$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft File: yYWS4c0LLnYQyEsC5mHL8zb_r10.mft (raw, json) Hash identifier: mWUUZSHGTX8ACVgnM3lR2rE+b+xZR9D/k4uaWu5EVN0= Subject key identifier: 2A:22:5B:AB:92:2E:8C:5F:6C:14:86:5D:C2:56:65:F5:6B:B3:9E:38 Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D Certificate issuer: /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Certificate serial: 071F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft Manifest number: 071B Signing time: Sat 18 May 2024 22:31:44 +0000 Manifest this update: Sat 18 May 2024 22:31:44 +0000 Manifest next update: Sat 25 May 2024 22:31:44 +0000 Files and hashes: 1: yYWS4c0LLnYQyEsC5mHL8zb_r10.crl (hash: FmKyrW9Ml24y7DlqlMOVjBcvrW5x0ViV/5JSON2+QKQ=) 2: 789C2BD0ECCA11EAAE025C70C4F9AE02.roa (hash: RDVcGn+HZT7Xsj+oRdySXuRxFZbRgCXt6lISI6oorkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Validity Not Before: May 18 22:31:44 2024 GMT Not After : May 25 22:31:44 2024 GMT Subject: CN=66492c50-4a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:0d:34:6d:b3:70:83:6d:c2:98:20:53:df: aa:6f:57:a9:e4:57:d0:7b:3b:bb:60:15:31:02:98: 05:69:97:cb:65:1b:10:42:9a:40:ce:1c:91:27:1d: c5:b9:bf:07:fa:cc:3e:85:6b:0d:f1:12:a0:a3:4a: 92:4d:c5:ae:e4:5a:8b:54:dd:58:48:92:4d:84:d3: 06:a3:fd:ef:5c:ce:59:7f:c5:ff:d7:3c:04:f3:70: 30:bf:76:a9:1f:6e:31:7b:58:34:a9:e5:d2:03:02: 51:66:0f:44:7e:75:7d:98:18:66:16:0f:0c:d9:78: 4d:2e:a9:3f:6f:0a:b2:19:73:a2:39:9a:83:cb:fe: 59:c1:29:4b:55:eb:83:14:32:3e:02:47:50:ce:5f: 7a:b8:83:59:e7:a4:96:b0:01:cb:63:87:21:09:09: bd:c1:b7:59:a1:44:7b:8e:75:73:4b:b5:1b:50:c1: 1d:5b:dc:b0:d9:6a:8d:b4:70:f4:08:9b:21:86:6f: a5:f8:73:1e:12:e5:4e:1a:8c:bb:35:64:07:0c:6e: 00:e7:9e:c6:12:2c:fb:0a:ca:46:a4:07:d1:4e:8b: 73:55:48:37:39:b2:b0:de:43:5d:8c:0c:74:93:d1: 98:7d:34:7d:ea:f3:97:c4:97:b9:f6:99:e4:cf:7f: ff:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:22:5B:AB:92:2E:8C:5F:6C:14:86:5D:C2:56:65:F5:6B:B3:9E:38 X509v3 Authority Key Identifier: keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:da:f5:4c:9a:c2:f1:cb:59:b3:4f:a8:20:62:43:2a:1f:3a: 70:5f:db:75:43:63:1f:89:f0:f7:54:81:9c:01:6f:cd:df:0c: fc:8d:4c:e1:41:5c:15:a7:8e:7e:cf:55:1f:09:5c:8c:1e:4e: 54:ff:86:36:bb:6d:b4:d0:5a:74:dc:15:4f:e9:bc:e4:dc:68: 8b:54:8d:27:0a:bd:4b:71:fc:20:58:af:1a:f0:ee:0d:3c:47: d9:a0:3c:84:1e:2f:e1:49:9b:30:29:d4:c9:ba:c2:f2:c7:35: 79:0f:9f:b1:aa:cd:b7:ff:40:f0:90:b2:93:83:20:c9:e9:94: 61:cf:d2:9e:66:2b:53:16:44:60:2b:8e:9c:8a:ae:05:69:ea: 5b:6c:b4:27:da:f2:f0:6c:53:78:6d:04:c1:4f:8b:10:6a:16: 1e:aa:dd:82:34:5a:7c:58:3d:1c:d7:8a:12:68:46:75:28:09: a9:de:b8:22:95:5d:5e:cc:a5:c0:20:1b:11:d4:58:8a:26:20: 48:4d:b4:17:35:cb:9a:27:05:06:22:6b:ce:43:61:f4:be:94: a5:bb:5f:c6:9a:45:b5:d2:83:3b:f0:e5:59:00:6d:eb:0a:2b: e4:a4:d2:a5:2d:21:68:e5:c3:d1:94:29:fc:a9:b8:22:c1:51: 13:42:d4:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhFOTgxMTAvBgNVBAUTKEM5ODU5MkUxQ0QwQjJFNzYxMEM4NEIwMkU2NjFDQkYz MzZGRkFGNUQwHhcNMjQwNTE4MjIzMTQ0WhcNMjQwNTI1MjIzMTQ0WjAYMRYwFAYD VQQDEw02NjQ5MmM1MC00YTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZINNG2zcINtwpggU9+qb1ep5FfQezu7YBUxApgFaZfLZRsQQppAzhyRJx3F ub8H+sw+hWsN8RKgo0qSTcWu5FqLVN1YSJJNhNMGo/3vXM5Zf8X/1zwE83Awv3ap H24xe1g0qeXSAwJRZg9EfnV9mBhmFg8M2XhNLqk/bwqyGXOiOZqDy/5ZwSlLVeuD FDI+AkdQzl96uINZ56SWsAHLY4chCQm9wbdZoUR7jnVzS7UbUMEdW9yw2WqNtHD0 CJshhm+l+HMeEuVOGoy7NWQHDG4A557GEiz7CspGpAfRTotzVUg3ObKw3kNdjAx0 k9GYfTR96vOXxJe59pnkz3//FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoiW6uS LoxfbBSGXcJWZfVrs544MB8GA1UdIwQYMBaAFMmFkuHNCy52EMhLAuZhy/M2/69d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEU5OC8wRUIxMkI0MEVD QzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExuWVF5RXNDNW1ITDh6Yl9y MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZV1M0YzBMTG5ZUXlFc0M1bUhMOHpiX3IxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEU5OC8wRUIxMkI0MEVDQzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExu WVF5RXNDNW1ITDh6Yl9yMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS2vVMmsLxy1mzT6ggYkMqHzpwX9t1Q2MfifD3VIGcAW/N3wz8jUzh QVwVp45+z1UfCVyMHk5U/4Y2u2200Fp03BVP6bzk3GiLVI0nCr1LcfwgWK8a8O4N PEfZoDyEHi/hSZswKdTJusLyxzV5D5+xqs23/0DwkLKTgyDJ6ZRhz9KeZitTFkRg K46ciq4FaepbbLQn2vLwbFN4bQTBT4sQahYeqt2CNFp8WD0c14oSaEZ1KAmp3rgi lV1ezKXAIBsR1FiKJiBITbQXNcuaJwUGImvOQ2H0vpSlu1/GmkW10oM78OVZAG3r CivkpNKlLSFo5cPRlCn8qbgiwVETQtQD -----END CERTIFICATE-----Generated at Sun May 19 00:16:15 2024 by rpki-client on console-fra.rpki-client.org