$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft File: Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json) Hash identifier: NqES7Zw6YFpPs17Le29BvC5NG1tU2/FU3IZFjMDuKPg= Subject key identifier: 96:1C:03:B7:C9:F4:EC:81:04:46:C8:49:FD:3C:CA:CB:32:F5:55:AA Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft Manifest number: 01A7 Signing time: Sun 19 May 2024 04:35:17 +0000 Manifest this update: Sun 19 May 2024 04:35:17 +0000 Manifest next update: Sun 26 May 2024 04:35:17 +0000 Files and hashes: 1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: 5eddtjwv2Kbm56QbwSpUvoVpPMM6ZpJtXEhPk6NXebs=) 2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: A1khlNP/qHJq3beEeJoVW8d8CeAZx4YOvy1V0nRc2u8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Validity Not Before: May 19 04:35:17 2024 GMT Not After : May 26 04:35:17 2024 GMT Subject: CN=66498185-fc58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:b7:00:af:bf:7c:24:5d:2f:f3:86:42:bf: e6:31:d4:0f:09:7d:af:dd:62:f9:1d:08:c6:a5:dc: 86:cb:f2:9f:39:d1:cd:b5:31:62:53:41:55:fc:53: 46:23:c3:be:d5:23:07:ba:8f:0a:bd:32:aa:fa:8f: 7a:05:9a:6c:7d:2d:f9:18:35:91:0b:02:8c:7a:c3: 2c:de:ef:cf:8a:32:ad:f9:4e:d9:59:1b:fa:8f:4c: b2:73:17:24:a4:1f:d5:af:88:a4:6a:38:18:20:f0: c4:60:b3:80:1c:44:8b:82:21:30:e3:62:d2:26:37: ca:8e:76:17:5f:96:ad:dd:a2:00:b6:e3:f0:90:f7: 00:e8:b2:50:b2:55:06:7b:87:04:74:17:1e:70:e0: 9e:85:09:9b:ff:e4:a7:c8:cc:72:5f:ee:25:ea:fc: 10:9d:3e:53:c3:f7:1a:7d:22:77:59:88:f3:a0:d9: 9d:64:02:9f:6a:df:39:d1:7f:02:f0:84:ea:20:11: e6:ad:54:f7:5c:08:c1:fe:d3:77:b5:25:39:9a:69: ff:c7:57:69:d9:84:b2:30:ca:5a:b7:73:aa:eb:79: c8:c2:a7:a8:e8:45:f0:28:f8:c2:fe:eb:0c:03:af: 39:77:65:ec:de:06:93:d2:26:a4:45:86:5d:0e:a2: f4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1C:03:B7:C9:F4:EC:81:04:46:C8:49:FD:3C:CA:CB:32:F5:55:AA X509v3 Authority Key Identifier: keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9e:f3:9c:45:86:80:87:98:f9:9d:d5:6e:2b:83:29:c0:0e: 73:cf:8d:80:25:af:9a:4b:88:7f:d3:09:9b:61:31:6c:4e:64: ce:65:5c:60:cb:b1:ed:27:ae:40:8f:85:bb:f4:4b:6f:65:69: 3f:9e:31:d5:e6:40:fd:2d:57:2d:ab:a1:e3:77:b5:12:d3:21: ef:34:c5:1d:76:ef:3c:7c:94:f0:8e:cb:13:b6:95:91:98:7b: f0:f5:71:e5:c9:56:c0:1c:90:25:1d:67:bb:c8:b8:f6:7a:5b: 81:8f:67:82:a9:91:3a:8f:c5:b9:82:bf:de:af:be:d3:e7:35: b5:f6:43:ad:f9:53:25:d0:9c:b0:24:1a:b9:34:32:8c:45:3e: 4e:e9:22:15:81:e6:a0:f1:2e:52:70:17:58:9b:77:39:fa:36: b4:2d:a6:6c:5d:97:10:8d:76:41:47:fc:11:48:96:3a:f8:e0: 5f:d1:a3:e2:fe:d2:02:21:8c:47:c0:a5:49:b7:6c:9a:cf:99: 35:1f:93:4e:99:d2:1d:f4:69:97:2c:dc:c8:31:cd:74:db:68: 54:4f:3a:47:b3:94:6e:ec:c7:93:36:e6:94:7f:ce:65:01:e5: 99:16:8e:c0:5c:c2:44:89:ca:63:cf:e6:3a:32:89:41:17:c4: 65:ac:24:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VFNDYxMTAvBgNVBAUTKDYzNTE1QjM2NDExMzg0OEZBNTU0RDI4NDJGNTg0MTg3 N0NGNkFGMDAwHhcNMjQwNTE5MDQzNTE3WhcNMjQwNTI2MDQzNTE3WjAYMRYwFAYD VQQDEw02NjQ5ODE4NS1mYzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOm3AK+/fCRdL/OGQr/mMdQPCX2v3WL5HQjGpdyGy/KfOdHNtTFiU0FV/FNG I8O+1SMHuo8KvTKq+o96BZpsfS35GDWRCwKMesMs3u/PijKt+U7ZWRv6j0yycxck pB/Vr4ikajgYIPDEYLOAHESLgiEw42LSJjfKjnYXX5at3aIAtuPwkPcA6LJQslUG e4cEdBcecOCehQmb/+SnyMxyX+4l6vwQnT5Tw/cafSJ3WYjzoNmdZAKfat850X8C 8ITqIBHmrVT3XAjB/tN3tSU5mmn/x1dp2YSyMMpat3Oq63nIwqeo6EXwKPjC/usM A685d2Xs3gaT0iakRYZdDqL0twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYcA7fJ 9OyBBEbISf08yssy9VWqMB8GA1UdIwQYMBaAFGNRWzZBE4SPpVTShC9YQYd89q8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU0Ni9BRTgyRTEyNjEy RUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJLWxWTktFTDFoQmgzejJy d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxRmJOa0VUaEktbFZOS0VMMWhCaDN6MnJ3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUU0Ni9BRTgyRTEyNjEyRUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJ LWxWTktFTDFoQmgzejJyd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+nvOcRYaAh5j5ndVuK4MpwA5zz42AJa+aS4h/0wmbYTFsTmTOZVxg y7HtJ65Aj4W79EtvZWk/njHV5kD9LVctq6Hjd7US0yHvNMUddu88fJTwjssTtpWR mHvw9XHlyVbAHJAlHWe7yLj2eluBj2eCqZE6j8W5gr/er77T5zW19kOt+VMl0Jyw JBq5NDKMRT5O6SIVgeag8S5ScBdYm3c5+ja0LaZsXZcQjXZBR/wRSJY6+OBf0aPi /tICIYxHwKVJt2yaz5k1H5NOmdId9GmXLNzIMc1022hUTzpHs5Ru7MeTNuaUf85l AeWZFo7AXMJEicpjz+Y6MolBF8RlrCS9 -----END CERTIFICATE-----Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org