$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json) Hash identifier: fEJC/nvRvSUtwdFfkJ/EqKPDNxKlHLKqHV1At0fwGIQ= Subject key identifier: DA:35:20:CA:79:DC:41:30:5D:0E:25:D3:E4:AA:97:85:5D:89:65:72 Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 2432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft Manifest number: 2419 Signing time: Thu 30 May 2024 16:20:14 +0000 Manifest this update: Thu 30 May 2024 16:20:14 +0000 Manifest next update: Thu 06 Jun 2024 16:20:14 +0000 Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: KAFS5ift3wBgAp29QgtzVlTF97vq0IAUAOttRfbh5I0=) 2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: zGgve7TKmo0yFXXpMDUsfy/GbvF3p0r775JG6HQOpk8=) 3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: 2IdXQ4yovx6Rj31KLXFcNXpKV6RnWk4e20Noq8RrtXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 16:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9266 (0x2432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: May 30 16:20:14 2024 GMT Not After : Jun 6 16:20:14 2024 GMT Subject: CN=6658a73e-42a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:d4:e7:90:b2:41:0c:46:e5:21:cb:5a:23: 60:25:ca:57:10:6a:33:2d:1b:c2:8d:af:87:f1:c3: 97:5a:ad:b6:8b:13:ba:1e:2a:1d:0a:af:15:67:9b: e5:31:d3:85:64:d2:c3:0d:29:2f:40:ea:d3:6a:0d: 41:47:eb:88:15:9c:6b:9b:3d:fc:89:11:e7:6e:0c: ad:29:5a:91:fd:34:c6:08:ac:4b:c5:5e:41:0a:59: e6:42:ca:2d:7b:2e:18:16:1c:d3:b0:5c:6c:3a:55: 38:ee:55:23:bb:99:c2:75:3f:69:04:de:63:f3:4e: ff:45:97:f4:5c:91:07:00:2b:71:ac:74:42:ac:71: bd:73:4b:ed:59:7d:4a:45:66:7d:e0:41:66:c0:e2: 5f:6c:8b:ff:8e:3d:45:4b:27:ac:44:ba:ac:c5:1a: c7:05:0f:f0:52:e6:9f:d6:72:bf:22:57:d3:65:0f: bb:39:0a:75:be:66:a9:c7:58:bb:6a:01:4a:13:b8: 67:4b:73:b8:14:3f:d5:08:f0:e3:cb:4c:7c:fe:8b: 8f:b7:a0:bd:2a:fa:03:b4:55:7c:55:64:b6:41:37: 9b:73:42:44:8d:c6:04:ac:2e:a0:c1:33:46:8c:cb: 49:51:8f:e0:29:0d:db:53:a8:e8:6d:90:36:3c:2b: 61:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:35:20:CA:79:DC:41:30:5D:0E:25:D3:E4:AA:97:85:5D:89:65:72 X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:bf:74:bc:19:b1:e5:47:b0:17:91:08:40:c4:76:a9:4b:d3: b9:2b:02:03:45:5c:9b:b0:51:aa:c7:61:51:ec:0a:fa:1e:b9: b8:df:57:2d:7b:6a:49:87:09:fb:13:fe:0a:7a:fb:8f:9c:0b: 8e:91:e1:b9:95:2e:13:fe:03:0e:95:9e:b6:e8:d1:85:0e:d9: df:aa:e8:21:9e:08:b8:39:a0:f2:9f:f1:0c:c4:9c:1a:16:18: 27:ce:42:a8:de:68:25:c0:e9:2c:a6:f9:76:ed:da:51:e3:9c: ec:17:98:37:0b:e9:4a:86:5f:3c:83:d7:d9:cb:2a:7c:6a:31: 3e:b1:14:08:67:20:a5:b9:3b:ec:87:32:cf:ae:95:fd:52:8b: 49:1c:0c:47:5e:23:49:5b:d4:c9:76:ed:77:91:3b:45:f7:81: 24:8c:61:1b:a5:50:95:e5:4e:49:2a:27:a3:ea:97:6a:2f:bc: 9b:8b:43:27:54:31:3e:9a:9d:e4:50:25:19:94:9a:e7:55:6c: de:5b:9e:fc:83:c5:91:e6:01:5b:a2:89:d2:c6:05:4a:85:77: 19:b2:ef:54:94:03:1a:5b:40:2e:83:8a:6c:a4:a0:9e:5a:46: e9:ce:22:75:b0:e9:a7:ad:0b:88:51:ee:7b:39:40:a6:e9:50: 65:51:b3:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjQwNTMwMTYyMDE0WhcNMjQwNjA2MTYyMDE0WjAYMRYwFAYD VQQDEw02NjU4YTczZS00MmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjHU55CyQQxG5SHLWiNgJcpXEGozLRvCja+H8cOXWq22ixO6HiodCq8VZ5vl MdOFZNLDDSkvQOrTag1BR+uIFZxrmz38iRHnbgytKVqR/TTGCKxLxV5BClnmQsot ey4YFhzTsFxsOlU47lUju5nCdT9pBN5j807/RZf0XJEHACtxrHRCrHG9c0vtWX1K RWZ94EFmwOJfbIv/jj1FSyesRLqsxRrHBQ/wUuaf1nK/IlfTZQ+7OQp1vmapx1i7 agFKE7hnS3O4FD/VCPDjy0x8/ouPt6C9KvoDtFV8VWS2QTebc0JEjcYErC6gwTNG jMtJUY/gKQ3bU6jobZA2PCthewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNo1IMp5 3EEwXQ4l0+Sql4VdiWVyMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm TFozNzNyZGpnSnVIMHRqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnv3S8GbHlR7AXkQhAxHapS9O5KwIDRVybsFGqx2FR7Ar6Hrm431ct e2pJhwn7E/4KevuPnAuOkeG5lS4T/gMOlZ626NGFDtnfqughngi4OaDyn/EMxJwa FhgnzkKo3mglwOkspvl27dpR45zsF5g3C+lKhl88g9fZyyp8ajE+sRQIZyCluTvs hzLPrpX9UotJHAxHXiNJW9TJdu13kTtF94EkjGEbpVCV5U5JKiej6pdqL7ybi0Mn VDE+mp3kUCUZlJrnVWzeW578g8WR5gFboonSxgVKhXcZsu9UlAMaW0Aug4pspKCe WkbpziJ1sOmnrQuIUe57OUCm6VBlUbMs -----END CERTIFICATE-----Generated at Thu May 30 18:45:56 2024 by rpki-client on console-ams.rpki-client.org