$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft File: YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft (raw, json) Hash identifier: 2qINZOWuSu6Xl0Nz5TkfV+tmPTsHKUidWdMR4qQSdoQ= Subject key identifier: B3:30:9F:64:36:91:C2:2F:7A:B9:38:28:63:67:0C:C7:A3:C6:7C:41 Authority key identifier: 61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A Certificate issuer: /CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft Manifest number: 44 Signing time: Sun 19 May 2024 08:03:45 +0000 Manifest this update: Sun 19 May 2024 08:03:45 +0000 Manifest next update: Sun 26 May 2024 08:03:45 +0000 Files and hashes: 1: YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl (hash: xXVQSl3VlrKgqi6xZSdG7N2wYzooB9nLts4KZ262bUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Validity Not Before: May 19 08:03:45 2024 GMT Not After : May 26 08:03:45 2024 GMT Subject: CN=6649b261-bf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c0:cc:75:ba:25:7f:30:bc:b2:86:fa:04:cf: 5c:a6:a4:33:74:22:53:ad:83:5b:e2:37:a3:0f:90: ff:6c:5c:e4:24:64:6c:0a:fc:93:0e:bc:a7:34:14: 1c:d2:4f:24:e1:8e:ab:69:92:1f:2e:bc:34:b5:f1: 01:2f:09:f2:4b:26:4a:18:ec:ee:90:6c:8b:d0:9d: f8:1e:d6:ec:da:f0:df:da:c7:f3:25:e1:3d:ec:4c: 15:71:8a:48:2c:01:60:92:bc:1e:78:00:9a:0c:09: ec:fe:b9:68:9b:32:15:f6:f4:06:a0:c6:38:8c:ca: 73:f4:8c:3f:20:42:c4:09:5d:62:ae:b5:fd:36:21: 1c:28:5b:eb:9d:25:fc:39:35:c4:da:2c:20:94:91: 52:5c:78:c7:00:97:9d:1e:e2:35:ce:d0:34:f5:fb: ae:67:60:5e:d5:2d:62:99:5a:d5:5c:77:80:01:42: 40:bf:af:6f:b0:9c:02:d2:fd:dd:c0:6a:74:65:01: 27:0b:c9:40:65:d4:b2:15:23:ff:eb:9d:8a:c3:c7: 64:82:04:38:ae:f7:69:e0:5f:67:2e:2c:60:b4:e1: 5e:7d:a9:95:6d:b2:28:8b:eb:4d:3d:7c:59:ec:35: 63:33:bc:a9:f2:5b:f7:97:5d:f8:f3:6a:15:1a:a3: 62:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:30:9F:64:36:91:C2:2F:7A:B9:38:28:63:67:0C:C7:A3:C6:7C:41 X509v3 Authority Key Identifier: keyid:61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:79:bd:02:e4:14:ed:f5:f6:e4:57:43:63:70:6b:82:09:3f: 34:bd:2f:3e:62:cd:13:2a:1a:55:80:16:86:33:2f:67:26:84: a3:84:a7:22:f7:e7:c5:68:01:8e:51:3c:77:fe:5c:e2:38:c9: 05:23:6b:fb:3e:ff:8b:14:11:80:69:b6:9d:be:3f:60:28:63: e1:8a:73:66:21:27:f4:1d:96:ea:88:1a:66:f9:50:81:fb:ff: f5:77:be:23:b4:82:0f:2c:6e:c0:04:fa:17:e9:56:13:ee:e4: a7:56:ab:02:2e:de:9f:ec:11:55:5b:cb:a6:24:77:0b:ad:d0: 0a:bf:ae:55:13:ce:6b:de:ff:e4:bb:fa:bb:e1:ff:66:f6:7c: 77:54:ff:8c:b3:39:e5:b9:f6:2f:64:25:5e:18:c0:1c:d5:2f: 6d:39:55:3d:c9:25:88:42:89:25:10:df:b8:46:50:b1:ce:8b: f0:0b:7e:2e:5e:40:13:6e:24:c5:8c:e0:e5:86:4e:f0:d2:ea: e5:1d:ff:4a:77:f9:60:7b:c2:42:a4:63:73:63:6d:3c:62:82: bd:01:08:c6:b0:62:54:a9:07:35:cd:74:88:91:a4:6d:19:e7: a0:5d:de:9f:f9:f0:ec:40:8c:9b:ff:62:b6:25:84:c1:95:f2: bc:1f:cf:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUQxNjExMC8GA1UEBRMoNjEzNTQ5QThENTk2MzczRDg2NUEyMjBFMkVCMUE4NjA0 QkQ3NTE4QTAeFw0yNDA1MTkwODAzNDVaFw0yNDA1MjYwODAzNDVaMBgxFjAUBgNV BAMTDTY2NDliMjYxLWJmMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgwMx1uiV/MLyyhvoEz1ympDN0IlOtg1viN6MPkP9sXOQkZGwK/JMOvKc0FBzS TyThjqtpkh8uvDS18QEvCfJLJkoY7O6QbIvQnfge1uza8N/ax/Ml4T3sTBVxikgs AWCSvB54AJoMCez+uWibMhX29AagxjiMynP0jD8gQsQJXWKutf02IRwoW+udJfw5 NcTaLCCUkVJceMcAl50e4jXO0DT1+65nYF7VLWKZWtVcd4ABQkC/r2+wnALS/d3A anRlAScLyUBl1LIVI//rnYrDx2SCBDiu92ngX2cuLGC04V59qZVtsiiL6009fFns NWMzvKnyW/eXXfjzahUao2L1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUszCfZDaR wi96uTgoY2cMx6PGfEEwHwYDVR0jBBgwFoAUYTVJqNWWNz2GWiIOLrGoYEvXUYow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxRDE2LzZFQTMwQjAyQUU5 QzExRUU5MTFBRkI2M0M0RjlBRTAyL1lUVkpxTldXTnoyR1dpSU9MckdvWUV2WFVZ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVRWSnFOV1dOejJHV2lJT0xyR29ZRXZYVVlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx RDE2LzZFQTMwQjAyQUU5QzExRUU5MTFBRkI2M0M0RjlBRTAyL1lUVkpxTldXTnoy R1dpSU9MckdvWUV2WFVZby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHl5vQLkFO319uRXQ2Nwa4IJPzS9Lz5izRMqGlWAFoYzL2cmhKOEpyL3 58VoAY5RPHf+XOI4yQUja/s+/4sUEYBptp2+P2AoY+GKc2YhJ/QdluqIGmb5UIH7 //V3viO0gg8sbsAE+hfpVhPu5KdWqwIu3p/sEVVby6Ykdwut0Aq/rlUTzmve/+S7 +rvh/2b2fHdU/4yzOeW59i9kJV4YwBzVL205VT3JJYhCiSUQ37hGULHOi/ALfi5e QBNuJMWM4OWGTvDS6uUd/0p3+WB7wkKkY3NjbTxigr0BCMawYlSpBzXNdIiRpG0Z 56Bd3p/58OxAjJv/YrYlhMGV8rwfz0A= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org