$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft File: y539cqjfUOBlAEN4BraiAY7Mvf0.mft (raw, json) Hash identifier: P8RgMFXlJMvvrJ0T3Q8EA8ZQ/rHVA5U6Ot9SWWMSB6o= Subject key identifier: 10:0A:87:7D:74:35:F3:29:FC:23:31:8E:10:25:AB:AB:46:FA:5C:73 Authority key identifier: CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD Certificate issuer: /CN=A9150733/serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD Certificate serial: 0A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft Manifest number: 0AFB Signing time: Sat 04 May 2024 20:32:24 +0000 Manifest this update: Sat 04 May 2024 20:32:23 +0000 Manifest next update: Sat 11 May 2024 20:32:23 +0000 Files and hashes: 1: y539cqjfUOBlAEN4BraiAY7Mvf0.crl (hash: hYHHvHRb7CH8t3xRyfPKtSVy+qyIkCFQEbtyyL65zlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2661 (0xa65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150733/serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD Validity Not Before: May 4 20:32:23 2024 GMT Not After : May 11 20:32:23 2024 GMT Subject: CN=66369b57-88cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:0d:8f:54:3c:f3:1d:a6:d5:73:9d:5d:7c: ab:00:43:36:b0:9a:ae:2c:02:8e:f1:e8:da:cb:4c: 5b:89:29:db:77:12:13:cb:dc:62:11:ca:e4:fe:0f: cd:ed:48:ef:0c:c5:c5:c1:11:e9:29:59:5d:eb:b0: ec:55:73:f0:6c:c4:7c:05:b9:9e:03:f8:94:47:59: 59:49:44:29:e2:e5:6a:80:53:ff:54:45:1b:40:08: 53:3e:fb:c7:2f:bb:e0:3f:42:f7:7e:7b:56:6a:db: 16:9b:7b:ad:68:fb:f5:73:e8:67:e2:49:47:a7:33: 6d:df:f2:81:ed:ec:d5:38:df:ed:e1:bb:cb:61:f8: e6:0f:65:22:50:47:a2:59:22:19:c5:88:f7:5f:e3: 9e:c2:6d:64:25:50:fe:c5:81:a4:94:a1:e8:d2:eb: 1f:a5:37:bc:4d:f4:f4:22:41:cf:df:39:34:d5:8d: 44:8d:82:9f:ba:6f:37:7c:fb:23:7c:7a:d1:e7:da: 50:d1:91:91:0e:72:48:02:c6:f6:91:93:fc:40:df: f2:7b:68:7b:3d:8d:f3:4b:f7:f5:41:33:29:bb:05: 47:69:fa:b7:4b:5f:d9:24:2b:eb:6a:2e:08:39:49: 82:4b:56:3b:3b:2d:cf:26:45:f3:15:5f:ae:c8:85: d9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0A:87:7D:74:35:F3:29:FC:23:31:8E:10:25:AB:AB:46:FA:5C:73 X509v3 Authority Key Identifier: keyid:CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:2d:61:ad:9a:8c:1c:9a:d1:23:8a:e0:77:a9:6d:b8:c8:3b: 30:0a:61:eb:7c:df:f6:5b:29:30:de:d3:cb:08:88:3c:d1:c4: 3e:7a:c3:97:d4:49:d3:6e:f1:41:72:97:b3:b9:f1:f0:ea:55: 32:41:02:76:41:6b:28:26:05:9e:c1:2c:d5:78:08:0e:23:7e: e4:b7:0f:1f:47:c4:c6:f4:6f:8e:24:7e:1e:d1:51:05:b3:80: eb:19:22:b8:0c:23:1f:47:9b:f4:4d:7d:da:f5:29:28:42:da: 15:32:05:3e:25:2b:7f:4f:c6:c0:8c:cd:12:fe:92:61:a7:ed: 52:54:d1:f0:20:25:46:08:89:2e:9f:06:38:ad:af:8e:ca:19: 06:1d:c9:08:94:45:00:e0:1a:9d:e3:be:c2:a4:b5:3b:c2:73: c9:96:eb:58:b2:dd:0a:5e:87:ef:f5:3a:47:47:06:4d:19:8c: b8:f2:2d:d8:d8:04:f7:94:33:58:5f:62:95:c0:15:2a:14:90: 44:18:f9:28:15:c2:cf:95:c5:7e:4a:74:d1:d2:f9:7c:bc:23: bb:ad:1c:50:10:e3:08:cb:89:d0:b0:64:48:3a:ae:dc:73:7a: ae:40:5d:56:f0:86:93:2e:29:d4:c7:08:22:fb:ac:55:6e:46: 73:6f:69:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA3MzMxMTAvBgNVBAUTKENCOURGRDcyQThERjUwRTA2NTAwNDM3ODA2QjZBMjAx OEVDQ0JERkQwHhcNMjQwNTA0MjAzMjIzWhcNMjQwNTExMjAzMjIzWjAYMRYwFAYD VQQDEw02NjM2OWI1Ny04OGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscANj1Q88x2m1XOdXXyrAEM2sJquLAKO8ejay0xbiSnbdxITy9xiEcrk/g/N 7UjvDMXFwRHpKVld67DsVXPwbMR8BbmeA/iUR1lZSUQp4uVqgFP/VEUbQAhTPvvH L7vgP0L3fntWatsWm3utaPv1c+hn4klHpzNt3/KB7ezVON/t4bvLYfjmD2UiUEei WSIZxYj3X+Oewm1kJVD+xYGklKHo0usfpTe8TfT0IkHP3zk01Y1EjYKfum83fPsj fHrR59pQ0ZGRDnJIAsb2kZP8QN/ye2h7PY3zS/f1QTMpuwVHafq3S1/ZJCvrai4I OUmCS1Y7Oy3PJkXzFV+uyIXZoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAKh310 NfMp/CMxjhAlq6tG+lxzMB8GA1UdIwQYMBaAFMud/XKo31DgZQBDeAa2ogGOzL39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDczMy8yMTc4NjhDRTNE QjUxMUVBQTY0OTEzMTJDNEY5QUUwMi95NTM5Y3FqZlVPQmxBRU40QnJhaUFZN012 ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MzljcWpmVU9CbEFFTjRCcmFpQVk3TXZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDczMy8yMTc4NjhDRTNEQjUxMUVBQTY0OTEzMTJDNEY5QUUwMi95NTM5Y3FqZlVP QmxBRU40QnJhaUFZN012ZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnLWGtmowcmtEjiuB3qW24yDswCmHrfN/2Wykw3tPLCIg80cQ+esOX 1EnTbvFBcpezufHw6lUyQQJ2QWsoJgWewSzVeAgOI37ktw8fR8TG9G+OJH4e0VEF s4DrGSK4DCMfR5v0TX3a9SkoQtoVMgU+JSt/T8bAjM0S/pJhp+1SVNHwICVGCIku nwY4ra+OyhkGHckIlEUA4Bqd477CpLU7wnPJlutYst0KXofv9TpHRwZNGYy48i3Y 2AT3lDNYX2KVwBUqFJBEGPkoFcLPlcV+SnTR0vl8vCO7rRxQEOMIy4nQsGRIOq7c c3quQF1W8IaTLinUxwgi+6xVbkZzb2mS -----END CERTIFICATE-----Generated at Sat May 4 21:32:58 2024 by rpki-client on console-fra.rpki-client.org