$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json) Hash identifier: znHpb01EAXZlauJqBAJNBjvIg9w265KxmvPUFkZXvW4= Subject key identifier: 26:07:37:0C:61:81:79:95:21:C7:6B:53:0E:9A:76:B2:43:CA:57:2B Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft Manifest number: 92 Signing time: Sun 19 May 2024 07:01:35 +0000 Manifest this update: Sun 19 May 2024 07:01:35 +0000 Manifest next update: Sun 26 May 2024 07:01:35 +0000 Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: 2NasQUNjl3UWO5umREnfYA9jb1lFrwvJzxX1vsT1DNY=) 2: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: Rj8n+2yGLpPEffYtU7Pl0JRlS/00Rv2udr91N57/9aM=) 3: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: VOO81YLZgrQRR5RDmj4vTZYmlI+0Z7rKn5nwx1kKVSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Validity Not Before: May 19 07:01:35 2024 GMT Not After : May 26 07:01:35 2024 GMT Subject: CN=6649a3cf-1aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1f:97:08:16:11:f8:48:8e:d6:4d:36:e9:58: fe:aa:14:6d:e8:c2:3f:42:a4:bd:40:c7:e5:73:0c: 8f:4b:95:d2:4b:0f:ab:54:29:08:54:11:83:b1:90: 31:45:1f:57:0e:38:98:ce:49:02:0d:ac:a1:fb:99: 13:ba:6f:54:e5:ef:eb:7c:3f:d5:bf:1f:3f:f9:d5: 85:b8:ac:f3:2c:e2:c0:c4:e5:f7:b9:5a:30:bb:8f: d1:2b:ef:b9:2f:74:53:0a:44:3a:f6:69:30:28:f3: 78:8d:12:f5:f5:95:ca:a7:5c:15:8e:23:00:24:8a: e8:22:4c:ab:7e:bd:5d:dd:3f:7c:23:34:16:5c:94: fb:88:10:32:b5:fe:64:33:8a:59:2f:9e:61:d7:ea: b2:ae:13:1f:18:39:56:f8:87:59:39:57:a5:e6:34: fd:37:7a:6b:02:30:af:4b:be:80:cf:11:01:81:60: 55:ec:7b:ec:2c:86:81:95:5e:e9:5a:2a:8d:11:e5: c1:81:7d:5b:60:5b:24:a0:e3:06:d4:1a:91:96:de: 8f:7a:ed:21:b4:55:5d:2f:8e:64:30:80:f3:64:6c: b4:5a:2b:43:95:26:04:ed:ab:c4:ad:39:51:3d:57: 8b:67:47:56:d7:a7:40:f8:7b:a8:12:90:9d:81:df: d5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:07:37:0C:61:81:79:95:21:C7:6B:53:0E:9A:76:B2:43:CA:57:2B X509v3 Authority Key Identifier: keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:10:02:94:52:2d:0e:09:24:85:28:30:bb:50:9f:a0:16:c0: 96:9a:ee:c8:50:3e:6b:eb:6a:61:c4:9e:7f:00:ed:73:b9:22: 4e:cc:2c:3d:73:1d:a0:ef:30:da:b8:f4:eb:77:1b:f1:e9:c2: f9:c8:8b:9b:6c:87:9f:13:33:2b:ed:15:61:39:4f:e3:9d:80: ed:d2:05:fd:45:18:16:d5:f7:8b:9c:76:74:cc:cc:6c:12:09: 7f:0e:61:6e:85:bf:aa:74:95:42:55:b2:6f:91:a2:90:c3:aa: 04:4e:b9:d4:4d:3a:10:cb:2a:e2:a1:d2:47:90:4c:cc:1c:fd: ca:5c:55:70:49:73:23:bd:48:32:87:5d:39:e7:8f:67:ad:c1: c4:ad:4f:a5:b9:f9:46:e2:b2:c4:e0:a5:8f:bc:03:46:07:79: b9:1b:c2:e1:b7:01:53:50:54:82:e6:45:0e:16:f5:9f:7a:fa: 29:82:3c:25:c7:50:29:57:9d:c3:18:34:b8:1c:73:4a:1a:48: f9:a9:82:22:de:a2:b7:6c:81:9f:cc:80:5f:1d:e2:92:dc:2f: 32:f6:ec:ee:a5:36:3c:2e:9b:51:be:9c:cc:e0:1c:cf:60:9e: d5:f3:9b:1c:2d:d2:e6:c6:ba:07:4e:06:0c:5c:b7:78:4c:ab: da:9b:a3:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE RjAzRDcyNDcwHhcNMjQwNTE5MDcwMTM1WhcNMjQwNTI2MDcwMTM1WjAYMRYwFAYD VQQDEw02NjQ5YTNjZi0xYWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvx+XCBYR+EiO1k026Vj+qhRt6MI/QqS9QMflcwyPS5XSSw+rVCkIVBGDsZAx RR9XDjiYzkkCDayh+5kTum9U5e/rfD/Vvx8/+dWFuKzzLOLAxOX3uVowu4/RK++5 L3RTCkQ69mkwKPN4jRL19ZXKp1wVjiMAJIroIkyrfr1d3T98IzQWXJT7iBAytf5k M4pZL55h1+qyrhMfGDlW+IdZOVel5jT9N3prAjCvS76AzxEBgWBV7HvsLIaBlV7p WiqNEeXBgX1bYFskoOMG1BqRlt6Peu0htFVdL45kMIDzZGy0WitDlSYE7avErTlR PVeLZ0dW16dA+HuoEpCdgd/VMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYHNwxh gXmVIcdrUw6adrJDylcrMB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUQ5Mi8zNTc3OThCMDQwMkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQ bUVKcFBUaGhHVkxmQTlja2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQEAKUUi0OCSSFKDC7UJ+gFsCWmu7IUD5r62phxJ5/AO1zuSJOzCw9 cx2g7zDauPTrdxvx6cL5yIubbIefEzMr7RVhOU/jnYDt0gX9RRgW1feLnHZ0zMxs Egl/DmFuhb+qdJVCVbJvkaKQw6oETrnUTToQyyriodJHkEzMHP3KXFVwSXMjvUgy h105549nrcHErU+luflG4rLE4KWPvANGB3m5G8LhtwFTUFSC5kUOFvWfevopgjwl x1ApV53DGDS4HHNKGkj5qYIi3qK3bIGfzIBfHeKS3C8y9uzupTY8LptRvpzM4BzP YJ7V85scLdLmxroHTgYMXLd4TKvam6Pn -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org