy05NWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzm9P8atGLnhalBf47BIWRQK6rNs9n+HDxJQs2gNvlrR2SCI7tndLuh/7z214 1MGCzEocxTGoNkb3TPIbA6nlMmPaVSpr1G6N26ZDW+BuYWWx0ylW5gvhXT8HFXGD 3CpbUsN9+Fq92e+oQF0gdF2pHsuNdwJ+6o8+n7rnXHruuG9CavibtaGnpY6eHL7x THvBFJcjsQqdE8YvBNBf69WtgQJpvpwHgMZk4lu1re7UbqyjcylO7aJtfvLnYKOJ wmiT/Wi6Aq/BAUAH/AzbFgujfYzxRnTFa2b8A1Odh9gbi4J4GAVbTH0kfyxncsrm 0THN2TcztSJK5Gg12ZlFw7RS5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbgw/SE zjK0EdmFetBaHQxHAcVmMB8GA1UdIwQYMBaAFGLREZ8Yjj98E1X2U54GQ22iaP+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI2Ni8yN0JDNTBDNEEx M0IxMUVDODM0Mzc1N0VDNEY5QUUwMi9ZdEVSbnhpT1Azd1RWZlpUbmdaRGJhSm9f NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l0RVJueGlPUDN3VFZmWlRuZ1pEYmFKb181MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI2Ni8yN0JDNTBDNEExM0IxMUVDODM0Mzc1N0VDNEY5QUUwMi9ZdEVSbnhpT1Az d1RWZlpUbmdaRGJhSm9fNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKan/eWQefdXZNTGVellC/L2GOQmG6OLkgkCe/t4MNewmT4f9MBCuw XuLcDGx59GIr5AvnmNtDNhnOXNMLCvoYEp7PMdlQ6cq0BfNLxPJlYCVJ57B6NoR+ 6rmm3KmgIbCR3Xbst4IFIupbziUKbVR/5QilRy5FzmIwtO8RQuUxwmL9mxPXl/zq B4TQKHwJFmiQo9wugv1ee3BYCoS9sP7xwdJNuPoGw+0lmOVv9sCk5i17uRErOqMu ozaxxhZambJxpGOsMURbx0DZE2DiRo+oppPhysSfT5EQXsMVExGc/IUC5gN+N1+2 bNkPYkIJtfASNuzs6IHdNzJK7NxQNo1G -----END CERTIFICATE-----Generated at Sun May 5 04:40:01 2024 by rpki-client on console-ams.rpki-client.org