$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft File: YBC8xly5zPAs9-0p7HXk1iK98_A.mft (raw, json) Hash identifier: l+Btsd1hjmVAs4sWm4eN3XGPTSOGnDj8eOKaqvD8U3c= Subject key identifier: CE:3C:BB:87:F1:D3:DB:69:D0:94:0B:F7:E4:2F:CF:96:69:D8:D1:F8 Authority key identifier: 60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0 Certificate issuer: /CN=A9144F45/serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0 Certificate serial: 03CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft Manifest number: 03CC Signing time: Fri 03 May 2024 02:29:35 +0000 Manifest this update: Fri 03 May 2024 02:29:35 +0000 Manifest next update: Fri 10 May 2024 02:29:35 +0000 Files and hashes: 1: YBC8xly5zPAs9-0p7HXk1iK98_A.crl (hash: 8V1+gE9xAptGevguaYR7C00SJEcIqAJ6Xj55Jgtib0c=) 2: E225E68E397411EC8120D135C4F9AE02.roa (hash: B176wN8cc3STWVRBMXNyfJfGKm4gsudlF7DiviBh7SQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 975 (0x3cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F45/serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0 Validity Not Before: May 3 02:29:35 2024 GMT Not After : May 10 02:29:35 2024 GMT Subject: CN=66344c0f-fb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:38:a1:ef:5d:7b:c4:55:c4:70:a7:ea:8c: 1c:c1:69:7c:14:b1:e0:cb:4d:bf:a6:1e:a5:b3:e7: 4e:6e:d8:3c:b5:a2:b7:d7:48:c7:0a:0b:44:7b:f0: b0:a7:79:43:c8:66:b7:e8:1f:6b:2f:22:14:58:0c: 69:eb:64:d6:5c:4c:da:4b:4f:06:a5:2f:43:a2:a2: 38:de:49:e3:09:23:b0:dd:7a:89:89:52:0b:fd:f4: 7e:89:22:33:d6:fd:d8:4d:1d:9f:a8:10:60:32:c0: d4:4a:5e:76:5d:2a:c5:b7:58:ac:30:d9:0d:92:f1: e2:a9:23:49:92:0e:9d:52:77:55:6c:e1:e3:68:4e: c6:63:c1:10:3c:2c:17:7b:c9:12:c1:28:4f:f5:45: 44:0b:05:e7:b0:fb:a6:7d:65:0b:d5:5e:b1:3c:b6: 74:59:3e:54:59:10:8c:a2:73:b0:a1:4f:bb:0a:94: 04:89:10:d4:ef:1c:93:93:cd:de:fd:6b:cf:ea:2c: 13:df:8e:8f:ac:90:2c:69:21:c7:1c:cc:3b:e7:9d: 66:34:68:84:15:27:0d:7e:72:82:66:25:e7:95:0d: aa:d4:ab:c0:76:da:be:91:44:f5:ce:95:87:28:72: 70:50:d4:3a:ad:85:7d:c4:70:c6:a5:72:94:ee:cf: 44:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3C:BB:87:F1:D3:DB:69:D0:94:0B:F7:E4:2F:CF:96:69:D8:D1:F8 X509v3 Authority Key Identifier: keyid:60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:cd:6c:2c:03:6b:f8:6f:46:aa:c5:8a:07:1a:bb:bb:68:42: 44:8a:6a:6b:4b:93:a2:ec:47:1c:e7:69:14:1f:62:84:df:dd: ac:24:c8:96:15:ad:2f:9e:56:62:d2:b3:2d:f5:4a:d7:a3:dd: c5:08:bd:ba:3a:1a:e4:5c:a0:63:75:09:d9:55:04:bf:bc:7d: 75:b2:5c:04:d6:8b:48:fe:54:2c:34:83:f3:8f:4f:28:4c:9a: d1:b1:b8:c5:46:69:e8:8a:83:5e:7f:0a:19:b4:bf:ec:98:bd: 8d:a6:f7:71:c6:c0:2e:3e:cc:7e:fb:40:12:1b:c2:95:31:c1: 8e:86:81:54:35:d5:2c:e3:11:3f:2c:9a:a8:20:dc:69:2c:3e: a1:2f:e1:3a:24:5b:4e:8f:bf:34:c0:19:a6:6b:e7:55:4b:ee: df:21:59:ce:51:e4:62:8f:ae:23:ac:d3:eb:88:a1:72:60:61: 43:a9:9b:7e:c5:5d:e6:27:a8:1e:63:ed:9f:68:0a:ae:22:74: 9b:ea:9c:51:73:ca:4e:30:06:37:fd:e1:c3:4e:7e:96:b1:99: e2:b3:5a:39:db:c5:e9:04:cc:c0:b7:cd:06:04:43:96:22:e7: 17:0d:db:41:05:9a:5a:1d:82:c2:fd:ee:6b:e8:e0:68:58:dc: 4d:03:7a:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNDUxMTAvBgNVBAUTKDYwMTBCQ0M2NUNCOUNDRjAyQ0Y3RUQyOUVDNzVFNEQ2 MjJCREYzRjAwHhcNMjQwNTAzMDIyOTM1WhcNMjQwNTEwMDIyOTM1WjAYMRYwFAYD VQQDEw02NjM0NGMwZi1mYjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOE4oe9de8RVxHCn6owcwWl8FLHgy02/ph6ls+dObtg8taK310jHCgtEe/Cw p3lDyGa36B9rLyIUWAxp62TWXEzaS08GpS9DoqI43knjCSOw3XqJiVIL/fR+iSIz 1v3YTR2fqBBgMsDUSl52XSrFt1isMNkNkvHiqSNJkg6dUndVbOHjaE7GY8EQPCwX e8kSwShP9UVECwXnsPumfWUL1V6xPLZ0WT5UWRCMonOwoU+7CpQEiRDU7xyTk83e /WvP6iwT346PrJAsaSHHHMw7551mNGiEFScNfnKCZiXnlQ2q1KvAdtq+kUT1zpWH KHJwUNQ6rYV9xHDGpXKU7s9EFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM48u4fx 09tp0JQL9+Qvz5Zp2NH4MB8GA1UdIwQYMBaAFGAQvMZcuczwLPftKex15NYivfPw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY0NS9ENzZGRjA0NDM5 NzAxMUVDOUI2NUJBMTZDNEY5QUUwMi9ZQkM4eGx5NXpQQXM5LTBwN0hYazFpSzk4 X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCQzh4bHk1elBBczktMHA3SFhrMWlLOThfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY0NS9ENzZGRjA0NDM5NzAxMUVDOUI2NUJBMTZDNEY5QUUwMi9ZQkM4eGx5NXpQ QXM5LTBwN0hYazFpSzk4X0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRzWwsA2v4b0aqxYoHGru7aEJEimprS5Oi7Ecc52kUH2KE392sJMiW Fa0vnlZi0rMt9UrXo93FCL26OhrkXKBjdQnZVQS/vH11slwE1otI/lQsNIPzj08o TJrRsbjFRmnoioNefwoZtL/smL2NpvdxxsAuPsx++0ASG8KVMcGOhoFUNdUs4xE/ LJqoINxpLD6hL+E6JFtOj780wBmma+dVS+7fIVnOUeRij64jrNPriKFyYGFDqZt+ xV3mJ6geY+2faAquInSb6pxRc8pOMAY3/eHDTn6WsZnis1o528XpBMzAt80GBEOW IucXDdtBBZpaHYLC/e5r6OBoWNxNA3oU -----END CERTIFICATE-----Generated at Fri May 3 04:45:11 2024 by rpki-client on console-fra.rpki-client.org