$ rpki-client -vvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft File: yukPRsIh0AstoIB61MSwZQM3Q0Q.mft (raw, json) Hash identifier: W6ix9bBZLAwuxzBjJcG58Zcp2A9/Ahde/Ipq2ZwUG1A= Subject key identifier: 17:E5:29:77:49:71:DC:9A:88:97:4A:77:E9:50:7C:63:7E:49:65:27 Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 Certificate issuer: /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft Manifest number: A3 Signing time: Sat 23 Nov 2024 04:18:15 +0000 Manifest this update: Sat 23 Nov 2024 04:18:14 +0000 Manifest next update: Sat 30 Nov 2024 04:18:14 +0000 Files and hashes: 1: yukPRsIh0AstoIB61MSwZQM3Q0Q.crl (hash: cKXtL7pwJL2WMsM7AhWp40yoqk1ji3siDDcXqpQVlTA=) 2: 40F782C8B4AA11EEB330C137C4F9AE02.roa (hash: 6omCuuVUgdbnOuuOFxfXDIcF+rrSXl7KykbR3GM1b/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Validity Not Before: Nov 23 04:18:14 2024 GMT Not After : Nov 30 04:18:14 2024 GMT Subject: CN=67415786-1dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:76:f7:7b:27:cc:4b:61:7f:5e:6c:9c:41: 03:92:21:64:3a:0c:64:6b:83:50:e6:fa:6f:55:6a: 7f:eb:35:5d:95:9c:49:1f:b0:8c:95:d3:c7:dc:ef: 1c:06:9d:24:94:d9:c2:34:19:98:01:8c:2a:27:b7: 97:a9:86:e1:15:17:d3:7d:91:0f:99:2d:31:bf:b7: 15:f2:80:d1:93:08:5b:32:dc:96:07:c5:41:f6:5a: bd:b3:20:38:5e:07:ce:6b:4b:cf:f7:ea:2a:b8:56: 1a:a9:33:b5:83:83:96:c2:75:95:04:a4:0a:52:84: 8c:2d:de:de:ca:c3:d1:85:e8:22:5f:29:5d:fe:de: 51:74:73:1f:fb:bf:77:31:89:1a:ca:ee:2c:e4:74: 31:6d:19:a0:7f:69:e9:f4:da:45:5a:0e:92:a1:0c: b0:47:f2:08:e7:6c:57:2a:d3:f2:2a:3e:3f:ea:05: 72:0a:de:01:1e:5a:8a:b9:b7:f0:95:62:03:b2:9e: 74:3b:46:5c:c1:d6:2c:6d:7c:36:d0:75:6e:e6:2b: 83:ea:a3:93:b8:5f:d2:e4:68:ae:2b:2e:a8:60:d4: 2f:b6:16:73:7b:1b:d7:b1:1f:b1:20:ae:f3:0e:09: e7:2e:f5:f5:86:78:8c:43:1a:a2:80:ba:8d:0e:c4: b6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E5:29:77:49:71:DC:9A:88:97:4A:77:E9:50:7C:63:7E:49:65:27 X509v3 Authority Key Identifier: keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b6:2b:cf:f0:ec:3f:06:14:d0:e6:05:c7:aa:f7:57:7b:7a: d3:21:49:03:49:1c:ba:d5:ee:66:a1:8a:19:e4:43:37:a3:60: 34:32:09:47:a9:cd:40:0d:1e:68:5e:3e:20:03:62:f4:73:c8: c9:86:fd:01:0a:55:a6:6e:b7:1a:e9:3b:f7:64:ef:42:5a:67: 70:a3:c8:ff:fd:25:fd:2d:8b:ae:13:68:c0:e1:2d:f4:d9:9c: a8:a8:6d:63:25:54:0c:cf:e8:fd:df:58:ee:cb:22:a2:d3:03: fd:e1:99:b0:8c:8a:c3:92:b5:e7:1b:0d:21:f7:25:1c:48:d8: 30:0f:2f:db:e8:32:96:a2:90:6f:29:7b:7a:d5:6e:ee:79:7d: 44:4f:ee:19:e2:cb:60:fd:29:ea:47:25:67:94:9d:32:9e:5e: 58:6b:89:d0:c7:b1:2e:df:28:df:93:ff:5c:76:4c:bf:e7:78: 72:ca:0e:12:02:48:c1:ee:15:46:86:8b:7d:ab:10:c9:d4:f1: a7:5e:8d:b7:19:5e:ab:19:7b:08:59:a9:bf:4f:79:80:3d:c8: ba:b7:3e:82:10:5b:80:91:c2:65:19:28:b2:73:90:f0:18:b2: 26:7e:f7:96:db:f2:db:3f:e4:c9:2c:18:03:6b:96:8a:66:55: 5a:97:c8:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1MjYxMTAvBgNVBAUTKENBRTkwRjQ2QzIyMUQwMEIyREEwODA3QUQ0QzRCMDY1 MDMzNzQzNDQwHhcNMjQxMTIzMDQxODE0WhcNMjQxMTMwMDQxODE0WjAYMRYwFAYD VQQDEw02NzQxNTc4Ni0xZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbh293snzEthf15snEEDkiFkOgxka4NQ5vpvVWp/6zVdlZxJH7CMldPH3O8c Bp0klNnCNBmYAYwqJ7eXqYbhFRfTfZEPmS0xv7cV8oDRkwhbMtyWB8VB9lq9syA4 XgfOa0vP9+oquFYaqTO1g4OWwnWVBKQKUoSMLd7eysPRhegiXyld/t5RdHMf+793 MYkayu4s5HQxbRmgf2np9NpFWg6SoQywR/II52xXKtPyKj4/6gVyCt4BHlqKubfw lWIDsp50O0ZcwdYsbXw20HVu5iuD6qOTuF/S5GiuKy6oYNQvthZzexvXsR+xIK7z DgnnLvX1hniMQxqigLqNDsS2owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBflKXdJ cdyaiJdKd+lQfGN+SWUnMB8GA1UdIwQYMBaAFMrpD0bCIdALLaCAetTEsGUDN0NE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODUyNi9DNEM2RDA0NkI0 NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBBc3RvSUI2MU1Td1pRTTNR MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1a1BSc0loMEFzdG9JQjYxTVN3WlFNM1EwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODUyNi9DNEM2RDA0NkI0NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBB c3RvSUI2MU1Td1pRTTNRMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBetivP8Ow/BhTQ5gXHqvdXe3rTIUkDSRy61e5moYoZ5EM3o2A0MglH qc1ADR5oXj4gA2L0c8jJhv0BClWmbrca6Tv3ZO9CWmdwo8j//SX9LYuuE2jA4S30 2ZyoqG1jJVQMz+j931juyyKi0wP94ZmwjIrDkrXnGw0h9yUcSNgwDy/b6DKWopBv KXt61W7ueX1ET+4Z4stg/SnqRyVnlJ0ynl5Ya4nQx7Eu3yjfk/9cdky/53hyyg4S AkjB7hVGhot9qxDJ1PGnXo23GV6rGXsIWam/T3mAPci6tz6CEFuAkcJlGSiyc5Dw GLImfveW2/LbP+TJLBgDa5aKZlVal8hv -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org