$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft File: YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json) Hash identifier: QQdmr0nkG6hjAx/PqdSnrcrhMrYQ/W60LEhw4wQcKe0= Subject key identifier: E9:E0:BF:B3:9A:34:79:FE:B9:87:6D:BC:DE:0E:56:03:A2:39:6D:A3 Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Certificate serial: 031E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft Manifest number: 030E Signing time: Sun 19 May 2024 03:14:57 +0000 Manifest this update: Sun 19 May 2024 03:14:57 +0000 Manifest next update: Sun 26 May 2024 03:14:57 +0000 Files and hashes: 1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: wLNI6d/KYER5gKfaEZtjfThyNnk1qyZjyiropfUZGM0=) 2: 7A5A3018369911EEA7B51070C4F9AE02.roa (hash: zw7CoMnNEQBUTgULQNOkotQEalwjFX9jkxfsyc4ldfU=) 3: D4E1388A2F8A11EEA59DA358C4F9AE02.roa (hash: 2FXj0OIT+96fs5pTNVqbBghGdAnH4rKBbXqSIuIyoPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 798 (0x31e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Validity Not Before: May 19 03:14:57 2024 GMT Not After : May 26 03:14:57 2024 GMT Subject: CN=66496eb1-086c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:64:fa:84:3f:44:c3:2b:83:1f:1b:8c:a4: bd:6f:ed:dd:b6:bb:7d:3b:d2:ee:ae:46:eb:dd:50: ad:6a:14:bd:33:09:e1:af:1a:ce:ed:01:c3:54:90: 67:3b:e8:2d:25:72:4d:8f:16:f6:ca:2f:3b:ef:52: 3c:4e:7d:40:9d:e7:70:67:9a:c4:b7:e3:cc:21:2f: d7:50:12:79:af:71:07:46:9f:9a:df:e8:83:b7:f1: 86:1a:b4:0a:45:cd:6b:43:b6:90:ff:56:f0:eb:51: 78:42:70:2f:22:d7:94:ad:a2:e8:33:07:f0:c5:a8: e6:40:08:86:ea:ae:a7:d3:b4:1c:74:82:1f:42:43: 67:c2:fb:9f:be:bf:ac:d2:51:a4:a3:7e:c2:b3:00: eb:c6:a4:f6:96:d1:07:50:37:e5:e5:3a:1b:28:b8: 67:6d:e5:40:12:54:e3:c5:2f:96:2f:24:ac:3c:dc: b0:c6:1e:e1:c1:f5:44:65:b5:20:98:52:c6:9d:26: b7:d2:8e:a1:32:4e:d8:7f:7e:ed:45:eb:2c:8d:cc: 16:dd:94:80:da:02:a0:e1:90:54:1f:18:ed:73:44: cf:49:ca:ed:99:10:3b:67:2c:7a:8f:b5:7e:05:a1: a4:83:5e:49:6d:95:1e:48:ba:bc:4c:24:99:e3:8a: d1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E0:BF:B3:9A:34:79:FE:B9:87:6D:BC:DE:0E:56:03:A2:39:6D:A3 X509v3 Authority Key Identifier: keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:65:02:14:bf:42:f5:e4:14:bb:a6:a3:4e:4c:77:05:57:e4: 09:15:b3:dd:b0:19:c3:97:b4:bb:4f:f8:fa:79:f8:1d:aa:89: 26:5e:71:47:6c:cf:5c:52:df:b4:9d:bc:8b:2e:d7:b3:41:70: 4c:2d:8a:cb:4b:0a:e4:f4:52:37:31:83:da:92:a8:54:5a:80: bb:c9:b6:2b:69:10:51:cc:d0:91:55:b4:e7:63:93:09:87:86: 16:59:32:b2:d3:c4:37:ac:4c:db:09:2d:54:b6:4d:5b:d3:9e: 5b:e8:28:54:ba:2c:94:2a:a1:4b:d5:20:30:8a:0c:76:c4:09: 19:67:c3:8a:48:a4:40:0a:a0:16:22:a7:96:16:16:81:01:3c: a5:cd:6a:9e:f2:28:51:40:0d:01:20:cd:3d:74:49:f0:4c:90: b2:1b:7c:1a:6a:bc:5b:40:cc:5e:32:00:a9:81:28:e2:77:ae: b6:5c:99:ff:53:22:53:67:5f:fc:b8:f4:63:ca:3a:4c:fe:57: ba:10:64:70:1c:da:39:b0:ba:cb:23:89:9a:a6:86:4e:1d:9f: 5c:b1:05:7d:7d:b9:41:bc:b5:27:e7:59:30:9e:66:1d:c2:a3: 1a:87:3c:90:7a:fd:51:df:c2:82:13:f4:d6:a1:98:cf:42:a6: 76:72:ae:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJFRTExMTAvBgNVBAUTKDYwNzZCRDBCQTREQjc5N0E3MkE2OEZFRkY5QkZCNTU4 QzQ0Mzk4QjIwHhcNMjQwNTE5MDMxNDU3WhcNMjQwNTI2MDMxNDU3WjAYMRYwFAYD VQQDEw02NjQ5NmViMS0wODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoz9k+oQ/RMMrgx8bjKS9b+3dtrt9O9Lurkbr3VCtahS9MwnhrxrO7QHDVJBn O+gtJXJNjxb2yi8771I8Tn1AnedwZ5rEt+PMIS/XUBJ5r3EHRp+a3+iDt/GGGrQK Rc1rQ7aQ/1bw61F4QnAvIteUraLoMwfwxajmQAiG6q6n07QcdIIfQkNnwvufvr+s 0lGko37CswDrxqT2ltEHUDfl5TobKLhnbeVAElTjxS+WLySsPNywxh7hwfVEZbUg mFLGnSa30o6hMk7Yf37tRessjcwW3ZSA2gKg4ZBUHxjtc0TPScrtmRA7Zyx6j7V+ BaGkg15JbZUeSLq8TCSZ44rRHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOngv7Oa NHn+uYdtvN4OVgOiOW2jMB8GA1UdIwQYMBaAFGB2vQuk23l6cqaP7/m/tVjEQ5iy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkVFMS83NTJENDJFODhG RDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVYcHlwb192LWItMVdNUkRt TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYTlDNlRiZVhweXBvX3YtYi0xV01SRG1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkVFMS83NTJENDJFODhGRDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVY cHlwb192LWItMVdNUkRtTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqZQIUv0L15BS7pqNOTHcFV+QJFbPdsBnDl7S7T/j6efgdqokmXnFH bM9cUt+0nbyLLtezQXBMLYrLSwrk9FI3MYPakqhUWoC7ybYraRBRzNCRVbTnY5MJ h4YWWTKy08Q3rEzbCS1Utk1b055b6ChUuiyUKqFL1SAwigx2xAkZZ8OKSKRACqAW IqeWFhaBATylzWqe8ihRQA0BIM09dEnwTJCyG3waarxbQMxeMgCpgSjid662XJn/ UyJTZ1/8uPRjyjpM/le6EGRwHNo5sLrLI4mapoZOHZ9csQV9fblBvLUn51kwnmYd wqMahzyQev1R38KCE/TWoZjPQqZ2cq7d -----END CERTIFICATE-----Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org