$ rpki-client -vvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft File: YG8zS36AA6PIIdDJhBmzFDqaPks.mft (raw, json) Hash identifier: XYfqWp+lM+qDTO4tm2ZUWPAsWkHIm6uu7KSe8DzboxY= Subject key identifier: 25:62:E0:0B:DE:77:E0:72:E6:07:07:DD:8D:5D:42:A2:60:EF:BC:D3 Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B Certificate issuer: /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B Certificate serial: 064F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft Manifest number: 0647 Signing time: Sat 01 Jun 2024 00:30:45 +0000 Manifest this update: Sat 01 Jun 2024 00:30:44 +0000 Manifest next update: Sat 08 Jun 2024 00:30:44 +0000 Files and hashes: 1: YG8zS36AA6PIIdDJhBmzFDqaPks.crl (hash: 1L6slMDdv+zX3ntCmek1A3gK8KB+ZByrq9sd1d5y9hE=) 2: B63DEA3A429411EB9D08C02FC4F9AE02.roa (hash: 1AH/bSI4WHZVh691h6Bq7vrTsgVnBNwTp7WAgbUY5cs=) 3: B5A6B25A429411EB9D08C02FC4F9AE02.roa (hash: ZmVsDHd2JJJGqhVJugfJQ9Bhp8id8XH35L69vMSRDQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B Validity Not Before: Jun 1 00:30:44 2024 GMT Not After : Jun 8 00:30:44 2024 GMT Subject: CN=665a6bb5-7a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:08:fe:a8:b3:04:0e:a6:4c:2d:16:69:b3: d3:ba:20:d7:3c:ee:92:7d:c7:ad:44:37:95:56:d6: a2:57:ac:a2:f0:e6:54:fd:b6:de:23:23:a6:1c:d7: fa:dd:a3:b9:a2:32:c1:e1:94:c9:97:43:df:b5:fc: f8:30:44:e6:88:a8:f7:74:4d:46:18:d1:1b:7e:61: 02:8e:3d:d4:72:ac:2c:75:59:0a:8f:97:99:76:bf: e3:ff:f2:6a:8c:7f:31:e8:0c:64:8c:7a:49:45:f3: 77:47:15:e2:99:0e:c3:de:79:03:47:8b:06:7b:8d: c6:1f:4a:16:e2:35:c9:89:e7:85:fb:a4:78:9f:b0: e1:41:e5:8d:fe:ad:4e:c5:9b:85:a0:34:ed:52:52: 77:af:cc:0c:59:0d:67:e4:89:86:85:8d:49:0d:b4: 6f:b7:9a:b5:8b:90:a5:24:05:19:9b:0a:bc:da:7f: 85:f1:e0:71:12:5a:31:60:7b:cb:12:95:cc:15:4d: 0f:f7:89:6b:a8:de:8f:74:9f:9d:6c:ff:73:0b:df: bc:b3:06:2a:43:14:6e:47:ae:08:26:82:98:ee:12: 18:d7:e4:67:91:3f:51:d4:21:38:67:ee:9e:0c:bd: 33:4e:03:81:40:e1:77:4b:b9:cc:33:e9:0c:cc:8b: 88:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:62:E0:0B:DE:77:E0:72:E6:07:07:DD:8D:5D:42:A2:60:EF:BC:D3 X509v3 Authority Key Identifier: keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:66:d7:66:b3:b5:c2:49:63:15:62:80:3f:b4:e4:87:ad:a6: 78:17:99:24:fc:7b:bf:eb:41:86:6d:c5:7d:f5:dd:df:03:15: ab:8e:96:b6:a9:89:cf:c1:a5:38:42:88:11:f0:2c:c7:c9:c6: a0:c7:86:86:f2:4e:28:8a:24:e9:de:9f:70:36:7e:e1:3c:c8: 40:00:cb:35:ab:b9:be:18:1f:59:89:85:bd:04:40:69:04:f3: bc:a3:6d:74:ee:7b:ef:64:62:59:e8:57:02:60:21:a5:5d:8f: b3:7d:5b:94:90:6c:77:ad:1d:8b:b3:05:a0:8a:bb:56:9b:99: 44:ee:f7:a6:a8:3e:1c:a0:ac:3a:de:ec:32:42:8e:13:31:99: 15:09:69:b1:66:44:7f:02:ef:bf:1f:d6:e5:08:0c:d2:3d:b4: d1:fa:13:02:2e:50:54:48:c5:3f:49:79:57:56:ab:08:f3:ab: 11:cb:38:ff:86:78:d2:16:15:b7:2e:bb:66:98:e9:32:ed:2e: ac:6d:37:0a:08:87:d4:95:a6:3c:ae:4c:bf:c6:10:b0:64:4f: 55:58:e7:27:47:ee:23:e0:b8:33:4b:de:5c:70:ed:b8:98:17: 4a:e8:b2:1d:8e:3d:52:1b:90:0d:36:a3:c9:32:2d:a4:91:09: 79:3f:1a:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE4OEQxMTAvBgNVBAUTKDYwNkYzMzRCN0U4MDAzQTNDODIxRDBDOTg0MTlCMzE0 M0E5QTNFNEIwHhcNMjQwNjAxMDAzMDQ0WhcNMjQwNjA4MDAzMDQ0WjAYMRYwFAYD VQQDEw02NjVhNmJiNS03YTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmAI/qizBA6mTC0WabPTuiDXPO6SfcetRDeVVtaiV6yi8OZU/bbeIyOmHNf6 3aO5ojLB4ZTJl0Pftfz4METmiKj3dE1GGNEbfmECjj3UcqwsdVkKj5eZdr/j//Jq jH8x6AxkjHpJRfN3RxXimQ7D3nkDR4sGe43GH0oW4jXJieeF+6R4n7DhQeWN/q1O xZuFoDTtUlJ3r8wMWQ1n5ImGhY1JDbRvt5q1i5ClJAUZmwq82n+F8eBxEloxYHvL EpXMFU0P94lrqN6PdJ+dbP9zC9+8swYqQxRuR64IJoKY7hIY1+RnkT9R1CE4Z+6e DL0zTgOBQOF3S7nMM+kMzIuI/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVi4Ave d+By5gcH3Y1dQqJg77zTMB8GA1UdIwQYMBaAFGBvM0t+gAOjyCHQyYQZsxQ6mj5L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTg4RC9GMEYxOUYyMDQy OTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2UElJZERKaEJtekZEcWFQ a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHOHpTMzZBQTZQSUlkREpoQm16RkRxYVBrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTg4RC9GMEYxOUYyMDQyOTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2 UElJZERKaEJtekZEcWFQa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABZtdms7XCSWMVYoA/tOSHraZ4F5kk/Hu/60GGbcV99d3fAxWrjpa2 qYnPwaU4QogR8CzHycagx4aG8k4oiiTp3p9wNn7hPMhAAMs1q7m+GB9ZiYW9BEBp BPO8o2107nvvZGJZ6FcCYCGlXY+zfVuUkGx3rR2LswWgirtWm5lE7vemqD4coKw6 3uwyQo4TMZkVCWmxZkR/Au+/H9blCAzSPbTR+hMCLlBUSMU/SXlXVqsI86sRyzj/ hnjSFhW3LrtmmOky7S6sbTcKCIfUlaY8rky/xhCwZE9VWOcnR+4j4LgzS95ccO24 mBdK6LIdjj1SG5ANNqPJMi2kkQl5PxoM -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:43 2024 by rpki-client on console-fra.rpki-client.org