$ rpki-client -vvf rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft File: YJezTWdAEygGKfiFypA_1pq5W-M.mft (raw, json) Hash identifier: 4tFblEGhgrgQPAWQYxjDHU66MTXw5EZUZhgGgGm4q3U= Subject key identifier: AE:A2:22:62:91:B6:A5:16:3C:D7:F8:9F:BA:10:56:68:77:D4:48:39 Authority key identifier: 60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 Certificate issuer: /CN=A915E742/serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Certificate serial: 33E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft Manifest number: 33D2 Signing time: Sat 18 May 2024 14:27:17 +0000 Manifest this update: Sat 18 May 2024 14:27:17 +0000 Manifest next update: Sat 25 May 2024 14:27:17 +0000 Files and hashes: 1: YJezTWdAEygGKfiFypA_1pq5W-M.crl (hash: 1/FHzNb5fKXRfo0jrq6eRP3E8WWtzdiKFVVgqt7B1cQ=) 2: 41DE51D0DF3E11EEBE02E04AC4F9AE02.roa (hash: ueYyeZ2pi717t+vGmYWm0p+iWj5IZG0KkeMS3Qnacwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13283 (0x33e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E742/serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Validity Not Before: May 18 14:27:17 2024 GMT Not After : May 25 14:27:17 2024 GMT Subject: CN=6648bac5-e38f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ee:ec:84:d1:2f:95:68:99:25:a8:b9:31:09: ed:20:ae:d1:65:76:e6:70:1b:74:e9:92:91:b9:72: 05:e5:3a:34:39:b3:f8:f9:2f:63:34:3f:62:c4:95: 1a:02:84:1f:2b:60:97:5d:c5:0f:3a:0f:b7:35:c3: 1c:70:0e:ec:4b:31:04:60:c5:9b:1d:9e:ea:e5:16: 7e:21:c8:6f:2d:ab:98:c3:ff:50:8a:1d:f7:cc:de: 08:bd:45:83:29:0b:57:1c:a0:14:51:fb:e3:1e:76: 4f:76:36:66:06:30:b6:66:47:f3:c6:1a:aa:32:fb: 0d:f6:5c:35:58:f0:39:17:15:10:92:08:b2:d3:bb: d8:56:c9:87:2a:ec:26:d1:4f:71:c3:82:77:c9:a6: 9c:6a:65:1f:4b:13:ca:46:48:54:59:12:66:ec:db: 3d:63:ee:da:73:b6:fa:8d:ee:77:cf:8e:07:03:dc: c8:8a:f8:0d:0e:27:84:26:8c:dc:b7:d0:77:38:32: 0b:06:b4:11:9e:68:84:20:64:96:e5:74:58:98:a7: cb:62:d3:76:49:2f:18:98:35:5d:54:97:23:8c:42: 56:96:39:6c:66:fd:93:35:e7:f1:25:74:e0:01:d4: 67:90:83:bd:ac:6a:10:cb:22:ec:dc:9a:7a:f6:af: c1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A2:22:62:91:B6:A5:16:3C:D7:F8:9F:BA:10:56:68:77:D4:48:39 X509v3 Authority Key Identifier: keyid:60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:2d:63:c9:b8:46:b6:04:ab:b7:b9:9f:a6:a4:28:3f:7c:8e: 69:fb:5e:fc:19:5b:fe:71:2a:9c:9a:ab:d1:99:72:b5:d4:cc: 44:11:28:5d:96:fd:77:5a:8e:29:4d:36:08:73:7e:ab:a1:01: 4c:75:a4:66:d3:ec:50:72:38:da:c4:1b:c8:b3:d8:0a:3e:f4: ec:4f:8e:65:f9:92:63:67:a5:9e:81:a9:05:c3:a1:98:73:b2: fc:7c:2b:44:81:c1:f5:d0:6a:c0:ad:82:07:9b:f8:ce:79:f2: c4:42:a1:4e:d1:81:13:c5:15:c8:90:bc:d0:74:c3:49:8c:ff: bc:4a:fc:c7:b0:c4:06:c9:79:0b:87:46:37:ef:2d:fa:a9:c2: e0:72:94:8a:30:d2:f3:63:3f:2e:68:21:40:6b:87:a0:69:64: e2:75:a8:b9:25:33:45:6a:82:ae:0d:2a:1b:6c:bd:a3:43:9c: 30:bd:17:df:fe:0c:2f:3d:ed:ae:6f:9e:16:e3:13:af:2a:d8: 1d:2c:bd:45:d6:39:4b:f4:a1:ad:11:50:c6:cd:58:08:24:9b: b3:6a:18:63:32:c6:92:32:59:f3:37:88:61:dc:78:d2:d1:a0: bc:e5:17:c4:c4:62:e5:da:84:d4:3b:a1:91:19:98:3f:28:a8: a8:b4:10:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3NDIxMTAvBgNVBAUTKDYwOTdCMzRENjc0MDEzMjgwNjI5Rjg4NUNBOTAzRkQ2 OUFCOTVCRTMwHhcNMjQwNTE4MTQyNzE3WhcNMjQwNTI1MTQyNzE3WjAYMRYwFAYD VQQDEw02NjQ4YmFjNS1lMzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8u7shNEvlWiZJai5MQntIK7RZXbmcBt06ZKRuXIF5To0ObP4+S9jND9ixJUa AoQfK2CXXcUPOg+3NcMccA7sSzEEYMWbHZ7q5RZ+IchvLauYw/9Qih33zN4IvUWD KQtXHKAUUfvjHnZPdjZmBjC2ZkfzxhqqMvsN9lw1WPA5FxUQkgiy07vYVsmHKuwm 0U9xw4J3yaacamUfSxPKRkhUWRJm7Ns9Y+7ac7b6je53z44HA9zIivgNDieEJozc t9B3ODILBrQRnmiEIGSW5XRYmKfLYtN2SS8YmDVdVJcjjEJWljlsZv2TNefxJXTg AdRnkIO9rGoQyyLs3Jp69q/BEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6iImKR tqUWPNf4n7oQVmh31Eg5MB8GA1UdIwQYMBaAFGCXs01nQBMoBin4hcqQP9aauVvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc0Mi8yRUQwRjVGQzFE ODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5Z0dLZmlGeXBBXzFwcTVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKZXpUV2RBRXlnR0tmaUZ5cEFfMXBxNVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTc0Mi8yRUQwRjVGQzFEODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5 Z0dLZmlGeXBBXzFwcTVXLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBELWPJuEa2BKu3uZ+mpCg/fI5p+178GVv+cSqcmqvRmXK11MxEEShd lv13Wo4pTTYIc36roQFMdaRm0+xQcjjaxBvIs9gKPvTsT45l+ZJjZ6WegakFw6GY c7L8fCtEgcH10GrArYIHm/jOefLEQqFO0YETxRXIkLzQdMNJjP+8SvzHsMQGyXkL h0Y37y36qcLgcpSKMNLzYz8uaCFAa4egaWTidai5JTNFaoKuDSobbL2jQ5wwvRff /gwvPe2ub54W4xOvKtgdLL1F1jlL9KGtEVDGzVgIJJuzahhjMsaSMlnzN4hh3HjS 0aC85RfExGLl2oTUO6GRGZg/KKiotBDx -----END CERTIFICATE-----Generated at Sat May 18 15:26:03 2024 by rpki-client on console-fra.rpki-client.org