$ rpki-client -vvf rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft File: YQPK5q-yXkC6nl2kxULP4JtndCo.mft (raw, json) Hash identifier: BYENnn6RX0ikBc7sBDT+7Y4fsGDvnms6jhqcOzL5ON0= Subject key identifier: BB:B8:37:29:7D:5F:90:C2:8E:5C:45:36:89:B6:96:E9:18:55:9B:49 Authority key identifier: 61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A Certificate issuer: /CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A Certificate serial: 08BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft Manifest number: 08B3 Signing time: Thu 02 May 2024 21:37:48 +0000 Manifest this update: Thu 02 May 2024 21:37:48 +0000 Manifest next update: Thu 09 May 2024 21:37:48 +0000 Files and hashes: 1: YQPK5q-yXkC6nl2kxULP4JtndCo.crl (hash: e8pGQ6HZm/aSWtdJbXKg7UuT/x9G9fIaTjzBwsc8pWc=) 2: B781FD5C8FB411EAA396FB5CC4F9AE02.roa (hash: MU6LjfK4ZIIU2GJQBjNw0rChfQST0kcEksHSnhipM0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2234 (0x8ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A Validity Not Before: May 2 21:37:48 2024 GMT Not After : May 9 21:37:48 2024 GMT Subject: CN=663407ac-a99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4f:b1:d4:70:ff:57:1f:fa:a0:7d:49:bc:ef: 95:74:fa:e1:d3:ba:c2:f3:d7:36:7c:64:82:88:87: 3c:9b:9a:82:cd:0a:8f:45:57:c5:9d:eb:db:30:f0: ad:e4:9c:93:0d:60:1b:4b:c5:32:87:8c:b0:a6:49: b5:ca:c8:40:01:91:b0:1d:11:15:dd:62:12:bc:e6: 21:a5:6a:41:1b:6a:22:fc:ec:79:0c:fe:2b:23:38: 4f:f1:d9:cb:c5:94:ad:67:68:37:e9:19:96:4a:76: e5:78:d8:83:c3:f0:bd:e8:16:19:42:c4:07:83:2e: 4a:f1:b9:8f:58:45:ca:21:19:c9:f2:98:35:b3:bd: 26:1b:30:db:b3:b9:f8:e6:7b:bf:1b:23:30:c4:e2: 20:a8:d1:7b:bf:04:48:6c:fc:1c:85:79:cc:ec:55: 18:99:f7:e9:d2:0e:4e:b1:76:c3:ff:e7:9a:c6:d6: 6d:96:b6:a2:cb:56:1e:2f:57:a4:3d:e4:88:51:ae: af:6c:ba:a3:bd:ac:61:43:26:87:33:21:11:15:26: 1f:6e:1b:02:c8:a4:7a:0d:da:bd:6f:b3:06:d0:0e: 63:cf:9f:49:5b:9b:69:35:79:35:75:66:20:6b:12: 10:a7:8d:0b:57:97:49:9f:7e:9e:34:11:4d:a2:33: d1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B8:37:29:7D:5F:90:C2:8E:5C:45:36:89:B6:96:E9:18:55:9B:49 X509v3 Authority Key Identifier: keyid:61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:b7:66:dd:96:0a:97:8a:ca:45:28:ad:77:ab:23:f8:79:ec: 72:02:1d:ac:67:65:e7:64:e8:c0:25:8d:32:87:dc:7d:3f:10: b2:cf:6c:06:af:ba:4d:72:8c:c5:1d:ae:b7:13:e2:76:d4:7a: 7c:84:63:51:a9:4f:eb:e4:41:62:15:da:aa:2b:fe:a4:42:77: 73:6c:70:da:1b:79:e9:f0:e1:3f:fb:a9:5d:51:2c:44:76:7f: b9:98:f6:2b:cd:49:2a:68:fa:0b:d8:71:09:4f:94:8c:98:4e: e8:7d:52:d2:70:f1:00:83:1a:e6:16:d5:e2:3d:f5:b9:18:b9: d4:75:02:9d:c7:66:a7:33:00:51:22:3f:70:21:72:6e:fe:7d: cb:31:9e:45:4b:bc:41:26:17:0f:28:5a:cb:07:d0:b6:53:24: 74:f2:13:d0:c2:66:24:7b:4f:26:5f:4f:73:32:26:93:0d:9a: d5:70:72:ac:77:5c:b2:4c:65:de:4f:50:c5:0c:b8:c6:93:01: 79:c5:7b:38:96:21:59:f9:4b:f4:65:53:66:d9:4c:77:05:0e: 1b:2e:f0:cc:df:55:43:70:15:a6:1f:60:e3:13:01:59:23:bc: 27:ac:1b:83:c4:60:59:e1:78:0a:8b:53:5a:b5:31:e7:dc:0f: 3e:f4:85:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYxOTMxMTAvBgNVBAUTKDYxMDNDQUU2QUZCMjVFNDBCQTlFNURBNEM1NDJDRkUw OUI2Nzc0MkEwHhcNMjQwNTAyMjEzNzQ4WhcNMjQwNTA5MjEzNzQ4WjAYMRYwFAYD VQQDEw02NjM0MDdhYy1hOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0U+x1HD/Vx/6oH1JvO+VdPrh07rC89c2fGSCiIc8m5qCzQqPRVfFnevbMPCt 5JyTDWAbS8Uyh4ywpkm1yshAAZGwHREV3WISvOYhpWpBG2oi/Ox5DP4rIzhP8dnL xZStZ2g36RmWSnbleNiDw/C96BYZQsQHgy5K8bmPWEXKIRnJ8pg1s70mGzDbs7n4 5nu/GyMwxOIgqNF7vwRIbPwchXnM7FUYmffp0g5OsXbD/+eaxtZtlraiy1YeL1ek PeSIUa6vbLqjvaxhQyaHMyERFSYfbhsCyKR6Ddq9b7MG0A5jz59JW5tpNXk1dWYg axIQp40LV5dJn36eNBFNojPRqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLu4Nyl9 X5DCjlxFNom2lukYVZtJMB8GA1UdIwQYMBaAFGEDyuavsl5Aup5dpMVCz+CbZ3Qq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjE5My8xRDUxNDA1RThG QjMxMUVBQjcxMjZDNTdDNEY5QUUwMi9ZUVBLNXEteVhrQzZubDJreFVMUDRKdG5k Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lRUEs1cS15WGtDNm5sMmt4VUxQNEp0bmRDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjE5My8xRDUxNDA1RThGQjMxMUVBQjcxMjZDNTdDNEY5QUUwMi9ZUVBLNXEteVhr QzZubDJreFVMUDRKdG5kQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHt2bdlgqXispFKK13qyP4eexyAh2sZ2XnZOjAJY0yh9x9PxCyz2wG r7pNcozFHa63E+J21Hp8hGNRqU/r5EFiFdqqK/6kQndzbHDaG3np8OE/+6ldUSxE dn+5mPYrzUkqaPoL2HEJT5SMmE7ofVLScPEAgxrmFtXiPfW5GLnUdQKdx2anMwBR Ij9wIXJu/n3LMZ5FS7xBJhcPKFrLB9C2UyR08hPQwmYke08mX09zMiaTDZrVcHKs d1yyTGXeT1DFDLjGkwF5xXs4liFZ+Uv0ZVNm2Ux3BQ4bLvDM31VDcBWmH2DjEwFZ I7wnrBuDxGBZ4XgKi1NatTHn3A8+9IWI -----END CERTIFICATE-----Generated at Thu May 2 22:28:52 2024 by rpki-client on console-ams.rpki-client.org