$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft File: yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json) Hash identifier: FnGwUKMLUk6Ji53afshyKtVRTMmNrMtwFMiZ7t3ZiR8= Subject key identifier: 86:33:7B:CF:98:61:24:3A:88:B4:EF:CD:FA:C2:CB:70:56:B9:43:40 Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B Certificate issuer: /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft Manifest number: 012E Signing time: Tue 07 May 2024 04:59:35 +0000 Manifest this update: Tue 07 May 2024 04:59:35 +0000 Manifest next update: Tue 14 May 2024 04:59:35 +0000 Files and hashes: 1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: UlJkobx+EvhVsxmNxG37nn88O+HAkmP6L3C3NbAJ6Vo=) 2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: 6s8lbD4Sp+NOwI/OVD7FbB7Y1BhIHRwBr1ALqocyrHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Validity Not Before: May 7 04:59:35 2024 GMT Not After : May 14 04:59:35 2024 GMT Subject: CN=6639b537-53b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ef:8e:6a:83:70:db:89:2d:76:bb:2e:61:a8: 71:1c:73:01:77:a6:f5:17:c8:4f:05:22:04:0a:02: ac:f8:7b:59:a4:b8:2a:a5:70:be:0f:52:e6:c9:50: 45:ed:07:02:74:a3:9b:e0:0e:f2:46:35:fc:a5:7c: 95:10:87:b2:16:22:67:24:e2:f8:2e:07:6c:9d:60: 33:2c:dd:b0:8d:f0:ad:d7:fb:d4:41:4d:4a:cb:b2: 40:df:6d:9d:8d:21:18:d3:1c:b3:ac:d4:03:48:73: 98:56:3a:77:2d:ca:40:b2:97:c4:65:f0:80:be:ee: 5f:1f:c3:2f:fd:b4:b0:97:55:f0:d8:e2:f7:31:b5: b0:21:f2:ba:8c:8d:b4:54:90:ab:67:1f:16:84:58: 19:d7:a8:dc:82:2c:15:f2:be:56:69:35:7a:32:cc: cc:7a:46:83:8c:42:dd:e2:0c:25:fd:eb:b5:90:1f: e8:ec:cf:4b:f4:c1:7d:57:bd:96:40:48:69:40:57: ba:b0:75:84:a8:ae:94:13:fe:11:3d:f2:6c:24:70: 3c:f1:e2:39:ee:0d:32:8d:90:e9:90:28:84:10:50: 78:91:77:95:10:b5:c2:09:ed:b6:86:85:6f:08:5c: f1:9f:51:be:16:c8:28:54:b5:db:39:95:00:a3:97: d1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:33:7B:CF:98:61:24:3A:88:B4:EF:CD:FA:C2:CB:70:56:B9:43:40 X509v3 Authority Key Identifier: keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:61:f2:ce:eb:d0:f6:a9:56:a7:ad:cf:20:15:9e:b0:6d:2e: c9:c1:01:d5:bd:81:3c:cd:49:99:59:9b:d5:bd:7c:16:f8:c0: 83:c7:8e:a4:3a:a3:8f:94:4c:33:4b:1a:ed:ff:6d:82:ae:f3: 8d:f1:81:05:97:0b:3a:87:6c:27:cb:c4:ce:3e:68:da:43:bc: 30:44:fc:cc:fd:69:1a:fb:05:96:a1:5c:ef:41:b2:93:0e:71: c0:36:a7:ca:3b:ed:e7:5d:af:3e:ae:64:ee:65:bf:62:ea:e4: 33:bd:3a:a1:89:52:9b:96:7d:b6:15:f2:f1:f8:64:a1:dd:3e: 28:e1:e4:12:05:13:06:63:d1:99:f7:68:28:1a:93:f0:3d:24: cb:a0:d4:21:36:31:91:af:f9:db:20:5b:f9:f0:05:b0:a4:81: 8b:b0:62:91:ef:6f:17:11:b4:24:7e:f5:42:91:f4:60:e9:7b: 90:56:ac:94:f9:a9:b0:40:9e:7d:cc:de:4b:57:88:e5:69:ce: ef:df:7e:f4:d6:d8:07:5b:60:ab:2f:bf:96:f4:44:d7:65:36: fd:01:d0:77:35:d0:36:74:10:23:e1:34:4f:a0:6c:fc:ae:f9: 9e:b6:61:13:f4:bd:ee:c2:4e:c0:4a:d5:d1:11:a7:1e:bd:b3: 0c:cd:43:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNGNjMxMTAvBgNVBAUTKEM5NDQ4MUNBRDAwRUZCMURFQTdBOTM5Q0JFMjlBOEY0 NUYyNUUyMEIwHhcNMjQwNTA3MDQ1OTM1WhcNMjQwNTE0MDQ1OTM1WjAYMRYwFAYD VQQDEw02NjM5YjUzNy01M2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqe+OaoNw24ktdrsuYahxHHMBd6b1F8hPBSIECgKs+HtZpLgqpXC+D1LmyVBF 7QcCdKOb4A7yRjX8pXyVEIeyFiJnJOL4LgdsnWAzLN2wjfCt1/vUQU1Ky7JA322d jSEY0xyzrNQDSHOYVjp3LcpAspfEZfCAvu5fH8Mv/bSwl1Xw2OL3MbWwIfK6jI20 VJCrZx8WhFgZ16jcgiwV8r5WaTV6MszMekaDjELd4gwl/eu1kB/o7M9L9MF9V72W QEhpQFe6sHWEqK6UE/4RPfJsJHA88eI57g0yjZDpkCiEEFB4kXeVELXCCe22hoVv CFzxn1G+FsgoVLXbOZUAo5fRyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYze8+Y YSQ6iLTvzfrCy3BWuUNAMB8GA1UdIwQYMBaAFMlEgcrQDvsd6nqTnL4pqPRfJeIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0Y2My81MTlCNjRBNjQw RUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14M3FlcE9jdmltbzlGOGw0 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVU0J5dEFPLXgzcWVwT2N2aW1vOUY4bDRncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0Y2My81MTlCNjRBNjQwRUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14 M3FlcE9jdmltbzlGOGw0Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPYfLO69D2qVanrc8gFZ6wbS7JwQHVvYE8zUmZWZvVvXwW+MCDx46k OqOPlEwzSxrt/22CrvON8YEFlws6h2wny8TOPmjaQ7wwRPzM/Wka+wWWoVzvQbKT DnHANqfKO+3nXa8+rmTuZb9i6uQzvTqhiVKbln22FfLx+GSh3T4o4eQSBRMGY9GZ 92goGpPwPSTLoNQhNjGRr/nbIFv58AWwpIGLsGKR728XEbQkfvVCkfRg6XuQVqyU +amwQJ59zN5LV4jlac7v33701tgHW2CrL7+W9ETXZTb9AdB3NdA2dBAj4TRPoGz8 rvmetmET9L3uwk7AStXREacevbMMzUM4 -----END CERTIFICATE-----Generated at Tue May 7 05:39:50 2024 by rpki-client on console-fra.rpki-client.org