$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft File: yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft (raw, json) Hash identifier: PzqU77fPTJ797QBJNqQv4THItbznQdSSB5Z7TWwWTvM= Subject key identifier: 41:D0:D5:55:3B:01:EA:57:DA:02:30:68:05:29:FB:B2:AF:A1:5A:B6 Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B Certificate issuer: /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Certificate serial: 0837 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft Manifest number: 0832 Signing time: Sat 18 May 2024 21:44:24 +0000 Manifest this update: Sat 18 May 2024 21:44:23 +0000 Manifest next update: Sat 25 May 2024 21:44:23 +0000 Files and hashes: 1: yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl (hash: Lyedlch14T8mvntJs9Lux/AaqCVZ3Y0VFcRgag5gmUE=) 2: 90798692AA0A11EA89D5161EC4F9AE02.roa (hash: O0cw5ZT/oguDck4eH6oUOUC8bbwGHUHdEmg/5/+1nls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103 (0x837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Validity Not Before: May 18 21:44:23 2024 GMT Not After : May 25 21:44:23 2024 GMT Subject: CN=66492137-6d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:ab:26:03:43:69:a3:03:5d:ec:0d:83:bc: 3d:8f:7a:e2:a4:2d:41:6c:83:fb:46:39:05:20:54: 42:dc:b6:66:5d:8e:92:39:a7:d8:7a:02:f4:81:5a: fc:45:12:2e:f3:55:69:e6:79:76:f0:0c:d0:0d:1d: af:b9:6d:5c:a4:eb:ea:78:49:0d:32:c2:42:05:1e: 33:bd:17:69:18:6b:b9:b5:f5:0c:c0:c8:98:e7:d9: 56:6e:1f:4d:95:48:56:a1:5b:86:db:41:11:1b:bb: 31:88:b9:9b:18:03:8e:5c:fb:88:a7:07:49:e7:50: 0f:22:e9:f5:4e:f0:18:6a:6e:cd:18:54:04:33:51: ed:73:46:65:d2:2c:14:3e:8c:20:ed:d4:17:ac:22: 1c:04:7b:4c:5a:53:a9:14:7b:01:4d:87:02:36:b9: fc:3b:ef:71:2a:cd:c0:ae:fd:41:8b:aa:ea:95:6f: 89:2f:a7:1d:85:dc:3c:b5:fc:a0:e4:ed:97:a9:af: 01:02:cd:90:ff:24:64:e7:e9:49:5b:47:b6:c1:ca: ef:12:38:ca:92:f4:28:61:a1:41:fe:56:bb:fe:87: 91:0d:78:65:38:c9:a1:5c:99:a2:49:a5:c2:12:db: 35:25:8e:17:d9:08:9c:a0:24:e9:0f:69:61:13:b9: 7d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D0:D5:55:3B:01:EA:57:DA:02:30:68:05:29:FB:B2:AF:A1:5A:B6 X509v3 Authority Key Identifier: keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:8d:bf:6b:fb:3e:13:02:59:71:4c:85:66:e3:21:3a:50:36: d8:98:86:f6:ba:ea:79:cc:cd:19:5c:27:39:26:bb:d6:94:eb: 84:a0:bf:f9:2b:0f:fd:83:f8:da:dd:66:34:b7:ea:1d:35:04: 5f:e8:ec:92:b1:b9:7b:c4:2f:91:36:d6:48:75:a8:1b:16:d9: 11:22:10:d6:77:36:04:9b:ff:1f:5c:1c:d4:19:f1:4b:ca:d9: d0:74:9c:6e:37:4e:be:2d:f1:b4:4f:6b:1d:a4:d6:6e:ca:ec: 8f:b0:48:63:14:4c:92:62:26:94:6e:cb:97:98:82:25:ae:df: 17:a5:c7:b5:80:41:f9:ae:ee:fd:c9:33:f1:eb:ca:cc:4c:5b: 4e:af:c8:80:54:63:ed:8e:ec:d3:a0:ac:ed:e3:6f:bb:81:03: 1a:8c:d3:2f:06:f3:88:28:fb:5b:bb:15:3e:9c:5d:84:22:74: 60:4a:20:e2:aa:3e:37:bb:77:21:22:7c:97:9c:48:02:12:46: 5e:e6:4d:8c:70:6c:56:97:54:47:63:f8:0f:b5:ac:4b:a6:a7: 74:ef:39:bf:0d:e5:c6:43:5d:80:88:b2:da:93:94:cf:88:93: 85:a7:76:32:df:67:3b:41:c4:bf:02:24:50:8f:02:61:c6:b5: ce:de:1d:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QjcxMTAvBgNVBAUTKENBQTk2OUZGMzc3NEJDRDlFRDYwMjc3M0QyOUQ4NzhC QzRFMjY1NkIwHhcNMjQwNTE4MjE0NDIzWhcNMjQwNTI1MjE0NDIzWjAYMRYwFAYD VQQDEw02NjQ5MjEzNy02ZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsGrJgNDaaMDXewNg7w9j3ripC1BbIP7RjkFIFRC3LZmXY6SOafYegL0gVr8 RRIu81Vp5nl28AzQDR2vuW1cpOvqeEkNMsJCBR4zvRdpGGu5tfUMwMiY59lWbh9N lUhWoVuG20ERG7sxiLmbGAOOXPuIpwdJ51APIun1TvAYam7NGFQEM1Htc0Zl0iwU Powg7dQXrCIcBHtMWlOpFHsBTYcCNrn8O+9xKs3Arv1Bi6rqlW+JL6cdhdw8tfyg 5O2Xqa8BAs2Q/yRk5+lJW0e2wcrvEjjKkvQoYaFB/la7/oeRDXhlOMmhXJmiSaXC Ets1JY4X2QicoCTpD2lhE7l9pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHQ1VU7 AepX2gIwaAUp+7KvoVq2MB8GA1UdIwQYMBaAFMqpaf83dLzZ7WAnc9Kdh4vE4mVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRCNy8wOTcyQzc0MEFB MDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZObnRZQ2R6MHAySGk4VGla V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxbHBfemQwdk5udFlDZHowcDJIaThUaVpXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRCNy8wOTcyQzc0MEFBMDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZO bnRZQ2R6MHAySGk4VGlaV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9jb9r+z4TAllxTIVm4yE6UDbYmIb2uup5zM0ZXCc5JrvWlOuEoL/5 Kw/9g/ja3WY0t+odNQRf6OySsbl7xC+RNtZIdagbFtkRIhDWdzYEm/8fXBzUGfFL ytnQdJxuN06+LfG0T2sdpNZuyuyPsEhjFEySYiaUbsuXmIIlrt8Xpce1gEH5ru79 yTPx68rMTFtOr8iAVGPtjuzToKzt42+7gQMajNMvBvOIKPtbuxU+nF2EInRgSiDi qj43u3chInyXnEgCEkZe5k2McGxWl1RHY/gPtaxLpqd07zm/DeXGQ12AiLLak5TP iJOFp3Yy32c7QcS/AiRQjwJhxrXO3h0S -----END CERTIFICATE-----Generated at Sat May 18 22:27:54 2024 by rpki-client on console-ams.rpki-client.org