$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json) Hash identifier: dvk/K654Cl9m6mHFqltP7xm2UZElx2f0snDq+64JAUg= Subject key identifier: 5B:4D:10:AA:D9:6C:C4:A6:25:8F:10:67:C7:55:CD:3C:07:F6:70:F1 Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Certificate serial: 03A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft Manifest number: 039D Signing time: Tue 07 May 2024 02:33:34 +0000 Manifest this update: Tue 07 May 2024 02:33:34 +0000 Manifest next update: Tue 14 May 2024 02:33:34 +0000 Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: oAc71elG5liw2jdE3Qd0fVGC63SEoj+PhyEf4VIGNsA=) 2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: +bj/ZNSY6hTVTCkm8LSZ4yEUy24oCPBrauh+B0YBifE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 928 (0x3a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Validity Not Before: May 7 02:33:34 2024 GMT Not After : May 14 02:33:34 2024 GMT Subject: CN=663992fe-9d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:61:c6:f4:a1:f8:1b:59:aa:6c:32:b3:a9:b7: 5b:d5:66:2c:f0:4c:d3:47:c9:e2:ff:5d:ff:5c:04: 1a:44:fa:c2:da:67:a9:d9:ec:7b:75:84:d7:11:ce: ed:2c:5f:a0:91:8a:fe:10:3f:0d:ac:34:1d:e6:21: 2b:aa:89:35:fd:cc:b9:86:74:18:85:a6:0e:db:5d: 59:10:fa:1b:2b:28:7b:07:57:4a:fd:70:3b:6b:fe: 63:96:12:ed:81:94:13:2a:d0:bb:11:fd:84:bb:e1: a3:89:4a:8a:c1:56:b6:3c:13:ec:a1:5f:94:48:d0: 23:94:fc:fc:31:d9:e0:4c:2c:34:9d:ab:7c:99:79: 08:51:ed:4b:5e:b0:d4:c9:d6:68:1a:99:90:0f:ee: f2:ec:5a:72:c3:b2:e4:28:56:fa:4b:6c:e2:6e:92: 6b:f4:e8:a2:77:43:ff:d5:97:be:f6:77:8e:7d:36: 1e:c4:3a:43:33:3e:28:a7:3b:c7:18:d9:7d:ae:0a: 43:a8:71:8d:7b:2a:eb:d6:d8:91:07:0e:0a:0d:d5: 81:bd:85:7f:d8:f7:dc:96:a6:5a:98:cd:0e:89:4e: 9f:61:3a:21:37:e7:93:fd:76:ea:be:a7:e4:da:bb: 75:eb:46:ae:00:c1:c8:41:b3:03:83:b4:9f:ed:54: aa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4D:10:AA:D9:6C:C4:A6:25:8F:10:67:C7:55:CD:3C:07:F6:70:F1 X509v3 Authority Key Identifier: keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a1:5f:41:6a:62:ef:ad:b7:29:a2:4c:39:39:ea:4e:02:4b: 0d:cb:23:5d:9a:95:e6:4f:49:d0:32:07:56:0d:ca:24:a0:ba: 0c:e6:cd:4e:61:42:b8:75:23:9a:60:66:c0:ea:83:01:d2:b3: f2:e5:78:67:3e:b9:4b:20:31:4d:7e:b2:0e:6e:bb:87:14:e2: 0e:fd:3e:1a:a9:76:ae:26:3c:15:b8:8b:32:65:3f:8d:63:ae: 3b:82:91:88:f8:36:64:0b:4e:99:c4:49:47:5d:94:bf:df:3c: 70:a9:a9:be:3b:ff:4a:d3:ab:16:bf:8b:35:96:2a:41:0e:fc: 81:7e:e9:f4:c5:f0:fd:64:80:a5:13:74:f7:35:d1:d6:fb:14: fe:6b:0a:c6:cc:d4:d7:6d:92:ea:41:23:91:b1:05:36:e2:fe: 8f:c7:24:27:65:5f:aa:80:5f:15:75:22:45:7a:70:00:59:80: fa:81:a4:d0:32:2b:98:0e:5d:2e:af:58:ed:07:20:1f:f6:c4: 48:68:b7:02:07:89:14:bc:e9:28:2b:d7:cc:f1:fa:30:ca:9c: 44:1b:b4:b3:5c:9d:72:11:26:67:4f:b1:05:d9:2b:b7:d8:b8: 5f:0e:0c:36:db:99:4e:f2:04:b4:4e:95:ff:2d:ba:f7:31:08: bd:74:a2:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RjQxMTAvBgNVBAUTKEM5NjJBMUVGQjFENjg1RUE5RjBFODVCNDE3NjY4MjhG NkExM0VGRTUwHhcNMjQwNTA3MDIzMzM0WhcNMjQwNTE0MDIzMzM0WjAYMRYwFAYD VQQDEw02NjM5OTJmZS05ZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GHG9KH4G1mqbDKzqbdb1WYs8EzTR8ni/13/XAQaRPrC2mep2ex7dYTXEc7t LF+gkYr+ED8NrDQd5iErqok1/cy5hnQYhaYO211ZEPobKyh7B1dK/XA7a/5jlhLt gZQTKtC7Ef2Eu+GjiUqKwVa2PBPsoV+USNAjlPz8MdngTCw0nat8mXkIUe1LXrDU ydZoGpmQD+7y7Fpyw7LkKFb6S2zibpJr9Oiid0P/1Ze+9neOfTYexDpDMz4opzvH GNl9rgpDqHGNeyrr1tiRBw4KDdWBvYV/2PfclqZamM0OiU6fYTohN+eT/Xbqvqfk 2rt160auAMHIQbMDg7Sf7VSqrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtNEKrZ bMSmJY8QZ8dVzTwH9nDxMB8GA1UdIwQYMBaAFMlioe+x1oXqnw6FtBdmgo9qE+/l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhGNC85MjhEQjBGNjRD QTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hlcWZEb1cwRjJhQ2oyb1Q3 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXS2g3N0hXaGVxZkRvVzBGMmFDajJvVDctVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhGNC85MjhEQjBGNjRDQTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hl cWZEb1cwRjJhQ2oyb1Q3LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKoV9BamLvrbcpokw5OepOAksNyyNdmpXmT0nQMgdWDcokoLoM5s1O YUK4dSOaYGbA6oMB0rPy5XhnPrlLIDFNfrIObruHFOIO/T4aqXauJjwVuIsyZT+N Y647gpGI+DZkC06ZxElHXZS/3zxwqam+O/9K06sWv4s1lipBDvyBfun0xfD9ZICl E3T3NdHW+xT+awrGzNTXbZLqQSORsQU24v6PxyQnZV+qgF8VdSJFenAAWYD6gaTQ MiuYDl0ur1jtByAf9sRIaLcCB4kUvOkoK9fM8fowypxEG7SzXJ1yESZnT7EF2Su3 2LhfDgw225lO8gS0TpX/Lbr3MQi9dKKe -----END CERTIFICATE-----Generated at Tue May 7 03:10:18 2024 by rpki-client on console-ams.rpki-client.org