$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft File: Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft (raw, json) Hash identifier: tZecAdXdXZ7AxsHIiKexrLQbpdtOQzeIclhYMzhoa3A= Subject key identifier: A8:F0:80:4E:7A:48:63:66:88:86:B5:07:03:95:05:6D:C3:43:E1:92 Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 Certificate issuer: /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft Manifest number: 6A Signing time: Sun 19 May 2024 07:33:16 +0000 Manifest this update: Sun 19 May 2024 07:33:16 +0000 Manifest next update: Sun 26 May 2024 07:33:16 +0000 Files and hashes: 1: Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl (hash: 7Fwu8vsyseI0IgqE/IeFn1HVpaL9W51W0gmBl15t3Mw=) 2: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (hash: dKc3+c2DnAo+e3S1Hl96MujeqaUzGrL+oSl1CV5Ag0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Validity Not Before: May 19 07:33:16 2024 GMT Not After : May 26 07:33:16 2024 GMT Subject: CN=6649ab3c-3d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:10:f5:79:a1:5b:94:34:e8:63:35:8a:db:55: 3b:9d:91:20:0b:3a:ba:5f:ce:9b:ea:a3:5a:bd:2c: 7a:06:5b:3c:d6:79:e2:9d:61:21:21:8f:91:4f:67: 95:3a:f4:b1:2f:37:81:f1:4c:86:f3:c5:be:24:8e: 7d:79:68:a0:0b:42:c9:e1:e2:41:d8:27:88:04:fe: a3:c0:71:e5:cf:a7:74:b1:8b:25:6b:38:9a:db:ad: d0:3f:f5:85:e7:02:d5:a5:9a:ef:bf:4b:fd:21:25: b9:cc:9b:07:0b:7e:66:d5:b9:29:de:6d:17:62:7a: 0f:88:d1:1a:25:cc:74:36:ac:78:e2:9b:a8:a6:b1: 78:fa:42:88:ca:b0:c8:89:1f:2a:a8:12:d3:c1:73: 25:aa:7f:00:6a:e2:53:1f:d3:e9:e2:2a:44:fa:c2: be:55:e6:97:74:30:13:b4:8e:f4:71:15:ea:68:34: 14:d4:a7:22:82:01:07:26:c3:40:b6:06:28:49:8f: 9b:0c:1a:6a:7f:37:c0:b5:e0:e2:8f:18:e8:9e:23: a7:63:53:08:85:6b:10:c0:fa:2b:0d:c7:92:98:da: 44:cd:d6:f9:be:48:ec:51:79:45:09:6e:bb:a2:43: 48:99:b5:9b:df:1a:60:f1:31:11:cf:f5:04:d2:5b: 68:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F0:80:4E:7A:48:63:66:88:86:B5:07:03:95:05:6D:C3:43:E1:92 X509v3 Authority Key Identifier: keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:7d:53:c7:35:16:70:7b:cd:91:5f:a3:52:63:fb:86:23:7e: 5b:c9:79:ea:45:0c:1d:95:fe:ba:53:f8:e7:e2:a6:3f:37:42: 4c:5a:4d:11:a2:af:0c:1f:f4:93:be:a4:aa:c3:92:56:0f:3e: 17:5a:65:06:c3:81:49:7a:50:d9:fb:e9:63:1b:1e:d2:e1:cc: 47:2d:c4:f7:a1:2b:3c:7a:37:fc:2d:56:bb:ac:45:f3:09:35: 38:5b:1c:f4:e6:50:34:ad:7a:56:8a:21:e3:32:78:e5:98:0f: ba:b1:e7:f9:50:cd:fc:08:05:48:5f:6d:e2:d9:dd:7f:9d:83: 6a:aa:2c:7b:d7:81:d0:6e:8b:26:8d:54:d5:13:08:9a:ee:60: 41:74:7d:d1:77:06:2b:a2:6b:cc:40:2d:b7:5d:d3:77:4d:c1: 4b:e6:33:88:54:a8:6b:a5:4b:c2:dd:87:23:d1:42:ed:59:27: 96:9b:f8:41:73:df:4a:e3:53:fb:ea:05:2d:4a:20:f2:d1:d0: c3:ee:f1:b0:8b:56:b5:e8:92:72:11:af:cc:e5:2a:69:29:cb: 95:89:91:e5:a6:da:81:ad:d1:b9:84:ce:31:c3:09:bd:ae:5c: 3d:75:b8:e6:84:a6:9e:16:e0:a6:c0:b8:e1:bc:08:1b:d5:2a: 1e:89:6c:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkI3MDExMC8GA1UEBRMoNjIyRTc2NjJEOUZCRTEwQzFBQUUwQkRGRTk4OERCOTk2 QUUzRkQ1OTAeFw0yNDA1MTkwNzMzMTZaFw0yNDA1MjYwNzMzMTZaMBgxFjAUBgNV BAMTDTY2NDlhYjNjLTNkMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSEPV5oVuUNOhjNYrbVTudkSALOrpfzpvqo1q9LHoGWzzWeeKdYSEhj5FPZ5U6 9LEvN4HxTIbzxb4kjn15aKALQsnh4kHYJ4gE/qPAceXPp3SxiyVrOJrbrdA/9YXn AtWlmu+/S/0hJbnMmwcLfmbVuSnebRdieg+I0RolzHQ2rHjim6imsXj6QojKsMiJ HyqoEtPBcyWqfwBq4lMf0+niKkT6wr5V5pd0MBO0jvRxFepoNBTUpyKCAQcmw0C2 BihJj5sMGmp/N8C14OKPGOieI6djUwiFaxDA+isNx5KY2kTN1vm+SOxReUUJbrui Q0iZtZvfGmDxMRHP9QTSW2hTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqPCATnpI Y2aIhrUHA5UFbcND4ZIwHwYDVR0jBBgwFoAUYi52Ytn74Qwargvf6YjbmWrj/Vkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyQjcwL0NDQjQ1NEE0NzNB OTExRUU4NDUyN0YyRUM0RjlBRTAyL1lpNTJZdG43NFF3YXJndmY2WWpibVdyal9W ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWk1Mll0bjc0UXdhcmd2ZjZZamJtV3JqX1ZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy QjcwL0NDQjQ1NEE0NzNBOTExRUU4NDUyN0YyRUM0RjlBRTAyL1lpNTJZdG43NFF3 YXJndmY2WWpibVdyal9Way5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAV9U8c1FnB7zZFfo1Jj+4YjflvJeepFDB2V/rpT+Ofipj83QkxaTRGi rwwf9JO+pKrDklYPPhdaZQbDgUl6UNn76WMbHtLhzEctxPehKzx6N/wtVrusRfMJ NThbHPTmUDStelaKIeMyeOWYD7qx5/lQzfwIBUhfbeLZ3X+dg2qqLHvXgdBuiyaN VNUTCJruYEF0fdF3Biuia8xALbdd03dNwUvmM4hUqGulS8LdhyPRQu1ZJ5ab+EFz 30rjU/vqBS1KIPLR0MPu8bCLVrXoknIRr8zlKmkpy5WJkeWm2oGt0bmEzjHDCb2u XD11uOaEpp4W4KbAuOG8CBvVKh6JbH0= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org