$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft File: -Y3cNC9-J7aMoI09R8emmyaVXqE.mft (raw, json) Hash identifier: vqtzyH83B+6xxIuXhkIJlJC+fKoaEbsemtHj/JKQNuQ= Subject key identifier: 2B:6F:8F:E5:24:D3:C2:D6:85:CB:17:23:FC:A7:10:8C:71:1A:4F:4A Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1 Certificate issuer: /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft Manifest number: 76 Signing time: Sun 19 May 2024 07:22:25 +0000 Manifest this update: Sun 19 May 2024 07:22:24 +0000 Manifest next update: Sun 26 May 2024 07:22:24 +0000 Files and hashes: 1: -Y3cNC9-J7aMoI09R8emmyaVXqE.crl (hash: cdhccvpZe8K71mZL2XMR7LNF6RBP4P39hU89eW8iUi0=) 2: 98647190660511EE9F741151C4F9AE02.roa (hash: AAPEJMgAJus01VLRJtLyrVsB2r7i4M9FcgcgLyO3Mi4=) 3: B0EBC1C862D111EEB797E270C4F9AE02.roa (hash: PdRWkiCr30aIGYAqGrvOZmOQw/vBKYcVPivksU8cuZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1 Validity Not Before: May 19 07:22:24 2024 GMT Not After : May 26 07:22:24 2024 GMT Subject: CN=6649a8b0-54a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:44:0b:54:bc:bb:3a:81:18:e7:0b:89:17: 2c:cc:a3:b1:e4:1c:a7:77:e4:74:99:9b:55:f1:43: b2:65:d4:78:1b:e2:18:35:02:2c:ba:d9:24:1c:ea: cb:c2:50:99:e4:d9:0e:84:65:8a:1e:9f:49:58:cb: dc:21:d4:8e:a3:d4:6c:28:78:3f:63:31:14:7d:32: 87:d8:46:b0:12:31:09:5b:c1:83:e2:b5:f1:51:cd: d1:c1:5f:01:8b:57:1f:9c:6f:c1:41:71:45:42:a1: 97:81:87:bb:3c:d0:52:99:b0:6c:57:4e:02:a6:fa: 28:7a:d3:b4:f7:90:b6:a7:a6:e4:db:a4:ee:c6:bf: 6d:28:de:81:df:07:85:0f:d0:d3:e8:fc:d2:7a:a9: c3:ae:b7:f9:5c:fc:60:42:b8:57:45:29:49:30:2a: 97:15:27:52:98:85:a9:7f:20:8c:69:ae:dd:35:e7: ed:4e:fb:6f:19:6f:3e:53:fd:ad:ca:96:35:70:9d: 81:6e:df:8d:76:05:d8:58:4a:34:de:03:fb:61:d7: a6:f6:63:b9:cf:93:fe:f6:1c:36:41:49:72:a1:15: cd:4c:a2:6b:58:f9:c7:7e:4d:3f:9b:f1:6f:02:00: 40:19:7c:e8:3a:4e:0b:c1:08:7e:ac:4b:04:ef:52: 15:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6F:8F:E5:24:D3:C2:D6:85:CB:17:23:FC:A7:10:8C:71:1A:4F:4A X509v3 Authority Key Identifier: keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:4c:ca:92:6a:05:1c:7a:d9:03:12:ff:f9:4a:11:9e:23:2a: 69:a0:8d:08:b2:bf:f9:f9:3a:58:0e:27:e3:04:9d:16:3c:7f: 00:ab:cb:f1:e2:5d:35:d4:1b:2f:78:f2:b3:ad:dd:2a:ac:51: 0b:6d:d1:6b:30:d8:96:dd:1f:02:70:ce:af:b5:ec:81:e6:2d: 7c:6d:a7:a3:ca:04:8c:60:d1:fa:79:21:1f:c7:d9:cb:9f:1b: d4:2e:ff:13:48:fd:95:62:8f:bc:2c:74:1d:da:4f:6f:4a:8c: 3a:80:f9:c6:67:fc:16:92:c9:34:b6:d7:8f:42:9f:1d:ec:57: 0d:1f:37:cf:5a:f5:33:f7:cc:cd:d7:87:aa:7f:e1:9f:77:9a: 70:6c:53:40:5d:6d:3a:0a:3b:4f:dd:1e:2c:70:07:4d:aa:45: f9:be:59:be:59:19:77:c0:a7:d3:57:88:43:9e:f4:8e:60:8a: 6c:a7:8d:ff:41:4b:31:7a:4c:95:3f:7c:6a:4e:55:87:80:be: db:b5:24:cc:3e:b2:b8:15:5f:be:c4:02:0f:c2:8d:00:8c:2b: bf:a7:76:94:e0:b6:9c:30:d9:a4:91:4b:a3:82:9d:df:e4:b6: e8:35:d4:f2:83:45:a2:8a:f8:f7:5c:01:47:23:6c:ec:88:f6: 22:3b:7e:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzY4QjExMC8GA1UEBRMoRjk4RERDMzQyRjdFMjdCNjhDQTA4RDNENDdDN0E2OUIy Njk1NUVBMTAeFw0yNDA1MTkwNzIyMjRaFw0yNDA1MjYwNzIyMjRaMBgxFjAUBgNV BAMTDTY2NDlhOGIwLTU0YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxQEQLVLy7OoEY5wuJFyzMo7HkHKd35HSZm1XxQ7Jl1Hgb4hg1Aiy62SQc6svC UJnk2Q6EZYoen0lYy9wh1I6j1GwoeD9jMRR9MofYRrASMQlbwYPitfFRzdHBXwGL Vx+cb8FBcUVCoZeBh7s80FKZsGxXTgKm+ih607T3kLanpuTbpO7Gv20o3oHfB4UP 0NPo/NJ6qcOut/lc/GBCuFdFKUkwKpcVJ1KYhal/IIxprt015+1O+28Zbz5T/a3K ljVwnYFu3412BdhYSjTeA/th16b2Y7nPk/72HDZBSXKhFc1MomtY+cd+TT+b8W8C AEAZfOg6TgvBCH6sSwTvUhUjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK2+P5STT wtaFyxcj/KcQjHEaT0owHwYDVR0jBBgwFoAU+Y3cNC9+J7aMoI09R8emmyaVXqEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDNjhCLzRFOUMxRjkwNjJE MTExRUVBQTFDODY0REM0RjlBRTAyLy1ZM2NOQzktSjdhTW9JMDlSOGVtbXlhVlhx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLVkzY05DOS1KN2FNb0kwOVI4ZW1teWFWWHFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND NjhCLzRFOUMxRjkwNjJEMTExRUVBQTFDODY0REM0RjlBRTAyLy1ZM2NOQzktSjdh TW9JMDlSOGVtbXlhVlhxRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJBMypJqBRx62QMS//lKEZ4jKmmgjQiyv/n5OlgOJ+MEnRY8fwCry/Hi XTXUGy948rOt3SqsUQtt0Wsw2JbdHwJwzq+17IHmLXxtp6PKBIxg0fp5IR/H2cuf G9Qu/xNI/ZVij7wsdB3aT29KjDqA+cZn/BaSyTS2149Cnx3sVw0fN89a9TP3zM3X h6p/4Z93mnBsU0BdbToKO0/dHixwB02qRfm+Wb5ZGXfAp9NXiEOe9I5gimynjf9B SzF6TJU/fGpOVYeAvtu1JMw+srgVX77EAg/CjQCMK7+ndpTgtpww2aSRS6OCnd/k tug11PKDRaKK+PdcAUcjbOyI9iI7fjc= -----END CERTIFICATE-----Generated at Sun May 19 08:25:00 2024 by rpki-client on console-ams.rpki-client.org