$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft File: YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json) Hash identifier: FL8H7hiH7YpfvhLUklunMyJCWwwway36I+1Ic3QsMkE= Subject key identifier: B1:48:0D:FA:9B:24:BD:BD:01:D4:75:44:26:DB:4C:9C:48:68:CD:DE Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Certificate serial: 0697 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft Manifest number: 068D Signing time: Mon 06 May 2024 23:25:28 +0000 Manifest this update: Mon 06 May 2024 23:25:27 +0000 Manifest next update: Mon 13 May 2024 23:25:27 +0000 Files and hashes: 1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: ueJSwWtlu8zSyHI1DTgbslthswWO0WMGCfydueOxd28=) 2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: qEqQfXHfbyISuL0cdw/rlmC00m4dNQOaNJBD2WlRotA=) 3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: kbdjY2OJIhMziw3qryw6oHlmwYn20X0C78rnakQFSs8=) 4: A2201588391F11EBAD1E3A2CC4F9AE02.roa (hash: uUl4OOjjVYu5CafSIQQTXknEsBMr0bl5pgf0r0tVsTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1687 (0x697) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Validity Not Before: May 6 23:25:27 2024 GMT Not After : May 13 23:25:27 2024 GMT Subject: CN=663966e7-2bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:a4:e8:4a:ec:e7:43:af:86:72:20:27:6c: 69:6d:36:61:2a:7b:12:99:38:7f:6f:87:9f:74:5c: e8:ab:fd:8d:da:21:fd:8f:3c:b3:83:32:c7:12:1c: 84:3c:3c:15:b8:c0:bd:d6:73:66:d8:5a:45:6b:72: fa:fb:23:0f:2d:60:c1:a6:f6:df:62:33:48:27:ca: 7a:1c:4f:7a:05:2c:8c:58:bb:7d:e7:20:8a:6d:ec: 71:50:26:9b:fd:69:e6:64:6e:0f:65:e0:f9:63:2e: 55:e3:43:df:b0:a8:d1:c9:09:9d:1d:d1:47:2c:a1: d2:18:5b:2a:43:5f:12:e1:dd:da:61:f1:67:c0:5a: 1e:d9:12:46:c3:07:bd:a7:cf:76:10:17:c0:39:8b: 1d:22:0c:7e:33:18:ee:94:a7:3d:67:be:cb:5b:c7: d8:fe:2b:2b:57:17:6a:d1:34:e8:82:14:c5:82:50: 39:2d:42:c7:67:47:b0:d1:63:11:ce:55:af:0b:d5: bd:2c:3d:93:36:57:7f:8e:98:22:96:ed:ef:8b:23: ac:83:bd:0c:f4:80:47:16:2c:d8:f0:21:eb:36:5c: 60:fb:c8:d5:ef:31:1d:e4:29:54:6d:ba:a0:0b:c9: 58:89:e3:b4:65:68:78:c6:71:b0:2a:d2:9b:a9:b1: b2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:48:0D:FA:9B:24:BD:BD:01:D4:75:44:26:DB:4C:9C:48:68:CD:DE X509v3 Authority Key Identifier: keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f4:2a:b9:52:75:72:1d:ad:1f:c7:f8:cd:0c:3f:97:22:05: b8:c0:3f:c5:e3:36:1a:29:0c:b5:40:d1:fc:ab:47:c8:79:4f: 2d:c5:96:4d:b0:9f:2a:07:37:55:0e:d3:93:53:dc:77:40:e4: 41:f0:3b:89:3f:6c:51:4c:a5:b7:e0:5c:b1:e6:54:1a:ae:38: c1:56:30:eb:10:fb:4b:3c:36:68:50:1c:64:60:f4:08:da:bc: 7d:ca:9a:6d:c1:42:24:7a:9a:7d:ca:31:cb:0d:41:9b:b4:0b: bd:c7:b3:e2:ee:5e:89:58:0d:5e:7c:1f:e6:4d:03:44:6b:d9: d8:2c:bc:78:7b:1c:40:eb:19:41:a3:25:ef:bc:84:74:e1:cd: a9:9c:58:3c:99:28:90:1f:07:31:28:4f:08:e6:31:1f:aa:a5: fc:c6:81:35:c6:97:04:6f:cd:b4:7e:3b:87:83:70:6a:47:ac: 6e:c2:67:4e:74:6f:ef:ba:3f:a0:cb:8f:ac:23:f6:7f:06:64: eb:ab:90:76:ba:96:96:80:c7:b1:85:69:c9:1f:f5:a8:87:ed: c8:c6:78:41:48:4b:f8:48:a0:c7:64:76:44:0e:19:55:d5:8a: 37:54:e8:e4:67:07:54:b1:3a:d1:46:f1:e3:f7:70:d9:6e:b7: 9c:36:19:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDYzMjkzMDQxMTlGMUE0N0Y1RDA2NDBCMkRGNzVERUYx RjY0QzdCQUYwHhcNMjQwNTA2MjMyNTI3WhcNMjQwNTEzMjMyNTI3WjAYMRYwFAYD VQQDEw02NjM5NjZlNy0yYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4Ck6Ers50OvhnIgJ2xpbTZhKnsSmTh/b4efdFzoq/2N2iH9jzyzgzLHEhyE PDwVuMC91nNm2FpFa3L6+yMPLWDBpvbfYjNIJ8p6HE96BSyMWLt95yCKbexxUCab /WnmZG4PZeD5Yy5V40PfsKjRyQmdHdFHLKHSGFsqQ18S4d3aYfFnwFoe2RJGwwe9 p892EBfAOYsdIgx+MxjulKc9Z77LW8fY/isrVxdq0TToghTFglA5LULHZ0ew0WMR zlWvC9W9LD2TNld/jpgilu3viyOsg70M9IBHFizY8CHrNlxg+8jV7zEd5ClUbbqg C8lYieO0ZWh4xnGwKtKbqbGyfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFIDfqb JL29AdR1RCbbTJxIaM3eMB8GA1UdIwQYMBaAFGMpMEEZ8aR/XQZAst913vH2THuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84RkU3QThCODI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBIOWRCa0N5MzNYZThmWk1l NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l5a3dRUm54cEg5ZEJrQ3kzM1hlOGZaTWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84RkU3QThCODI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBI OWRCa0N5MzNYZThmWk1lNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq9Cq5UnVyHa0fx/jNDD+XIgW4wD/F4zYaKQy1QNH8q0fIeU8txZZN sJ8qBzdVDtOTU9x3QORB8DuJP2xRTKW34Fyx5lQarjjBVjDrEPtLPDZoUBxkYPQI 2rx9ypptwUIkepp9yjHLDUGbtAu9x7Pi7l6JWA1efB/mTQNEa9nYLLx4exxA6xlB oyXvvIR04c2pnFg8mSiQHwcxKE8I5jEfqqX8xoE1xpcEb820fjuHg3BqR6xuwmdO dG/vuj+gy4+sI/Z/BmTrq5B2upaWgMexhWnJH/Woh+3IxnhBSEv4SKDHZHZEDhlV 1Yo3VOjkZwdUsTrRRvHj93DZbrecNhmq -----END CERTIFICATE-----Generated at Tue May 7 00:53:25 2024 by rpki-client on console-ams.rpki-client.org