$ rpki-client -vvf rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft File: yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft (raw, json) Hash identifier: vhCS/swGwKOWjNwr+ctZrWgWWKuggh3X1wF0xsKK0+Q= Subject key identifier: 1C:96:90:49:DA:F9:23:4E:AB:EF:6A:15:BC:5C:30:51:AC:33:E7:9B Authority key identifier: CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B Certificate issuer: /CN=A9162914/serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft Manifest number: 01B6 Signing time: Sun 05 May 2024 04:40:09 +0000 Manifest this update: Sun 05 May 2024 04:40:08 +0000 Manifest next update: Sun 12 May 2024 04:40:08 +0000 Files and hashes: 1: yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl (hash: SeRZKlDigO9TCV6TlOLMGL9Qiobg/c+TFVSwjPz6Z9w=) 2: 755581D40D7E11EDA9F2CA4AC4F9AE02.roa (hash: PDL8r9tZRfgflY7VPbsALk8qdKKZXRf5oj0NmGKRBus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162914/serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B Validity Not Before: May 5 04:40:08 2024 GMT Not After : May 12 04:40:08 2024 GMT Subject: CN=66370da8-cb23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:62:91:6a:4d:cb:bd:04:cd:05:b9:41:69: 9d:7e:56:e4:75:70:6d:10:b1:6a:25:1e:74:ea:4a: c9:91:b2:43:d5:fc:26:1e:c0:ff:e3:8c:15:8a:23: c1:74:51:27:a2:53:3b:b6:2a:a5:d0:0e:c3:e2:08: c6:3c:b3:55:b9:7f:3b:02:e2:d0:f4:f5:92:ae:ad: 4c:00:ca:84:cf:76:80:72:37:c5:69:4f:08:10:aa: 63:2a:40:5b:f1:f7:7b:ba:fb:c3:9c:4d:58:ff:69: 23:22:d3:0f:dd:47:dc:ce:99:36:4e:dd:28:41:50: 06:b1:63:a9:bd:35:24:49:9a:36:1d:ae:6b:f6:53: b5:dd:3a:f2:bb:ef:8c:99:3d:90:58:cb:76:82:52: 4a:58:ac:f2:74:40:13:42:63:76:41:25:2d:e5:c2: 0a:89:3e:2d:01:3d:72:70:98:c6:93:8c:bd:7d:96: 21:c1:39:1c:b6:0f:b8:2c:19:d3:1b:06:17:30:df: dd:1d:2a:fb:3d:2b:20:86:34:a3:3a:e8:c9:f2:dd: 0d:9b:9d:b0:8c:e6:f5:78:d2:12:59:6f:84:aa:fc: 49:63:03:70:84:cc:1a:58:2c:d2:05:f1:e4:41:9c: 2b:5f:ec:78:f1:db:25:54:59:3d:b8:ca:9d:a2:2c: b6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:96:90:49:DA:F9:23:4E:AB:EF:6A:15:BC:5C:30:51:AC:33:E7:9B X509v3 Authority Key Identifier: keyid:CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:11:80:72:1f:aa:13:86:e7:b2:b3:fd:d1:7a:31:29:97:0b: 43:1a:db:f7:65:ce:38:8f:69:a9:67:3a:0f:72:7f:17:6e:13: 5d:ca:25:ea:30:15:59:d8:cb:28:3a:2c:48:75:d5:79:d3:4f: cd:6f:7b:9a:df:38:01:a7:ee:71:e9:ec:8b:b8:30:b2:cc:a7: 2d:ae:aa:ba:ee:2a:04:97:7d:4b:e1:bb:09:c7:04:cb:18:36: 7b:06:9b:42:f5:40:dd:d5:e5:48:fc:db:fc:1b:7d:fe:65:32: 1d:d3:99:7e:8b:67:0d:2a:28:33:5b:65:41:88:fc:a5:49:3b: 49:77:29:ce:4a:df:fa:b1:79:35:d9:6e:96:ed:8b:84:a6:0e: 6d:a1:ea:45:a9:b8:07:87:5a:57:ce:c8:ea:8e:f2:c8:2b:e6: e2:18:e9:ac:67:15:17:70:c6:9b:5e:44:07:52:e3:83:51:af: e8:08:56:b8:9a:06:99:eb:1c:48:bc:ab:8a:35:34:82:c5:b0: 11:32:f2:68:c1:fb:d0:7d:67:68:6f:32:3d:d7:78:c6:0e:09: bb:87:54:55:62:59:5f:bc:b9:5a:3a:0d:20:3e:f0:56:49:58: 78:d7:8e:1f:f6:e9:29:b2:e7:1c:9b:71:f6:ee:ac:20:32:77: e1:0a:10:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5MTQxMTAvBgNVBAUTKENCMUM4MEI0MDM0QkU0MUI1OEMzQzY0QjI0QTA4Q0Q5 Qzc3Qjk2M0IwHhcNMjQwNTA1MDQ0MDA4WhcNMjQwNTEyMDQ0MDA4WjAYMRYwFAYD VQQDEw02NjM3MGRhOC1jYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugtikWpNy70EzQW5QWmdflbkdXBtELFqJR506krJkbJD1fwmHsD/44wViiPB dFEnolM7tiql0A7D4gjGPLNVuX87AuLQ9PWSrq1MAMqEz3aAcjfFaU8IEKpjKkBb 8fd7uvvDnE1Y/2kjItMP3Ufczpk2Tt0oQVAGsWOpvTUkSZo2Ha5r9lO13Tryu++M mT2QWMt2glJKWKzydEATQmN2QSUt5cIKiT4tAT1ycJjGk4y9fZYhwTkctg+4LBnT GwYXMN/dHSr7PSsghjSjOujJ8t0Nm52wjOb1eNISWW+EqvxJYwNwhMwaWCzSBfHk QZwrX+x48dslVFk9uMqdoiy2DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByWkEna +SNOq+9qFbxcMFGsM+ebMB8GA1UdIwQYMBaAFMscgLQDS+QbWMPGSySgjNnHe5Y7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjkxNC9ENjZDOTNGQzBE NzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVCdFl3OFpMSktDTTJjZDds anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l4eUF0QU5MNUJ0WXc4WkxKS0NNMmNkN2xqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjkxNC9ENjZDOTNGQzBENzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVC dFl3OFpMSktDTTJjZDdsanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASEYByH6oThueys/3RejEplwtDGtv3Zc44j2mpZzoPcn8XbhNdyiXq MBVZ2MsoOixIddV500/Nb3ua3zgBp+5x6eyLuDCyzKctrqq67ioEl31L4bsJxwTL GDZ7BptC9UDd1eVI/Nv8G33+ZTId05l+i2cNKigzW2VBiPylSTtJdynOSt/6sXk1 2W6W7YuEpg5toepFqbgHh1pXzsjqjvLIK+biGOmsZxUXcMabXkQHUuODUa/oCFa4 mgaZ6xxIvKuKNTSCxbARMvJowfvQfWdobzI913jGDgm7h1RVYllfvLlaOg0gPvBW SVh4144f9ukpsuccm3H27qwgMnfhChC5 -----END CERTIFICATE-----Generated at Sun May 5 05:21:56 2024 by rpki-client on console-fra.rpki-client.org