$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft File: yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json) Hash identifier: UUwxtaaCl1MoosOCqaYFO979Ltw4vY9N9NH+xJxlBi8= Subject key identifier: 39:B1:CD:71:74:9B:B8:68:04:8C:4B:11:C9:A7:1F:8C:E1:35:32:1A Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B Certificate issuer: /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft Manifest number: 0133 Signing time: Sun 19 May 2024 04:58:37 +0000 Manifest this update: Sun 19 May 2024 04:58:36 +0000 Manifest next update: Sun 26 May 2024 04:58:36 +0000 Files and hashes: 1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: nWr08b8RxUmp1htnE8wPMmtEiFf7VelsOGN5OLLZ2Ns=) 2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: 6s8lbD4Sp+NOwI/OVD7FbB7Y1BhIHRwBr1ALqocyrHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Validity Not Before: May 19 04:58:36 2024 GMT Not After : May 26 04:58:36 2024 GMT Subject: CN=664986fd-7f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:80:d4:b8:95:07:2e:fd:d1:08:b7:a8:de: 77:0e:a3:bb:6e:38:4a:b8:72:f0:5b:a1:29:b8:2c: 3f:79:aa:dc:2a:9d:2c:33:e9:c8:a0:00:a7:20:95: 80:99:0f:a3:6d:75:87:e1:ae:02:cf:6b:f1:ce:3b: bf:79:1f:8e:31:00:3c:43:3e:26:20:c4:88:81:89: ad:7f:68:b7:3f:42:d2:43:bd:50:42:2a:b1:1b:43: 8a:56:c6:1b:76:86:70:3e:bc:0b:4f:6d:81:90:00: 88:2a:05:4e:04:81:1e:5f:e7:8c:2f:64:91:a2:50: 3a:98:99:54:a2:df:e6:a1:12:ca:ef:ea:49:38:1f: 6e:c1:60:f5:c3:a4:71:18:da:ff:19:fb:15:26:0c: 1c:d8:58:1a:ce:4a:f9:36:1e:13:59:7d:71:40:30: 56:8c:f0:47:85:dd:e2:7b:61:b7:96:8e:fa:54:46: ab:f5:42:7c:c6:3b:b1:b5:aa:e0:f2:d2:67:a1:b9: fe:12:6c:ab:72:c8:cf:4c:52:5c:be:7e:40:af:17: ed:73:67:07:07:c2:81:7b:48:7c:f5:c1:85:0b:39: b7:85:91:88:67:75:c9:47:58:32:f0:b9:55:35:d5: 50:07:18:9e:b1:5b:59:06:4b:1c:79:e2:a6:fb:19: 4f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B1:CD:71:74:9B:B8:68:04:8C:4B:11:C9:A7:1F:8C:E1:35:32:1A X509v3 Authority Key Identifier: keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:86:a4:4c:5f:ec:bf:b2:53:4c:a3:3a:2c:02:54:cf:7b:ef: 7d:c3:ee:41:f9:cf:ca:b1:c0:15:b1:3b:25:11:63:e5:5c:7c: bf:41:ea:2d:c5:8b:fb:09:57:40:b6:06:ea:97:1e:b5:d2:82: 31:70:fe:55:29:bc:98:0d:19:41:69:41:37:0e:59:af:b2:e7: 53:ac:17:80:c4:41:ea:91:9e:75:b7:01:87:8c:77:c0:65:34: 08:36:a1:cb:a2:55:98:71:0a:e3:86:1f:e7:c1:af:df:ec:ec: ec:7a:cf:e9:a2:3c:52:cc:3d:92:e3:43:dc:88:7a:fe:4a:c6: c2:df:6c:c3:aa:ce:1c:c7:ad:69:6c:08:3e:3a:06:f6:12:a7: 5d:e4:69:4e:58:79:b5:d3:70:72:37:b3:1d:c7:fb:a1:45:41: 17:b4:46:f3:fd:05:00:c7:a2:12:69:6f:3c:67:c4:a3:29:39: ae:ff:85:e0:1b:60:8d:42:23:ea:7b:a1:35:cd:09:40:ec:5c: 4a:ad:98:ab:2f:14:9e:51:e3:58:9a:71:75:52:dc:0a:c5:a1: 79:ec:8f:13:64:7e:c7:a1:1a:f4:31:7e:8b:7d:ab:52:90:99: c1:5e:b9:90:99:01:4d:4d:53:b5:c7:a2:81:be:1f:fc:dc:a8: 29:a0:01:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNGNjMxMTAvBgNVBAUTKEM5NDQ4MUNBRDAwRUZCMURFQTdBOTM5Q0JFMjlBOEY0 NUYyNUUyMEIwHhcNMjQwNTE5MDQ1ODM2WhcNMjQwNTI2MDQ1ODM2WjAYMRYwFAYD VQQDEw02NjQ5ODZmZC03ZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQyA1LiVBy790Qi3qN53DqO7bjhKuHLwW6EpuCw/earcKp0sM+nIoACnIJWA mQ+jbXWH4a4Cz2vxzju/eR+OMQA8Qz4mIMSIgYmtf2i3P0LSQ71QQiqxG0OKVsYb doZwPrwLT22BkACIKgVOBIEeX+eML2SRolA6mJlUot/moRLK7+pJOB9uwWD1w6Rx GNr/GfsVJgwc2Fgazkr5Nh4TWX1xQDBWjPBHhd3ie2G3lo76VEar9UJ8xjuxtarg 8tJnobn+EmyrcsjPTFJcvn5Arxftc2cHB8KBe0h89cGFCzm3hZGIZ3XJR1gy8LlV NdVQBxiesVtZBksceeKm+xlP3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmxzXF0 m7hoBIxLEcmnH4zhNTIaMB8GA1UdIwQYMBaAFMlEgcrQDvsd6nqTnL4pqPRfJeIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0Y2My81MTlCNjRBNjQw RUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14M3FlcE9jdmltbzlGOGw0 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVU0J5dEFPLXgzcWVwT2N2aW1vOUY4bDRncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0Y2My81MTlCNjRBNjQwRUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14 M3FlcE9jdmltbzlGOGw0Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCshqRMX+y/slNMozosAlTPe+99w+5B+c/KscAVsTslEWPlXHy/Qeot xYv7CVdAtgbqlx610oIxcP5VKbyYDRlBaUE3DlmvsudTrBeAxEHqkZ51twGHjHfA ZTQINqHLolWYcQrjhh/nwa/f7Ozses/pojxSzD2S40PciHr+SsbC32zDqs4cx61p bAg+Ogb2Eqdd5GlOWHm103ByN7Mdx/uhRUEXtEbz/QUAx6ISaW88Z8SjKTmu/4Xg G2CNQiPqe6E1zQlA7FxKrZirLxSeUeNYmnF1UtwKxaF57I8TZH7HoRr0MX6LfatS kJnBXrmQmQFNTVO1x6KBvh/83KgpoAGa -----END CERTIFICATE-----Generated at Sun May 19 06:14:32 2024 by rpki-client on console-ams.rpki-client.org