$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft File: YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json) Hash identifier: xwqh14Ssd3Cf7iGYRVk59QkBbH4Ak7L7iUVtBd7n0sQ= Subject key identifier: 20:4B:4D:CE:F1:72:93:67:29:CD:9A:6C:EA:E5:CE:A7:72:14:8F:CB Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 Certificate issuer: /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Certificate serial: 08FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft Manifest number: 08F5 Signing time: Sat 18 May 2024 21:17:54 +0000 Manifest this update: Sat 18 May 2024 21:17:54 +0000 Manifest next update: Sat 25 May 2024 21:17:54 +0000 Files and hashes: 1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: 2AHyHyCjAnIYuU568WXZzSNULhcJGIQCfhARunkErvE=) 2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: atQ52lsTxZasOxqKolWrRots3HMHTfhpCYR06cscie8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2298 (0x8fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Validity Not Before: May 18 21:17:54 2024 GMT Not After : May 25 21:17:54 2024 GMT Subject: CN=66491b02-5093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7d:09:24:be:b3:75:41:6e:be:1e:b6:6a:d0: ab:f2:20:21:d2:61:eb:dc:e9:82:f2:af:53:6b:bc: d1:67:89:e3:80:cd:4b:25:c8:c1:8b:b2:5c:31:b1: e4:27:68:c2:82:8c:07:f5:3d:af:3c:d3:f6:bb:90: 16:7b:63:7d:54:94:26:48:4e:bd:03:18:72:8b:5c: c3:17:9e:e9:b3:a9:fb:88:8a:d6:0a:7e:ba:de:2f: d5:49:6d:10:e6:49:c6:a6:86:e1:3e:bc:94:96:cc: 91:29:27:1a:a6:05:f5:7a:48:00:12:16:5e:15:ac: 34:94:92:d7:21:e7:a5:3e:73:ee:7b:f8:fb:d7:a0: b8:1e:15:aa:4e:a6:e5:3d:df:9b:ee:fb:8a:44:4c: 47:84:d6:51:b1:37:dd:3c:4a:fb:b1:9f:ca:2e:c0: c8:3c:17:f4:6b:31:9a:e7:58:10:ec:b1:61:46:d2: be:b9:3d:e3:88:2c:e7:46:a1:aa:b0:9a:2d:89:9f: 56:46:01:5d:a5:a3:3d:4a:62:18:9c:d7:6b:a7:23: a1:d7:dd:ac:66:ea:f8:a8:97:bf:8a:0b:ec:23:37: e2:f1:75:cf:3e:f5:19:14:71:7a:de:35:32:ab:5a: 89:e6:9a:bc:33:39:23:7a:4a:4f:5b:00:b1:2c:29: 44:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4B:4D:CE:F1:72:93:67:29:CD:9A:6C:EA:E5:CE:A7:72:14:8F:CB X509v3 Authority Key Identifier: keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:71:03:98:b3:05:24:61:89:6a:43:45:11:88:1c:f6:4d:98: 38:f9:1f:f9:0b:59:76:06:4d:20:17:5e:ca:16:50:51:ce:3a: 4f:76:00:25:16:fd:a5:e9:98:3b:c6:a2:08:ab:b0:81:8b:5d: 00:b4:82:33:74:42:97:e0:7b:77:aa:58:3e:52:40:c3:6a:4e: 0b:63:1b:d8:2a:c8:df:25:de:96:c0:52:1e:68:57:76:99:8c: 71:dc:d1:3f:a4:a8:ab:04:d5:52:6b:ff:c3:21:a2:17:3b:8d: ac:d8:76:10:61:ab:9b:01:92:39:c0:5e:0c:e9:ee:e9:1e:6a: 29:52:e2:11:6f:06:bf:e4:3c:ca:6d:66:49:8c:ab:ec:52:10: a4:2b:03:08:a7:5f:9a:9a:4f:73:d3:39:cd:f8:47:c0:30:73: 9a:b7:d6:bf:7b:74:84:58:ad:63:c2:30:77:69:29:e4:1a:0e: 76:e8:45:a9:9d:c3:e5:05:bd:c8:86:f0:be:ea:54:56:d5:77: b5:83:9e:95:85:d7:a8:f9:0d:76:f9:dc:2b:db:38:60:c9:6b: 2f:2d:0a:70:64:51:77:5d:cc:fd:65:bf:3a:c3:13:5c:b7:89: 62:0b:f2:4f:57:d8:de:be:47:8a:8b:e7:e8:93:4e:7d:bf:06: 4f:dd:d5:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0ODgxMTAvBgNVBAUTKDYwNzZDNTEzOUQ0Q0NGREVCQ0E0NEExNEJEQjczMTY4 ODhGQTYzNDQwHhcNMjQwNTE4MjExNzU0WhcNMjQwNTI1MjExNzU0WjAYMRYwFAYD VQQDEw02NjQ5MWIwMi01MDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtX0JJL6zdUFuvh62atCr8iAh0mHr3OmC8q9Ta7zRZ4njgM1LJcjBi7JcMbHk J2jCgowH9T2vPNP2u5AWe2N9VJQmSE69Axhyi1zDF57ps6n7iIrWCn663i/VSW0Q 5knGpobhPryUlsyRKScapgX1ekgAEhZeFaw0lJLXIeelPnPue/j716C4HhWqTqbl Pd+b7vuKRExHhNZRsTfdPEr7sZ/KLsDIPBf0azGa51gQ7LFhRtK+uT3jiCznRqGq sJotiZ9WRgFdpaM9SmIYnNdrpyOh192sZur4qJe/igvsIzfi8XXPPvUZFHF63jUy q1qJ5pq8MzkjekpPWwCxLClE2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBLTc7x cpNnKc2abOrlzqdyFI/LMB8GA1UdIwQYMBaAFGB2xROdTM/evKRKFL23MWiI+mNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ4OC81RDI2ODM0QTgz OEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5NjhwRW9VdmJjeGFJajZZ MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYkZFNTFNejk2OHBFb1V2YmN4YUlqNlkwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ4OC81RDI2ODM0QTgzOEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5 NjhwRW9VdmJjeGFJajZZMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGcQOYswUkYYlqQ0URiBz2TZg4+R/5C1l2Bk0gF17KFlBRzjpPdgAl Fv2l6Zg7xqIIq7CBi10AtIIzdEKX4Ht3qlg+UkDDak4LYxvYKsjfJd6WwFIeaFd2 mYxx3NE/pKirBNVSa//DIaIXO42s2HYQYaubAZI5wF4M6e7pHmopUuIRbwa/5DzK bWZJjKvsUhCkKwMIp1+amk9z0znN+EfAMHOat9a/e3SEWK1jwjB3aSnkGg526EWp ncPlBb3IhvC+6lRW1Xe1g56Vhdeo+Q12+dwr2zhgyWsvLQpwZFF3Xcz9Zb86wxNc t4liC/JPV9jevkeKi+fok059vwZP3dUK -----END CERTIFICATE-----Generated at Sat May 18 22:27:54 2024 by rpki-client on console-ams.rpki-client.org