$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft File: yUpKujMViTObRlHAW5L_4BvLNMk.mft (raw, json) Hash identifier: GvQHrB4M4dTJhVpU3jrZ3kOJUf2Loiw/1uApUWsDaXo= Subject key identifier: A8:D5:33:CE:32:9E:6D:38:D2:68:F0:2E:53:2B:21:35:E9:14:6B:55 Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 Certificate issuer: /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft Manifest number: 64 Signing time: Sun 19 May 2024 07:37:50 +0000 Manifest this update: Sun 19 May 2024 07:37:50 +0000 Manifest next update: Sun 26 May 2024 07:37:50 +0000 Files and hashes: 1: yUpKujMViTObRlHAW5L_4BvLNMk.crl (hash: JrVl2rhPr5IRdct87w3tzzljDiq6dADX6Cu7StcUNqU=) 2: 3863960C7E0311EE8BCA7D33C4F9AE02.roa (hash: KLVSwJ7SZxtidXSFtuAYDe/fMNZg+4aJlJuDECdA1Pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Validity Not Before: May 19 07:37:50 2024 GMT Not After : May 26 07:37:50 2024 GMT Subject: CN=6649ac4e-7ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b4:17:7f:7b:e2:47:7c:66:73:55:44:4e:d1: d1:23:29:21:5f:9f:fa:ae:b6:2a:cd:79:3b:7b:a2: 84:c8:f1:be:89:dd:70:36:e5:2a:c2:43:5f:f8:58: 9a:86:10:8c:16:12:2f:1c:b4:53:78:bc:73:ed:29: 96:0d:e3:f8:f0:c2:ca:ec:0d:ba:48:8f:c0:14:bb: 07:a3:26:2c:ca:cd:a0:ca:a3:36:79:d4:34:8f:98: 2c:c1:ca:7e:75:3a:c8:3e:f4:df:65:46:4b:32:b7: 62:84:c0:16:e9:e2:4e:73:fe:b7:9a:8c:b3:58:92: 88:31:8c:44:35:6b:29:e9:35:35:10:6e:53:28:e2: d2:ce:7c:bc:a8:cd:b4:83:2f:c3:65:d9:68:30:a5: 7a:05:da:4d:77:7c:9e:04:29:49:ca:ed:00:34:9a: e6:7c:70:92:a7:35:dc:d5:e0:86:a8:a1:33:b4:c5: 67:f9:4c:0e:96:f5:5c:82:f1:38:0b:5e:be:4e:5a: 10:8f:7e:ac:51:0d:87:4b:c7:dc:79:10:7a:96:fe: 0f:f3:8c:ae:1f:12:4e:a0:d9:6e:c4:a2:34:41:0c: 7b:55:b1:16:c9:1a:36:38:43:0c:9f:ce:66:f7:ae: e1:4b:12:8d:0b:8d:5a:2c:f8:66:20:c7:ef:e9:54: c2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D5:33:CE:32:9E:6D:38:D2:68:F0:2E:53:2B:21:35:E9:14:6B:55 X509v3 Authority Key Identifier: keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:73:4f:d6:3c:84:97:f9:78:e2:8a:fd:62:a2:71:6b:1b:b2: 2a:f4:4a:e1:d9:e4:91:42:69:aa:32:09:03:4a:15:00:79:8d: 22:a6:1f:f1:35:4e:1a:a8:f3:94:74:bc:c1:4a:26:9c:45:08: 2d:19:68:a3:fc:f3:63:a9:f3:48:7a:9e:c0:87:02:20:23:d7: 88:72:e2:92:03:27:2b:5b:ad:56:34:1d:f5:2f:16:84:8e:63: 3a:ba:f4:ac:f8:c3:84:79:f2:7f:58:71:b7:54:5f:de:a8:c4: 66:9d:4b:08:4d:c6:07:15:45:05:fd:52:a5:f1:17:44:54:6e: 89:d3:5e:da:35:d1:7c:b9:a2:2b:a8:64:cb:63:61:0b:89:d5: 2e:20:f1:94:a3:7a:df:d3:fa:61:b2:4d:98:85:0f:7b:1b:b3: b2:33:c7:9a:19:ca:e5:ca:d3:30:15:1d:b2:4c:82:92:b9:81: 07:95:be:00:df:11:a2:db:93:55:ad:25:a1:56:e4:38:36:01: 7f:2f:44:dc:04:79:9d:81:5f:2d:55:c6:1c:99:94:d4:37:74: 7c:fd:26:52:11:5c:f9:0d:aa:22:17:60:cc:e8:75:6c:01:10: c0:21:8e:1c:3e:bf:c4:34:38:bb:4a:3b:e0:d7:95:34:b9:b5: 52:85:94:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0UyMzExMC8GA1UEBRMoQzk0QTRBQkEzMzE1ODkzMzlCNDY1MUMwNUI5MkZGRTAx QkNCMzRDOTAeFw0yNDA1MTkwNzM3NTBaFw0yNDA1MjYwNzM3NTBaMBgxFjAUBgNV BAMTDTY2NDlhYzRlLTdlYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCltBd/e+JHfGZzVURO0dEjKSFfn/qutirNeTt7ooTI8b6J3XA25SrCQ1/4WJqG EIwWEi8ctFN4vHPtKZYN4/jwwsrsDbpIj8AUuwejJizKzaDKozZ51DSPmCzByn51 Osg+9N9lRksyt2KEwBbp4k5z/reajLNYkogxjEQ1aynpNTUQblMo4tLOfLyozbSD L8Nl2WgwpXoF2k13fJ4EKUnK7QA0muZ8cJKnNdzV4IaooTO0xWf5TA6W9VyC8TgL Xr5OWhCPfqxRDYdLx9x5EHqW/g/zjK4fEk6g2W7EojRBDHtVsRbJGjY4Qwyfzmb3 ruFLEo0LjVos+GYgx+/pVMK/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqNUzzjKe bTjSaPAuUyshNekUa1UwHwYDVR0jBBgwFoAUyUpKujMViTObRlHAW5L/4BvLNMkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3RTIzL0JFOTdCMEE2N0Q2 NzExRUVCMDZBNDMxMkM0RjlBRTAyL3lVcEt1ak1WaVRPYlJsSEFXNUxfNEJ2TE5N ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVVwS3VqTVZpVE9iUmxIQVc1TF80QnZMTk1rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 RTIzL0JFOTdCMEE2N0Q2NzExRUVCMDZBNDMxMkM0RjlBRTAyL3lVcEt1ak1WaVRP YlJsSEFXNUxfNEJ2TE5Nay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC9zT9Y8hJf5eOKK/WKicWsbsir0SuHZ5JFCaaoyCQNKFQB5jSKmH/E1 Thqo85R0vMFKJpxFCC0ZaKP882Op80h6nsCHAiAj14hy4pIDJytbrVY0HfUvFoSO Yzq69Kz4w4R58n9YcbdUX96oxGadSwhNxgcVRQX9UqXxF0RUbonTXto10Xy5oiuo ZMtjYQuJ1S4g8ZSjet/T+mGyTZiFD3sbs7Izx5oZyuXK0zAVHbJMgpK5gQeVvgDf EaLbk1WtJaFW5Dg2AX8vRNwEeZ2BXy1VxhyZlNQ3dHz9JlIRXPkNqiIXYMzodWwB EMAhjhw+v8Q0OLtKO+DXlTS5tVKFlEo= -----END CERTIFICATE-----Generated at Sun May 19 08:25:03 2024 by rpki-client on console-ams.rpki-client.org