$ rpki-client -vvf rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft File: Yv18a2FzzDKVZktYaAWS-ybSuHo.mft (raw, json) Hash identifier: no7n4ZTFSI5Wli1sHndXzksOR07hhDWR99RtB3BiegQ= Subject key identifier: CF:75:D6:21:30:4F:34:CE:77:72:62:DC:50:8A:49:75:31:E7:CF:97 Authority key identifier: 62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A Certificate issuer: /CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Certificate serial: 069F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft Manifest number: 0697 Signing time: Sat 18 May 2024 23:20:00 +0000 Manifest this update: Sat 18 May 2024 23:20:00 +0000 Manifest next update: Sat 25 May 2024 23:20:00 +0000 Files and hashes: 1: Yv18a2FzzDKVZktYaAWS-ybSuHo.crl (hash: rxBIdaXqqwbXLmMQhiy7HLpR9guk60KFTGeeyu2ijdg=) 2: FACB1DC6595911ECBE6ACC6BC4F9AE02.roa (hash: 3J8UKsSXxzfM+FPcnkprxkh+voSXj2l401+jnG4rh1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1695 (0x69f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Validity Not Before: May 18 23:20:00 2024 GMT Not After : May 25 23:20:00 2024 GMT Subject: CN=664937a0-8dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:73:95:b6:12:1e:4e:80:39:41:01:b1:45:21: f8:72:e5:8c:c3:b5:04:24:40:3c:db:f8:21:3c:a7: fb:c8:f9:5b:b2:fd:76:06:22:12:66:12:53:15:6e: 66:2c:49:8d:0b:0d:bc:e7:b2:04:65:7c:e2:4c:c1: 32:04:65:12:78:db:9e:75:90:91:63:3b:59:01:b4: 56:19:f1:65:f9:01:e2:ab:a0:52:f6:37:c8:e6:46: d0:df:26:4e:bf:22:f5:4e:85:1f:fa:0e:98:4f:28: 0b:47:9e:c5:f6:04:5f:fe:05:53:92:e8:b3:33:66: cd:58:87:33:68:a2:8e:52:02:2e:ee:eb:b7:d2:86: 0a:06:01:d7:09:63:c0:c9:41:ed:2e:45:47:2e:69: 2c:3c:e7:75:ad:14:29:fe:ab:23:34:7a:1d:2b:7d: 3f:0b:eb:59:07:00:4e:67:81:8e:b7:cd:69:9d:01: d5:57:4a:7a:47:bc:e9:b1:2d:28:cb:cd:38:e5:06: fc:d3:37:4f:ab:02:d4:84:28:b8:8c:2c:88:eb:1e: 6b:a0:ff:c8:e0:75:e9:cd:2f:69:31:b6:58:b5:a4: 0e:cc:b0:e7:44:20:b8:0c:58:58:bc:be:c5:9f:79: cd:0c:58:65:33:d4:e6:0d:24:8f:00:f2:3f:2a:60: 12:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:75:D6:21:30:4F:34:CE:77:72:62:DC:50:8A:49:75:31:E7:CF:97 X509v3 Authority Key Identifier: keyid:62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:3a:b3:f7:ad:6f:86:78:07:ad:1a:ea:cf:af:98:9c:20:fc: 07:95:a8:4f:71:68:29:26:d6:2d:ba:b7:e9:35:38:92:ec:8a: c1:9e:47:da:7f:24:ab:95:6c:2b:d7:a5:0d:97:82:87:7f:4e: 04:bd:97:bc:dc:80:c0:2d:28:52:aa:79:cd:0a:95:59:ac:f6: 1a:06:08:4f:0e:bf:6e:73:33:6e:c9:63:68:9e:d8:62:ac:00: d5:0d:75:17:e8:ca:4c:23:b8:5b:e6:52:42:f1:33:9d:ad:39: 26:47:95:7b:00:d4:4c:92:02:a8:32:d4:49:7e:02:43:5d:0d: dc:c4:f1:e4:e8:9e:82:56:ca:c5:95:b5:2d:0c:bc:fc:90:1a: f3:53:f9:16:8c:39:4d:1d:1b:6e:5a:77:fd:9b:29:e1:3b:9a: de:14:b2:9a:0f:2e:ae:d5:15:e2:e7:d5:42:75:bc:b2:e6:b5: 35:90:03:dd:89:4c:c4:4c:35:8a:7a:b1:f7:59:5c:8f:f7:c3: b9:11:98:b2:a9:fa:7d:66:07:e7:09:7b:a5:43:7f:75:f1:0d: c2:c9:21:90:3d:ba:dc:b8:af:21:37:af:cc:7c:4e:94:57:91: 0a:be:19:07:20:03:26:08:0d:52:f2:5f:b4:a1:4e:7c:b5:81: e4:38:e6:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4OEExMTAvBgNVBAUTKDYyRkQ3QzZCNjE3M0NDMzI5NTY2NEI1ODY4MDU5MkZC MjZEMkI4N0EwHhcNMjQwNTE4MjMyMDAwWhcNMjQwNTI1MjMyMDAwWjAYMRYwFAYD VQQDEw02NjQ5MzdhMC04ZGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XOVthIeToA5QQGxRSH4cuWMw7UEJEA82/ghPKf7yPlbsv12BiISZhJTFW5m LEmNCw2857IEZXziTMEyBGUSeNuedZCRYztZAbRWGfFl+QHiq6BS9jfI5kbQ3yZO vyL1ToUf+g6YTygLR57F9gRf/gVTkuizM2bNWIczaKKOUgIu7uu30oYKBgHXCWPA yUHtLkVHLmksPOd1rRQp/qsjNHodK30/C+tZBwBOZ4GOt81pnQHVV0p6R7zpsS0o y8045Qb80zdPqwLUhCi4jCyI6x5roP/I4HXpzS9pMbZYtaQOzLDnRCC4DFhYvL7F n3nNDFhlM9TmDSSPAPI/KmASUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM911iEw TzTOd3Ji3FCKSXUx58+XMB8GA1UdIwQYMBaAFGL9fGthc8wylWZLWGgFkvsm0rh6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg4QS85QUVGMjNEQzI0 NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpES1Zaa3RZYUFXUy15YlN1 SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l2MThhMkZ6ekRLVlprdFlhQVdTLXliU3VIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg4QS85QUVGMjNEQzI0NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpE S1Zaa3RZYUFXUy15YlN1SG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdOrP3rW+GeAetGurPr5icIPwHlahPcWgpJtYturfpNTiS7IrBnkfa fySrlWwr16UNl4KHf04EvZe83IDALShSqnnNCpVZrPYaBghPDr9uczNuyWNonthi rADVDXUX6MpMI7hb5lJC8TOdrTkmR5V7ANRMkgKoMtRJfgJDXQ3cxPHk6J6CVsrF lbUtDLz8kBrzU/kWjDlNHRtuWnf9mynhO5reFLKaDy6u1RXi59VCdbyy5rU1kAPd iUzETDWKerH3WVyP98O5EZiyqfp9ZgfnCXulQ3918Q3CySGQPbrcuK8hN6/MfE6U V5EKvhkHIAMmCA1S8l+0oU58tYHkOObC -----END CERTIFICATE-----Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org