$ rpki-client -vvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft File: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft (raw, json) Hash identifier: kxuDuJZzQSuwThWzvcanrh2uW+qIK8sX5nziFpAne7k= Subject key identifier: A2:56:64:9A:B0:FD:C5:29:9C:5E:23:14:F7:85:36:F9:18:88:73:A5 Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E Certificate issuer: /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Certificate serial: 0A1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft Manifest number: 0A0B Signing time: Fri 31 May 2024 21:21:54 +0000 Manifest this update: Fri 31 May 2024 21:21:54 +0000 Manifest next update: Fri 07 Jun 2024 21:21:54 +0000 Files and hashes: 1: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl (hash: Z4fkLq1kfintKJfgvMingUxrPJjQdLvI0GNcTeS3THs=) 2: BA7B024C04D811EDBE98F982C4F9AE02.roa (hash: J8CmfyyKJCrYxa/cZGFydyBPFYTmCuysA/8LkHcB4js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2590 (0xa1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Validity Not Before: May 31 21:21:54 2024 GMT Not After : Jun 7 21:21:54 2024 GMT Subject: CN=665a3f72-16ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:25:1d:4a:7f:66:b0:06:5e:b4:11:f3:cb:e1: e4:2a:60:18:e5:4a:a4:66:c8:c7:2f:9d:9f:66:3f: 2f:08:b6:22:2f:ca:63:92:e2:df:bf:b7:68:5b:73: 15:f0:a9:32:18:93:f4:7d:c1:5a:14:47:21:d7:37: 9d:f9:a7:99:7b:8b:93:73:e3:06:aa:47:d4:6c:10: 7a:1d:ef:7c:53:72:7e:41:d0:59:32:04:a7:8d:aa: 44:c4:31:19:d0:c8:cb:4f:e9:aa:2e:f6:62:24:29: a9:d2:51:e2:f0:ae:32:54:f7:31:89:bf:4c:37:3f: 19:e0:b6:1e:f6:28:81:14:47:f0:e4:f2:e7:ee:84: db:cf:ed:f3:71:d4:34:70:a8:78:83:af:64:e3:07: b4:5c:2f:75:99:6e:9e:13:83:92:9e:c9:ec:8f:ff: 30:ca:db:e3:a6:0f:de:28:00:ea:6f:14:86:e8:3e: c7:57:1e:1c:f9:0f:f4:20:71:9a:01:76:92:9f:f5: 71:b4:05:cd:d7:8e:0e:72:ec:51:f3:41:d0:b6:0c: 71:9d:fe:a4:1c:8c:f3:94:26:e8:de:c1:02:ad:94: ef:cd:6a:b2:7f:b5:e9:35:01:fe:25:8c:6b:db:47: e0:ac:f2:ae:bd:7a:cb:1c:47:35:fb:d2:d2:1b:fa: 17:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:56:64:9A:B0:FD:C5:29:9C:5E:23:14:F7:85:36:F9:18:88:73:A5 X509v3 Authority Key Identifier: keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:7a:64:76:d3:e8:c1:fa:67:b6:41:23:b1:ae:a4:c8:55:50: 64:5c:78:e2:ba:02:76:c9:f6:6f:c9:1c:fd:14:31:2b:8e:0a: da:8f:f6:e0:4e:41:32:d4:3d:a9:c6:b2:a7:05:f7:eb:e8:fc: 17:31:41:45:11:ac:cb:d2:9d:03:20:ff:10:38:c4:0d:a7:70: 20:92:33:f0:19:7f:cf:b2:5a:eb:06:af:83:85:92:b2:16:2f: f1:34:43:18:58:03:e1:87:88:b3:63:ed:08:19:f4:bf:c5:95: 5c:6f:e2:0c:88:d8:ff:42:4a:5c:16:b4:a2:ea:2f:09:64:74: 85:e3:fd:13:1a:56:50:02:22:a0:c1:1b:ae:c5:15:8f:57:28: e0:3a:13:cf:7e:37:50:a4:08:67:00:f2:95:6b:26:18:fa:65: 9d:c5:9f:fb:75:b9:e8:19:e7:19:5c:51:8a:ac:a5:ed:c3:15: cd:a1:94:9c:c1:c1:1a:d7:61:47:e6:e7:01:46:dc:4a:46:81: f5:25:3e:ca:d2:65:ac:1f:b1:52:8d:59:ac:6b:92:ff:59:04: ba:57:38:19:80:a9:f1:d1:22:f3:ab:c2:5e:0c:3f:93:04:86: 88:e1:82:30:38:9e:db:e4:59:1f:c8:65:f4:ed:6c:39:1a:e7: 4c:98:9b:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCQTIxMTAvBgNVBAUTKENBNjJFNDM4Rjk4RDg1MThEMkYyQTVEOUY2NzY1NjUx RTVBREE2MEUwHhcNMjQwNTMxMjEyMTU0WhcNMjQwNjA3MjEyMTU0WjAYMRYwFAYD VQQDEw02NjVhM2Y3Mi0xNmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yUdSn9msAZetBHzy+HkKmAY5UqkZsjHL52fZj8vCLYiL8pjkuLfv7doW3MV 8KkyGJP0fcFaFEch1zed+aeZe4uTc+MGqkfUbBB6He98U3J+QdBZMgSnjapExDEZ 0MjLT+mqLvZiJCmp0lHi8K4yVPcxib9MNz8Z4LYe9iiBFEfw5PLn7oTbz+3zcdQ0 cKh4g69k4we0XC91mW6eE4OSnsnsj/8wytvjpg/eKADqbxSG6D7HVx4c+Q/0IHGa AXaSn/VxtAXN144OcuxR80HQtgxxnf6kHIzzlCbo3sECrZTvzWqyf7XpNQH+JYxr 20fgrPKuvXrLHEc1+9LSG/oXowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJWZJqw /cUpnF4jFPeFNvkYiHOlMB8GA1UdIwQYMBaAFMpi5Dj5jYUY0vKl2fZ2VlHlraYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEJBMi85OURGMzg2MjU0 QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhSalM4cVhaOW5aV1VlV3Rw ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltTGtPUG1OaFJqUzhxWFo5blpXVWVXdHBnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEJBMi85OURGMzg2MjU0QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhS alM4cVhaOW5aV1VlV3RwZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiemR20+jB+me2QSOxrqTIVVBkXHjiugJ2yfZvyRz9FDErjgraj/bg TkEy1D2pxrKnBffr6PwXMUFFEazL0p0DIP8QOMQNp3AgkjPwGX/PslrrBq+DhZKy Fi/xNEMYWAPhh4izY+0IGfS/xZVcb+IMiNj/QkpcFrSi6i8JZHSF4/0TGlZQAiKg wRuuxRWPVyjgOhPPfjdQpAhnAPKVayYY+mWdxZ/7dbnoGecZXFGKrKXtwxXNoZSc wcEa12FH5ucBRtxKRoH1JT7K0mWsH7FSjVmsa5L/WQS6VzgZgKnx0SLzq8JeDD+T BIaI4YIwOJ7b5FkfyGX07Ww5GudMmJuk -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:17 2024 by rpki-client on console-ams.rpki-client.org