$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft File: yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json) Hash identifier: 5K7hNjzkHiNbxPrrcEI9v/buuTbHmZ4nfMZhLlTcPDk= Subject key identifier: 21:DE:DD:80:87:15:8B:43:6C:D9:98:11:53:EB:0D:3C:A9:60:D3:CD Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67 Certificate issuer: /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867 Certificate serial: 33C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft Manifest number: 33C5 Signing time: Sat 18 May 2024 15:05:48 +0000 Manifest this update: Sat 18 May 2024 15:05:47 +0000 Manifest next update: Sat 25 May 2024 15:05:47 +0000 Files and hashes: 1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: 8s9gNaEv4nQhrktls2HLSipcEI1ggTkmR4Np0/Ori+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13253 (0x33c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867 Validity Not Before: May 18 15:05:47 2024 GMT Not After : May 25 15:05:47 2024 GMT Subject: CN=6648c3cb-6ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:58:f6:40:7b:a4:ae:2e:fc:4f:0d:13:33:e4: ff:ba:4f:b7:2b:33:79:13:44:3b:6a:62:45:e0:b7: 8b:8e:1e:ef:51:10:91:c6:e0:b6:c4:f3:d0:db:ad: 8a:10:23:d6:5d:7d:95:75:8a:18:12:b4:4b:74:2d: 85:71:3f:42:a1:1c:b5:17:dc:1a:0d:68:82:a6:43: c1:0a:18:e0:a8:12:c8:03:32:52:b1:c9:c5:36:37: 7c:4b:f1:61:db:bd:ed:2d:aa:cc:fb:15:d4:c7:ab: d6:a8:82:13:22:57:10:6f:11:ed:ba:32:f6:6a:aa: ed:6a:48:98:0b:18:50:79:c8:8e:be:bd:a8:0c:c5: f0:63:c8:b9:f2:58:23:26:08:6f:e4:9b:a8:c1:1e: fc:b9:80:d6:4d:0c:1a:f8:80:f8:eb:73:11:c8:ee: 74:cd:d2:10:a3:6f:71:8a:ba:13:4a:d6:a4:aa:46: 47:42:5e:f7:7b:80:ca:47:82:93:c3:85:d0:b8:55: da:46:25:c3:ed:80:55:ff:1b:9e:72:ef:83:ed:0b: 04:37:fe:04:42:ba:b6:34:e2:bb:28:aa:2e:4c:57: f2:7b:94:51:91:25:5a:88:66:4a:76:21:b6:69:bb: 06:83:65:e7:81:ff:ec:df:c5:02:08:c1:3c:36:db: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DE:DD:80:87:15:8B:43:6C:D9:98:11:53:EB:0D:3C:A9:60:D3:CD X509v3 Authority Key Identifier: keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:eb:16:83:d4:e1:66:38:3b:2a:9c:91:a1:15:b8:e8:36:22: a0:b5:b2:77:8f:a0:7d:85:cd:af:85:41:9b:ae:77:00:f9:d4: 0e:7c:60:2c:74:8b:2a:af:93:6f:f9:59:c2:d7:71:47:4a:d1: 10:6d:7d:12:26:95:c2:37:89:52:0e:f7:ca:9d:08:76:c1:09: 96:c1:cf:8a:1f:dd:04:df:62:4d:f0:f3:f6:99:9b:36:7b:89: f8:a0:c9:c6:59:eb:95:c5:69:a5:e4:f2:6d:b6:11:da:a5:80: df:80:a4:06:56:94:c1:20:7f:8c:fa:62:aa:fe:fd:7d:7e:dd: c8:0e:16:2c:aa:30:04:04:a6:b5:40:e1:f6:bf:ff:99:1c:4e: af:92:b9:8e:7f:fe:93:81:fa:0a:fd:ae:9a:98:2a:d6:7e:5d: 30:25:9d:10:34:9e:f3:ec:44:ef:5f:ad:fe:96:37:36:dd:7f: 18:21:ad:ec:73:39:44:3f:3a:50:86:62:c7:a4:c7:0d:2d:f5: e1:f9:40:ad:81:4c:c5:87:e2:96:2d:78:ac:4a:64:d7:d2:80: 93:ea:84:aa:7e:23:d8:76:e2:3c:83:d7:29:d3:50:46:3b:6b: 0a:9a:5f:f4:59:30:30:c4:2a:47:2b:2d:88:d4:04:52:c1:de: 48:63:8f:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NjgxMTAvBgNVBAUTKENBRTJDRkIxQTc5NzRBRDZCMDI0NUFFMzRFNEIwRENF RDgyMDk4NjcwHhcNMjQwNTE4MTUwNTQ3WhcNMjQwNTI1MTUwNTQ3WjAYMRYwFAYD VQQDEw02NjQ4YzNjYi02YWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFj2QHukri78Tw0TM+T/uk+3KzN5E0Q7amJF4LeLjh7vURCRxuC2xPPQ262K ECPWXX2VdYoYErRLdC2FcT9CoRy1F9waDWiCpkPBChjgqBLIAzJSscnFNjd8S/Fh 273tLarM+xXUx6vWqIITIlcQbxHtujL2aqrtakiYCxhQeciOvr2oDMXwY8i58lgj Jghv5JuowR78uYDWTQwa+ID463MRyO50zdIQo29xiroTStakqkZHQl73e4DKR4KT w4XQuFXaRiXD7YBV/xuecu+D7QsEN/4EQrq2NOK7KKouTFfye5RRkSVaiGZKdiG2 absGg2Xngf/s38UCCME8NtunlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHe3YCH FYtDbNmYEVPrDTypYNPNMB8GA1UdIwQYMBaAFMriz7Gnl0rWsCRa405LDc7YIJhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2OC8wOEVDRUU0ODFE OUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0YXdKRnJqVGtzTnp0Z2dt R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1TFBzYWVYU3Rhd0pGcmpUa3NOenRnZ21HYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2OC8wOEVDRUU0ODFEOUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0 YXdKRnJqVGtzTnp0Z2dtR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo6xaD1OFmODsqnJGhFbjoNiKgtbJ3j6B9hc2vhUGbrncA+dQOfGAs dIsqr5Nv+VnC13FHStEQbX0SJpXCN4lSDvfKnQh2wQmWwc+KH90E32JN8PP2mZs2 e4n4oMnGWeuVxWml5PJtthHapYDfgKQGVpTBIH+M+mKq/v19ft3IDhYsqjAEBKa1 QOH2v/+ZHE6vkrmOf/6TgfoK/a6amCrWfl0wJZ0QNJ7z7ETvX63+ljc23X8YIa3s czlEPzpQhmLHpMcNLfXh+UCtgUzFh+KWLXisSmTX0oCT6oSqfiPYduI8g9cp01BG O2sKml/0WTAwxCpHKy2I1ARSwd5IY49f -----END CERTIFICATE-----Generated at Sat May 18 16:19:51 2024 by rpki-client on console-fra.rpki-client.org