$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft File: Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft (raw, json) Hash identifier: kQE1tTWzNzyVQvJjeiRd7fH9UxMNBCAxb0/0RLiiGFs= Subject key identifier: D5:0A:96:DB:51:81:0E:C5:B5:DD:2C:0E:47:DD:58:1A:D3:DA:21:C2 Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 Certificate issuer: /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft Manifest number: 69 Signing time: Fri 17 May 2024 07:39:26 +0000 Manifest this update: Fri 17 May 2024 07:39:25 +0000 Manifest next update: Fri 24 May 2024 07:39:25 +0000 Files and hashes: 1: Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl (hash: B5g4WGb+VnXckDVsQsPOcAPW0E9l2Qeq5RxjufWeB9U=) 2: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (hash: dKc3+c2DnAo+e3S1Hl96MujeqaUzGrL+oSl1CV5Ag0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Validity Not Before: May 17 07:39:25 2024 GMT Not After : May 24 07:39:25 2024 GMT Subject: CN=664709ad-3fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:c8:36:10:cb:30:1a:b3:da:d1:21:64:b8: 47:aa:15:13:57:8e:dd:45:c9:79:d5:6f:0a:8a:8d: 56:9f:78:f0:9a:b0:4a:26:88:d3:b2:cb:ed:03:1f: 0f:7e:93:bb:05:9f:ee:84:20:c9:a4:e6:c3:63:ac: df:ef:49:f0:a3:12:c6:5a:3c:cc:35:e8:df:e7:3e: c3:bb:ce:38:a6:66:6f:89:1c:83:7d:e3:3c:85:b0: 5b:1d:3f:fe:cc:c9:5e:59:51:73:7d:31:09:e4:b5: 39:04:1d:eb:f8:05:36:b1:15:e2:38:43:75:db:ef: 4e:0c:ca:94:9d:8b:58:6e:48:74:49:e3:85:68:ff: 97:4c:16:58:09:f6:2f:6b:91:97:10:b6:4d:1c:11: 92:7a:09:c9:66:95:31:c1:73:b6:fe:f1:c8:16:f3: 4c:46:10:bb:85:12:1b:f2:7d:d0:93:69:9c:5b:9a: 2f:7f:0e:79:8f:ca:0b:54:15:d7:ea:04:a8:7d:08: 92:7c:c7:8a:93:14:11:65:dd:6f:ec:8b:e2:42:99: 44:87:7b:51:40:51:ec:95:52:34:07:25:bc:eb:fb: f3:96:75:c5:e7:4e:5c:02:f0:c7:49:86:28:35:21: 34:01:63:e8:95:fa:0c:cd:f0:14:3a:d4:04:93:a8: ed:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0A:96:DB:51:81:0E:C5:B5:DD:2C:0E:47:DD:58:1A:D3:DA:21:C2 X509v3 Authority Key Identifier: keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2d:f9:de:7b:34:a9:a7:0b:6a:b2:e9:82:b0:1a:12:3c:25: 07:e8:92:96:0e:74:37:a2:35:d3:1d:01:56:eb:f1:49:35:7f: f9:e0:de:e3:18:93:59:09:eb:1c:ef:aa:af:40:11:0c:51:e8: 4a:63:62:6d:85:a8:cd:27:b6:6b:08:a2:af:77:ca:71:50:0a: b6:f0:e2:e9:43:bd:9a:66:fa:02:e1:f4:2b:d0:d1:bc:2a:36: 65:2b:3b:d2:0c:38:28:70:9f:f8:a0:fa:7c:75:c2:0d:68:40: 10:da:9f:01:7d:d5:1d:3f:94:c6:14:98:34:34:90:10:f3:d0: e4:d6:9a:e5:3e:f9:1f:69:2a:0d:5f:67:dd:75:82:d7:a2:16: 54:4a:48:cf:b5:33:c9:34:71:c6:39:62:11:da:08:65:a8:dd: 5b:de:88:f3:c6:15:87:82:9f:13:69:60:a4:76:6c:e3:a8:6c: 43:5a:50:b9:57:1d:7e:68:c3:d8:24:db:cb:59:f5:09:36:1e: fc:e7:73:f4:75:37:50:f3:4e:1d:6b:ca:cc:25:c0:82:46:67: 4f:5c:f9:6d:32:d3:6c:3d:e0:f6:15:9c:d8:13:83:15:59:ec: f8:2f:4f:46:eb:e5:45:46:53:f4:0d:ac:f2:c5:54:b3:47:28: 23:6f:73:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkI3MDExMC8GA1UEBRMoNjIyRTc2NjJEOUZCRTEwQzFBQUUwQkRGRTk4OERCOTk2 QUUzRkQ1OTAeFw0yNDA1MTcwNzM5MjVaFw0yNDA1MjQwNzM5MjVaMBgxFjAUBgNV BAMTDTY2NDcwOWFkLTNmZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCulcg2EMswGrPa0SFkuEeqFRNXjt1FyXnVbwqKjVafePCasEomiNOyy+0DHw9+ k7sFn+6EIMmk5sNjrN/vSfCjEsZaPMw16N/nPsO7zjimZm+JHIN94zyFsFsdP/7M yV5ZUXN9MQnktTkEHev4BTaxFeI4Q3Xb704MypSdi1huSHRJ44Vo/5dMFlgJ9i9r kZcQtk0cEZJ6CclmlTHBc7b+8cgW80xGELuFEhvyfdCTaZxbmi9/DnmPygtUFdfq BKh9CJJ8x4qTFBFl3W/si+JCmUSHe1FAUeyVUjQHJbzr+/OWdcXnTlwC8MdJhig1 ITQBY+iV+gzN8BQ61ASTqO3DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1QqW21GB DsW13SwOR91YGtPaIcIwHwYDVR0jBBgwFoAUYi52Ytn74Qwargvf6YjbmWrj/Vkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyQjcwL0NDQjQ1NEE0NzNB OTExRUU4NDUyN0YyRUM0RjlBRTAyL1lpNTJZdG43NFF3YXJndmY2WWpibVdyal9W ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWk1Mll0bjc0UXdhcmd2ZjZZamJtV3JqX1ZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy QjcwL0NDQjQ1NEE0NzNBOTExRUU4NDUyN0YyRUM0RjlBRTAyL1lpNTJZdG43NFF3 YXJndmY2WWpibVdyal9Way5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI0t+d57NKmnC2qy6YKwGhI8JQfokpYOdDeiNdMdAVbr8Uk1f/ng3uMY k1kJ6xzvqq9AEQxR6EpjYm2FqM0ntmsIoq93ynFQCrbw4ulDvZpm+gLh9CvQ0bwq NmUrO9IMOChwn/ig+nx1wg1oQBDanwF91R0/lMYUmDQ0kBDz0OTWmuU++R9pKg1f Z911gteiFlRKSM+1M8k0ccY5YhHaCGWo3VveiPPGFYeCnxNpYKR2bOOobENaULlX HX5ow9gk28tZ9Qk2Hvznc/R1N1DzTh1ryswlwIJGZ09c+W0y02w94PYVnNgTgxVZ 7PgvT0br5UVGU/QNrPLFVLNHKCNvc+o= -----END CERTIFICATE-----Generated at Fri May 17 08:52:47 2024 by rpki-client on console-ams.rpki-client.org