$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft File: yUoDUOcJ9WwjluMLRwyLXh37FwA.mft (raw, json) Hash identifier: 3sjWBh8MkMq95AqHMsF3YmtmOM3wN8seBPRf012N0vk= Subject key identifier: 90:A1:5E:E0:A0:F4:17:28:7C:4F:01:09:85:62:68:3E:84:69:97:0A Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 Certificate issuer: /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Certificate serial: 13B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft Manifest number: 13B8 Signing time: Fri 31 May 2024 17:45:26 +0000 Manifest this update: Fri 31 May 2024 17:45:25 +0000 Manifest next update: Fri 07 Jun 2024 17:45:25 +0000 Files and hashes: 1: yUoDUOcJ9WwjluMLRwyLXh37FwA.crl (hash: Ay9VKQI5+hrkfwyAsWoJhKsp0Wozx1x6Ex5O812KfF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5048 (0x13b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Validity Not Before: May 31 17:45:25 2024 GMT Not After : Jun 7 17:45:25 2024 GMT Subject: CN=665a0cb5-282c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6a:c6:f4:89:1c:65:34:e1:84:68:63:53:df: 8a:0c:e6:04:e3:58:5a:19:81:4b:73:ef:59:69:b2: c0:7d:4b:90:ce:c6:25:54:db:bf:86:3a:22:ad:c7: e0:1f:d1:67:09:b7:ae:ad:b2:fd:13:86:3e:53:56: ab:3f:da:1e:5f:a0:5e:b9:af:a7:b6:37:42:23:9c: bb:ca:ef:a1:bb:be:9b:6d:7a:9c:b6:b2:b7:c0:86: 5c:75:8f:4b:2a:51:be:a5:14:4d:11:3a:9b:fc:c3: dd:57:73:78:1c:87:27:ac:d1:bc:47:81:fe:5f:42: d3:75:58:90:b2:2f:90:4d:a9:00:9c:e0:46:dd:56: eb:2c:fc:5e:cc:b3:f4:99:b8:55:eb:b1:41:9f:5a: d6:b2:a8:26:99:17:27:ec:72:21:64:9c:95:4d:80: d3:1a:c6:7a:ac:50:e0:00:07:2d:1e:29:9e:ce:7d: d7:28:36:14:9f:2c:11:d5:e2:77:e1:6d:74:66:05: ed:7f:2d:5b:37:84:ec:6b:3e:02:c4:be:36:76:a6: b6:d8:0f:55:2a:94:75:cc:44:18:93:cb:f6:ae:df: 91:e9:a0:43:de:6e:17:5c:4c:10:97:af:a9:cd:b2: c4:b7:6c:72:48:3b:61:58:e5:f6:1f:23:15:d2:de: 35:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A1:5E:E0:A0:F4:17:28:7C:4F:01:09:85:62:68:3E:84:69:97:0A X509v3 Authority Key Identifier: keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:19:9c:78:2e:05:97:1d:3e:65:e2:87:75:7a:1a:78:8c:81: 4a:d9:f5:fa:68:e3:d1:87:4d:0a:30:41:93:ec:91:b5:de:f2: 89:f5:07:79:34:06:b6:83:f6:22:cc:34:d7:bb:5d:d2:04:4e: 18:a7:06:94:96:f0:a1:69:9a:e1:ba:f2:69:76:3b:e9:aa:2f: 10:9e:7f:4d:66:f3:37:d5:cd:79:81:39:3c:6a:5b:97:13:70: 87:c5:f3:85:49:00:9e:b8:02:97:5c:ff:78:1e:f9:fc:8a:95: 3e:2b:2f:8f:01:5d:cc:9d:c8:11:2d:f1:ef:9a:0a:34:16:3f: 8b:bd:85:17:09:d6:47:03:d6:2c:d8:69:23:4c:1a:70:a2:40: 65:0f:45:ef:6f:60:6a:d6:17:29:11:95:21:e9:3a:19:de:7c: 39:09:1f:f7:2e:31:4a:35:c9:53:cd:94:fd:fd:98:a2:2e:df: 20:35:39:f0:9b:de:4e:50:a4:7c:42:da:94:f0:c9:f6:40:f3: de:39:46:1a:96:9e:8b:58:3d:da:9a:78:0c:b4:2d:d8:bc:a4: 00:bd:ef:33:f8:12:bf:79:10:9f:4b:53:37:01:85:8c:51:26: 84:1b:79:5e:f9:58:4e:e5:f5:87:9a:0a:9f:37:63:d5:09:75: ef:73:6e:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEM5NEEwMzUwRTcwOUY1NkMyMzk2RTMwQjQ3MEM4QjVF MURGQjE3MDAwHhcNMjQwNTMxMTc0NTI1WhcNMjQwNjA3MTc0NTI1WjAYMRYwFAYD VQQDEw02NjVhMGNiNS0yODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWrG9IkcZTThhGhjU9+KDOYE41haGYFLc+9ZabLAfUuQzsYlVNu/hjoircfg H9FnCbeurbL9E4Y+U1arP9oeX6Beua+ntjdCI5y7yu+hu76bbXqctrK3wIZcdY9L KlG+pRRNETqb/MPdV3N4HIcnrNG8R4H+X0LTdViQsi+QTakAnOBG3VbrLPxezLP0 mbhV67FBn1rWsqgmmRcn7HIhZJyVTYDTGsZ6rFDgAActHimezn3XKDYUnywR1eJ3 4W10ZgXtfy1bN4Tsaz4CxL42dqa22A9VKpR1zEQYk8v2rt+R6aBD3m4XXEwQl6+p zbLEt2xySDthWOX2HyMV0t41FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJChXuCg 9BcofE8BCYViaD6EaZcKMB8GA1UdIwQYMBaAFMlKA1DnCfVsI5bjC0cMi14d+xcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8wMjMyODM0ODY3 Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlXd2psdU1MUnd5TFhoMzdG d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVb0RVT2NKOVd3amx1TUxSd3lMWGgzN0Z3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8wMjMyODM0ODY3Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlX d2psdU1MUnd5TFhoMzdGd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrGZx4LgWXHT5l4od1ehp4jIFK2fX6aOPRh00KMEGT7JG13vKJ9Qd5 NAa2g/YizDTXu13SBE4YpwaUlvChaZrhuvJpdjvpqi8Qnn9NZvM31c15gTk8aluX E3CHxfOFSQCeuAKXXP94Hvn8ipU+Ky+PAV3MncgRLfHvmgo0Fj+LvYUXCdZHA9Ys 2GkjTBpwokBlD0Xvb2Bq1hcpEZUh6ToZ3nw5CR/3LjFKNclTzZT9/ZiiLt8gNTnw m95OUKR8QtqU8Mn2QPPeOUYalp6LWD3amngMtC3YvKQAve8z+BK/eRCfS1M3AYWM USaEG3le+VhO5fWHmgqfN2PVCXXvc27A -----END CERTIFICATE-----Generated at Fri May 31 20:34:01 2024 by rpki-client on console-ams.rpki-client.org