$ rpki-client -vvf rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft File: Yv18a2FzzDKVZktYaAWS-ybSuHo.mft (raw, json) Hash identifier: sYvlHPo22wGRy9Ktze9gNgJJG8gKVBh+fsAg7cluuuw= Subject key identifier: 7C:39:4F:C1:FD:BE:68:AF:9E:D2:3D:19:EB:BF:C7:C6:02:32:F2:30 Authority key identifier: 62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A Certificate issuer: /CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Certificate serial: 0699 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft Manifest number: 0691 Signing time: Sat 04 May 2024 23:30:55 +0000 Manifest this update: Sat 04 May 2024 23:30:54 +0000 Manifest next update: Sat 11 May 2024 23:30:54 +0000 Files and hashes: 1: Yv18a2FzzDKVZktYaAWS-ybSuHo.crl (hash: SOsvhkkfMVNZBFljS+OuQ7+KKh/MSdm9cE2gdzJ/79g=) 2: FACB1DC6595911ECBE6ACC6BC4F9AE02.roa (hash: 3J8UKsSXxzfM+FPcnkprxkh+voSXj2l401+jnG4rh1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1689 (0x699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Validity Not Before: May 4 23:30:54 2024 GMT Not After : May 11 23:30:54 2024 GMT Subject: CN=6636c52f-130d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:6f:da:2e:c5:f3:21:b3:72:63:6a:dc:ed: a7:76:96:00:ea:c0:2d:99:1e:32:3d:90:27:9a:fa: 97:2a:4f:96:25:05:fb:55:75:81:2b:dd:a5:35:77: f9:e1:95:2c:21:90:ef:fa:19:5a:cb:54:ba:81:e1: fd:dc:24:f8:b9:44:05:41:2e:b6:4a:c3:bf:6d:01: a5:74:2f:ee:10:22:cf:37:f7:e3:80:e1:b8:68:21: ef:05:bb:06:85:bf:fd:00:89:9d:7c:1a:fb:db:b9: 11:30:5d:02:5d:c7:64:4b:e9:18:5b:b6:31:03:ab: 17:00:cc:e1:a2:1c:e7:46:c3:9c:bf:75:bd:da:28: 9b:8d:89:4f:3e:ce:6b:c6:ce:fb:4a:ae:d0:d4:64: d8:4a:0e:cd:40:6a:ad:bb:6a:56:0b:7e:4d:8f:6d: 5c:e8:cc:be:9c:4d:f5:6b:45:0a:3b:01:bb:63:16: b2:68:60:98:b9:45:a6:9a:e8:da:95:ce:65:a7:0c: 8a:5f:fa:87:bc:f1:1f:cf:f4:7d:7d:6f:f5:df:bc: 58:dc:9d:20:88:e9:e9:bb:56:04:82:e1:76:a3:cb: 1c:c2:d0:23:b2:69:84:61:12:ce:64:ca:a9:19:11: 2a:da:9c:be:ac:2d:80:34:1b:4d:00:2e:35:96:97: 2e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:39:4F:C1:FD:BE:68:AF:9E:D2:3D:19:EB:BF:C7:C6:02:32:F2:30 X509v3 Authority Key Identifier: keyid:62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:75:22:8d:03:e0:e0:52:d5:67:64:ae:2c:8d:fb:c6:c9:8d: 15:cb:63:e1:6d:4f:3a:a1:d0:25:72:f3:e2:57:93:d1:ca:ef: 68:3b:b6:64:cc:c7:bf:db:c5:39:90:da:c6:35:88:e8:c8:35: 63:0b:6b:17:aa:b7:40:0c:88:fd:39:81:d2:79:47:77:3d:a7: 9f:1f:e5:75:07:84:cc:57:6e:f7:1d:8e:2b:ca:02:73:ee:ea: 86:ab:53:2e:7a:9e:a5:ba:29:3a:14:78:86:a3:1d:1e:78:40: 0c:55:24:bf:18:32:7d:8f:1b:13:45:53:35:8e:c3:df:bd:92: 7e:0b:6a:3e:ef:7a:32:9d:20:6e:0d:fd:c1:cb:93:07:65:9f: e9:18:ab:bd:34:57:91:9a:d4:da:6d:22:ba:e4:3e:cf:4d:70: 88:38:ef:58:53:ed:a4:11:ef:89:ae:6c:d1:68:83:90:ce:82: a2:4d:35:6c:7f:d1:60:bc:68:32:f8:06:c1:61:81:4d:5e:92: 75:78:2a:2a:a5:92:67:51:8e:28:ee:4a:b3:95:29:28:a2:d4: 1a:6d:e4:6d:8f:8d:80:07:ef:1f:06:17:2c:e3:2a:fd:ec:40: 0a:db:cf:a1:0c:4f:c5:07:8d:34:e6:37:ab:7c:78:e7:03:a4: 29:bb:38:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4OEExMTAvBgNVBAUTKDYyRkQ3QzZCNjE3M0NDMzI5NTY2NEI1ODY4MDU5MkZC MjZEMkI4N0EwHhcNMjQwNTA0MjMzMDU0WhcNMjQwNTExMjMzMDU0WjAYMRYwFAYD VQQDEw02NjM2YzUyZi0xMzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthVv2i7F8yGzcmNq3O2ndpYA6sAtmR4yPZAnmvqXKk+WJQX7VXWBK92lNXf5 4ZUsIZDv+hlay1S6geH93CT4uUQFQS62SsO/bQGldC/uECLPN/fjgOG4aCHvBbsG hb/9AImdfBr727kRMF0CXcdkS+kYW7YxA6sXAMzhohznRsOcv3W92iibjYlPPs5r xs77Sq7Q1GTYSg7NQGqtu2pWC35Nj21c6My+nE31a0UKOwG7YxayaGCYuUWmmuja lc5lpwyKX/qHvPEfz/R9fW/137xY3J0giOnpu1YEguF2o8scwtAjsmmEYRLOZMqp GREq2py+rC2ANBtNAC41lpcuTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHw5T8H9 vmivntI9Geu/x8YCMvIwMB8GA1UdIwQYMBaAFGL9fGthc8wylWZLWGgFkvsm0rh6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg4QS85QUVGMjNEQzI0 NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpES1Zaa3RZYUFXUy15YlN1 SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l2MThhMkZ6ekRLVlprdFlhQVdTLXliU3VIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg4QS85QUVGMjNEQzI0NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpE S1Zaa3RZYUFXUy15YlN1SG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArdSKNA+DgUtVnZK4sjfvGyY0Vy2PhbU86odAlcvPiV5PRyu9oO7Zk zMe/28U5kNrGNYjoyDVjC2sXqrdADIj9OYHSeUd3PaefH+V1B4TMV273HY4rygJz 7uqGq1Muep6luik6FHiGox0eeEAMVSS/GDJ9jxsTRVM1jsPfvZJ+C2o+73oynSBu Df3By5MHZZ/pGKu9NFeRmtTabSK65D7PTXCIOO9YU+2kEe+JrmzRaIOQzoKiTTVs f9FgvGgy+AbBYYFNXpJ1eCoqpZJnUY4o7kqzlSkootQabeRtj42AB+8fBhcs4yr9 7EAK28+hDE/FB4005jerfHjnA6Qpuzip -----END CERTIFICATE-----Generated at Sun May 5 00:12:28 2024 by rpki-client on console-fra.rpki-client.org