$ rpki-client -vvf rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft File: YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft (raw, json) Hash identifier: EnQ9WOX8z+KMxEY3ssPtGJDMwU9ZQyvoOxFF4mxu3nk= Subject key identifier: 0C:AA:38:7E:5A:13:BC:E8:AD:EA:87:68:A8:B0:B9:5E:AF:68:DB:D1 Authority key identifier: 63:3A:CB:8D:51:D2:F0:88:69:9B:8A:71:49:1C:C7:55:3E:C0:C1:12 Certificate issuer: /CN=A91298C7/serialNumber=633ACB8D51D2F088699B8A71491CC7553EC0C112 Certificate serial: 0469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft Manifest number: 0469 Signing time: Sun 19 May 2024 01:44:03 +0000 Manifest this update: Sun 19 May 2024 01:44:03 +0000 Manifest next update: Sun 26 May 2024 01:44:03 +0000 Files and hashes: 1: YzrLjVHS8Ihpm4pxSRzHVT7AwRI.crl (hash: w+1VJfUEVSEjMX3C88UN9h2ebyRBfDvSxkEF5thSG/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.crl rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1129 (0x469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298C7/serialNumber=633ACB8D51D2F088699B8A71491CC7553EC0C112 Validity Not Before: May 19 01:44:03 2024 GMT Not After : May 26 01:44:03 2024 GMT Subject: CN=66495963-9954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:3a:84:7d:ca:89:c4:1c:c1:1b:a8:95:b8: 28:1c:80:53:59:e7:d5:72:d8:c4:9f:38:11:59:ae: 0a:61:02:24:64:b7:e3:a0:96:99:44:de:88:37:b5: a1:93:cf:64:e1:24:bd:0f:d4:3a:d1:e4:9d:98:58: 6d:07:b3:89:54:18:15:c2:08:50:02:38:f6:05:51: 67:65:c5:e3:fc:99:ab:7f:10:c0:d1:d1:05:e9:44: 56:45:9e:7f:d7:ae:e7:15:47:1e:3a:c6:bc:67:c7: 95:b5:32:5e:1a:eb:47:fb:2f:72:43:1a:51:22:cb: fb:7c:84:12:e4:36:4d:1b:44:98:21:af:9d:ae:6b: 66:01:b7:6d:d8:84:aa:9f:60:dd:07:8c:66:ec:92: f3:3c:28:8d:08:83:4a:3b:44:93:af:39:ba:6e:17: f8:24:34:e9:4e:8e:40:15:1d:14:f2:67:6d:5f:ba: 4d:d4:48:d4:b0:ac:7f:8c:3e:c8:97:ee:fa:c5:5d: 23:cd:d3:95:38:bd:28:db:02:68:22:56:95:09:5c: 01:d5:2f:20:8b:4a:f6:b2:19:98:08:7f:ae:1e:4a: d4:fc:c0:63:d8:0d:c8:ac:36:9b:0a:b2:61:19:27: 8b:74:39:c4:b7:b7:61:8b:14:41:52:19:26:34:e5: a0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AA:38:7E:5A:13:BC:E8:AD:EA:87:68:A8:B0:B9:5E:AF:68:DB:D1 X509v3 Authority Key Identifier: keyid:63:3A:CB:8D:51:D2:F0:88:69:9B:8A:71:49:1C:C7:55:3E:C0:C1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e8:3a:9d:cb:5d:70:b1:09:f5:50:91:9b:ef:dd:1c:29:0b: 88:93:fd:01:e4:cb:7b:d7:3b:0d:f4:7f:eb:ce:45:6b:37:4d: 45:89:a5:d4:4b:38:44:ea:90:9f:84:e1:46:a5:66:9c:59:b7: dc:91:51:30:df:c1:2d:98:52:ea:8e:a4:41:28:87:b3:4d:5e: 48:e6:c0:06:70:76:cc:8f:aa:af:21:7d:45:a3:96:56:41:e9: ec:b8:fe:a5:02:87:be:9c:83:47:69:2d:e6:48:79:2d:ec:8d: 2d:6b:93:0f:94:1d:f3:ac:13:04:f8:ae:9c:86:e7:af:f5:bb: 1c:44:92:7b:92:3b:1d:53:7f:97:6f:28:d3:e0:a1:a7:ea:9b: d4:7e:22:15:b4:06:44:e0:c1:48:c7:48:43:a4:e8:26:94:85: ea:74:14:fb:be:2d:6e:2a:3f:db:4e:d9:d7:a8:ff:15:2d:e7: f8:45:7d:de:4a:9b:7a:2c:3b:e5:43:25:9b:1d:1b:5e:0b:ed: 3d:e6:d4:67:16:95:c0:41:95:3d:b8:8a:5b:37:ef:b7:b1:96: bb:cc:41:84:a1:56:88:fb:a3:73:10:3f:0c:31:22:28:cc:bb: f9:09:32:19:7d:01:c6:d4:29:35:8c:11:85:66:6f:54:60:c4: ef:53:1f:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4QzcxMTAvBgNVBAUTKDYzM0FDQjhENTFEMkYwODg2OTlCOEE3MTQ5MUNDNzU1 M0VDMEMxMTIwHhcNMjQwNTE5MDE0NDAzWhcNMjQwNTI2MDE0NDAzWjAYMRYwFAYD VQQDEw02NjQ5NTk2My05OTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/E6hH3KicQcwRuolbgoHIBTWefVctjEnzgRWa4KYQIkZLfjoJaZRN6IN7Wh k89k4SS9D9Q60eSdmFhtB7OJVBgVwghQAjj2BVFnZcXj/JmrfxDA0dEF6URWRZ5/ 167nFUceOsa8Z8eVtTJeGutH+y9yQxpRIsv7fIQS5DZNG0SYIa+drmtmAbdt2ISq n2DdB4xm7JLzPCiNCINKO0STrzm6bhf4JDTpTo5AFR0U8mdtX7pN1EjUsKx/jD7I l+76xV0jzdOVOL0o2wJoIlaVCVwB1S8gi0r2shmYCH+uHkrU/MBj2A3IrDabCrJh GSeLdDnEt7dhixRBUhkmNOWgKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyqOH5a E7zoreqHaKiwuV6vaNvRMB8GA1UdIwQYMBaAFGM6y41R0vCIaZuKcUkcx1U+wMES MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThDNy9ENDk0QjhFRUZB N0YxMUVCOTlBREQ4NUNDNEY5QUUwMi9ZenJMalZIUzhJaHBtNHB4U1J6SFZUN0F3 UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l6ckxqVkhTOElocG00cHhTUnpIVlQ3QXdSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OThDNy9ENDk0QjhFRUZBN0YxMUVCOTlBREQ4NUNDNEY5QUUwMi9ZenJMalZIUzhJ aHBtNHB4U1J6SFZUN0F3UkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA76Dqdy11wsQn1UJGb790cKQuIk/0B5Mt71zsN9H/rzkVrN01FiaXU SzhE6pCfhOFGpWacWbfckVEw38EtmFLqjqRBKIezTV5I5sAGcHbMj6qvIX1Fo5ZW QensuP6lAoe+nINHaS3mSHkt7I0ta5MPlB3zrBME+K6chuev9bscRJJ7kjsdU3+X byjT4KGn6pvUfiIVtAZE4MFIx0hDpOgmlIXqdBT7vi1uKj/bTtnXqP8VLef4RX3e Spt6LDvlQyWbHRteC+095tRnFpXAQZU9uIpbN++3sZa7zEGEoVaI+6NzED8MMSIo zLv5CTIZfQHG1Ck1jBGFZm9UYMTvUx+B -----END CERTIFICATE-----Generated at Sun May 19 02:59:04 2024 by rpki-client on console-ams.rpki-client.org