$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft File: yNpkCWcTSBB928ixg_VavykxJVY.mft (raw, json) Hash identifier: 4lo2gW+0ph10XQ/QMHM8QOB/NGK68f7j1S+BW5zAGs8= Subject key identifier: 71:06:EF:DF:18:57:F7:73:E0:5D:03:5A:2D:3D:F7:C1:F6:C2:CB:53 Authority key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 Certificate issuer: /CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Certificate serial: 0F8B Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft Manifest number: 0F8B Signing time: Sat 18 May 2024 18:07:04 +0000 Manifest this update: Sat 18 May 2024 18:07:03 +0000 Manifest next update: Sat 25 May 2024 18:07:03 +0000 Files and hashes: 1: yNpkCWcTSBB928ixg_VavykxJVY.crl (hash: SKY0pGl3ib7m6mdxH+DK63SANW3q/Kk0dI8WS7RRvu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3979 (0xf8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Validity Not Before: May 18 18:07:03 2024 GMT Not After : May 25 18:07:03 2024 GMT Subject: CN=6648ee48-99ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0b:02:71:1e:cb:db:d1:0f:d8:ed:d6:86:66: cc:bd:4b:22:f0:06:8d:2e:62:ba:53:a1:d1:f1:45: 81:a1:51:6d:59:a6:ad:ba:93:a5:b3:d0:97:df:d4: d3:09:25:2d:df:ea:2a:a7:ef:64:62:05:9e:49:bc: f3:22:6d:ec:73:b2:14:a2:92:68:67:6a:b9:93:c1: 85:af:b7:c7:43:cf:96:3c:cd:a4:eb:9d:60:24:2a: 96:9a:68:a7:45:70:9f:cb:83:80:7d:f6:dd:62:2d: d5:c8:c6:b4:16:22:49:2b:ef:c9:6d:ad:a0:28:08: 3f:d6:88:b2:76:b9:83:ff:fe:23:73:c8:43:fd:60: 02:fa:e2:9d:f2:8a:f0:ba:37:42:6c:5e:df:4c:98: f3:42:c8:0f:07:14:7c:ce:dc:07:52:8b:9f:7c:ce: 81:56:ec:da:02:96:d3:c6:5b:d9:62:e0:cf:5b:01: 23:fe:5d:8d:05:e3:d2:13:d6:44:83:62:76:f2:27: b3:0d:72:52:fe:20:d7:ee:26:89:0a:20:80:72:c5: ce:4d:6c:4e:66:72:a1:a2:94:09:6c:aa:5b:93:75: 41:3c:2f:25:7a:a9:30:ff:35:c3:c6:31:4d:c2:34: 62:47:24:cc:44:41:42:3b:14:e4:a8:c9:b3:95:8d: cd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:06:EF:DF:18:57:F7:73:E0:5D:03:5A:2D:3D:F7:C1:F6:C2:CB:53 X509v3 Authority Key Identifier: keyid:C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d4:88:f3:30:81:f3:b2:f6:42:be:7a:67:1c:af:1a:ea:5f: 0a:5c:03:7f:e5:54:08:38:97:15:78:a1:75:b0:4a:73:7b:6b: c2:f1:c4:75:44:67:7a:12:02:c7:12:95:19:3a:66:b4:a6:d2: e0:eb:c5:c2:a1:0d:d9:a6:db:85:8e:ac:db:aa:be:c1:b6:bf: c3:34:c4:e7:ad:f3:4c:39:c7:97:ea:61:85:c6:b2:37:e7:6c: 0a:3e:e6:70:61:d8:e9:b3:20:7d:d7:49:c1:e6:2c:a3:2e:bc: 6f:21:b4:eb:ae:64:eb:9f:cf:8f:d8:65:aa:bf:ef:64:3a:86: 07:01:c5:17:75:a6:5e:92:67:10:d3:63:0f:55:bd:b3:ff:5e: 84:89:b0:78:5f:19:44:15:25:f6:97:9e:2a:b4:19:4c:32:9d: df:a8:6a:80:9a:08:66:3f:9b:a2:bd:31:c6:14:e6:27:3c:e0: bc:9f:b8:4c:27:4e:bc:78:38:68:8a:fc:aa:e7:57:27:c5:5c: 5c:af:77:51:3d:82:5e:65:19:0b:7b:37:1b:6a:82:dd:50:a1: 26:93:f9:61:75:c6:3d:8b:41:96:2f:f3:87:61:11:c5:c9:8a: 74:55:cd:56:62:9a:59:b6:f9:4f:21:f4:2e:b8:81:92:27:0c: e8:4c:41:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEM4REE2NDA5NjcxMzQ4MTA3RERCQzhCMTgzRjU1QUJG MjkzMTI1NTYwHhcNMjQwNTE4MTgwNzAzWhcNMjQwNTI1MTgwNzAzWjAYMRYwFAYD VQQDEw02NjQ4ZWU0OC05OWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5QsCcR7L29EP2O3WhmbMvUsi8AaNLmK6U6HR8UWBoVFtWaatupOls9CX39TT CSUt3+oqp+9kYgWeSbzzIm3sc7IUopJoZ2q5k8GFr7fHQ8+WPM2k651gJCqWmmin RXCfy4OAffbdYi3VyMa0FiJJK+/Jba2gKAg/1oiydrmD//4jc8hD/WAC+uKd8orw ujdCbF7fTJjzQsgPBxR8ztwHUouffM6BVuzaApbTxlvZYuDPWwEj/l2NBePSE9ZE g2J28iezDXJS/iDX7iaJCiCAcsXOTWxOZnKhopQJbKpbk3VBPC8leqkw/zXDxjFN wjRiRyTMREFCOxTkqMmzlY3NyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEG798Y V/dz4F0DWi0998H2wstTMB8GA1UdIwQYMBaAFMjaZAlnE0gQfdvIsYP1Wr8pMSVW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9ENjc3RDMxQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNCQjkyOGl4Z19WYXZ5a3hK VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL3lOcGtDV2NUU0JCOTI4aXhnX1ZhdnlreEpWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9ENjc3RDMxQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNC QjkyOGl4Z19WYXZ5a3hKVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ1IjzMIHzsvZCvnpnHK8a6l8KXAN/5VQIOJcVeKF1sEpze2vC8cR1 RGd6EgLHEpUZOma0ptLg68XCoQ3ZptuFjqzbqr7Btr/DNMTnrfNMOceX6mGFxrI3 52wKPuZwYdjpsyB910nB5iyjLrxvIbTrrmTrn8+P2GWqv+9kOoYHAcUXdaZekmcQ 02MPVb2z/16EibB4XxlEFSX2l54qtBlMMp3fqGqAmghmP5uivTHGFOYnPOC8n7hM J068eDhoivyq51cnxVxcr3dRPYJeZRkLezcbaoLdUKEmk/lhdcY9i0GWL/OHYRHF yYp0Vc1WYppZtvlPIfQuuIGSJwzoTEHr -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org