$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft File: YC_0-oCgAKxh5tSrL3L72Wph-II.mft (raw, json) Hash identifier: jugPlE/T+GE30WnlVHzwjhL8TaRC2mGgLD/HBtFwDYk= Subject key identifier: 4D:EF:B9:A9:F6:11:2E:65:A9:74:C6:EE:1C:F6:4E:31:DE:CA:30:92 Authority key identifier: 60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 Certificate issuer: /CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft Manifest number: 01A4 Signing time: Sun 19 May 2024 04:36:50 +0000 Manifest this update: Sun 19 May 2024 04:36:50 +0000 Manifest next update: Sun 26 May 2024 04:36:50 +0000 Files and hashes: 1: YC_0-oCgAKxh5tSrL3L72Wph-II.crl (hash: z/MXpwlQORQ28kkFef9sgmPIf8ANNFwtdfroW9BjAGY=) 2: 008C0876148311ED856EF438C4F9AE02.roa (hash: 68yn6esfYF7k8DHdcZ+QsW2bvqfBfbyJ0wODOw/P5KY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Validity Not Before: May 19 04:36:50 2024 GMT Not After : May 26 04:36:50 2024 GMT Subject: CN=664981e2-cfa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:50:c0:e6:49:f3:98:92:b5:a5:78:8a:bf: 30:00:e9:6a:cd:49:82:23:ec:41:16:00:ef:48:ee: 28:7c:9c:b7:a0:45:82:af:03:f3:aa:b6:03:68:a4: 97:37:3d:6e:23:83:14:da:b1:07:a4:07:d0:d5:b4: 58:66:b0:2e:dc:9f:a7:42:f4:54:30:8d:0f:1a:f3: 20:22:c8:1d:a4:41:ee:26:27:b1:e8:47:10:88:27: 9c:98:56:ba:0e:84:ec:e6:0e:cc:ea:cf:1f:70:e4: a5:63:42:0b:10:b5:88:ef:ac:9f:99:d3:f0:68:db: 65:9b:6d:45:2d:71:40:65:df:5d:e4:fd:7e:aa:99: 70:40:5a:34:bf:f0:0a:dc:9d:09:3e:97:c9:9e:01: fa:41:a7:b0:70:cf:64:b9:c8:02:f3:42:b1:ea:c3: c7:2c:6f:05:57:d5:84:0f:fe:d1:f1:55:96:ac:a4: 6c:cd:3d:56:3f:51:12:54:ae:1e:61:d8:1c:53:cf: df:2d:39:03:c9:1d:a8:86:0d:97:ed:1d:e4:7b:24: ca:59:55:87:54:f7:7f:53:c1:24:24:b5:b6:46:4a: d0:37:00:f6:ff:f3:5c:1c:f3:20:63:70:1f:9c:4a: ff:a0:15:06:18:8a:5f:8a:b2:3c:da:c3:0c:73:a3: da:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EF:B9:A9:F6:11:2E:65:A9:74:C6:EE:1C:F6:4E:31:DE:CA:30:92 X509v3 Authority Key Identifier: keyid:60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:3b:fa:ec:42:32:a1:58:c9:db:f2:97:8e:a7:7f:c0:1f:13: da:32:e3:41:43:59:79:91:de:b0:5e:b0:9d:be:29:66:ca:a1: a6:e0:6d:ce:2e:98:ee:44:f3:2c:e9:88:ab:76:7f:af:64:e0: 5a:92:7a:ed:9f:99:a8:e0:2c:e2:77:49:f7:70:40:ba:34:54: 88:8e:5e:0d:22:81:59:7d:6c:f1:7e:c4:3e:d3:7b:d2:b8:60: 05:28:e1:da:02:3f:aa:2c:8c:34:f6:f8:8f:e9:45:64:e1:e8: 49:6b:fa:27:53:8d:d4:d4:ba:44:eb:7e:c0:2b:87:26:cb:fa: 69:8f:84:08:bc:64:73:60:62:d7:64:e0:45:ef:c0:9d:bf:79: 28:c6:27:f3:3e:ee:72:7f:de:9b:42:7b:5e:d7:7b:83:a9:71: 48:89:04:59:70:85:9d:fb:86:71:bd:85:a7:de:cb:09:ab:0e: ca:f0:6f:a8:05:ef:c3:90:7f:b6:2e:0c:59:d9:df:99:1f:7b: 3d:9f:94:32:62:80:82:c9:cf:ae:79:3c:4c:f9:6a:a8:ad:f6: 2a:bc:d6:05:c7:10:71:27:6e:97:b0:d4:06:0d:a0:59:ef:4f: 26:8a:b0:0e:9f:d0:6b:70:be:60:2b:ba:a5:29:13:11:52:1b: 47:ed:36:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOTMxMTAvBgNVBAUTKDYwMkZGNEZBODBBMDAwQUM2MUU2RDRBQjJGNzJGQkQ5 NkE2MUY4ODIwHhcNMjQwNTE5MDQzNjUwWhcNMjQwNTI2MDQzNjUwWjAYMRYwFAYD VQQDEw02NjQ5ODFlMi1jZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyp9QwOZJ85iStaV4ir8wAOlqzUmCI+xBFgDvSO4ofJy3oEWCrwPzqrYDaKSX Nz1uI4MU2rEHpAfQ1bRYZrAu3J+nQvRUMI0PGvMgIsgdpEHuJiex6EcQiCecmFa6 DoTs5g7M6s8fcOSlY0ILELWI76yfmdPwaNtlm21FLXFAZd9d5P1+qplwQFo0v/AK 3J0JPpfJngH6QaewcM9kucgC80Kx6sPHLG8FV9WED/7R8VWWrKRszT1WP1ESVK4e YdgcU8/fLTkDyR2ohg2X7R3keyTKWVWHVPd/U8EkJLW2RkrQNwD2//NcHPMgY3Af nEr/oBUGGIpfirI82sMMc6PafQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3vuan2 ES5lqXTG7hz2TjHeyjCSMB8GA1UdIwQYMBaAFGAv9PqAoACsYebUqy9y+9lqYfiC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5My9BOUEzOEJCRTE0 N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FLeGg1dFNyTDNMNzJXcGgt SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDXzAtb0NnQUt4aDV0U3JMM0w3MldwaC1JSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5My9BOUEzOEJCRTE0N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FL eGg1dFNyTDNMNzJXcGgtSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2O/rsQjKhWMnb8peOp3/AHxPaMuNBQ1l5kd6wXrCdvilmyqGm4G3O LpjuRPMs6Yirdn+vZOBaknrtn5mo4Czid0n3cEC6NFSIjl4NIoFZfWzxfsQ+03vS uGAFKOHaAj+qLIw09viP6UVk4ehJa/onU43U1LpE637AK4cmy/ppj4QIvGRzYGLX ZOBF78Cdv3koxifzPu5yf96bQnte13uDqXFIiQRZcIWd+4ZxvYWn3ssJqw7K8G+o Be/DkH+2LgxZ2d+ZH3s9n5QyYoCCyc+ueTxM+WqorfYqvNYFxxBxJ26XsNQGDaBZ 708mirAOn9BrcL5gK7qlKRMRUhtH7TaC -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org