$ rpki-client -vvf rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft File: YbChG9lEvNqGW7mx-_fuBtVzvXE.mft (raw, json) Hash identifier: hxL9tMnAOVArIzYDeI7x/xQYlnaZjOf9u9xVXX5p9nA= Subject key identifier: 2D:99:74:42:C6:C4:A6:CA:8A:DE:7E:C7:78:B2:93:E8:93:81:E7:BA Authority key identifier: 61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71 Certificate issuer: /CN=A9127656/serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71 Certificate serial: 050F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft Manifest number: 050B Signing time: Sun 19 May 2024 01:08:15 +0000 Manifest this update: Sun 19 May 2024 01:08:15 +0000 Manifest next update: Sun 26 May 2024 01:08:15 +0000 Files and hashes: 1: YbChG9lEvNqGW7mx-_fuBtVzvXE.crl (hash: Fen1ZulZL76GZ/oDmjk/jhzb0uK37bptsxKbn1tV+hI=) 2: 6F706208BE0F11EB90239C1AC4F9AE02.roa (hash: 3r/XpjPTsdyBZdadWG+NjRcIRHMNeVEfAU5t54XzOrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127656/serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71 Validity Not Before: May 19 01:08:15 2024 GMT Not After : May 26 01:08:15 2024 GMT Subject: CN=664950ff-88f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:be:c1:2d:94:8c:cb:0f:c8:cb:36:d3:30:a6: f0:1b:4c:c1:0e:31:a7:dc:fd:cf:23:a8:ed:32:f7: 35:e8:38:27:f1:b4:ed:10:8e:93:59:a1:f2:03:48: d6:50:e6:8c:ca:46:25:a3:80:52:9d:af:a9:fe:eb: 46:b8:a6:86:c5:17:eb:51:57:45:53:be:da:3e:80: d7:43:0c:dc:9d:d9:f0:51:b8:c8:e5:e7:08:53:1b: 07:2a:b2:40:ca:4b:16:32:5c:59:15:d1:18:03:d8: 1b:c2:8c:1f:fb:05:89:cd:bb:c1:e9:82:4d:08:10: 74:e9:76:e5:91:20:59:b5:d3:8b:26:20:8d:ba:18: a3:95:79:f8:d0:c4:35:6a:04:38:44:fe:04:b9:53: 65:2e:7d:f3:d9:3d:57:79:95:45:5f:a7:e8:49:ed: 89:9f:66:65:b5:23:2d:28:72:3d:d4:5e:f9:3f:33: 83:76:7d:80:2d:a4:54:d3:cc:84:be:77:d8:26:28: a7:ba:60:2d:ba:b5:65:dc:7d:01:ae:1e:19:c0:a2: cf:a9:35:c1:e3:78:ce:20:96:df:55:37:cb:9f:88: dc:fc:0b:2b:b7:c2:bd:09:a0:00:45:71:ab:8d:5b: 49:00:d5:d7:37:8a:55:7c:13:79:f2:06:e4:75:24: 6f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:99:74:42:C6:C4:A6:CA:8A:DE:7E:C7:78:B2:93:E8:93:81:E7:BA X509v3 Authority Key Identifier: keyid:61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:87:ce:81:b8:a4:0f:30:3a:1b:85:df:be:6d:68:17:61:50: 1e:95:80:ce:93:16:8b:c4:50:78:2d:83:e2:04:a3:68:0c:e4: 4b:04:5c:c2:9c:fe:c0:41:db:11:cc:33:26:ef:71:08:f9:61: fb:6f:6b:a3:a1:3d:a5:50:33:ae:c0:6f:a9:4a:f8:95:91:c7: 1d:cf:f4:d3:15:2c:8b:3f:79:b6:d4:6f:03:93:75:a9:9d:88: 4c:62:16:87:3f:a0:1f:2a:7c:e7:ce:33:49:9a:b1:63:a2:bd: fb:b4:b5:e1:63:99:00:ff:c1:c0:a7:84:46:b5:67:46:94:d7: 7f:77:76:be:75:1e:3e:00:38:d2:17:a6:a9:7d:c4:9d:4f:f5: 8d:88:9c:c1:3e:af:b0:d2:59:c6:ea:74:51:08:d8:57:4c:7e: 4b:62:8c:76:af:7c:99:1a:d4:6f:3e:04:bd:cb:24:d4:55:95: e1:5e:c9:31:48:e2:de:22:6c:bd:44:1b:6a:b0:9e:24:3c:fc: 40:90:ea:ba:f8:d0:3e:63:c6:a7:1c:70:3b:42:20:3b:a5:a8: 76:24:7a:ea:c7:76:27:b6:86:14:d8:ed:9d:21:37:f7:f0:f8: 6c:36:ac:af:f9:37:ca:41:02:71:a6:90:26:33:21:c7:ee:68: 6e:f1:3f:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NTYxMTAvBgNVBAUTKDYxQjBBMTFCRDk0NEJDREE4NjVCQjlCMUZCRjdFRTA2 RDU3M0JENzEwHhcNMjQwNTE5MDEwODE1WhcNMjQwNTI2MDEwODE1WjAYMRYwFAYD VQQDEw02NjQ5NTBmZi04OGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArb7BLZSMyw/IyzbTMKbwG0zBDjGn3P3PI6jtMvc16Dgn8bTtEI6TWaHyA0jW UOaMykYlo4BSna+p/utGuKaGxRfrUVdFU77aPoDXQwzcndnwUbjI5ecIUxsHKrJA yksWMlxZFdEYA9gbwowf+wWJzbvB6YJNCBB06XblkSBZtdOLJiCNuhijlXn40MQ1 agQ4RP4EuVNlLn3z2T1XeZVFX6foSe2Jn2ZltSMtKHI91F75PzODdn2ALaRU08yE vnfYJiinumAturVl3H0Brh4ZwKLPqTXB43jOIJbfVTfLn4jc/Asrt8K9CaAARXGr jVtJANXXN4pVfBN58gbkdSRvVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2ZdELG xKbKit5+x3iyk+iTgee6MB8GA1UdIwQYMBaAFGGwoRvZRLzahlu5sfv37gbVc71x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY1Ni84OEU4RTQyRUJF MEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZOcUdXN214LV9mdUJ0Vnp2 WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liQ2hHOWxFdk5xR1c3bXgtX2Z1QnRWenZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY1Ni84OEU4RTQyRUJFMEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZO cUdXN214LV9mdUJ0Vnp2WEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4h86BuKQPMDobhd++bWgXYVAelYDOkxaLxFB4LYPiBKNoDORLBFzC nP7AQdsRzDMm73EI+WH7b2ujoT2lUDOuwG+pSviVkccdz/TTFSyLP3m21G8Dk3Wp nYhMYhaHP6AfKnznzjNJmrFjor37tLXhY5kA/8HAp4RGtWdGlNd/d3a+dR4+ADjS F6apfcSdT/WNiJzBPq+w0lnG6nRRCNhXTH5LYox2r3yZGtRvPgS9yyTUVZXhXskx SOLeImy9RBtqsJ4kPPxAkOq6+NA+Y8anHHA7QiA7pah2JHrqx3YntoYU2O2dITf3 8PhsNqyv+TfKQQJxppAmMyHH7mhu8T+k -----END CERTIFICATE-----Generated at Sun May 19 01:47:08 2024 by rpki-client on console-ams.rpki-client.org