$ rpki-client -vvf rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/ybuS-salUy5CNVZ1HQ6nKJHm3no.mft File: ybuS-salUy5CNVZ1HQ6nKJHm3no.mft (raw, json) Hash identifier: zzGER41+bZKGpihan8Tgz4AimK4SRVpXp1uJACaA1Pw= Subject key identifier: B9:8B:BB:F0:C4:3B:3F:58:05:2D:7A:B6:96:A6:5E:23:F8:2A:12:DA Authority key identifier: C9:BB:92:FA:C6:A5:53:2E:42:35:56:75:1D:0E:A7:28:91:E6:DE:7A Certificate issuer: /CN=A917AD0E/serialNumber=C9BB92FAC6A5532E423556751D0EA72891E6DE7A Certificate serial: 06DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybuS-salUy5CNVZ1HQ6nKJHm3no.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/ybuS-salUy5CNVZ1HQ6nKJHm3no.mft Manifest number: 06CC Signing time: Fri 26 Apr 2024 23:00:13 +0000 Manifest this update: Fri 26 Apr 2024 23:00:12 +0000 Manifest next update: Fri 03 May 2024 23:00:12 +0000 Files and hashes: 1: ybuS-salUy5CNVZ1HQ6nKJHm3no.crl (hash: SH5Gz+mhg8sH65hesAycuty3yN1GOHPG29+bXD6uORg=) 2: 4EF3DCD8DECB11ED80F78C77C4F9AE02.roa (hash: YAsdGgPvC2gFDTIAZ6DH3aQitMynCUYRQEVu//2Ac+E=) 3: E761A38C324811EC84006646C4F9AE02.roa (hash: /3/7GWvnWQQUw9nhXT/AJNkLLqXZgkdZAqfDTMifFfc=) 4: E8CFACAA324811EC84006646C4F9AE02.roa (hash: 9unucrGT0rv0WFS3/h9kdxGKhb6RaiFSVdVM6lH6E8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/ybuS-salUy5CNVZ1HQ6nKJHm3no.crl rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/ybuS-salUy5CNVZ1HQ6nKJHm3no.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybuS-salUy5CNVZ1HQ6nKJHm3no.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1758 (0x6de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AD0E/serialNumber=C9BB92FAC6A5532E423556751D0EA72891E6DE7A Validity Not Before: Apr 26 23:00:12 2024 GMT Not After : May 3 23:00:12 2024 GMT Subject: CN=662c31fc-d633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:6a:08:92:e7:83:4d:42:cc:69:65:3d:c6: 58:e8:8e:4c:eb:a8:d5:cb:c7:1b:57:9d:b2:92:b5: 8b:38:20:4f:65:d3:a6:12:e9:3f:ea:ad:e8:a1:34: e2:0d:ac:83:b6:75:4b:a4:11:00:fb:17:35:da:f0: 8a:e5:bb:fd:88:12:ba:40:1f:a0:29:56:c9:df:cb: 4b:31:62:13:f5:e1:fa:13:75:78:51:d5:97:ef:ca: 46:6f:18:c1:9d:58:d7:1c:b3:37:5d:72:6a:d0:34: 21:47:f7:8e:f4:2f:97:2b:17:ce:b7:cd:20:c9:07: bf:86:de:03:7e:8a:50:45:31:b2:4f:d8:86:09:e3: a5:a2:a6:a3:c6:11:d4:64:12:89:c1:32:a1:f1:1c: ff:85:96:2f:02:a5:5b:bc:54:ff:8d:45:b9:77:23: 99:d6:bf:0a:32:ba:4a:ec:97:9e:42:da:4d:a7:4e: 45:42:57:db:b7:56:7a:5b:ef:df:3a:d2:fa:d4:54: c0:2c:c2:ab:7b:f5:ee:89:de:c0:86:e5:7a:a8:87: 42:34:2c:86:5f:31:a2:1b:a4:a0:ca:2d:ca:2e:2b: 47:8b:70:6b:12:7f:fb:b8:ec:31:dd:35:6d:81:0a: c7:3b:c5:e6:ac:ae:56:13:a7:41:ea:1c:1f:a3:c0: bd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8B:BB:F0:C4:3B:3F:58:05:2D:7A:B6:96:A6:5E:23:F8:2A:12:DA X509v3 Authority Key Identifier: keyid:C9:BB:92:FA:C6:A5:53:2E:42:35:56:75:1D:0E:A7:28:91:E6:DE:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/ybuS-salUy5CNVZ1HQ6nKJHm3no.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybuS-salUy5CNVZ1HQ6nKJHm3no.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/ybuS-salUy5CNVZ1HQ6nKJHm3no.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:7e:a2:bc:aa:08:00:a7:14:ca:91:3d:26:82:ac:ac:67:d2: 3d:56:15:a9:43:da:92:c3:5d:dd:55:fd:50:f8:ce:63:e9:e2: 32:64:8b:83:f8:9a:83:f0:d9:07:00:0b:6d:e4:f0:9a:69:d7: f8:17:9b:e8:aa:8e:9d:8b:3a:c6:a8:83:9b:e0:57:fd:2a:66: 39:22:c9:c9:36:98:26:71:d0:6a:09:9d:b8:86:89:36:d7:8b: 66:11:a8:ae:e1:30:f5:94:4b:b4:e7:60:12:1f:e9:a0:c2:60: 46:50:e7:20:be:29:4d:a1:68:ef:80:0e:a8:36:9b:d0:64:2b: 75:53:a9:13:0e:4a:a8:24:6c:27:c5:49:bd:7a:a8:e3:ef:c6: 47:a6:be:4a:26:25:5f:3d:40:11:73:95:f8:cd:c8:d7:5b:01: 7a:01:e9:92:b5:43:6d:fc:52:c3:93:0f:6e:64:32:ba:80:34: 27:af:f7:bd:f9:9f:80:f1:30:18:19:f3:54:56:80:cd:ad:ce: d9:87:a3:2a:dd:1c:93:a0:9b:24:1c:98:13:4f:a0:6f:30:9a: b1:f8:55:36:c3:99:e6:1d:9d:d4:84:25:25:9c:da:4a:80:c0: da:50:91:c4:e0:f4:70:0e:60:ee:ab:2a:a9:78:e7:98:21:b0: 02:0a:25:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FEMEUxMTAvBgNVBAUTKEM5QkI5MkZBQzZBNTUzMkU0MjM1NTY3NTFEMEVBNzI4 OTFFNkRFN0EwHhcNMjQwNDI2MjMwMDEyWhcNMjQwNTAzMjMwMDEyWjAYMRYwFAYD VQQDEw02NjJjMzFmYy1kNjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxRqCJLng01CzGllPcZY6I5M66jVy8cbV52ykrWLOCBPZdOmEuk/6q3ooTTi DayDtnVLpBEA+xc12vCK5bv9iBK6QB+gKVbJ38tLMWIT9eH6E3V4UdWX78pGbxjB nVjXHLM3XXJq0DQhR/eO9C+XKxfOt80gyQe/ht4DfopQRTGyT9iGCeOloqajxhHU ZBKJwTKh8Rz/hZYvAqVbvFT/jUW5dyOZ1r8KMrpK7JeeQtpNp05FQlfbt1Z6W+/f OtL61FTALMKre/Xuid7AhuV6qIdCNCyGXzGiG6Sgyi3KLitHi3BrEn/7uOwx3TVt gQrHO8XmrK5WE6dB6hwfo8C9sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmLu/DE Oz9YBS16tpamXiP4KhLaMB8GA1UdIwQYMBaAFMm7kvrGpVMuQjVWdR0OpyiR5t56 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUQwRS8xNDI4MjBCMjBE NUIxMUVCQUQ1MUNFMzZDNEY5QUUwMi95YnVTLXNhbFV5NUNOVloxSFE2bktKSG0z bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lidVMtc2FsVXk1Q05WWjFIUTZuS0pIbTNuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUQwRS8xNDI4MjBCMjBENUIxMUVCQUQ1MUNFMzZDNEY5QUUwMi95YnVTLXNhbFV5 NUNOVloxSFE2bktKSG0zbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARfqK8qggApxTKkT0mgqysZ9I9VhWpQ9qSw13dVf1Q+M5j6eIyZIuD +JqD8NkHAAtt5PCaadf4F5voqo6dizrGqIOb4Ff9KmY5IsnJNpgmcdBqCZ24hok2 14tmEaiu4TD1lEu052ASH+mgwmBGUOcgvilNoWjvgA6oNpvQZCt1U6kTDkqoJGwn xUm9eqjj78ZHpr5KJiVfPUARc5X4zcjXWwF6AemStUNt/FLDkw9uZDK6gDQnr/e9 +Z+A8TAYGfNUVoDNrc7Zh6Mq3RyToJskHJgTT6BvMJqx+FU2w5nmHZ3UhCUlnNpK gMDaUJHE4PRwDmDuqyqpeOeYIbACCiVO -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:13 2024 by rpki-client on console-ams.rpki-client.org