$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json) Hash identifier: e7bdXasDpUaP9p4U1qN5w1PQR5QFFd0G5bv9n+O6qW0= Subject key identifier: 7C:C9:79:FE:DC:DF:98:FA:83:F9:99:A9:E6:9D:EA:EE:65:B8:0E:66 Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft Manifest number: 10 Signing time: Wed 15 May 2024 09:00:35 +0000 Manifest this update: Wed 15 May 2024 09:00:35 +0000 Manifest next update: Wed 22 May 2024 09:00:35 +0000 Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: 9D1B7AfZvuRJyurNa2voe7iUCnGyX4GELTT8qIHu8cs=) 2: 0A2301B2FCEB11EEBA59DC2BC4F9AE02.roa (hash: /AyQMqWZ57bgXPGZC6xfQU7bxlqUkG6/f7HGBOIGwIM=) 3: B65959F8FC7411EE841CC07AC4F9AE02.roa (hash: uHLbpnlfbFwZRtw8r9GbeL/ZYB4FyowNXtoVbmMIJOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Validity Not Before: May 15 09:00:35 2024 GMT Not After : May 22 09:00:35 2024 GMT Subject: CN=664479b3-e8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:81:3a:2a:58:91:a8:ec:74:55:8e:e9:52:7a: 81:f4:3a:9a:73:30:ac:fb:ed:42:8a:f5:da:84:52: b0:ef:d0:1b:8c:f7:2e:da:12:80:ba:8e:c5:c1:bb: 5e:10:19:de:1a:16:b3:59:d3:bd:99:2b:9e:58:52: 4c:a2:7b:b9:fb:9b:72:45:c0:24:fc:ba:e3:2c:df: 10:15:d7:14:80:1a:df:4f:87:af:c0:8f:fd:ee:d9: 0c:3d:bb:06:3e:01:c3:b7:cb:b7:44:dc:91:9b:15: 29:5f:57:b4:72:2b:d1:11:00:40:32:5c:3c:b0:4b: 1f:14:a0:25:32:4b:6b:b6:a5:b0:f7:9a:1f:b5:67: dd:0c:58:7f:b7:0b:04:ae:fb:d2:d2:31:2a:ca:fb: b8:4b:de:04:91:28:15:79:4c:1d:59:b9:a2:88:af: 60:9b:e3:6d:16:7c:fe:88:0f:16:20:7b:44:4c:b5: 5c:61:b8:c5:90:16:fb:2c:43:2a:70:c9:8e:f8:ee: dc:68:db:17:09:d9:f0:5a:ec:8f:21:f5:54:f4:b8: 16:08:8b:00:97:c4:ab:ea:4b:16:6b:74:f7:7b:fa: 4b:8f:74:e3:89:fa:94:ca:60:7f:7a:58:34:ee:14: 8c:d9:f6:f6:c1:ce:b5:84:26:64:f7:eb:80:c7:10: 39:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C9:79:FE:DC:DF:98:FA:83:F9:99:A9:E6:9D:EA:EE:65:B8:0E:66 X509v3 Authority Key Identifier: keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:b2:47:6a:b5:63:af:a0:2d:50:c0:85:87:f6:28:54:93:9d: f8:d8:c6:a9:ef:55:d3:37:1e:a2:b4:a8:9b:b3:51:25:ba:b4: f9:10:00:c7:5d:7e:76:29:46:96:d6:2b:c2:df:07:e1:25:76: 5a:c7:18:98:c2:2a:20:35:40:fa:02:0c:be:a5:0a:a5:0f:e8: ac:c1:0d:a3:41:f4:15:26:b6:0a:ca:4e:d7:a8:ea:4b:f4:8a: 3f:83:d5:75:29:c9:94:83:5b:9a:82:b6:b7:4e:7c:9c:6e:94: d7:06:ac:1e:1f:ee:53:6c:0f:20:a9:9c:0f:91:07:18:f7:c1: de:94:2f:83:bb:d4:04:f4:0d:0c:f1:ae:90:8b:5a:78:38:a6: 11:3e:62:00:6a:26:2e:d6:f7:c3:ec:70:d8:72:01:ad:85:d8: a6:27:10:00:bb:43:da:ec:8d:7e:7e:9e:06:4c:97:f2:58:44: 7d:cf:76:14:8f:ba:3a:af:d5:56:71:f1:d8:47:cf:8d:dc:45: c4:93:4b:c7:a1:0d:27:cc:52:79:61:28:31:50:82:33:98:4e: 70:7f:ea:12:31:c9:d3:ad:21:5e:60:11:7e:09:a9:18:c6:13: dd:80:3e:5a:2d:97:fe:c0:24:01:9a:44:4c:17:a7:be:cd:a3: 2d:48:e2:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTA5ODExMC8GA1UEBRMoNjAzMkY2M0ZEMjYxNjgxQTQwRjczMEI5Nzg3MjUxRTYz MzI4Q0Q2RTAeFw0yNDA1MTUwOTAwMzVaFw0yNDA1MjIwOTAwMzVaMBgxFjAUBgNV BAMTDTY2NDQ3OWIzLWU4ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+gToqWJGo7HRVjulSeoH0OppzMKz77UKK9dqEUrDv0BuM9y7aEoC6jsXBu14Q Gd4aFrNZ072ZK55YUkyie7n7m3JFwCT8uuMs3xAV1xSAGt9Ph6/Aj/3u2Qw9uwY+ AcO3y7dE3JGbFSlfV7RyK9ERAEAyXDywSx8UoCUyS2u2pbD3mh+1Z90MWH+3CwSu +9LSMSrK+7hL3gSRKBV5TB1ZuaKIr2Cb420WfP6IDxYge0RMtVxhuMWQFvssQypw yY747txo2xcJ2fBa7I8h9VT0uBYIiwCXxKvqSxZrdPd7+kuPdOOJ+pTKYH96WDTu FIzZ9vbBzrWEJmT364DHEDmhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfMl5/tzf mPqD+Zmp5p3q7mW4DmYwHwYDVR0jBBgwFoAUYDL2P9JhaBpA9zC5eHJR5jMozW4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1MDk4L0IyQjFBMkI4RkM3 MTExRUVCRENDNEI1M0M0RjlBRTAyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pX NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWURMMlA5SmhhQnBBOXpDNWVISlI1ak1velc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 MDk4L0IyQjFBMkI4RkM3MTExRUVCRENDNEI1M0M0RjlBRTAyL1lETDJQOUpoYUJw QTl6QzVlSEpSNWpNb3pXNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJWyR2q1Y6+gLVDAhYf2KFSTnfjYxqnvVdM3HqK0qJuzUSW6tPkQAMdd fnYpRpbWK8LfB+EldlrHGJjCKiA1QPoCDL6lCqUP6KzBDaNB9BUmtgrKTteo6kv0 ij+D1XUpyZSDW5qCtrdOfJxulNcGrB4f7lNsDyCpnA+RBxj3wd6UL4O71AT0DQzx rpCLWng4phE+YgBqJi7W98PscNhyAa2F2KYnEAC7Q9rsjX5+ngZMl/JYRH3PdhSP ujqv1VZx8dhHz43cRcSTS8ehDSfMUnlhKDFQgjOYTnB/6hIxydOtIV5gEX4JqRjG E92APlotl/7AJAGaREwXp77Noy1I4qA= -----END CERTIFICATE-----Generated at Wed May 15 11:17:42 2024 by rpki-client on console-ams.rpki-client.org