$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft File: yhZXNMEc1wu3iaHSw6DpTtuULUo.mft (raw, json) Hash identifier: C/K3fbDAh67I1zhW24+DYza2TcCWEoOFt4bdGNdCyaM= Subject key identifier: 18:B6:C3:D3:B5:F7:35:33:FE:E3:47:73:EA:8E:13:28:B1:97:BF:A9 Authority key identifier: CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A Certificate issuer: /CN=A91FE179/serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft Manifest number: 085F Signing time: Sat 04 May 2024 21:48:56 +0000 Manifest this update: Sat 04 May 2024 21:48:55 +0000 Manifest next update: Sat 11 May 2024 21:48:55 +0000 Files and hashes: 1: yhZXNMEc1wu3iaHSw6DpTtuULUo.crl (hash: uQc9p90ERTyfZGz8IFyrhLwxpCgVPCEt+TzNnqjob/c=) 2: 805149989FDE11EAB02CF366C4F9AE02.roa (hash: zD+1Isr7Zoe06zM4n2le8cJbIdHC0c+SsYSND0yrM8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE179/serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A Validity Not Before: May 4 21:48:55 2024 GMT Not After : May 11 21:48:55 2024 GMT Subject: CN=6636ad48-dde1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:e5:f6:7d:d4:5f:ce:b9:ff:64:75:cf:b6: b0:8f:c5:8b:68:b6:9c:18:12:4c:6c:3f:c8:bb:76: 93:e3:fa:76:d8:3b:14:f2:74:0f:c7:f1:fb:1c:16: 7c:13:41:2d:4c:b6:dd:83:00:6c:66:7e:36:62:4a: a6:ae:6e:48:12:7d:a6:1c:2f:26:22:5a:68:3b:a8: f6:4d:2b:a3:45:3a:1a:8a:e7:60:85:f5:dc:bc:04: a8:12:26:de:e0:5e:69:fc:c8:76:db:69:f8:49:db: c0:0d:41:68:89:2b:b5:b0:2d:cf:9c:07:34:c0:41: ab:cd:d6:cd:80:9a:ec:89:ae:7e:d4:64:cb:17:83: 13:6b:33:4d:8c:56:0f:1e:6c:13:4a:ff:ee:11:e3: ad:87:39:ec:a6:58:b1:fd:42:62:c2:61:0a:24:e6: 13:ac:5e:c7:b1:34:24:7b:de:d2:59:c5:f3:f2:4c: d0:3b:20:0e:40:b9:9c:45:84:0c:a0:11:5d:81:e6: 97:28:3a:46:41:44:6a:34:f5:df:e9:a8:66:00:be: f7:56:69:3d:b6:5e:1b:9c:24:3d:50:4e:13:02:e2: 18:a0:77:18:42:ce:4b:08:0e:af:72:be:69:56:4a: 50:a1:d4:9c:36:dd:0d:45:80:54:12:f9:f6:88:69: 6e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B6:C3:D3:B5:F7:35:33:FE:E3:47:73:EA:8E:13:28:B1:97:BF:A9 X509v3 Authority Key Identifier: keyid:CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:05:55:a7:25:ad:01:f5:eb:6e:15:3b:1c:61:4b:2c:76:e2: d4:85:c5:b6:c7:99:a5:f0:94:be:97:10:15:b0:3d:6d:11:5b: 97:9b:b9:fc:a7:0e:a1:74:2a:20:09:dd:ba:30:3c:22:7a:44: ec:2e:bd:bf:aa:d8:32:2d:53:86:c6:bd:45:7d:ad:9b:ca:a3: 92:71:2c:64:52:03:fb:7d:a4:5e:e1:8f:25:d6:c3:3c:87:e0: e3:35:d2:a6:94:24:50:15:c6:a8:81:17:30:00:4a:c5:c7:e4: 40:10:03:13:fb:7a:87:6c:54:5d:44:b8:52:52:a3:41:58:cb: 42:e4:07:c7:a5:61:5e:af:1e:a6:8c:b5:b9:67:fe:22:5f:fd: 6b:6c:2b:8b:c0:b7:91:9d:d4:25:68:21:af:d0:12:a5:84:6a: 4b:49:fa:be:df:87:34:59:9d:ac:1e:01:85:bf:5c:de:f1:e8: a4:88:41:53:97:3d:a8:b1:be:bf:df:1a:20:4e:39:f9:2c:3b: 5e:43:6a:20:3e:91:35:5d:e2:c1:27:40:3e:0e:33:e5:6e:71: ba:70:ba:3a:b6:be:bc:81:05:d1:00:32:90:41:8d:06:34:71: cd:13:c8:0d:88:60:e7:6e:1b:d2:c5:d4:65:5e:a6:15:27:7b: 21:5e:21:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUxNzkxMTAvBgNVBAUTKENBMTY1NzM0QzExQ0Q3MEJCNzg5QTFEMkMzQTBFOTRF REI5NDJENEEwHhcNMjQwNTA0MjE0ODU1WhcNMjQwNTExMjE0ODU1WjAYMRYwFAYD VQQDEw02NjM2YWQ0OC1kZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuX/l9n3UX865/2R1z7awj8WLaLacGBJMbD/Iu3aT4/p22DsU8nQPx/H7HBZ8 E0EtTLbdgwBsZn42Ykqmrm5IEn2mHC8mIlpoO6j2TSujRToaiudghfXcvASoEibe 4F5p/Mh222n4SdvADUFoiSu1sC3PnAc0wEGrzdbNgJrsia5+1GTLF4MTazNNjFYP HmwTSv/uEeOthznsplix/UJiwmEKJOYTrF7HsTQke97SWcXz8kzQOyAOQLmcRYQM oBFdgeaXKDpGQURqNPXf6ahmAL73Vmk9tl4bnCQ9UE4TAuIYoHcYQs5LCA6vcr5p VkpQodScNt0NRYBUEvn2iGlu7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBi2w9O1 9zUz/uNHc+qOEyixl7+pMB8GA1UdIwQYMBaAFMoWVzTBHNcLt4mh0sOg6U7blC1K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTE3OS81QzIwMDRFMDlG REIxMUVBODQ2MkJENURDNEY5QUUwMi95aFpYTk1FYzF3dTNpYUhTdzZEcFR0dVVM VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3loWlhOTUVjMXd1M2lhSFN3NkRwVHR1VUxVby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTE3OS81QzIwMDRFMDlGREIxMUVBODQ2MkJENURDNEY5QUUwMi95aFpYTk1FYzF3 dTNpYUhTdzZEcFR0dVVMVW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxBVWnJa0B9etuFTscYUssduLUhcW2x5ml8JS+lxAVsD1tEVuXm7n8 pw6hdCogCd26MDwiekTsLr2/qtgyLVOGxr1Ffa2byqOScSxkUgP7faRe4Y8l1sM8 h+DjNdKmlCRQFcaogRcwAErFx+RAEAMT+3qHbFRdRLhSUqNBWMtC5AfHpWFerx6m jLW5Z/4iX/1rbCuLwLeRndQlaCGv0BKlhGpLSfq+34c0WZ2sHgGFv1ze8eikiEFT lz2osb6/3xogTjn5LDteQ2ogPpE1XeLBJ0A+DjPlbnG6cLo6tr68gQXRADKQQY0G NHHNE8gNiGDnbhvSxdRlXqYVJ3shXiF9 -----END CERTIFICATE-----Generated at Sun May 5 00:12:36 2024 by rpki-client on console-fra.rpki-client.org