$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft File: Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json) Hash identifier: BWr+sad5KOwdvxsehpapbhNturlfU6HN5jUYxx1MT9Y= Subject key identifier: CE:3D:5B:3E:5D:C2:30:96:4C:A5:41:21:CE:DB:2E:2B:F7:E0:B1:FD Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 Certificate issuer: /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Certificate serial: 0318 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft Manifest number: 0314 Signing time: Fri 31 May 2024 03:44:35 +0000 Manifest this update: Fri 31 May 2024 03:44:35 +0000 Manifest next update: Fri 07 Jun 2024 03:44:35 +0000 Files and hashes: 1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: TvKA6XDqGwX15azv+WvgBbfHX8XlDbMYL+HQAEO7lZc=) 2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: DMjc7YHOd4HbtoNtunrW+QIJNydNWPoTGiKSwQ+/yhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 792 (0x318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Validity Not Before: May 31 03:44:35 2024 GMT Not After : Jun 7 03:44:35 2024 GMT Subject: CN=665947a3-60b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c4:82:fc:f6:40:21:56:a4:fe:67:86:06:a8: b2:9e:f2:ef:fb:2f:4d:a7:18:f1:f1:1e:09:2b:aa: 3b:6d:7d:45:dd:a7:23:ef:98:d2:0c:71:e3:c0:69: a8:1e:39:8c:5c:43:08:0c:2a:d2:e8:3b:7a:c4:2d: fb:be:50:02:2b:6f:85:70:ae:8f:cb:53:a5:3f:8a: 15:36:d0:6f:8e:7e:b9:ce:ad:b5:4d:2a:22:2f:96: bc:47:7b:64:fa:e6:35:49:84:3e:aa:09:10:08:16: c8:b4:db:b4:74:75:aa:54:49:f8:db:b3:d3:a9:26: 09:88:7d:f7:08:04:d0:fb:ba:64:72:84:13:45:6c: c3:4e:21:54:42:9c:84:96:28:61:78:fd:f6:05:79: 9f:7d:ed:27:45:4f:9b:bf:ba:a1:fa:03:c8:32:b5: 23:d9:15:0d:2b:8c:6a:48:3c:86:a7:be:f3:7f:90: 5b:7f:83:af:ef:7e:0c:29:88:2e:eb:2a:62:61:03: 4c:53:22:b4:5a:d5:05:27:47:51:1c:45:cc:5b:9a: f6:e3:2b:eb:65:17:cd:8b:3a:86:a5:86:b3:be:13: 65:40:49:72:f3:71:4c:97:c9:d8:bd:6e:3f:e8:5f: a9:cf:63:3a:df:de:61:db:3c:16:59:57:99:06:a8: 15:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3D:5B:3E:5D:C2:30:96:4C:A5:41:21:CE:DB:2E:2B:F7:E0:B1:FD X509v3 Authority Key Identifier: keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:18:c0:ce:c1:eb:f2:5b:ac:44:04:81:8b:61:89:12:03:a3: 7e:58:69:8e:4d:90:68:08:7f:2e:57:24:a0:f3:12:3a:9e:48: ee:6f:d5:45:fc:7e:87:b6:fc:3e:0f:e9:93:6e:83:1c:c4:a4: 2f:9a:02:cf:ad:22:cb:ae:c5:74:86:bb:1b:2b:87:38:59:4f: 22:dd:d1:6b:72:c7:a9:d7:b9:92:75:d1:06:34:af:e5:b0:3b: fa:a5:b4:82:20:8a:47:ee:24:ab:10:d6:22:47:a1:b2:d7:96: 99:30:a8:2f:19:97:96:4b:fd:46:95:bd:8c:f5:08:e0:aa:e9: 47:ed:19:a8:ad:9b:7c:74:d6:dc:67:c7:db:83:f3:dd:2f:3f: 37:55:b2:cb:bf:9b:83:ff:48:7c:91:a8:02:ce:54:ce:37:b1: 15:20:1e:cf:39:18:15:17:0e:60:c3:79:3d:ec:e7:f8:33:c8: b8:5f:39:d3:44:85:cb:e9:ae:2d:a3:9b:51:78:aa:72:12:93: 27:bd:be:29:2d:c6:52:a6:b0:3b:7b:34:74:23:fd:fe:2f:d5: de:72:90:ac:46:e1:08:96:a2:f8:8a:ac:3d:7b:2f:9a:35:7a: 68:5b:12:5d:e4:15:43:79:6e:fb:2c:d1:be:bd:5d:67:d9:5b: f5:9c:a7:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NTUxMTAvBgNVBAUTKDYyMzZCNkM5NTcwNTQ0MjZBOTRDRTZBNjk0MzIzOEU2 RkU2RDFGNTYwHhcNMjQwNTMxMDM0NDM1WhcNMjQwNjA3MDM0NDM1WjAYMRYwFAYD VQQDEw02NjU5NDdhMy02MGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8SC/PZAIVak/meGBqiynvLv+y9Npxjx8R4JK6o7bX1F3acj75jSDHHjwGmo HjmMXEMIDCrS6Dt6xC37vlACK2+FcK6Py1OlP4oVNtBvjn65zq21TSoiL5a8R3tk +uY1SYQ+qgkQCBbItNu0dHWqVEn427PTqSYJiH33CATQ+7pkcoQTRWzDTiFUQpyE lihheP32BXmffe0nRU+bv7qh+gPIMrUj2RUNK4xqSDyGp77zf5Bbf4Ov734MKYgu 6ypiYQNMUyK0WtUFJ0dRHEXMW5r24yvrZRfNizqGpYazvhNlQEly83FMl8nYvW4/ 6F+pz2M6395h2zwWWVeZBqgVvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM49Wz5d wjCWTKVBIc7bLiv34LH9MB8GA1UdIwQYMBaAFGI2tslXBUQmqUzmppQyOOb+bR9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY1NS9FN0JBQTBCRTg3 QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJDYXBUT2FtbERJNDV2NXRI MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lqYTJ5VmNGUkNhcFRPYW1sREk0NXY1dEgxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY1NS9FN0JBQTBCRTg3QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJD YXBUT2FtbERJNDV2NXRIMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIGMDOwevyW6xEBIGLYYkSA6N+WGmOTZBoCH8uVySg8xI6nkjub9VF /H6Htvw+D+mTboMcxKQvmgLPrSLLrsV0hrsbK4c4WU8i3dFrcsep17mSddEGNK/l sDv6pbSCIIpH7iSrENYiR6Gy15aZMKgvGZeWS/1Glb2M9QjgqulH7RmorZt8dNbc Z8fbg/PdLz83VbLLv5uD/0h8kagCzlTON7EVIB7PORgVFw5gw3k97Of4M8i4XznT RIXL6a4to5tReKpyEpMnvb4pLcZSprA7ezR0I/3+L9XecpCsRuEIlqL4iqw9ey+a NXpoWxJd5BVDeW77LNG+vV1n2Vv1nKcQ -----END CERTIFICATE-----Generated at Fri May 31 04:53:58 2024 by rpki-client on console-fra.rpki-client.org