$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft File: yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft (raw, json) Hash identifier: Y4Jnp6+inUZzX2jFAqV8Pya2rf7hOgbkHJQGTHhKbgc= Subject key identifier: B7:1F:36:BE:75:41:EC:C5:86:7A:61:54:BB:DC:85:C5:78:30:7F:B9 Authority key identifier: CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A Certificate issuer: /CN=A91F89C1/serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A Certificate serial: 05A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft Manifest number: 059C Signing time: Sat 27 Apr 2024 00:19:27 +0000 Manifest this update: Sat 27 Apr 2024 00:19:27 +0000 Manifest next update: Sat 04 May 2024 00:19:27 +0000 Files and hashes: 1: yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl (hash: EusYTdGAwl9OFi/CvuaTJayqD9bb3st4LhmnyVDpbeE=) 2: 89283C80809211EB938F4016C4F9AE02.roa (hash: ZRBO6vyLH4/afxSN4vzunw8CIrHkOdrG6vCeUqNRiVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 00:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1441 (0x5a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1/serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A Validity Not Before: Apr 27 00:19:27 2024 GMT Not After : May 4 00:19:27 2024 GMT Subject: CN=662c448f-6bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fc:6d:4e:f0:6f:6d:c6:49:65:e0:f6:fc:19: 58:ed:ea:40:83:d9:83:4b:be:fc:66:29:6d:7c:7e: 3d:9c:c1:d4:49:9d:6a:ab:74:ae:ab:9f:bb:e5:e1: 89:42:1f:ce:55:10:c7:84:ef:d2:62:7a:2a:fa:d7: 22:ce:a8:4a:f4:bb:52:4e:a9:43:db:ae:45:94:c1: 2e:cc:4e:96:3d:b8:9e:10:2e:00:93:b3:c0:56:eb: b1:8e:c9:0e:e4:6d:40:48:6a:5f:98:e8:0a:0f:37: 03:3a:5d:dd:da:6d:39:b3:ad:42:69:4b:7d:73:30: b5:e9:50:8f:a7:5f:b4:56:61:47:dd:26:7c:50:a6: 21:86:01:d7:6f:39:36:ee:7a:8d:e7:38:5d:96:6b: f8:ba:d4:3f:db:6e:a6:99:0b:78:d8:37:9f:f6:4f: 36:da:74:e8:7d:06:97:aa:cf:47:f8:50:58:e0:04: a5:98:83:18:2f:62:04:0a:07:12:88:64:aa:87:e0: 54:3a:bd:f5:41:bc:90:47:0f:19:43:55:f7:62:33: 19:d1:f4:46:ea:fd:52:a4:75:79:d8:72:4d:ca:2d: 4e:b1:45:65:a9:0c:44:2f:99:f6:80:07:0b:df:ae: a4:19:7d:94:fc:26:46:aa:db:0d:92:ae:67:64:91: 80:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1F:36:BE:75:41:EC:C5:86:7A:61:54:BB:DC:85:C5:78:30:7F:B9 X509v3 Authority Key Identifier: keyid:CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:41:0b:36:41:31:d1:01:cb:5b:1d:4e:8d:0d:0b:45:a3:d9: 40:27:25:39:46:cc:0c:61:7e:7c:25:0e:fc:3c:62:21:d4:87: 5b:eb:1b:7e:3b:f0:29:1b:5c:b4:cf:c7:a7:11:0b:8b:8b:a8: 0f:75:31:72:e9:cd:da:9a:81:15:3e:eb:31:96:9f:8c:2d:1a: 1a:98:60:e9:25:61:25:b2:ab:08:fb:2f:2b:6a:91:05:39:cd: 3e:22:d4:dd:76:70:34:77:45:d4:0a:a4:32:f1:16:e5:c2:da: d8:f5:72:5a:5e:e6:47:d2:92:86:32:8d:57:ea:45:45:35:07: 35:90:b9:25:87:7b:30:16:31:fb:20:eb:db:c1:68:0b:03:11: cd:53:0a:a1:26:f8:12:94:40:c8:b7:76:6f:ec:88:e9:f8:7f: 45:d5:c3:0f:26:52:29:a2:02:59:96:5c:ac:87:9c:95:fa:62: 7e:85:1d:c6:92:cc:72:97:30:eb:09:af:1b:58:b1:70:dc:4f: 2d:51:65:77:c2:8b:d7:4b:86:12:9b:c9:f6:d8:c8:7a:c7:66: 3b:75:52:51:ab:bd:b5:da:2a:a3:21:aa:1b:92:07:d7:f7:00: b7:bb:21:a8:da:39:bc:25:6e:b7:2d:6f:be:f5:07:93:79:9c: 64:44:f0:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKENBMzJENTExNDYyQUI0MjYxOEE4OERCQTA1ODY5QUZF QkVBMEU1MUEwHhcNMjQwNDI3MDAxOTI3WhcNMjQwNTA0MDAxOTI3WjAYMRYwFAYD VQQDEw02NjJjNDQ4Zi02YmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fxtTvBvbcZJZeD2/BlY7epAg9mDS778ZiltfH49nMHUSZ1qq3Suq5+75eGJ Qh/OVRDHhO/SYnoq+tcizqhK9LtSTqlD265FlMEuzE6WPbieEC4Ak7PAVuuxjskO 5G1ASGpfmOgKDzcDOl3d2m05s61CaUt9czC16VCPp1+0VmFH3SZ8UKYhhgHXbzk2 7nqN5zhdlmv4utQ/226mmQt42Def9k822nTofQaXqs9H+FBY4ASlmIMYL2IECgcS iGSqh+BUOr31QbyQRw8ZQ1X3YjMZ0fRG6v1SpHV52HJNyi1OsUVlqQxEL5n2gAcL 366kGX2U/CZGqtsNkq5nZJGAFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcfNr51 QezFhnphVLvchcV4MH+5MB8GA1UdIwQYMBaAFMoy1RFGKrQmGKiNugWGmv6+oOUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8xM0VENjgwMjgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi95akxWRVVZcXRDWVlxSTI2QllhYV9yNmc1 Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lqTFZFVVlxdENZWXFJMjZCWWFhX3I2ZzVSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8xM0VENjgwMjgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi95akxWRVVZcXRD WVlxSTI2QllhYV9yNmc1Um8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiQQs2QTHRActbHU6NDQtFo9lAJyU5RswMYX58JQ78PGIh1Idb6xt+ O/ApG1y0z8enEQuLi6gPdTFy6c3amoEVPusxlp+MLRoamGDpJWElsqsI+y8rapEF Oc0+ItTddnA0d0XUCqQy8RblwtrY9XJaXuZH0pKGMo1X6kVFNQc1kLklh3swFjH7 IOvbwWgLAxHNUwqhJvgSlEDIt3Zv7Ijp+H9F1cMPJlIpogJZllysh5yV+mJ+hR3G ksxylzDrCa8bWLFw3E8tUWV3wovXS4YSm8n22Mh6x2Y7dVJRq7212iqjIaobkgfX 9wC3uyGo2jm8JW63LW++9QeTeZxkRPCW -----END CERTIFICATE-----Generated at Sat Apr 27 10:21:00 2024 by rpki-client on console-ams.rpki-client.org