$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft File: YPTPqWb55eIDdMsu1HBkEt2iHE8.mft (raw, json) Hash identifier: kskeuCXz+Cg/coamykNDeZYYJTdZdqTEylj08OpaUXU= Subject key identifier: 0C:78:0B:DC:3B:B4:17:DF:F0:32:38:F5:30:70:AB:00:F6:29:D0:8A Authority key identifier: 60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F Certificate issuer: /CN=A915DB03/serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F Certificate serial: 070A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft Manifest number: 0705 Signing time: Sat 04 May 2024 22:49:05 +0000 Manifest this update: Sat 04 May 2024 22:49:05 +0000 Manifest next update: Sat 11 May 2024 22:49:05 +0000 Files and hashes: 1: YPTPqWb55eIDdMsu1HBkEt2iHE8.crl (hash: NqMGIzRgMz1FsthqxxKFxHe8hPP1Lq8Q83fO/C+TFPw=) 2: 4B696C52F34311EAB4034710C4F9AE02.roa (hash: SPnQClcgfdggbBWm4exY+wvGlzklpCFH5UoP7xK+oy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1802 (0x70a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB03/serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F Validity Not Before: May 4 22:49:05 2024 GMT Not After : May 11 22:49:05 2024 GMT Subject: CN=6636bb61-3ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:be:5a:41:be:e7:cc:83:57:69:8a:78:25:3f: 25:da:68:cb:34:77:fa:e3:19:d6:57:63:75:6b:d9: d5:98:66:81:30:39:7f:3a:7b:2d:aa:68:5b:ed:97: 52:4a:35:55:69:d6:8f:1e:3b:1b:47:68:cb:44:06: 23:8e:75:9c:ef:bf:41:7a:dc:81:ba:4c:cc:37:22: 95:8e:90:56:e4:3e:0d:d8:51:af:ab:69:a4:a8:8c: 6a:2b:04:7c:d6:c7:e9:b3:2c:87:2e:89:9d:55:54: a4:d0:1f:5d:61:3d:1a:ce:c5:fa:93:bf:be:2e:63: a6:bf:5c:26:b6:db:8a:45:0c:87:35:2b:bf:19:99: ed:be:07:24:51:b8:ea:db:be:85:bf:01:2f:da:c9: 2f:5a:f2:35:a2:29:d7:a7:c1:8a:fd:47:f8:6c:96: 1a:9c:6c:f4:ea:bb:63:ae:e2:18:a5:b6:c0:72:46: ea:18:34:a0:07:e7:12:c1:8f:7b:2c:70:62:a4:8c: a2:d7:91:24:e6:fa:af:1d:54:d8:41:f9:9c:0a:5b: 5e:7c:64:d7:c1:21:8f:6e:36:d8:a6:5f:50:3e:19: 16:77:6a:22:42:40:33:d6:16:78:e4:2e:1e:59:89: f6:e5:00:88:b9:14:6e:66:9d:8d:a9:5c:e7:f0:bb: 36:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:78:0B:DC:3B:B4:17:DF:F0:32:38:F5:30:70:AB:00:F6:29:D0:8A X509v3 Authority Key Identifier: keyid:60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:65:47:7a:50:90:25:af:50:39:cc:68:4c:8c:50:40:d0:70: 17:aa:52:68:5a:90:00:04:d2:a9:57:b6:93:d3:12:57:20:82: 5d:c6:55:a7:7b:ba:66:45:bf:15:75:b7:2b:d8:38:59:2b:cf: 9c:23:d4:ee:6c:44:87:be:8d:9c:e1:9f:9b:cd:77:80:36:7d: 06:51:e3:46:15:e3:76:90:35:cc:3d:c5:75:5f:1f:86:29:34: f0:79:6f:05:2c:20:57:8e:d2:65:72:43:40:3c:92:2c:45:cf: ae:51:9c:84:92:11:ab:b7:f9:92:05:f7:3d:83:94:d6:2c:6c: 18:5f:86:11:cc:2f:c4:ff:f2:18:6b:b0:07:ce:d3:e5:c8:f4: 98:e6:2f:ac:34:8f:d3:0e:a4:2f:f9:90:cd:c7:b9:7c:e6:e4: 84:2f:ed:4b:8c:03:ca:0e:83:f4:13:42:1e:4d:7a:88:be:d8: ec:22:8f:a3:5b:e9:69:47:af:01:bb:df:27:3c:e2:e1:36:89: b8:54:ba:4d:c7:ac:8f:b0:c3:93:6e:d3:d7:16:4e:19:af:82: 33:35:90:0f:5e:41:13:14:97:6b:4f:26:75:00:48:d5:9d:57: 86:04:00:50:25:af:c6:87:52:42:43:be:cc:c5:74:56:8e:09: bb:58:d7:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCMDMxMTAvBgNVBAUTKDYwRjRDRkE5NjZGOUU1RTIwMzc0Q0IyRUQ0NzA2NDEy RERBMjFDNEYwHhcNMjQwNTA0MjI0OTA1WhcNMjQwNTExMjI0OTA1WjAYMRYwFAYD VQQDEw02NjM2YmI2MS0zY2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4b5aQb7nzINXaYp4JT8l2mjLNHf64xnWV2N1a9nVmGaBMDl/Onstqmhb7ZdS SjVVadaPHjsbR2jLRAYjjnWc779BetyBukzMNyKVjpBW5D4N2FGvq2mkqIxqKwR8 1sfpsyyHLomdVVSk0B9dYT0azsX6k7++LmOmv1wmttuKRQyHNSu/GZntvgckUbjq 276FvwEv2skvWvI1oinXp8GK/Uf4bJYanGz06rtjruIYpbbAckbqGDSgB+cSwY97 LHBipIyi15Ek5vqvHVTYQfmcCltefGTXwSGPbjbYpl9QPhkWd2oiQkAz1hZ45C4e WYn25QCIuRRuZp2NqVzn8Ls2hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAx4C9w7 tBff8DI49TBwqwD2KdCKMB8GA1UdIwQYMBaAFGD0z6lm+eXiA3TLLtRwZBLdohxP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REIwMy8yQjBFMjczOEYz NDExMUVBQUJFNUMzMDlDNEY5QUUwMi9ZUFRQcVdiNTVlSURkTXN1MUhCa0V0MmlI RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lQVFBxV2I1NWVJRGRNc3UxSEJrRXQyaUhFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REIwMy8yQjBFMjczOEYzNDExMUVBQUJFNUMzMDlDNEY5QUUwMi9ZUFRQcVdiNTVl SURkTXN1MUhCa0V0MmlIRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZZUd6UJAlr1A5zGhMjFBA0HAXqlJoWpAABNKpV7aT0xJXIIJdxlWn e7pmRb8Vdbcr2DhZK8+cI9TubESHvo2c4Z+bzXeANn0GUeNGFeN2kDXMPcV1Xx+G KTTweW8FLCBXjtJlckNAPJIsRc+uUZyEkhGrt/mSBfc9g5TWLGwYX4YRzC/E//IY a7AHztPlyPSY5i+sNI/TDqQv+ZDNx7l85uSEL+1LjAPKDoP0E0IeTXqIvtjsIo+j W+lpR68Bu98nPOLhNom4VLpNx6yPsMOTbtPXFk4Zr4IzNZAPXkETFJdrTyZ1AEjV nVeGBABQJa/Gh1JCQ77MxXRWjgm7WNfl -----END CERTIFICATE-----Generated at Sun May 5 00:14:42 2024 by rpki-client on console-ams.rpki-client.org