$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft File: yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json) Hash identifier: aeOAxUp3L+QTHy8IgEAOwXVG1W6FZ7jHN/+nvG2ZhpY= Subject key identifier: E2:16:63:B9:64:C4:BD:5C:18:FB:8C:A0:D6:2D:55:8A:F3:7F:38:E0 Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67 Certificate issuer: /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867 Certificate serial: 33BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft Manifest number: 33BC Signing time: Tue 30 Apr 2024 15:05:49 +0000 Manifest this update: Tue 30 Apr 2024 15:05:48 +0000 Manifest next update: Tue 07 May 2024 15:05:48 +0000 Files and hashes: 1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: lLjFqBq4e4Jvdlg7IsnVzpClRGr57Ak9xmDMPOp2NDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13244 (0x33bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867 Validity Not Before: Apr 30 15:05:48 2024 GMT Not After : May 7 15:05:48 2024 GMT Subject: CN=663108cd-5b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c1:e4:5b:2c:01:51:4f:31:02:fc:22:c1:f6: 15:58:93:0c:92:c9:1c:2f:8c:a2:e3:7b:15:18:c8: cd:43:65:55:48:34:bc:d4:38:f5:1d:73:41:b1:8e: 5d:76:43:ee:a3:11:2e:73:22:13:e1:d9:2f:b9:83: 02:81:c9:06:f1:f6:db:ee:53:39:9a:90:3d:9d:ff: d4:0c:06:48:f1:82:9b:12:3c:23:b2:d4:4b:7a:6b: c4:a8:19:1b:4a:15:ed:1b:4f:2f:7a:16:78:6e:96: 6c:c0:ba:4d:05:c3:ae:06:df:27:25:b9:dd:bf:21: d4:10:b4:c1:9a:25:6f:dc:9e:41:cf:79:93:d6:dd: 4c:56:21:c1:ab:e0:d6:a1:b2:3c:b5:7d:1f:03:80: 22:48:9d:f8:b9:ff:58:8a:40:67:8b:44:8f:20:43: cc:81:47:7a:ac:78:0f:dd:48:cc:85:6e:e6:c1:aa: 4f:28:e7:e4:ca:98:a9:ae:32:fd:b8:29:c6:81:7b: cd:1d:84:d7:ef:ec:df:a3:5d:04:41:e3:be:f8:47: b7:e8:0d:6d:c2:82:48:33:e0:ce:97:35:7f:31:d9: 12:53:fd:32:3e:87:0a:35:d3:20:cf:e1:6c:ff:26: bc:14:78:48:71:d3:49:43:9f:54:19:56:69:34:c5: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:16:63:B9:64:C4:BD:5C:18:FB:8C:A0:D6:2D:55:8A:F3:7F:38:E0 X509v3 Authority Key Identifier: keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:25:fb:d4:fe:a2:5b:4f:8e:af:ee:54:8a:3e:a1:4d:4d:f6: 39:61:a2:61:ca:50:97:03:e9:b6:62:a9:69:ae:16:88:71:4c: d0:1c:34:b4:bf:b3:1b:01:02:b8:f5:d1:ea:a7:a1:3d:6b:e6: ca:e8:7f:e0:d3:01:31:ed:ac:5f:9c:65:80:2a:26:73:d1:75: 3a:b6:b0:6b:01:4c:1d:56:c3:9a:33:f1:a5:0c:c0:e3:75:06: 9f:f8:6b:3a:68:fb:ce:5b:4b:b0:de:30:1a:8e:fd:bc:33:1a: 75:96:c1:3f:bb:f5:f9:65:ee:ac:ef:f3:11:de:81:93:ea:26: 14:e8:3d:93:92:92:16:e0:f4:80:d7:51:69:4c:f1:b7:dc:5d: 42:e4:9a:62:dd:e1:1e:3f:da:46:63:19:2b:ae:69:58:ff:8b: 88:03:43:11:81:1d:18:32:78:82:9e:6a:71:7a:79:7e:81:eb: 2e:6d:18:0c:6e:32:2b:c7:02:61:73:b2:a5:7e:9b:a5:4c:83: 5a:33:07:ec:a3:34:dc:e1:b7:4e:aa:84:70:8f:d7:8c:86:46: 96:3d:d2:fd:6c:25:02:e7:bd:5b:85:d5:07:8e:8c:92:aa:2a: 71:f8:e9:5e:d4:bd:8d:4e:f4:5c:d8:2b:7a:cb:0a:1b:af:cf: 17:cc:e1:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NjgxMTAvBgNVBAUTKENBRTJDRkIxQTc5NzRBRDZCMDI0NUFFMzRFNEIwRENF RDgyMDk4NjcwHhcNMjQwNDMwMTUwNTQ4WhcNMjQwNTA3MTUwNTQ4WjAYMRYwFAYD VQQDEw02NjMxMDhjZC01YjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcHkWywBUU8xAvwiwfYVWJMMkskcL4yi43sVGMjNQ2VVSDS81Dj1HXNBsY5d dkPuoxEucyIT4dkvuYMCgckG8fbb7lM5mpA9nf/UDAZI8YKbEjwjstRLemvEqBkb ShXtG08vehZ4bpZswLpNBcOuBt8nJbndvyHUELTBmiVv3J5Bz3mT1t1MViHBq+DW obI8tX0fA4AiSJ34uf9YikBni0SPIEPMgUd6rHgP3UjMhW7mwapPKOfkypiprjL9 uCnGgXvNHYTX7+zfo10EQeO++Ee36A1twoJIM+DOlzV/MdkSU/0yPocKNdMgz+Fs /ya8FHhIcdNJQ59UGVZpNMX/nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIWY7lk xL1cGPuMoNYtVYrzfzjgMB8GA1UdIwQYMBaAFMriz7Gnl0rWsCRa405LDc7YIJhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2OC8wOEVDRUU0ODFE OUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0YXdKRnJqVGtzTnp0Z2dt R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1TFBzYWVYU3Rhd0pGcmpUa3NOenRnZ21HYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2OC8wOEVDRUU0ODFEOUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0 YXdKRnJqVGtzTnp0Z2dtR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrJfvU/qJbT46v7lSKPqFNTfY5YaJhylCXA+m2YqlprhaIcUzQHDS0 v7MbAQK49dHqp6E9a+bK6H/g0wEx7axfnGWAKiZz0XU6trBrAUwdVsOaM/GlDMDj dQaf+Gs6aPvOW0uw3jAajv28Mxp1lsE/u/X5Ze6s7/MR3oGT6iYU6D2TkpIW4PSA 11FpTPG33F1C5Jpi3eEeP9pGYxkrrmlY/4uIA0MRgR0YMniCnmpxenl+gesubRgM bjIrxwJhc7KlfpulTINaMwfsozTc4bdOqoRwj9eMhkaWPdL9bCUC571bhdUHjoyS qipx+Ole1L2NTvRc2Ct6ywobr88XzOHE -----END CERTIFICATE-----Generated at Tue Apr 30 19:20:47 2024 by rpki-client on console-ams.rpki-client.org