$ rpki-client -vvf rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft File: Yt792dXXaz4eaPmBKVcVDcD1PF0.mft (raw, json) Hash identifier: COQmgJYlsSa5X+WADC7G8zYcqouhfUCsOmtAZWco7ts= Subject key identifier: CD:B5:A4:74:FD:C0:B7:A4:25:0E:E9:F7:6C:B8:F3:D6:0D:B0:DD:80 Authority key identifier: 62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D Certificate issuer: /CN=A9195456/serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft Manifest number: 0330 Signing time: Sun 19 May 2024 03:00:17 +0000 Manifest this update: Sun 19 May 2024 03:00:17 +0000 Manifest next update: Sun 26 May 2024 03:00:17 +0000 Files and hashes: 1: Yt792dXXaz4eaPmBKVcVDcD1PF0.crl (hash: s1f0yl0jb8VPcEAweeTjKw5n8TDXuBlVGjLzdNLVcCk=) 2: 766B426A7A9011ECA266DE36C4F9AE02.roa (hash: 42rM/YXw/GYdbNXckygMx1iVCDC/xjgnKGAPtnBzAdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195456/serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D Validity Not Before: May 19 03:00:17 2024 GMT Not After : May 26 03:00:17 2024 GMT Subject: CN=66496b41-9a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f4:01:ab:fa:e5:2b:b4:f3:d2:04:eb:88:95: e7:df:37:7b:7c:f3:35:b8:e3:28:a5:36:29:19:a5: 5d:a9:29:b3:68:3e:ca:56:d5:a3:f5:07:f5:4f:40: 10:c2:97:bb:46:e7:a7:e8:fe:14:67:2a:41:e0:7b: 36:43:95:24:85:02:70:15:f1:08:76:4a:3b:2f:8c: 86:c0:04:fc:74:2d:47:7e:09:9a:c6:46:b4:7a:78: 4f:6a:ed:09:83:f3:c9:58:57:af:53:04:29:0d:d0: fb:7d:4a:90:66:00:6a:c5:bc:ea:f5:d1:e3:8b:61: 91:38:39:b0:28:1c:4b:30:52:52:21:84:5b:00:3b: 44:45:c5:68:6e:ef:33:e4:8f:bb:74:53:5d:54:9c: d6:60:1c:4c:d1:c2:60:30:95:2a:0f:2f:77:75:f8: b4:56:1f:7e:f3:86:a9:0d:f4:ef:ba:11:bc:50:9f: c8:e8:63:d9:f9:2d:56:5f:83:2d:8f:51:62:d7:ad: e1:0b:5d:d8:18:8d:7d:18:62:be:b6:5c:79:57:cd: 89:93:7b:2a:27:f5:39:9a:e4:9c:58:c7:5a:a6:4c: 5b:34:19:87:e1:fc:b1:45:15:5f:cf:28:bb:db:92: ba:99:b7:a5:6b:76:fd:5d:4e:38:2e:ab:3f:c8:84: 78:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B5:A4:74:FD:C0:B7:A4:25:0E:E9:F7:6C:B8:F3:D6:0D:B0:DD:80 X509v3 Authority Key Identifier: keyid:62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:93:da:d3:db:a7:d2:85:dd:4e:3f:f9:61:eb:db:70:4e:54: 16:21:20:37:d2:e0:cf:55:7a:14:78:a7:ce:02:c1:dc:75:ed: a3:37:7a:12:7d:f2:f7:fb:3f:4c:5f:73:8d:8e:cb:c2:ff:52: 9e:77:ef:f4:37:43:83:0e:2c:2e:9a:9e:ea:05:45:f0:b8:f7: c8:ae:2b:ad:2e:52:57:19:a2:81:63:33:be:95:68:98:39:61: 62:37:03:af:09:90:db:c5:72:ef:be:f7:0e:b8:b2:3f:0c:78: 1e:34:96:0f:87:fe:38:85:96:2d:ed:1b:ea:c1:46:a2:ad:4b: ad:ce:91:1a:1c:34:49:9b:63:af:61:b6:ff:ef:cf:93:76:2e: ed:0b:a5:a3:e1:b9:b4:a6:6b:c3:be:e6:48:af:9f:33:f7:12: 7b:6a:ec:1f:de:93:c7:7c:bd:ec:58:49:10:1f:cd:cc:4a:c6: 61:2d:ea:54:3a:57:22:96:a0:4c:0d:0b:92:18:29:63:ef:a3: 48:ec:af:3e:56:53:ae:90:e4:0b:e8:ed:df:71:eb:fc:18:e8: 3f:71:0d:91:1b:e6:e4:fb:dd:46:c5:ca:f8:f4:1f:31:49:5f: 7f:59:0e:0e:a8:d3:84:23:64:9e:6c:26:03:61:b7:94:ec:1b: 64:55:9e:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0NTYxMTAvBgNVBAUTKDYyREVGREQ5RDVENzZCM0UxRTY4Rjk4MTI5NTcxNTBE QzBGNTNDNUQwHhcNMjQwNTE5MDMwMDE3WhcNMjQwNTI2MDMwMDE3WjAYMRYwFAYD VQQDEw02NjQ5NmI0MS05YTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPQBq/rlK7Tz0gTriJXn3zd7fPM1uOMopTYpGaVdqSmzaD7KVtWj9Qf1T0AQ wpe7Ruen6P4UZypB4Hs2Q5UkhQJwFfEIdko7L4yGwAT8dC1Hfgmaxka0enhPau0J g/PJWFevUwQpDdD7fUqQZgBqxbzq9dHji2GRODmwKBxLMFJSIYRbADtERcVobu8z 5I+7dFNdVJzWYBxM0cJgMJUqDy93dfi0Vh9+84apDfTvuhG8UJ/I6GPZ+S1WX4Mt j1Fi163hC13YGI19GGK+tlx5V82Jk3sqJ/U5muScWMdapkxbNBmH4fyxRRVfzyi7 25K6mbela3b9XU44Lqs/yIR4awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM21pHT9 wLekJQ7p92y489YNsN2AMB8GA1UdIwQYMBaAFGLe/dnV12s+Hmj5gSlXFQ3A9Txd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTQ1Ni85QzQ1QjlCNDdB OEQxMUVDODRCOTA1MzRDNEY5QUUwMi9ZdDc5MmRYWGF6NGVhUG1CS1ZjVkRjRDFQ RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l0NzkyZFhYYXo0ZWFQbUJLVmNWRGNEMVBGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTQ1Ni85QzQ1QjlCNDdBOEQxMUVDODRCOTA1MzRDNEY5QUUwMi9ZdDc5MmRYWGF6 NGVhUG1CS1ZjVkRjRDFQRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRk9rT26fShd1OP/lh69twTlQWISA30uDPVXoUeKfOAsHcde2jN3oS ffL3+z9MX3ONjsvC/1Ked+/0N0ODDiwump7qBUXwuPfIriutLlJXGaKBYzO+lWiY OWFiNwOvCZDbxXLvvvcOuLI/DHgeNJYPh/44hZYt7RvqwUairUutzpEaHDRJm2Ov Ybb/78+Tdi7tC6Wj4bm0pmvDvuZIr58z9xJ7auwf3pPHfL3sWEkQH83MSsZhLepU OlcilqBMDQuSGClj76NI7K8+VlOukOQL6O3fcev8GOg/cQ2RG+bk+91Gxcr49B8x SV9/WQ4OqNOEI2SebCYDYbeU7BtkVZ7V -----END CERTIFICATE-----Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org