$ rpki-client -vvf rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft File: YfRdxU9H4lL6xlUt27OWWFTGyAE.mft (raw, json) Hash identifier: cUe1yTLRJ8fw5LzKOJzOgz8YDxoPtWJsKn03Yesr5fE= Subject key identifier: 27:BC:88:C3:EE:39:4F:DE:79:16:39:C7:66:92:89:86:E4:15:73:41 Authority key identifier: 61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01 Certificate issuer: /CN=A9162CCE/serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801 Certificate serial: 0520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft Manifest number: 051A Signing time: Sun 19 May 2024 01:04:14 +0000 Manifest this update: Sun 19 May 2024 01:04:14 +0000 Manifest next update: Sun 26 May 2024 01:04:14 +0000 Files and hashes: 1: YfRdxU9H4lL6xlUt27OWWFTGyAE.crl (hash: HXlIH6rB4Bt+f748fqp4+idhUAkrAVq0gwEweileEH0=) 2: 6D5F7C74B99611EBB5E9AE5EC4F9AE02.roa (hash: inV57aEFQYsgNDwEQlzRsIvBso5mFUr5urdtIa2D6os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162CCE/serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801 Validity Not Before: May 19 01:04:14 2024 GMT Not After : May 26 01:04:14 2024 GMT Subject: CN=6649500e-d505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:e0:14:5c:55:24:cb:d4:30:16:58:37:2e: 8c:74:ce:ae:dd:e0:e4:9b:37:36:a3:0d:a9:f2:c9: d6:59:09:af:c2:a3:6c:fd:b0:8d:3c:f0:69:98:83: e9:cd:04:53:f9:18:38:ed:29:43:e0:18:c7:d7:f5: 32:75:2f:73:2b:83:fc:c8:4b:b9:4f:52:c0:20:6a: d1:e9:93:63:4d:0b:c6:98:4b:f2:3e:8f:e3:53:32: 2b:0b:3d:c0:b9:07:b0:42:4a:6c:be:dc:46:7f:64: c8:4a:95:54:ce:50:a4:ee:9d:c1:3d:22:f5:0f:80: c3:0c:e7:94:23:50:91:92:96:32:86:17:c1:18:cd: a6:f8:d8:9d:1d:09:37:58:69:83:00:ef:43:9d:b6: a7:72:2f:80:73:e2:38:8b:78:9a:13:9b:3e:c9:ad: e3:9f:8c:7d:d3:dd:b7:e9:8a:b3:35:bf:95:4b:09: ca:1b:6a:a3:38:26:87:d2:c6:21:39:b4:4a:f6:c6: 5d:87:bc:78:fb:4f:49:bf:6c:ab:b8:1e:72:99:8a: 0b:8f:f8:28:8e:19:8c:96:6e:a1:8c:81:aa:62:f5: e4:ec:19:d6:18:fa:c1:23:a2:58:fd:75:f7:ff:28: 84:41:8a:9f:ea:42:ff:fc:40:62:57:ca:40:b6:b5: a8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BC:88:C3:EE:39:4F:DE:79:16:39:C7:66:92:89:86:E4:15:73:41 X509v3 Authority Key Identifier: keyid:61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:c1:2b:70:b2:99:19:4c:c3:4e:79:b2:e6:22:c4:7d:79:c2: 09:bd:95:7a:94:3b:6c:a5:2d:57:07:5d:cf:a5:3a:b6:02:a6: e7:0d:49:98:e0:86:42:23:6c:d8:4b:70:09:a1:08:82:0d:4f: 7e:32:f3:d7:3a:c3:96:e4:5f:7b:05:aa:07:85:d0:e9:50:86: 05:88:a5:12:d3:ba:be:fc:82:39:26:cb:77:63:f6:f0:d5:4c: d2:b0:ed:34:80:5d:6d:1b:6c:3e:72:cf:97:47:2a:e6:f5:06: ba:6b:64:38:c6:71:0d:76:5c:5d:1c:95:29:74:b6:cc:11:3a: 05:0a:75:8d:6d:e4:ff:c1:81:b7:75:96:27:ce:60:09:75:f4: ff:8c:18:25:12:6d:a2:ce:4c:15:bf:c8:36:88:3c:4a:e2:d3: 95:f3:fc:0c:87:ca:26:69:4d:d6:59:87:e5:ad:87:d3:3f:b5: f9:8d:ef:ad:70:a0:bb:9f:8f:4b:15:91:87:52:57:6f:e1:8d: 93:08:79:f4:9a:d2:4a:72:96:6a:10:0d:3b:6e:7c:88:3e:6a: ce:67:f1:e3:86:0d:35:e7:ca:fb:c4:12:35:c8:d4:b2:c9:61: 84:9c:64:f2:77:24:0b:d0:66:77:19:8b:c0:a5:b6:82:6e:35: dd:d3:48:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDQ0UxMTAvBgNVBAUTKDYxRjQ1REM1NEY0N0UyNTJGQUM2NTUyRERCQjM5NjU4 NTRDNkM4MDEwHhcNMjQwNTE5MDEwNDE0WhcNMjQwNTI2MDEwNDE0WjAYMRYwFAYD VQQDEw02NjQ5NTAwZS1kNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwijgFFxVJMvUMBZYNy6MdM6u3eDkmzc2ow2p8snWWQmvwqNs/bCNPPBpmIPp zQRT+Rg47SlD4BjH1/UydS9zK4P8yEu5T1LAIGrR6ZNjTQvGmEvyPo/jUzIrCz3A uQewQkpsvtxGf2TISpVUzlCk7p3BPSL1D4DDDOeUI1CRkpYyhhfBGM2m+NidHQk3 WGmDAO9Dnbanci+Ac+I4i3iaE5s+ya3jn4x909236YqzNb+VSwnKG2qjOCaH0sYh ObRK9sZdh7x4+09Jv2yruB5ymYoLj/gojhmMlm6hjIGqYvXk7BnWGPrBI6JY/XX3 /yiEQYqf6kL//EBiV8pAtrWo8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCe8iMPu OU/eeRY5x2aSiYbkFXNBMB8GA1UdIwQYMBaAFGH0XcVPR+JS+sZVLduzllhUxsgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkNDRS9CNzU1REEyOEI5 OTQxMUVCOTNGODI2NURDNEY5QUUwMi9ZZlJkeFU5SDRsTDZ4bFV0MjdPV1dGVEd5 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lmUmR4VTlINGxMNnhsVXQyN09XV0ZUR3lBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkNDRS9CNzU1REEyOEI5OTQxMUVCOTNGODI2NURDNEY5QUUwMi9ZZlJkeFU5SDRs TDZ4bFV0MjdPV1dGVEd5QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTwStwspkZTMNOebLmIsR9ecIJvZV6lDtspS1XB13PpTq2AqbnDUmY 4IZCI2zYS3AJoQiCDU9+MvPXOsOW5F97BaoHhdDpUIYFiKUS07q+/II5Jst3Y/bw 1UzSsO00gF1tG2w+cs+XRyrm9Qa6a2Q4xnENdlxdHJUpdLbMEToFCnWNbeT/wYG3 dZYnzmAJdfT/jBglEm2izkwVv8g2iDxK4tOV8/wMh8omaU3WWYflrYfTP7X5je+t cKC7n49LFZGHUldv4Y2TCHn0mtJKcpZqEA07bnyIPmrOZ/Hjhg0158r7xBI1yNSy yWGEnGTydyQL0GZ3GYvApbaCbjXd00iA -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-ams.rpki-client.org