$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json) Hash identifier: u5LFBfcjVA7kxJCYEAehwRnKOD0S/AhCq2EId9SZskY= Subject key identifier: AE:55:7E:A0:70:9A:9B:78:CC:F2:87:64:4B:AC:B9:8C:A9:EF:17:E9 Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Certificate serial: 0BEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft Manifest number: 0BDD Signing time: Sat 18 May 2024 19:06:51 +0000 Manifest this update: Sat 18 May 2024 19:06:51 +0000 Manifest next update: Sat 25 May 2024 19:06:51 +0000 Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: YEA+Q//wqmYekDJ3fPT2mkAZLeOPa6WUz2pOT2TdQ4E=) 2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: rw/6Yklw4cGXV0mWiatxLdQBYPtW24oE7vNbKVTifmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3050 (0xbea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Validity Not Before: May 18 19:06:51 2024 GMT Not After : May 25 19:06:51 2024 GMT Subject: CN=6648fc4b-3293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5f:7e:23:a5:b3:8f:6d:e1:1b:b4:d1:c8:8c: d0:b3:16:db:77:33:37:9f:1f:17:0b:63:1b:57:17: 04:76:f6:80:f9:d1:2d:e5:2a:f0:aa:88:4e:4c:dd: 6c:5a:f9:19:0c:52:44:07:20:ed:8d:a2:37:f1:5c: 28:35:07:b5:91:51:46:81:6b:e0:03:ce:29:56:e9: 32:e2:a9:90:8c:68:d3:55:8c:b5:33:62:fa:55:ce: 84:58:b4:7e:4c:78:c0:73:db:e3:f1:03:60:eb:9e: 1f:fa:cc:00:bd:91:9c:c8:39:5c:54:46:34:12:2d: 20:3b:bd:01:ad:ed:7e:cd:53:3f:37:40:22:76:f5: d2:d7:ee:02:0c:51:0b:3c:74:97:d1:2a:da:06:51: 10:a1:6f:fb:60:04:cd:bb:4c:24:d1:d1:83:6e:a6: 05:4a:c3:65:88:ac:90:ca:bb:74:2e:de:ed:e2:95: 2f:0f:3f:be:7e:8b:4f:93:33:db:8e:f9:6e:18:5e: 12:1f:be:48:d7:f0:74:8f:1b:99:7d:ea:1b:06:4d: 44:2c:63:21:ca:29:13:3d:06:48:7d:77:87:9b:eb: 33:ff:01:ef:01:ad:75:78:7d:71:e5:44:a4:5d:ef: d2:71:d5:b2:43:d3:bd:72:3f:8b:e6:24:4d:7f:18: 29:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:55:7E:A0:70:9A:9B:78:CC:F2:87:64:4B:AC:B9:8C:A9:EF:17:E9 X509v3 Authority Key Identifier: keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:4b:82:31:44:f5:e6:b3:c7:b5:23:b5:c6:3c:7d:ab:05:17: ec:37:88:77:fc:91:d9:9a:5c:e7:0b:a5:12:14:2d:8d:63:a1: 36:38:06:7f:e9:df:24:92:4d:a5:be:40:e9:5d:26:bb:24:10: 08:30:37:83:a0:f8:24:45:75:3f:58:17:eb:16:90:73:68:a9: 93:f0:83:09:96:1f:f6:ef:b0:00:e5:7d:d1:87:cc:f8:52:b3: 4d:35:78:1e:bb:77:53:4e:75:cb:23:80:1d:6f:b7:18:4f:68: df:5d:b5:f3:65:76:88:7b:ca:c3:80:91:b8:a9:b0:fe:5f:9c: 25:d5:7d:26:44:d9:03:ee:b9:96:72:39:a8:13:25:fd:4f:2c: ce:96:6b:34:c8:0a:69:5b:2d:ea:f7:3b:a6:65:be:96:6e:f8: c5:cf:4c:11:cd:5e:f5:74:0e:2f:77:22:61:de:74:da:4f:25: 86:08:70:91:29:ea:2d:22:37:d0:96:fe:08:e4:8a:b6:37:87: d3:a2:0c:c2:1c:4e:29:a9:e4:45:23:9d:2c:bd:34:41:b0:34: 2a:15:52:f8:d3:8e:81:82:9c:00:72:62:22:6a:ad:f1:1d:82: d9:6f:37:3e:95:3d:9b:10:cc:c1:8d:3b:8b:81:fd:7a:f0:af: fe:68:78:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx NjE2QjU0QjQwHhcNMjQwNTE4MTkwNjUxWhcNMjQwNTI1MTkwNjUxWjAYMRYwFAYD VQQDEw02NjQ4ZmM0Yi0zMjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0l9+I6Wzj23hG7TRyIzQsxbbdzM3nx8XC2MbVxcEdvaA+dEt5SrwqohOTN1s WvkZDFJEByDtjaI38VwoNQe1kVFGgWvgA84pVuky4qmQjGjTVYy1M2L6Vc6EWLR+ THjAc9vj8QNg654f+swAvZGcyDlcVEY0Ei0gO70Bre1+zVM/N0AidvXS1+4CDFEL PHSX0SraBlEQoW/7YATNu0wk0dGDbqYFSsNliKyQyrt0Lt7t4pUvDz++fotPkzPb jvluGF4SH75I1/B0jxuZfeobBk1ELGMhyikTPQZIfXeHm+sz/wHvAa11eH1x5USk Xe/ScdWyQ9O9cj+L5iRNfxgpfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5VfqBw mpt4zPKHZEusuYyp7xfpMB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1 NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEZENC84MDlDMjREMkY1NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBo VHp5MFA2dXpHX2dXRnJWTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4S4IxRPXms8e1I7XGPH2rBRfsN4h3/JHZmlznC6USFC2NY6E2OAZ/ 6d8kkk2lvkDpXSa7JBAIMDeDoPgkRXU/WBfrFpBzaKmT8IMJlh/277AA5X3Rh8z4 UrNNNXgeu3dTTnXLI4Adb7cYT2jfXbXzZXaIe8rDgJG4qbD+X5wl1X0mRNkD7rmW cjmoEyX9TyzOlms0yAppWy3q9zumZb6WbvjFz0wRzV71dA4vdyJh3nTaTyWGCHCR KeotIjfQlv4I5Iq2N4fTogzCHE4pqeRFI50svTRBsDQqFVL4046BgpwAcmIiaq3x HYLZbzc+lT2bEMzBjTuLgf168K/+aHiD -----END CERTIFICATE-----Generated at Sat May 18 20:15:58 2024 by rpki-client on console-ams.rpki-client.org