$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft File: yoPUPlpeWcd1mxubL72YqUff07w.mft (raw, json) Hash identifier: j0x4tT+tyV06gim6HWFUvSunGxWS6gWcvqlLLuPenAE= Subject key identifier: B1:B5:EC:6B:FF:C7:73:47:26:2B:AA:62:D0:B6:19:D8:E4:86:DE:1D Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC Certificate issuer: /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC Certificate serial: 0FCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft Manifest number: 0FA5 Signing time: Sat 18 May 2024 18:08:10 +0000 Manifest this update: Sat 18 May 2024 18:08:09 +0000 Manifest next update: Sat 25 May 2024 18:08:09 +0000 Files and hashes: 1: yoPUPlpeWcd1mxubL72YqUff07w.crl (hash: Zp+RQl1yL6ASpAC5BfkO+pvCyC6UobRwoVU4sYIGrM8=) 2: 7B306A34218D11EC87C96D6DC4F9AE02.roa (hash: SH4ht9mpJYf8cKX0vcP54ZxApzU7aueABR3AMhEMgD4=) 3: AAAA30A6288411EEAD22D65DC4F9AE02.roa (hash: KVKT+SoOIIvbwFg98zKGLvjWKODI79GfngUhLoZVXBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4046 (0xfce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC Validity Not Before: May 18 18:08:09 2024 GMT Not After : May 25 18:08:09 2024 GMT Subject: CN=6648ee89-7438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:28:f3:72:a2:f4:2c:f3:d7:15:a2:08:64: 57:81:20:92:e1:71:fc:ef:b7:1b:57:53:a5:03:4b: 1d:e3:a4:af:67:df:51:78:a3:1d:a7:f8:9e:1e:14: 21:e9:80:db:9f:63:16:0f:f2:99:f2:35:91:ab:79: d2:d4:84:a2:17:8c:dd:ae:6f:37:bf:1d:d6:39:ba: 28:bc:fc:b4:e0:ab:29:70:a8:bc:18:5b:68:9c:0f: a9:97:72:1f:d9:af:2a:1a:ca:be:49:0c:68:cb:34: af:78:ff:f3:ae:25:31:1f:85:bd:a2:69:2f:d3:98: db:16:d0:59:b0:1e:2f:8e:18:ff:58:63:2b:4e:3e: 31:cb:af:bd:12:4e:ea:dc:3f:ea:5f:7d:ca:fa:32: 39:5e:a4:07:d3:6a:5b:79:d3:ed:95:93:31:9d:7e: 7f:86:dd:1e:80:eb:4f:db:07:2c:02:58:29:d1:6e: f7:dc:06:e0:d2:36:4f:6a:0f:f6:55:36:f4:bf:80: 2d:79:a4:4a:d8:0e:4c:b5:03:38:0d:99:c3:ce:37: 3a:20:12:51:b3:a2:b9:65:d7:37:5f:02:c4:a5:93: 9a:d4:25:d5:ee:cf:48:9e:db:d3:0c:e9:18:2d:cc: 5a:50:4e:bb:f9:7c:20:0c:bd:5e:4a:10:63:72:f7: 10:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B5:EC:6B:FF:C7:73:47:26:2B:AA:62:D0:B6:19:D8:E4:86:DE:1D X509v3 Authority Key Identifier: keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d3:eb:00:38:25:f8:75:a0:49:96:06:0c:3c:19:c8:1d:74: 22:f6:c9:eb:91:4b:d3:1c:11:0d:28:0a:53:e7:d2:4e:fd:59: 72:c5:7d:9f:a6:6a:9d:d7:13:f0:e0:70:c5:28:a4:a7:35:44: 83:41:9a:70:ad:76:f7:26:75:22:59:a1:e8:84:c8:cd:ae:9c: a9:9d:e9:17:cf:b5:21:a0:f1:8c:3c:7a:e7:7f:09:8a:58:00: e5:eb:a2:f6:75:76:b2:61:a4:90:c3:62:3a:e8:94:36:5a:e9: ab:92:5e:54:ce:17:f9:85:ae:a1:e1:00:e2:7a:6c:8c:b4:92: c1:82:43:9e:b3:b6:9d:44:66:06:55:0c:ea:dc:aa:eb:aa:1d: a8:91:d9:2a:25:80:16:72:b0:c6:22:e5:a0:a6:09:14:34:03: 97:a3:4c:f4:a2:18:73:0f:43:e2:24:71:10:db:98:1d:a6:a5: c2:dd:04:65:51:eb:66:de:27:9f:fb:4d:fd:5d:70:2e:c3:2b: f0:92:10:52:37:f0:68:91:15:65:78:f2:fa:a6:89:f2:97:ca: 90:1a:6c:cb:78:27:2f:98:ab:5a:e9:88:c2:ee:ca:76:72:24: 8d:c9:1e:f5:83:85:ed:d6:97:79:5a:94:70:79:48:c2:8e:07: ba:c1:b0:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKENBODNENDNFNUE1RTU5Qzc3NTlCMUI5QjJGQkQ5OEE5 NDdERkQzQkMwHhcNMjQwNTE4MTgwODA5WhcNMjQwNTI1MTgwODA5WjAYMRYwFAYD VQQDEw02NjQ4ZWU4OS03NDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfEo83Ki9Czz1xWiCGRXgSCS4XH877cbV1OlA0sd46SvZ99ReKMdp/ieHhQh 6YDbn2MWD/KZ8jWRq3nS1ISiF4zdrm83vx3WOboovPy04KspcKi8GFtonA+pl3If 2a8qGsq+SQxoyzSveP/zriUxH4W9omkv05jbFtBZsB4vjhj/WGMrTj4xy6+9Ek7q 3D/qX33K+jI5XqQH02pbedPtlZMxnX5/ht0egOtP2wcsAlgp0W733Abg0jZPag/2 VTb0v4AteaRK2A5MtQM4DZnDzjc6IBJRs6K5Zdc3XwLEpZOa1CXV7s9IntvTDOkY LcxaUE67+XwgDL1eShBjcvcQywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLG17Gv/ x3NHJiuqYtC2Gdjkht4dMB8GA1UdIwQYMBaAFMqD1D5aXlnHdZsbmy+9mKlH39O8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9ERjM4OTU1RTNC MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi95b1BVUGxwZVdjZDFteHViTDcyWXFVZmYw N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvUFVQbHBlV2NkMW14dWJMNzJZcVVmZjA3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9ERjM4OTU1RTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi95b1BVUGxwZVdj ZDFteHViTDcyWXFVZmYwN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt0+sAOCX4daBJlgYMPBnIHXQi9snrkUvTHBENKApT59JO/VlyxX2f pmqd1xPw4HDFKKSnNUSDQZpwrXb3JnUiWaHohMjNrpypnekXz7UhoPGMPHrnfwmK WADl66L2dXayYaSQw2I66JQ2Wumrkl5Uzhf5ha6h4QDiemyMtJLBgkOes7adRGYG VQzq3Krrqh2okdkqJYAWcrDGIuWgpgkUNAOXo0z0ohhzD0PiJHEQ25gdpqXC3QRl Uetm3ief+039XXAuwyvwkhBSN/BokRVlePL6ponyl8qQGmzLeCcvmKta6YjC7sp2 ciSNyR71g4Xt1pd5WpRweUjCjge6wbAS -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org