$ rpki-client -vvf rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft File: YbChG9lEvNqGW7mx-_fuBtVzvXE.mft (raw, json) Hash identifier: 6UYMtGItvg2x7e3N+a8yNPOyk9igvgK8yjqVYg4ljgI= Subject key identifier: 16:10:94:57:09:25:FD:60:3A:1D:CA:49:FF:1A:65:15:E5:AE:1F:5C Authority key identifier: 61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71 Certificate issuer: /CN=A9127656/serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71 Certificate serial: 0505 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft Manifest number: 0501 Signing time: Sat 27 Apr 2024 01:09:12 +0000 Manifest this update: Sat 27 Apr 2024 01:09:12 +0000 Manifest next update: Sat 04 May 2024 01:09:12 +0000 Files and hashes: 1: YbChG9lEvNqGW7mx-_fuBtVzvXE.crl (hash: Cw9A7CkbAlzE5uPwwWyra7DV0TMLXHhVX7wYxjIaX34=) 2: 6F706208BE0F11EB90239C1AC4F9AE02.roa (hash: 3r/XpjPTsdyBZdadWG+NjRcIRHMNeVEfAU5t54XzOrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 01:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1285 (0x505) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127656/serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71 Validity Not Before: Apr 27 01:09:12 2024 GMT Not After : May 4 01:09:12 2024 GMT Subject: CN=662c5038-a59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:de:05:df:50:aa:ed:f6:b0:fa:91:a2:0c: 47:c8:de:f2:f3:4e:94:41:dc:e6:fb:04:94:20:d8: d5:21:2d:fc:9a:af:b0:36:f1:05:62:bf:9a:0a:60: 83:58:95:73:e1:93:f2:f4:9a:4a:88:5c:29:b8:90: 89:5b:da:0d:aa:0e:95:63:7f:e2:b9:31:ac:fb:1b: db:c5:ba:7d:0e:56:d5:e1:aa:83:38:ed:03:2b:d5: c9:e9:1a:a2:5d:2d:c4:81:2f:a0:99:8c:c2:a2:b9: 31:77:3c:5c:35:ee:09:56:07:74:fd:7d:0c:c3:50: 95:3d:73:47:8c:59:9b:d2:2c:8c:05:71:4a:77:a7: 86:a1:56:95:81:1f:93:2e:83:45:11:6a:75:ab:e9: ee:2f:44:6f:44:c9:e6:c1:ff:d7:1f:12:f5:16:fe: 4e:76:ba:5b:9f:d2:ce:c7:8f:f4:46:58:30:9d:15: 9a:b7:95:bf:d1:b0:52:cf:0a:89:94:a2:04:51:1c: 15:39:10:8c:29:45:ff:8b:26:39:e8:37:2d:58:1f: d7:df:0d:6f:c5:ce:5f:d0:22:66:7a:df:79:0e:87: ad:6b:4d:21:e0:36:ed:e3:24:78:51:80:81:ba:ed: 09:a4:b3:a1:d9:49:c8:56:be:a1:c0:a2:0f:5b:b2: 67:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:10:94:57:09:25:FD:60:3A:1D:CA:49:FF:1A:65:15:E5:AE:1F:5C X509v3 Authority Key Identifier: keyid:61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:16:01:72:69:c0:13:89:5b:ab:77:43:3d:7e:2f:a0:d9:d3: cd:3a:aa:7d:0e:a3:90:46:4b:e0:e5:cd:be:7e:c3:38:73:e1: b4:62:c6:41:b5:c3:2b:12:4d:d2:7a:6e:06:91:f2:2a:06:80: cc:bf:74:a1:9d:70:19:3c:5c:21:6d:d6:fe:f1:a8:91:ab:c5: 73:b5:27:2e:b7:cf:da:6f:02:31:4c:19:b9:93:6c:d9:59:d6: 02:20:35:ab:32:da:2d:39:f6:93:ef:98:1a:0f:48:60:78:d3: db:11:df:b9:2a:08:2b:2c:4e:7d:cf:d1:5f:bc:bb:d8:ed:9a: 9b:82:25:e4:e4:4d:d8:9c:c9:93:2b:a0:b1:bd:b4:b7:56:fe: 1d:97:aa:a7:93:ec:6e:b5:dd:21:87:37:31:cf:f4:39:f8:6e: 24:69:74:36:2f:23:71:58:50:28:65:ee:6c:32:31:2b:2c:a3: 54:f6:81:66:70:2f:4c:5e:9a:d7:b2:f8:60:f7:98:c2:82:15: e2:40:6c:08:17:fa:da:82:58:f9:9a:ca:d4:32:be:04:37:2a: 3e:46:a2:f0:91:6d:0e:fd:e3:d7:b0:43:f0:68:65:04:d5:e2: 3e:43:2f:b6:25:04:01:a6:9e:e5:be:7d:75:2d:f5:5b:c9:0b: bd:ff:f8:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NTYxMTAvBgNVBAUTKDYxQjBBMTFCRDk0NEJDREE4NjVCQjlCMUZCRjdFRTA2 RDU3M0JENzEwHhcNMjQwNDI3MDEwOTEyWhcNMjQwNTA0MDEwOTEyWjAYMRYwFAYD VQQDEw02NjJjNTAzOC1hNTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshDeBd9Qqu32sPqRogxHyN7y806UQdzm+wSUINjVIS38mq+wNvEFYr+aCmCD WJVz4ZPy9JpKiFwpuJCJW9oNqg6VY3/iuTGs+xvbxbp9DlbV4aqDOO0DK9XJ6Rqi XS3EgS+gmYzCorkxdzxcNe4JVgd0/X0Mw1CVPXNHjFmb0iyMBXFKd6eGoVaVgR+T LoNFEWp1q+nuL0RvRMnmwf/XHxL1Fv5Odrpbn9LOx4/0RlgwnRWat5W/0bBSzwqJ lKIEURwVORCMKUX/iyY56DctWB/X3w1vxc5f0CJmet95Doeta00h4Dbt4yR4UYCB uu0JpLOh2UnIVr6hwKIPW7JntwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYQlFcJ Jf1gOh3KSf8aZRXlrh9cMB8GA1UdIwQYMBaAFGGwoRvZRLzahlu5sfv37gbVc71x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY1Ni84OEU4RTQyRUJF MEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZOcUdXN214LV9mdUJ0Vnp2 WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liQ2hHOWxFdk5xR1c3bXgtX2Z1QnRWenZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY1Ni84OEU4RTQyRUJFMEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZO cUdXN214LV9mdUJ0Vnp2WEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWFgFyacATiVurd0M9fi+g2dPNOqp9DqOQRkvg5c2+fsM4c+G0YsZB tcMrEk3Sem4GkfIqBoDMv3ShnXAZPFwhbdb+8aiRq8VztScut8/abwIxTBm5k2zZ WdYCIDWrMtotOfaT75gaD0hgeNPbEd+5KggrLE59z9FfvLvY7ZqbgiXk5E3YnMmT K6CxvbS3Vv4dl6qnk+xutd0hhzcxz/Q5+G4kaXQ2LyNxWFAoZe5sMjErLKNU9oFm cC9MXprXsvhg95jCghXiQGwIF/raglj5msrUMr4ENyo+RqLwkW0O/ePXsEPwaGUE 1eI+Qy+2JQQBpp7lvn11LfVbyQu9//iK -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:33 2024 by rpki-client on console-ams.rpki-client.org