$ rpki-client -vvf rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft File: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft (raw, json) Hash identifier: ziqtiWHuCdKVmL2HHT8Qknomtg+zizUmOO1aEAGkXE8= Subject key identifier: EC:88:E1:B8:49:CB:93:F4:C2:43:F7:CC:B8:D1:79:6F:78:43:10:69 Authority key identifier: 62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 Certificate issuer: /CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Certificate serial: 0B6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft Manifest number: 0B64 Signing time: Sat 04 May 2024 19:47:32 +0000 Manifest this update: Sat 04 May 2024 19:47:32 +0000 Manifest next update: Sat 11 May 2024 19:47:32 +0000 Files and hashes: 1: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl (hash: O+CW7rL/r8QzM/d79XpER/mOpsqdWhCgbgC5DNQcXqM=) 2: 279A3D000B7311EAB0D8E617C4F9AE02.roa (hash: UafbiMmZF9F3XPcAOMRSjdNNwyxnWZkW944zFM+t9pk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2927 (0xb6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Validity Not Before: May 4 19:47:32 2024 GMT Not After : May 11 19:47:32 2024 GMT Subject: CN=663690d4-3552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d6:07:c3:4e:29:31:a7:4f:13:b2:a3:ad:ee: e5:8d:f4:05:c7:d4:54:2f:19:59:a7:07:61:41:4f: ab:f0:80:57:2c:5b:be:42:45:e2:76:9b:ff:ed:ae: 47:5f:1b:90:45:7d:d3:9e:ad:55:5c:9a:7f:56:44: d5:f8:30:3d:60:12:ea:54:fc:d0:9b:a0:52:67:1d: 43:e3:e1:63:97:ac:60:b1:a8:60:76:9b:06:59:01: c7:e9:9e:b2:52:7e:51:57:55:71:1e:57:2d:e3:10: ca:f1:43:ec:63:0e:a6:e0:15:10:9c:50:bf:6f:11: fa:7d:6c:9e:c0:9e:fe:54:78:80:97:7f:66:06:d3: 5c:57:ba:93:e9:93:a8:67:58:28:fb:9a:2d:0f:c1: 1b:da:52:e7:0f:bb:34:eb:ef:f5:21:fb:81:a1:bf: 48:0a:15:21:92:4c:e0:11:6c:f4:8c:3f:e8:6e:c3: f1:c2:a4:7a:c2:e6:16:08:4f:0e:6b:c2:62:0e:38: c2:58:16:21:ec:31:69:26:e9:87:00:32:bb:da:82: 61:6c:3b:e8:c9:6d:f7:0a:32:89:0f:1e:f2:6e:8a: df:a3:c5:be:0a:e1:33:ec:49:31:e1:1d:7c:cd:24: 14:64:59:37:41:03:a2:c3:82:e9:4c:73:bd:d9:4c: 72:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:88:E1:B8:49:CB:93:F4:C2:43:F7:CC:B8:D1:79:6F:78:43:10:69 X509v3 Authority Key Identifier: keyid:62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ef:56:35:c5:8b:14:47:b8:05:72:1f:88:e5:78:78:96:25: 08:5b:06:10:1d:25:82:d6:16:d3:43:08:da:0e:3c:f8:98:1c: e5:6b:b8:ec:49:50:7f:71:7f:05:81:39:2f:8c:41:77:66:f2: a8:1f:d0:31:b5:14:c9:d5:55:95:ce:b3:2f:88:e0:a3:dc:47: 87:6e:67:78:f0:6a:b9:0a:d9:78:be:47:0e:47:16:6f:c1:a7: ec:64:06:0d:02:ec:c4:c6:ea:e4:8c:98:c5:94:d9:e5:df:82: 46:48:6e:7f:3b:8b:76:8d:dc:c5:01:c0:cf:49:3f:2d:a2:46: e6:08:89:c5:2d:26:81:f8:09:93:a4:2b:ea:26:11:b5:b4:a9: 39:85:43:8e:a3:a1:75:28:f4:9d:a2:9b:75:bf:84:34:1e:8f: a7:b0:26:a4:99:2a:01:2a:b9:37:42:c8:e6:8e:ee:7e:fc:29: 61:5c:e4:b8:d3:e8:63:41:de:8b:d4:ba:bc:ed:07:6d:54:50: df:fa:50:96:3c:61:9d:a6:2d:37:48:1a:2b:37:a2:d6:90:b9: f2:45:ca:d5:06:76:7e:01:97:0f:a3:d1:9b:47:38:a5:f0:c5: 43:95:f0:37:bf:9f:2e:e3:eb:42:8e:68:b4:c9:db:f7:8e:8c: 98:03:79:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBGRUExMTAvBgNVBAUTKDYyN0ZBOTk2MEVBMjgzQUEyMzkyMTNDQUNEMzc1MDRE MjQ2MEExMDQwHhcNMjQwNTA0MTk0NzMyWhcNMjQwNTExMTk0NzMyWjAYMRYwFAYD VQQDEw02NjM2OTBkNC0zNTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6tYHw04pMadPE7Kjre7ljfQFx9RULxlZpwdhQU+r8IBXLFu+QkXidpv/7a5H XxuQRX3Tnq1VXJp/VkTV+DA9YBLqVPzQm6BSZx1D4+Fjl6xgsahgdpsGWQHH6Z6y Un5RV1VxHlct4xDK8UPsYw6m4BUQnFC/bxH6fWyewJ7+VHiAl39mBtNcV7qT6ZOo Z1go+5otD8Eb2lLnD7s06+/1IfuBob9IChUhkkzgEWz0jD/obsPxwqR6wuYWCE8O a8JiDjjCWBYh7DFpJumHADK72oJhbDvoyW33CjKJDx7yborfo8W+CuEz7Ekx4R18 zSQUZFk3QQOiw4LpTHO92UxyuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyI4bhJ y5P0wkP3zLjReW94QxBpMB8GA1UdIwQYMBaAFGJ/qZYOooOqI5ITys03UE0kYKEE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEZFQS8yNDBEQUNFQTBC NzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2b2praFBLelRkUVRTUmdv UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1luLXBsZzZpZzZvamtoUEt6VGRRVFNSZ29RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEZFQS8yNDBEQUNFQTBCNzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2 b2praFBLelRkUVRTUmdvUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ71Y1xYsUR7gFch+I5Xh4liUIWwYQHSWC1hbTQwjaDjz4mBzla7js SVB/cX8FgTkvjEF3ZvKoH9AxtRTJ1VWVzrMviOCj3EeHbmd48Gq5Ctl4vkcORxZv wafsZAYNAuzExurkjJjFlNnl34JGSG5/O4t2jdzFAcDPST8tokbmCInFLSaB+AmT pCvqJhG1tKk5hUOOo6F1KPSdopt1v4Q0Ho+nsCakmSoBKrk3Qsjmju5+/ClhXOS4 0+hjQd6L1Lq87QdtVFDf+lCWPGGdpi03SBorN6LWkLnyRcrVBnZ+AZcPo9GbRzil 8MVDlfA3v58u4+tCjmi0ydv3joyYA3lx -----END CERTIFICATE-----Generated at Sat May 4 20:37:13 2024 by rpki-client on console-fra.rpki-client.org