$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft File: YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json) Hash identifier: 464qgnHEH7qVUmWiDxtDP/eDbxrd6pe9mQdKcH8VqUk= Subject key identifier: 29:DC:8D:4E:D9:6E:62:D8:0B:1E:97:92:F0:98:72:3A:55:76:98:65 Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 Certificate issuer: /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft Manifest number: 0110 Signing time: Sun 19 May 2024 05:26:46 +0000 Manifest this update: Sun 19 May 2024 05:26:46 +0000 Manifest next update: Sun 26 May 2024 05:26:46 +0000 Files and hashes: 1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: S2GAA/1CCA1V96rtLBbPapzSLI9ZvzGEoFSYN7Yo21A=) 2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: KyJK9T3ePPU2nyDMiWpfHVl65dIpgfxV39oqdgnNreQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Validity Not Before: May 19 05:26:46 2024 GMT Not After : May 26 05:26:46 2024 GMT Subject: CN=66498d96-2796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:a5:bb:03:17:8b:a2:6e:5a:fc:20:17:cd: 8d:58:d4:e3:df:d2:58:03:9c:dc:b8:0f:45:fa:ae: 61:b8:af:45:f0:76:47:3c:bb:ca:9f:2c:d1:5c:5f: d5:0f:ec:98:d0:77:b7:f7:6b:d9:f1:29:3e:06:0b: 4a:09:98:b5:a9:37:0c:ce:38:25:c5:d2:b3:14:b3: fe:75:53:ac:03:1d:25:b2:0c:8b:32:cc:fc:a0:26: ca:bf:8f:28:ec:e2:3a:4d:3a:67:b0:f9:d1:cc:57: d4:00:f3:19:1a:a4:91:b3:d4:77:ac:b0:fe:30:c5: 89:b6:58:72:73:21:0b:52:95:ea:ed:4a:c1:37:13: 44:14:e4:e4:77:5d:b3:a4:91:a7:31:30:7f:54:6e: 71:de:4b:bc:fb:91:3a:72:1f:4a:e4:a9:a0:28:87: d9:96:5c:bf:c0:15:d3:23:2d:54:d4:95:ba:bc:51: 18:ce:99:b8:24:66:c9:5d:aa:57:84:39:a7:2a:f9: 06:a2:d1:15:ea:d0:bc:7d:4d:ec:f4:29:22:38:a7: df:da:23:43:5e:d5:db:72:3d:ab:5c:fb:e3:b8:11: ae:d8:fa:e1:7d:6e:15:09:84:41:80:72:72:4a:f8: c1:16:ab:61:7e:fd:8e:bb:a4:ef:37:54:d8:d0:56: 31:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DC:8D:4E:D9:6E:62:D8:0B:1E:97:92:F0:98:72:3A:55:76:98:65 X509v3 Authority Key Identifier: keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:06:41:15:bb:1e:d8:07:e8:46:04:05:1c:e4:d1:47:60:6f: df:c3:2e:1d:66:b0:cd:08:0e:4a:ec:32:00:be:07:03:4c:ea: d6:bf:b4:71:fb:ae:ba:fa:68:fb:a5:d8:15:81:9d:c8:a6:2c: c3:7f:38:76:84:a7:2e:fd:8f:8b:36:d4:7e:dc:5f:8d:ed:d9: b7:dc:5c:14:9a:02:11:27:da:a0:46:a3:e4:73:92:aa:37:15: 0a:47:2c:32:dd:ae:00:97:f2:21:b2:9f:43:2a:24:4a:ca:e7: 37:4a:e3:a6:ff:87:80:f8:0d:3a:58:14:47:7a:cf:87:9d:84: 37:57:60:ca:89:f1:2c:02:e5:41:9d:97:8f:ce:5a:86:79:7d: 9b:e6:f2:6b:73:6f:66:d5:56:0d:dc:e4:c2:55:35:6a:5d:17: 39:22:dc:d6:35:f4:13:19:5c:95:7b:3c:8d:b8:08:9e:2a:e9: 57:92:79:4e:f1:44:06:0d:4c:22:0e:54:67:9b:73:8c:85:87: 94:b6:db:77:35:48:6c:c9:d2:94:e2:73:66:35:e7:05:23:32: 72:a5:13:54:04:6f:ec:2e:32:ca:6b:ef:84:9e:4e:1c:7c:85: 20:1a:42:68:9b:3c:f8:19:08:4d:eb:8a:0e:9d:ea:b8:a1:a2: b4:35:30:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwQUExMTAvBgNVBAUTKDYwQkFEQzA0MkMzNzdCODZDMERDOUVFQjg5NTEyNzI1 Q0UzRTIzMzYwHhcNMjQwNTE5MDUyNjQ2WhcNMjQwNTI2MDUyNjQ2WjAYMRYwFAYD VQQDEw02NjQ5OGQ5Ni0yNzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlKluwMXi6JuWvwgF82NWNTj39JYA5zcuA9F+q5huK9F8HZHPLvKnyzRXF/V D+yY0He392vZ8Sk+BgtKCZi1qTcMzjglxdKzFLP+dVOsAx0lsgyLMsz8oCbKv48o 7OI6TTpnsPnRzFfUAPMZGqSRs9R3rLD+MMWJtlhycyELUpXq7UrBNxNEFOTkd12z pJGnMTB/VG5x3ku8+5E6ch9K5KmgKIfZlly/wBXTIy1U1JW6vFEYzpm4JGbJXapX hDmnKvkGotEV6tC8fU3s9CkiOKff2iNDXtXbcj2rXPvjuBGu2PrhfW4VCYRBgHJy SvjBFqthfv2Ou6TvN1TY0FYxVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCncjU7Z bmLYCx6XkvCYcjpVdphlMB8GA1UdIwQYMBaAFGC63AQsN3uGwNye64lRJyXOPiM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8yQzc1RkVDODdB M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0YkEzSjdyaVZFbkpjNC1J elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lMcmNCQ3czZTRiQTNKN3JpVkVuSmM0LUl6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBBQS8yQzc1RkVDODdBM0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0 YkEzSjdyaVZFbkpjNC1JelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdBkEVux7YB+hGBAUc5NFHYG/fwy4dZrDNCA5K7DIAvgcDTOrWv7Rx +666+mj7pdgVgZ3IpizDfzh2hKcu/Y+LNtR+3F+N7dm33FwUmgIRJ9qgRqPkc5Kq NxUKRywy3a4Al/Ihsp9DKiRKyuc3SuOm/4eA+A06WBRHes+HnYQ3V2DKifEsAuVB nZePzlqGeX2b5vJrc29m1VYN3OTCVTVqXRc5ItzWNfQTGVyVezyNuAieKulXknlO 8UQGDUwiDlRnm3OMhYeUttt3NUhsydKU4nNmNecFIzJypRNUBG/sLjLKa++Enk4c fIUgGkJomzz4GQhN64oOneq4oaK0NTCg -----END CERTIFICATE-----Generated at Sun May 19 07:40:41 2024 by rpki-client on console-fra.rpki-client.org