$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft File: YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json) Hash identifier: R3+PESJ6n6/tl9ce9ssnnNTg3gl/mC+BDCvkdIo7ANQ= Subject key identifier: 19:A5:D9:F5:33:3E:2F:4E:39:05:CF:E6:0B:1C:6E:7B:A0:24:43:76 Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Certificate serial: 0315 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft Manifest number: 0305 Signing time: Mon 29 Apr 2024 03:12:44 +0000 Manifest this update: Mon 29 Apr 2024 03:12:43 +0000 Manifest next update: Mon 06 May 2024 03:12:43 +0000 Files and hashes: 1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: aIvBOW8IFtZDW1f+/MsycTV87+ciMKMjsk/qereKve8=) 2: 7A5A3018369911EEA7B51070C4F9AE02.roa (hash: zw7CoMnNEQBUTgULQNOkotQEalwjFX9jkxfsyc4ldfU=) 3: D4E1388A2F8A11EEA59DA358C4F9AE02.roa (hash: 2FXj0OIT+96fs5pTNVqbBghGdAnH4rKBbXqSIuIyoPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 789 (0x315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Validity Not Before: Apr 29 03:12:43 2024 GMT Not After : May 6 03:12:43 2024 GMT Subject: CN=662f102c-1c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:95:c6:22:e7:f0:3b:d0:fb:d1:0a:98:15:2d: f9:cb:6e:b9:5e:26:08:e1:e2:1e:c7:dc:a9:70:8b: 5c:1c:4e:5c:aa:11:37:57:c7:b5:dc:22:69:c7:f4: de:6a:d0:2a:dc:e4:f7:6a:94:a0:74:c2:b7:71:85: 46:c6:a9:cf:63:de:75:58:a1:d7:a4:0a:0a:9e:ad: 22:5c:95:5f:d5:b9:a1:db:cb:8e:da:cc:c9:fc:bf: 86:c4:8d:8a:ed:31:d2:ca:d8:b4:64:10:31:a1:2a: 89:01:71:e0:d3:d9:a9:a4:41:86:71:d8:14:58:9e: 9b:fd:3d:f8:19:78:79:88:1c:2d:f1:b3:f3:84:19: 9d:76:8c:ca:be:b2:6e:35:ba:41:fb:a9:3d:ed:4c: 5c:7b:e7:c1:93:24:e2:4e:0d:16:59:6c:57:43:13: 45:22:64:c0:f1:c1:f4:82:f8:6a:b1:1e:0f:17:07: f3:e8:96:1a:3d:f3:c3:b9:8e:f2:40:6f:ae:2d:2c: 8f:4f:3b:33:61:9a:12:49:8c:55:3d:52:71:31:97: 93:5c:40:9e:8b:2c:a7:73:3e:46:43:ae:71:3a:5d: 9b:4c:a5:10:a8:02:d7:c6:be:b8:c7:18:80:ff:e6: 7d:b6:18:16:6c:38:86:96:24:99:1e:23:c7:46:cb: 82:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A5:D9:F5:33:3E:2F:4E:39:05:CF:E6:0B:1C:6E:7B:A0:24:43:76 X509v3 Authority Key Identifier: keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:48:fe:3b:0b:c4:f0:98:65:ac:8e:ab:d9:3b:7e:a7:74:a4: 4f:53:45:58:b3:0d:4a:1a:10:f7:70:16:44:48:c0:5c:5d:2a: 96:dc:36:67:2b:7a:3a:4e:2f:2b:d0:b9:36:f5:96:d0:cc:e2: c1:64:4b:cc:6b:f5:76:d5:f0:66:f7:8d:1d:0c:ff:0b:df:83: 0f:dd:d1:f0:04:d9:c1:3b:4a:da:dd:42:2b:40:73:ec:16:5e: f8:11:98:c8:81:0b:62:b0:55:92:c6:d8:d8:54:74:fe:d7:61: 22:8c:ea:82:ef:d5:f4:61:b5:5b:41:57:28:3b:4c:59:80:30: ff:bb:63:e0:e4:15:44:39:18:92:5a:41:53:2c:55:1e:a2:eb: 58:da:b2:7c:8c:0e:bf:24:67:0d:64:1c:dd:e1:09:4c:a8:5a: 05:dc:30:37:9b:24:75:6f:00:59:77:1d:4d:a8:a0:27:b7:a4: 69:3d:1f:35:fc:7a:fd:e9:fc:e2:8b:09:6a:d3:d4:77:48:01: 21:db:38:47:c3:f0:a2:61:9f:a8:f6:72:f5:cb:35:17:ef:15: 06:da:9d:90:d1:12:91:45:01:b1:9b:51:39:a2:a0:22:d1:23: 5e:b1:de:91:0d:9b:f8:e3:dd:0c:43:8f:e2:54:97:01:fb:2d: 35:2d:05:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJFRTExMTAvBgNVBAUTKDYwNzZCRDBCQTREQjc5N0E3MkE2OEZFRkY5QkZCNTU4 QzQ0Mzk4QjIwHhcNMjQwNDI5MDMxMjQzWhcNMjQwNTA2MDMxMjQzWjAYMRYwFAYD VQQDEw02NjJmMTAyYy0xYzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5XGIufwO9D70QqYFS35y265XiYI4eIex9ypcItcHE5cqhE3V8e13CJpx/Te atAq3OT3apSgdMK3cYVGxqnPY951WKHXpAoKnq0iXJVf1bmh28uO2szJ/L+GxI2K 7THSyti0ZBAxoSqJAXHg09mppEGGcdgUWJ6b/T34GXh5iBwt8bPzhBmddozKvrJu NbpB+6k97Uxce+fBkyTiTg0WWWxXQxNFImTA8cH0gvhqsR4PFwfz6JYaPfPDuY7y QG+uLSyPTzszYZoSSYxVPVJxMZeTXECeiyyncz5GQ65xOl2bTKUQqALXxr64xxiA /+Z9thgWbDiGliSZHiPHRsuCyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBml2fUz Pi9OOQXP5gscbnugJEN2MB8GA1UdIwQYMBaAFGB2vQuk23l6cqaP7/m/tVjEQ5iy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkVFMS83NTJENDJFODhG RDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVYcHlwb192LWItMVdNUkRt TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYTlDNlRiZVhweXBvX3YtYi0xV01SRG1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkVFMS83NTJENDJFODhGRDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVY cHlwb192LWItMVdNUkRtTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCASP47C8TwmGWsjqvZO36ndKRPU0VYsw1KGhD3cBZESMBcXSqW3DZn K3o6Ti8r0Lk29ZbQzOLBZEvMa/V21fBm940dDP8L34MP3dHwBNnBO0ra3UIrQHPs Fl74EZjIgQtisFWSxtjYVHT+12EijOqC79X0YbVbQVcoO0xZgDD/u2Pg5BVEORiS WkFTLFUeoutY2rJ8jA6/JGcNZBzd4QlMqFoF3DA3myR1bwBZdx1NqKAnt6RpPR81 /Hr96fziiwlq09R3SAEh2zhHw/CiYZ+o9nL1yzUX7xUG2p2Q0RKRRQGxm1E5oqAi 0SNesd6RDZv4490MQ4/iVJcB+y01LQVC -----END CERTIFICATE-----Generated at Mon Apr 29 12:50:57 2024 by rpki-client on console-ams.rpki-client.org