$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json) Hash identifier: 0BtgmAtCeSf3POHSPnMV6Vi3S1XRC/jAbTaGSGp05RA= Subject key identifier: 83:2F:3D:0C:62:F8:4E:4F:3C:BF:AF:FE:2F:C9:A5:7F:F8:24:68:49 Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft Manifest number: 3C Signing time: Wed 15 May 2024 08:20:27 +0000 Manifest this update: Wed 15 May 2024 08:20:26 +0000 Manifest next update: Wed 22 May 2024 08:20:26 +0000 Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: UFrQ8QO0KgzCWEMCKh8cjTtSEI08mVZ/JmiaE4oi+ao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Validity Not Before: May 15 08:20:26 2024 GMT Not After : May 22 08:20:26 2024 GMT Subject: CN=6644704a-b6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5c:31:69:12:d3:0b:04:b5:ea:d4:e6:aa:21: 3b:37:ba:42:bd:e7:2b:55:dc:1a:da:7d:75:c4:97: e3:a5:3c:d7:61:bf:25:9e:05:41:f4:27:16:99:d6: 19:8e:80:79:9c:2d:4b:f6:57:25:97:24:6a:6a:2f: ca:6b:15:df:a3:33:5a:89:cf:8e:4f:8f:88:e6:02: 42:d9:48:57:0e:02:b5:d9:b4:22:25:46:51:65:fc: aa:10:c1:1f:e5:4c:e4:f4:08:12:6d:f9:41:c3:06: 93:6e:3e:e1:e8:5d:cd:51:77:da:40:e2:ae:b3:36: b9:4e:92:98:51:01:1b:da:c7:b9:28:bb:3b:11:86: 19:6d:07:98:a3:bb:63:66:56:7f:9a:ae:45:3d:ab: 74:9f:b0:87:41:a0:8b:c5:71:44:ee:65:c7:7b:c8: f9:38:d2:d7:6f:46:5f:43:ea:5a:4d:f0:2b:7b:ba: f8:25:d3:a5:03:c8:24:de:77:c3:8a:0f:59:73:25: 4e:a9:65:c7:a5:93:7b:8f:5e:ec:40:ce:aa:0a:80: 41:2a:0b:27:c8:9e:db:58:08:d3:1a:a1:10:74:5d: 9f:c4:5e:de:17:e2:28:31:2f:53:bb:66:7c:a8:b5: d5:3b:f9:86:ab:0b:c3:2f:18:ab:23:c1:7c:d5:93: 5f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2F:3D:0C:62:F8:4E:4F:3C:BF:AF:FE:2F:C9:A5:7F:F8:24:68:49 X509v3 Authority Key Identifier: keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:95:10:25:57:0a:9e:12:1b:d1:5b:90:51:8a:62:8e:51:5f: c7:50:de:ec:52:3c:d1:6d:aa:0a:8d:7a:4b:79:a1:03:ea:0a: 16:fe:04:d4:2a:92:67:66:eb:e1:fc:0e:ee:1a:5d:be:4c:66: 38:52:09:69:e5:b9:b7:57:c2:38:05:cf:e5:3a:85:e0:0c:19: e9:88:6f:dd:74:e1:09:4b:2c:19:d4:76:dd:74:80:52:c1:f2: 32:dc:4d:af:62:c3:15:ac:52:17:43:3f:c5:89:49:ad:4e:98: f3:de:3f:4d:01:b9:f6:dc:b3:fe:6c:3d:9b:17:a1:fc:4e:6c: b9:66:85:08:ed:54:88:65:15:0c:72:1c:d9:30:30:00:1b:4c: 27:13:b4:e8:42:ce:2b:72:45:28:2e:5a:11:33:a1:26:f8:76: 0d:b7:8f:11:a6:b0:59:d0:b7:f3:18:56:af:32:0b:cb:25:28: 2a:24:52:16:6c:df:36:f3:86:40:34:04:9d:a4:43:73:aa:f3: 79:36:94:e0:89:39:34:bc:35:18:2c:ab:da:39:16:34:8a:4a: f5:10:a4:79:9b:91:c5:b7:23:d6:5b:75:18:c7:1d:c8:fe:9a: 42:e6:61:3b:27:d3:6b:c5:12:1d:78:44:cc:11:ad:3f:6c:c2: a7:44:4d:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODhFMDExMC8GA1UEBRMoNjFCQkNCNkRCOERDMTMzN0MxQjgyOThGNzBDMUZGMkE1 MDE2RUQ2RTAeFw0yNDA1MTUwODIwMjZaFw0yNDA1MjIwODIwMjZaMBgxFjAUBgNV BAMTDTY2NDQ3MDRhLWI2Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXXDFpEtMLBLXq1OaqITs3ukK95ytV3BrafXXEl+OlPNdhvyWeBUH0JxaZ1hmO gHmcLUv2VyWXJGpqL8prFd+jM1qJz45Pj4jmAkLZSFcOArXZtCIlRlFl/KoQwR/l TOT0CBJt+UHDBpNuPuHoXc1Rd9pA4q6zNrlOkphRARvax7kouzsRhhltB5iju2Nm Vn+arkU9q3SfsIdBoIvFcUTuZcd7yPk40tdvRl9D6lpN8Ct7uvgl06UDyCTed8OK D1lzJU6pZcelk3uPXuxAzqoKgEEqCyfInttYCNMaoRB0XZ/EXt4X4igxL1O7Znyo tdU7+YarC8MvGKsjwXzVk18xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgy89DGL4 Tk88v6/+L8mlf/gkaEkwHwYDVR0jBBgwFoAUYbvLbbjcEzfBuCmPcMH/KlAW7W4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4OEUwLzU1RTM5MkZDQjg1 MjExRUU4QUNBQTk2QUM0RjlBRTAyL1lidkxiYmpjRXpmQnVDbVBjTUhfS2xBVzdX NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWJ2TGJiamNFemZCdUNtUGNNSF9LbEFXN1c0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 OEUwLzU1RTM5MkZDQjg1MjExRUU4QUNBQTk2QUM0RjlBRTAyL1lidkxiYmpjRXpm QnVDbVBjTUhfS2xBVzdXNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEOVECVXCp4SG9FbkFGKYo5RX8dQ3uxSPNFtqgqNekt5oQPqChb+BNQq kmdm6+H8Du4aXb5MZjhSCWnlubdXwjgFz+U6heAMGemIb9104QlLLBnUdt10gFLB 8jLcTa9iwxWsUhdDP8WJSa1OmPPeP00Bufbcs/5sPZsXofxObLlmhQjtVIhlFQxy HNkwMAAbTCcTtOhCzityRSguWhEzoSb4dg23jxGmsFnQt/MYVq8yC8slKCokUhZs 3zbzhkA0BJ2kQ3Oq83k2lOCJOTS8NRgsq9o5FjSKSvUQpHmbkcW3I9ZbdRjHHcj+ mkLmYTsn02vFEh14RMwRrT9swqdETXQ= -----END CERTIFICATE-----Generated at Wed May 15 09:27:30 2024 by rpki-client on console-fra.rpki-client.org