$ rpki-client -vvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft File: yukPRsIh0AstoIB61MSwZQM3Q0Q.mft (raw, json) Hash identifier: u7GEbUM/8MMHEtnK+J3Z4qjEaf2EVTd7cZaEP/MzGVw= Subject key identifier: 6B:80:B6:D4:15:E9:97:CE:9C:47:42:AB:71:2C:FE:36:82:9E:3A:B7 Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 Certificate issuer: /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft Manifest number: 40 Signing time: Wed 15 May 2024 08:17:04 +0000 Manifest this update: Wed 15 May 2024 08:17:04 +0000 Manifest next update: Wed 22 May 2024 08:17:04 +0000 Files and hashes: 1: yukPRsIh0AstoIB61MSwZQM3Q0Q.crl (hash: tbOk99V9N2SfmAWVx73r9lHQwkK9pl3Gwc5htcdM/mU=) 2: 40F782C8B4AA11EEB330C137C4F9AE02.roa (hash: mHOSPVyM4ES/UeKoiaqn8Uf6I7NTTwDDTHV96Q8HOxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Validity Not Before: May 15 08:17:04 2024 GMT Not After : May 22 08:17:04 2024 GMT Subject: CN=66446f80-dcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c9:ae:4b:1c:ce:27:a8:96:d3:b1:b5:d4:f1: d4:75:5c:05:2d:3d:47:28:84:54:bd:78:52:22:ee: 5f:ba:a9:d6:ff:a9:a4:a0:b8:d2:47:5c:df:ef:56: 16:75:29:87:0b:c9:74:60:f3:4d:aa:4a:2d:0c:23: 71:cb:32:82:c9:37:4f:cb:fc:ec:a7:d5:d8:1d:35: 3b:bd:72:09:78:60:17:94:1a:af:94:c0:b3:37:eb: 5d:c5:09:35:93:da:a5:c2:e9:0c:1b:7a:6d:a8:7e: 36:d2:6d:8b:23:1d:94:a5:91:c9:b1:08:cb:d8:c6: 78:94:be:10:ea:eb:cf:36:2c:77:59:fe:7d:c9:d0: 13:df:fe:d4:4d:d6:2e:d7:44:dc:13:c7:2c:eb:a5: aa:a6:58:d0:b7:59:de:ff:a7:63:e8:21:51:cb:35: 5c:6f:1d:8e:d4:a8:e4:9d:5d:56:64:16:a0:9c:94: 09:95:c8:ab:04:7c:a4:bd:e8:9e:02:83:32:d6:be: f2:77:32:1f:5f:97:64:f6:d8:18:f9:cb:7e:c0:a9: cd:74:c8:6e:06:e1:84:62:00:99:50:e3:12:99:02: 75:44:bb:b4:f8:37:dd:f3:5e:96:ed:5b:4f:3c:16: b0:dc:2e:13:e2:0b:1c:4d:3a:e7:3b:2a:77:b2:51: fe:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:80:B6:D4:15:E9:97:CE:9C:47:42:AB:71:2C:FE:36:82:9E:3A:B7 X509v3 Authority Key Identifier: keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:ba:45:64:b3:79:bd:ee:da:10:dc:25:aa:ab:da:28:5b:96: 03:e7:26:a7:87:b0:15:64:24:40:39:e7:8d:ef:e5:83:4a:5c: 4d:9a:58:e1:11:98:35:eb:e4:14:e5:88:1b:9e:02:d1:ab:c7: c5:78:15:d3:4a:91:28:3e:12:7a:5d:c8:00:7d:9b:eb:c1:83: 36:a2:01:43:b8:58:20:23:99:ef:47:bd:b2:80:29:9a:93:08: b2:cb:2f:01:dd:ed:c6:c6:36:9f:27:90:d2:ee:9e:d3:e2:a5: cb:40:46:93:37:71:d9:3d:6b:ba:bf:1e:ec:b0:c4:53:0e:38: 09:e2:61:76:7a:83:e5:d5:13:78:9c:6d:6a:1c:a4:63:eb:ed: d7:92:0e:ba:72:ee:9f:1b:77:a7:ea:56:43:5b:9d:6c:52:14: 5c:7e:79:23:32:9c:ac:a2:20:fe:b9:98:97:dd:e5:ca:ea:28: fe:f2:8f:38:56:69:3e:50:97:3e:de:66:7b:51:7b:41:3f:bc: 47:10:d7:a1:48:38:ec:94:8b:f4:bd:b7:73:35:b7:89:77:fa: 0c:1f:ff:d8:78:33:81:1b:e5:cc:75:8c:67:22:93:8e:67:2e: ef:cb:8a:92:c7:e6:2b:ac:cf:44:9a:5a:2a:c9:d1:fd:c7:2a: 4b:b3:21:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 ODUyNjExMC8GA1UEBRMoQ0FFOTBGNDZDMjIxRDAwQjJEQTA4MDdBRDRDNEIwNjUw MzM3NDM0NDAeFw0yNDA1MTUwODE3MDRaFw0yNDA1MjIwODE3MDRaMBgxFjAUBgNV BAMTDTY2NDQ2ZjgwLWRjZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7ya5LHM4nqJbTsbXU8dR1XAUtPUcohFS9eFIi7l+6qdb/qaSguNJHXN/vVhZ1 KYcLyXRg802qSi0MI3HLMoLJN0/L/Oyn1dgdNTu9cgl4YBeUGq+UwLM3613FCTWT 2qXC6Qwbem2ofjbSbYsjHZSlkcmxCMvYxniUvhDq6882LHdZ/n3J0BPf/tRN1i7X RNwTxyzrpaqmWNC3Wd7/p2PoIVHLNVxvHY7UqOSdXVZkFqCclAmVyKsEfKS96J4C gzLWvvJ3Mh9fl2T22Bj5y37Aqc10yG4G4YRiAJlQ4xKZAnVEu7T4N93zXpbtW088 FrDcLhPiCxxNOuc7KneyUf4XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa4C21BXp l86cR0KrcSz+NoKeOrcwHwYDVR0jBBgwFoAUyukPRsIh0AstoIB61MSwZQM3Q0Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4NTI2L0M0QzZEMDQ2QjQ0 QTExRUU5MEQ0NkYwQ0M0RjlBRTAyL3l1a1BSc0loMEFzdG9JQjYxTVN3WlFNM1Ew US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveXVrUFJzSWgwQXN0b0lCNjFNU3daUU0zUTBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 NTI2L0M0QzZEMDQ2QjQ0QTExRUU5MEQ0NkYwQ0M0RjlBRTAyL3l1a1BSc0loMEFz dG9JQjYxTVN3WlFNM1EwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFC6RWSzeb3u2hDcJaqr2ihblgPnJqeHsBVkJEA5543v5YNKXE2aWOER mDXr5BTliBueAtGrx8V4FdNKkSg+EnpdyAB9m+vBgzaiAUO4WCAjme9HvbKAKZqT CLLLLwHd7cbGNp8nkNLuntPipctARpM3cdk9a7q/HuywxFMOOAniYXZ6g+XVE3ic bWocpGPr7deSDrpy7p8bd6fqVkNbnWxSFFx+eSMynKyiIP65mJfd5crqKP7yjzhW aT5Qlz7eZntRe0E/vEcQ16FIOOyUi/S9t3M1t4l3+gwf/9h4M4Eb5cx1jGcik45n Lu/LipLH5iusz0SaWirJ0f3HKkuzIc0= -----END CERTIFICATE-----Generated at Wed May 15 09:04:09 2024 by rpki-client on console-ams.rpki-client.org