$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft File: y539cqjfUOBlAEN4BraiAY7Mvf0.mft (raw, json) Hash identifier: 2X4q4TxJeNK+phFQf/vjVSHx3ZZMwke/IRvR7MBq8Pk= Subject key identifier: A4:68:D8:9D:37:69:A1:95:4C:80:60:62:47:55:F4:0E:D1:3B:41:31 Authority key identifier: CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD Certificate issuer: /CN=A9150733/serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD Certificate serial: 0A72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft Manifest number: 0B15 Signing time: Fri 31 May 2024 20:59:06 +0000 Manifest this update: Fri 31 May 2024 20:59:06 +0000 Manifest next update: Fri 07 Jun 2024 20:59:06 +0000 Files and hashes: 1: y539cqjfUOBlAEN4BraiAY7Mvf0.crl (hash: f5wxTX1mhAx9Q7Aujw3BfLY6+MSBcEVr22z0EVwl6V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2674 (0xa72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150733/serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD Validity Not Before: May 31 20:59:06 2024 GMT Not After : Jun 7 20:59:06 2024 GMT Subject: CN=665a3a1a-8816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d1:0a:af:18:ad:f9:1f:bf:9a:28:a4:e9:b0: 32:6d:48:1f:71:be:bf:4d:11:11:fa:45:f7:3e:58: 98:74:ca:35:79:77:4f:2b:8b:7d:64:45:d6:38:ec: 91:95:c5:0d:e5:77:c6:8c:3c:8b:2d:24:b1:42:0b: 51:de:f2:6c:cc:21:57:cb:ce:78:f2:e6:28:24:b6: 1a:9d:ca:ac:81:5d:29:d1:04:2d:00:f0:51:09:f1: 12:e3:06:ca:c7:21:df:df:9d:42:09:5a:9f:93:cf: 57:b9:13:53:e3:de:99:42:13:d3:ae:89:ee:56:50: 4c:23:d2:b1:94:d8:74:50:50:6f:7d:32:ab:43:2a: 95:1a:36:9a:4c:5e:77:6a:d2:04:ec:4b:11:3d:98: 5f:e8:11:a8:21:7c:c7:66:c8:90:8e:30:8d:fd:f5: a0:24:30:56:e7:f2:fc:57:bd:23:50:d9:07:22:81: 9b:fb:d6:86:40:0a:3a:04:42:07:a6:d4:12:77:e1: 43:76:1c:15:e6:2d:56:1e:39:06:02:bb:f3:73:6a: cc:d4:cd:47:2c:c3:43:32:4b:08:50:fa:b1:e4:f8: c2:dd:ca:ae:38:64:4c:f4:91:39:d1:aa:19:3b:9b: da:81:97:74:f2:74:80:54:e2:ae:28:e2:1c:7d:38: 51:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:68:D8:9D:37:69:A1:95:4C:80:60:62:47:55:F4:0E:D1:3B:41:31 X509v3 Authority Key Identifier: keyid:CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b9:e0:c5:dc:00:84:47:d3:f7:82:b4:26:6f:88:cd:1a:ca: 78:e2:51:1d:96:76:55:fb:7d:8d:e1:e1:07:4f:94:7c:cc:bd: 7e:2a:da:06:dd:d5:51:ee:66:5c:6e:44:45:82:95:e6:72:f4: 6a:3d:a3:ff:3c:52:e7:fd:cd:c6:cb:1e:1b:03:9f:82:c8:f6: 23:67:80:b1:03:bc:99:94:d5:0f:ab:15:31:07:48:a1:df:85: ba:ab:3d:ab:a3:60:32:8f:9d:81:c5:b8:b4:8e:fe:8e:5e:5a: 48:01:1a:98:4a:aa:9a:39:f0:37:4d:10:46:50:d3:81:55:23: 73:3b:ae:b7:3f:7a:ae:a3:fd:9a:7a:b2:7c:be:03:cb:86:15: 5c:23:69:a9:16:f2:f1:c0:55:79:e1:9c:9a:b4:06:bb:47:1d: ca:7a:ad:d1:83:4f:78:eb:46:9b:be:a0:1b:1c:3a:8b:be:30: 9c:77:13:46:f3:12:84:69:e6:40:f0:9d:08:33:e1:26:86:f5: d8:c3:76:05:27:1c:3f:38:00:14:d4:f0:d5:ed:5a:23:06:c0: f2:bf:83:5f:bc:ca:02:07:b8:cd:b2:49:22:f6:38:74:1a:a1: 41:4a:f7:da:15:7e:d8:51:00:1b:59:6e:ed:0d:d5:28:81:43: b7:13:d1:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA3MzMxMTAvBgNVBAUTKENCOURGRDcyQThERjUwRTA2NTAwNDM3ODA2QjZBMjAx OEVDQ0JERkQwHhcNMjQwNTMxMjA1OTA2WhcNMjQwNjA3MjA1OTA2WjAYMRYwFAYD VQQDEw02NjVhM2ExYS04ODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttEKrxit+R+/miik6bAybUgfcb6/TRER+kX3PliYdMo1eXdPK4t9ZEXWOOyR lcUN5XfGjDyLLSSxQgtR3vJszCFXy8548uYoJLYancqsgV0p0QQtAPBRCfES4wbK xyHf351CCVqfk89XuRNT496ZQhPTronuVlBMI9KxlNh0UFBvfTKrQyqVGjaaTF53 atIE7EsRPZhf6BGoIXzHZsiQjjCN/fWgJDBW5/L8V70jUNkHIoGb+9aGQAo6BEIH ptQSd+FDdhwV5i1WHjkGArvzc2rM1M1HLMNDMksIUPqx5PjC3cquOGRM9JE50aoZ O5vagZd08nSAVOKuKOIcfThR/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRo2J03 aaGVTIBgYkdV9A7RO0ExMB8GA1UdIwQYMBaAFMud/XKo31DgZQBDeAa2ogGOzL39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDczMy8yMTc4NjhDRTNE QjUxMUVBQTY0OTEzMTJDNEY5QUUwMi95NTM5Y3FqZlVPQmxBRU40QnJhaUFZN012 ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MzljcWpmVU9CbEFFTjRCcmFpQVk3TXZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDczMy8yMTc4NjhDRTNEQjUxMUVBQTY0OTEzMTJDNEY5QUUwMi95NTM5Y3FqZlVP QmxBRU40QnJhaUFZN012ZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFueDF3ACER9P3grQmb4jNGsp44lEdlnZV+32N4eEHT5R8zL1+KtoG 3dVR7mZcbkRFgpXmcvRqPaP/PFLn/c3Gyx4bA5+CyPYjZ4CxA7yZlNUPqxUxB0ih 34W6qz2ro2Ayj52Bxbi0jv6OXlpIARqYSqqaOfA3TRBGUNOBVSNzO663P3quo/2a erJ8vgPLhhVcI2mpFvLxwFV54ZyatAa7Rx3Keq3Rg09460abvqAbHDqLvjCcdxNG 8xKEaeZA8J0IM+EmhvXYw3YFJxw/OAAU1PDV7VojBsDyv4NfvMoCB7jNskki9jh0 GqFBSvfaFX7YUQAbWW7tDdUogUO3E9HG -----END CERTIFICATE-----Generated at Fri May 31 22:13:04 2024 by rpki-client on console-fra.rpki-client.org