$ rpki-client -vvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft File: YG8zS36AA6PIIdDJhBmzFDqaPks.mft (raw, json) Hash identifier: k286m5gbCp3oKNlFp5gfUoEi0knHtDsdd5STmAyq/eU= Subject key identifier: 28:98:FB:4B:72:2C:C1:01:F4:E9:4C:91:43:AC:CD:DC:87:26:5E:4D Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B Certificate issuer: /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B Certificate serial: 0640 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft Manifest number: 0638 Signing time: Wed 01 May 2024 00:02:07 +0000 Manifest this update: Wed 01 May 2024 00:02:07 +0000 Manifest next update: Wed 08 May 2024 00:02:07 +0000 Files and hashes: 1: YG8zS36AA6PIIdDJhBmzFDqaPks.crl (hash: RFPSJ+Rtu8zkPoSZ5WA21C0sOkVmhdCgOUEDzBGFukw=) 2: B63DEA3A429411EB9D08C02FC4F9AE02.roa (hash: 1AH/bSI4WHZVh691h6Bq7vrTsgVnBNwTp7WAgbUY5cs=) 3: B5A6B25A429411EB9D08C02FC4F9AE02.roa (hash: ZmVsDHd2JJJGqhVJugfJQ9Bhp8id8XH35L69vMSRDQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B Validity Not Before: May 1 00:02:07 2024 GMT Not After : May 8 00:02:07 2024 GMT Subject: CN=6631867f-b7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:85:12:a6:0a:03:f5:cf:84:3d:98:a0:97: 6e:d0:80:df:f0:57:ad:af:1a:bf:11:00:d5:c5:e3: d2:38:55:3d:73:3c:f4:f7:08:02:e8:e8:6a:d8:e0: 24:79:5c:b0:d9:d5:ba:8e:6e:84:cc:5e:b6:c0:d9: ee:11:9d:73:b5:26:b9:1a:29:eb:c5:2d:fa:3b:50: a8:4c:cf:43:93:99:23:44:c9:51:90:97:12:4c:d7: 5e:ca:39:3f:db:19:6e:e5:c5:bb:72:31:a2:1f:69: b9:b4:8d:8a:25:f3:4b:09:e1:e2:64:62:cc:f0:29: b8:c8:c1:7a:4c:48:63:80:14:f8:2f:bc:2c:66:e4: 67:d3:e0:19:54:cc:3b:a2:89:82:b2:85:ba:a1:b8: f8:b4:82:1a:4b:fd:30:67:33:59:a1:8b:3e:81:2c: 48:d3:e3:ab:07:e1:3e:d7:1c:27:48:83:be:b0:f4: 1b:77:bf:c5:93:ae:3d:c2:76:e2:9b:57:7f:4c:32: 09:27:a6:8e:7e:bf:e8:54:bc:ae:6a:12:5b:8c:ef: b2:bb:06:35:58:4d:3a:c2:08:be:80:00:10:e7:f7: 60:6e:72:85:64:03:e4:d3:46:05:38:db:47:a1:53: 34:d0:4c:35:6d:b4:0a:ab:8b:4b:c6:30:6e:98:c3: 5e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:98:FB:4B:72:2C:C1:01:F4:E9:4C:91:43:AC:CD:DC:87:26:5E:4D X509v3 Authority Key Identifier: keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:35:49:0e:50:57:0a:57:75:71:68:cc:e4:a4:12:fe:fc:09: 54:8e:45:4f:fa:89:74:91:5f:f6:41:f6:6c:2f:4e:1e:79:74: 8c:42:01:77:01:bd:bf:d5:8e:4e:54:a2:1d:b9:84:d4:e4:73: d3:19:12:44:c0:a1:0f:5e:7d:8a:67:f2:9f:1c:d6:2a:0c:b7: 8d:cf:b7:0e:c4:80:82:88:8d:23:2b:e0:cd:0f:d8:00:82:7d: b1:b2:10:6f:c0:87:da:f4:f9:9c:e4:92:21:12:86:ce:5e:0e: 92:3a:d0:24:44:5c:7c:f8:69:08:5a:2c:41:53:2b:c3:52:c0: 24:40:51:c2:c5:ad:bd:de:1c:0c:3c:b9:6c:d2:ca:db:2e:45: 42:9f:a2:cd:e9:f9:2b:6f:31:af:c7:f5:7a:c5:3b:1d:5b:96: 5f:07:5b:42:17:09:41:9f:7d:84:c6:1c:68:cd:37:78:e4:a3: 55:f6:40:f2:73:62:d0:11:ef:a2:58:05:39:15:7a:8f:96:b9: 04:6c:00:e6:b2:92:de:ca:7f:40:f8:b8:b6:21:39:1f:1d:0d: 04:76:61:d8:b4:15:e7:41:64:8f:e9:09:4c:e6:d8:c0:fc:f8: 46:b2:97:dd:49:db:08:2d:1e:8a:cd:8d:3a:d7:cf:ab:42:0c: 7b:2b:00:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE4OEQxMTAvBgNVBAUTKDYwNkYzMzRCN0U4MDAzQTNDODIxRDBDOTg0MTlCMzE0 M0E5QTNFNEIwHhcNMjQwNTAxMDAwMjA3WhcNMjQwNTA4MDAwMjA3WjAYMRYwFAYD VQQDEw02NjMxODY3Zi1iN2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGuFEqYKA/XPhD2YoJdu0IDf8Fetrxq/EQDVxePSOFU9czz09wgC6Ohq2OAk eVyw2dW6jm6EzF62wNnuEZ1ztSa5GinrxS36O1CoTM9Dk5kjRMlRkJcSTNdeyjk/ 2xlu5cW7cjGiH2m5tI2KJfNLCeHiZGLM8Cm4yMF6TEhjgBT4L7wsZuRn0+AZVMw7 oomCsoW6obj4tIIaS/0wZzNZoYs+gSxI0+OrB+E+1xwnSIO+sPQbd7/Fk649wnbi m1d/TDIJJ6aOfr/oVLyuahJbjO+yuwY1WE06wgi+gAAQ5/dgbnKFZAPk00YFONtH oVM00Ew1bbQKq4tLxjBumMNeaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiY+0ty LMEB9OlMkUOszdyHJl5NMB8GA1UdIwQYMBaAFGBvM0t+gAOjyCHQyYQZsxQ6mj5L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTg4RC9GMEYxOUYyMDQy OTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2UElJZERKaEJtekZEcWFQ a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHOHpTMzZBQTZQSUlkREpoQm16RkRxYVBrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTg4RC9GMEYxOUYyMDQyOTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2 UElJZERKaEJtekZEcWFQa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoNUkOUFcKV3VxaMzkpBL+/AlUjkVP+ol0kV/2QfZsL04eeXSMQgF3 Ab2/1Y5OVKIduYTU5HPTGRJEwKEPXn2KZ/KfHNYqDLeNz7cOxICCiI0jK+DND9gA gn2xshBvwIfa9Pmc5JIhEobOXg6SOtAkRFx8+GkIWixBUyvDUsAkQFHCxa293hwM PLls0srbLkVCn6LN6fkrbzGvx/V6xTsdW5ZfB1tCFwlBn32ExhxozTd45KNV9kDy c2LQEe+iWAU5FXqPlrkEbADmspLeyn9A+Li2ITkfHQ0EdmHYtBXnQWSP6QlM5tjA /PhGspfdSdsILR6KzY0618+rQgx7KwDJ -----END CERTIFICATE-----Generated at Wed May 1 00:35:49 2024 by rpki-client on console-ams.rpki-client.org