$ rpki-client -vvf rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft File: ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft (raw, json) Hash identifier: g+6jRzdgXplMHa8/HNwAvtfphkywOINfHA2NOJ3FjpQ= Subject key identifier: F4:BA:F8:D9:D8:0F:85:30:2A:20:D0:3A:E4:1A:7A:26:FF:0F:95:E8 Authority key identifier: CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3 Certificate issuer: /CN=A91F583B/serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft Manifest number: A4 Signing time: Sun 19 May 2024 06:43:08 +0000 Manifest this update: Sun 19 May 2024 06:43:07 +0000 Manifest next update: Sun 26 May 2024 06:43:07 +0000 Files and hashes: 1: ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl (hash: +nmjo7AnbFvs4oB6tcQYjVrcYQt1M4dMgKKXvLGoKyk=) 2: 5541D6A21F9A11EE9BB7905DC4F9AE02.roa (hash: voFJfsTPv1UFCPtpI0q5WcVBltBsO+aWZFehRBwL8js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F583B/serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3 Validity Not Before: May 19 06:43:07 2024 GMT Not After : May 26 06:43:07 2024 GMT Subject: CN=66499f7b-ef36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2f:7d:4c:56:fc:d7:49:a8:c7:4e:44:f9:3e: 90:ad:05:d7:db:1e:ae:c6:04:1b:89:cd:f4:b0:1a: 61:0f:ed:fa:ba:4a:d1:18:a3:df:22:0d:13:27:a5: dc:e2:21:2a:e6:0c:97:cf:7b:49:03:4d:0e:42:74: de:cc:1a:27:a2:40:1e:8f:ec:7b:7e:3d:09:59:9c: f2:94:6c:a7:e7:f4:f8:5a:88:73:bc:26:db:33:29: cf:04:30:51:19:f3:82:be:15:29:93:e7:1e:b0:69: 23:51:9f:75:93:54:7b:a3:a7:bf:29:33:c1:b5:ad: 71:68:e1:cc:13:d5:0d:22:7d:37:2a:0f:d8:09:f6: 92:e5:9d:6f:e6:45:32:47:79:92:d9:f3:72:b4:62: 14:90:d4:7b:80:7e:0f:bf:0b:3b:e2:46:d2:b3:18: a4:d2:4c:66:81:26:39:b6:0b:9c:34:08:06:f0:d3: 01:fb:06:ee:20:e6:21:18:d7:2c:c9:db:d7:ff:05: aa:e1:8a:b6:5d:15:9e:b1:0b:40:22:03:52:d3:16: 85:40:95:38:07:eb:54:89:44:6d:66:9f:73:31:4a: ad:6e:4e:cc:8d:5d:9a:41:87:7a:bd:95:17:18:22: a0:9f:18:df:51:12:5d:82:6f:25:5a:b2:e7:7d:e6: 93:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BA:F8:D9:D8:0F:85:30:2A:20:D0:3A:E4:1A:7A:26:FF:0F:95:E8 X509v3 Authority Key Identifier: keyid:CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:26:f6:28:e6:38:82:48:dd:2f:07:5a:f5:fa:a2:9b:33:2e: f2:22:0f:f1:72:67:f4:44:e2:d3:c2:b1:b1:b6:5d:38:4c:7f: cd:5b:f7:3f:aa:7d:a3:1e:49:bf:f4:e2:9e:f5:a8:4d:ae:30: c8:d8:fc:d7:48:7b:eb:e8:90:58:6d:b2:30:9f:64:28:6a:d5: 4c:5e:07:f9:97:d4:21:3a:fd:1d:73:81:6e:4e:8b:6b:36:88: e6:b2:61:ee:c6:30:66:c3:a0:7a:f0:96:02:b0:89:c5:f9:31: fe:52:cd:09:20:c0:14:76:ab:9e:a8:53:3c:60:6c:ef:0f:dd: eb:39:a8:f2:84:b4:48:b3:62:f7:ec:60:ec:1b:70:19:a0:f8: ef:93:2b:cf:c1:e6:2d:50:7a:bd:ad:e7:d6:f0:17:0b:a4:b5: 39:c4:60:5e:38:33:45:d3:52:21:c0:00:89:44:bf:52:d1:66: 91:03:58:1c:43:30:5c:6b:8d:c7:ca:82:4b:e8:71:ee:d2:f1: d6:1a:33:ea:8f:ca:aa:10:bd:41:26:99:aa:f3:e0:7b:c9:5b: fa:60:da:80:c7:59:11:af:2d:ad:74:3a:45:69:af:b9:97:c7: 7a:11:0e:d6:54:79:7e:65:4f:6d:8a:07:19:d5:18:08:fd:e0: 4a:b2:3c:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4M0IxMTAvBgNVBAUTKENBN0NFRUY5MTg4MDdFNjcxQjE2MjRFNjNBQjZGNjgx MDNERkQ1RTMwHhcNMjQwNTE5MDY0MzA3WhcNMjQwNTI2MDY0MzA3WjAYMRYwFAYD VQQDEw02NjQ5OWY3Yi1lZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAty99TFb810mox05E+T6QrQXX2x6uxgQbic30sBphD+36ukrRGKPfIg0TJ6Xc 4iEq5gyXz3tJA00OQnTezBonokAej+x7fj0JWZzylGyn5/T4WohzvCbbMynPBDBR GfOCvhUpk+cesGkjUZ91k1R7o6e/KTPBta1xaOHME9UNIn03Kg/YCfaS5Z1v5kUy R3mS2fNytGIUkNR7gH4Pvws74kbSsxik0kxmgSY5tgucNAgG8NMB+wbuIOYhGNcs ydvX/wWq4Yq2XRWesQtAIgNS0xaFQJU4B+tUiURtZp9zMUqtbk7MjV2aQYd6vZUX GCKgnxjfURJdgm8lWrLnfeaTlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPS6+NnY D4UwKiDQOuQaeib/D5XoMB8GA1UdIwQYMBaAFMp87vkYgH5nGxYk5jq29oED39Xj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgzQi81QUYwNDE5QzFC RTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZtY2JGaVRtT3JiMmdRUGYx ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3luenUtUmlBZm1jYkZpVG1PcmIyZ1FQZjFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTgzQi81QUYwNDE5QzFCRTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZt Y2JGaVRtT3JiMmdRUGYxZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4JvYo5jiCSN0vB1r1+qKbMy7yIg/xcmf0ROLTwrGxtl04TH/NW/c/ qn2jHkm/9OKe9ahNrjDI2PzXSHvr6JBYbbIwn2QoatVMXgf5l9QhOv0dc4FuTotr NojmsmHuxjBmw6B68JYCsInF+TH+Us0JIMAUdqueqFM8YGzvD93rOajyhLRIs2L3 7GDsG3AZoPjvkyvPweYtUHq9refW8BcLpLU5xGBeODNF01IhwACJRL9S0WaRA1gc QzBca43HyoJL6HHu0vHWGjPqj8qqEL1BJpmq8+B7yVv6YNqAx1kRry2tdDpFaa+5 l8d6EQ7WVHl+ZU9tigcZ1RgI/eBKsjzb -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org