$ rpki-client -vvf rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft File: yH_T4kCIpNnfHF0CaFII6Qph7_c.mft (raw, json) Hash identifier: +r23w1ULnx1XyYw4okoIBzjKpmOcbd2Ynxzt28HreNQ= Subject key identifier: 11:82:5B:6F:E8:E4:49:72:71:5F:4A:A9:0F:78:E7:8E:A9:AD:63:B0 Authority key identifier: C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7 Certificate issuer: /CN=A9161065/serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft Manifest number: C4 Signing time: Tue 07 May 2024 06:18:35 +0000 Manifest this update: Tue 07 May 2024 06:18:34 +0000 Manifest next update: Tue 14 May 2024 06:18:34 +0000 Files and hashes: 1: yH_T4kCIpNnfHF0CaFII6Qph7_c.crl (hash: hRJEq6fxlxqVw6tZ8IA72iRZ90/wyGv0hPWF6niVdd8=) 2: CDE70CB2E52011EDB505E014C4F9AE02.roa (hash: P7xeVkF9emdICYiycbS/SwtoKKwOg3DUAb73pIqVFKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 06:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161065/serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7 Validity Not Before: May 7 06:18:34 2024 GMT Not After : May 14 06:18:34 2024 GMT Subject: CN=6639c7bb-1450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:83:24:92:91:78:a1:0b:de:1b:1c:76:38:cd: 2a:41:a8:1b:1f:23:5f:0f:ef:6d:21:e4:52:a7:ca: 89:c7:b9:1f:85:c8:c3:cb:a4:95:00:d3:1d:78:d7: 5c:7b:a3:d0:a1:3a:c7:cb:db:5c:82:98:87:8b:39: 3d:4f:bc:fd:84:2b:1d:9c:ce:55:d3:cf:cb:ee:08: a5:43:c1:94:fc:2e:d1:a4:80:8c:44:0e:ff:87:41: a9:72:ca:74:e9:41:48:8c:73:0e:67:64:01:a4:70: 36:42:03:37:23:09:e0:6a:f0:be:07:7e:17:a8:90: e7:e3:a5:f3:7e:11:fe:8f:30:a8:7f:d7:1d:53:ce: 24:e9:0c:fe:7f:1d:46:d0:6b:4f:e6:6b:b4:db:63: 68:07:cf:17:74:83:cb:5e:ff:4b:a8:0b:b8:fa:6e: dd:a1:32:db:e8:cd:c0:4b:77:36:23:5b:4f:eb:8d: 14:1a:f0:bc:9a:25:c3:52:e2:4b:ed:73:40:e0:f7: 12:d2:9c:43:08:3d:1f:1b:a8:dd:35:a2:60:d1:c6: 08:64:d6:91:20:17:95:07:71:d1:d4:12:b2:a1:b0: 31:47:00:7b:43:54:9b:7e:5c:41:ad:1e:9d:78:a8: 39:48:3f:e4:fb:56:09:b9:e0:6d:05:c2:d7:cf:a8: 33:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:82:5B:6F:E8:E4:49:72:71:5F:4A:A9:0F:78:E7:8E:A9:AD:63:B0 X509v3 Authority Key Identifier: keyid:C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:db:dc:c8:47:e5:dc:07:91:42:00:31:ae:95:e3:69:10:53: 05:87:82:74:f7:d6:45:a2:4d:71:83:f4:ff:df:e8:c5:8e:8b: 1f:6a:e4:a8:12:fa:43:fd:59:19:65:87:9d:81:50:ae:b6:51: 85:97:c5:84:9e:ca:72:5c:ad:d3:a2:7e:af:46:9c:b2:93:86: c9:bd:39:4b:27:29:5d:eb:11:40:84:14:1d:45:7e:5a:da:5a: 0d:55:ea:91:4e:a1:fc:3b:41:53:38:3c:7d:a7:66:1e:4b:81: f9:92:e0:2e:15:7f:72:bb:a4:2e:6f:da:ed:03:77:0c:1c:ed: 31:4a:2c:4c:74:5f:25:27:7c:46:e3:46:d6:dc:f5:86:52:f1: 8c:36:91:d6:33:57:a0:e6:41:87:43:62:4f:b7:ef:19:c5:ba: 7d:9a:c6:56:0a:2a:2d:6d:d5:90:3b:ef:93:1f:b0:a7:db:5f: 98:ea:b6:29:c8:7f:45:f0:8a:83:a8:ba:1e:b2:66:78:9e:5b: f2:38:32:d9:4b:40:1f:c9:d1:ce:94:5f:fd:eb:bd:e6:db:59: 0b:a3:8d:a6:de:15:91:5f:d3:7e:e8:86:08:5b:af:57:76:56: 8c:78:b4:f2:72:42:8e:ba:8d:8f:ad:1f:a6:ea:5d:7a:4d:f0: 63:ad:64:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwNjUxMTAvBgNVBAUTKEM4N0ZEM0UyNDA4OEE0RDlERjFDNUQwMjY4NTIwOEU5 MEE2MUVGRjcwHhcNMjQwNTA3MDYxODM0WhcNMjQwNTE0MDYxODM0WjAYMRYwFAYD VQQDEw02NjM5YzdiYi0xNDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4oMkkpF4oQveGxx2OM0qQagbHyNfD+9tIeRSp8qJx7kfhcjDy6SVANMdeNdc e6PQoTrHy9tcgpiHizk9T7z9hCsdnM5V08/L7gilQ8GU/C7RpICMRA7/h0Gpcsp0 6UFIjHMOZ2QBpHA2QgM3IwngavC+B34XqJDn46XzfhH+jzCof9cdU84k6Qz+fx1G 0GtP5mu022NoB88XdIPLXv9LqAu4+m7doTLb6M3AS3c2I1tP640UGvC8miXDUuJL 7XNA4PcS0pxDCD0fG6jdNaJg0cYIZNaRIBeVB3HR1BKyobAxRwB7Q1SbflxBrR6d eKg5SD/k+1YJueBtBcLXz6gzUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGCW2/o 5ElycV9KqQ94546prWOwMB8GA1UdIwQYMBaAFMh/0+JAiKTZ3xxdAmhSCOkKYe/3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTA2NS8xQTI1RDI3NEU1 MUQxMUVEODUzOEIyNDZDNEY5QUUwMi95SF9UNGtDSXBObmZIRjBDYUZJSTZRcGg3 X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIX1Q0a0NJcE5uZkhGMENhRklJNlFwaDdfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTA2NS8xQTI1RDI3NEU1MUQxMUVEODUzOEIyNDZDNEY5QUUwMi95SF9UNGtDSXBO bmZIRjBDYUZJSTZRcGg3X2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo29zIR+XcB5FCADGuleNpEFMFh4J099ZFok1xg/T/3+jFjosfauSo EvpD/VkZZYedgVCutlGFl8WEnspyXK3Ton6vRpyyk4bJvTlLJyld6xFAhBQdRX5a 2loNVeqRTqH8O0FTODx9p2YeS4H5kuAuFX9yu6Qub9rtA3cMHO0xSixMdF8lJ3xG 40bW3PWGUvGMNpHWM1eg5kGHQ2JPt+8Zxbp9msZWCiotbdWQO++TH7Cn21+Y6rYp yH9F8IqDqLoesmZ4nlvyODLZS0AfydHOlF/9673m21kLo42m3hWRX9N+6IYIW69X dlaMeLTyckKOuo2PrR+m6l16TfBjrWQS -----END CERTIFICATE-----Generated at Tue May 7 07:13:00 2024 by rpki-client on console-ams.rpki-client.org