$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json) Hash identifier: j/x4YI87bl25ViXMvpDBbykOCVnWuaU7cFrDenCkQ4Y= Subject key identifier: 42:54:60:A8:46:7B:40:32:B1:78:FD:E5:86:49:CE:2E:69:9F:79:71 Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft Manifest number: 12 Signing time: Sun 19 May 2024 08:49:01 +0000 Manifest this update: Sun 19 May 2024 08:49:01 +0000 Manifest next update: Sun 26 May 2024 08:49:01 +0000 Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: Tb/0wkiZ3fWyHPpuXhEXgE2TAwnHy+NnuzjA0HVIeyk=) 2: 0A2301B2FCEB11EEBA59DC2BC4F9AE02.roa (hash: /AyQMqWZ57bgXPGZC6xfQU7bxlqUkG6/f7HGBOIGwIM=) 3: B65959F8FC7411EE841CC07AC4F9AE02.roa (hash: uHLbpnlfbFwZRtw8r9GbeL/ZYB4FyowNXtoVbmMIJOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Validity Not Before: May 19 08:49:01 2024 GMT Not After : May 26 08:49:01 2024 GMT Subject: CN=6649bcfd-3e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:d1:96:2f:f8:75:c9:21:e1:3e:43:27:bb: 20:4c:32:a1:ae:50:5a:53:60:0c:9f:f4:b5:8e:23: 60:86:d4:1d:8f:c8:ad:39:c2:61:46:61:ec:55:3f: 6e:f8:bf:cb:2d:fb:0f:1f:b9:6b:52:7b:74:c1:0d: 8f:75:96:de:21:b0:dc:3d:20:23:11:9b:b9:c3:34: bb:ba:1b:38:23:bf:5a:36:7c:bc:d0:85:e4:5a:30: 2d:19:27:dd:34:40:f8:3b:d1:e9:6c:61:2b:95:78: ac:68:94:86:c6:f2:04:d6:b3:8f:0b:b7:25:5a:64: 94:0b:15:e7:1a:84:00:87:71:33:3d:3d:f9:85:12: 15:4f:41:a0:0c:25:be:47:9e:93:c3:00:e8:f2:f8: b3:1e:f4:57:42:f9:a3:60:f0:dc:b4:57:73:b2:fe: 43:ef:ec:ff:40:1b:62:4f:d0:64:09:b1:ef:fd:1a: 28:66:6c:3f:73:22:c8:d3:02:94:11:25:ca:ef:ca: 5c:35:23:f1:ca:9b:04:71:87:eb:f6:62:2e:82:cd: a8:68:9d:f8:02:27:bf:c4:d5:bb:a4:1b:d9:95:9f: 27:05:02:9d:f0:a2:83:50:0e:a5:7a:62:18:22:1b: 83:65:18:b4:c7:ad:1c:af:7c:c0:04:1c:54:68:d8: 3c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:54:60:A8:46:7B:40:32:B1:78:FD:E5:86:49:CE:2E:69:9F:79:71 X509v3 Authority Key Identifier: keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:20:3a:41:9b:d1:e5:51:14:89:55:03:19:b9:56:b5:dd:cb: dc:04:e4:b1:41:65:66:11:f7:1e:e1:73:fe:08:ee:c8:ec:a4: 0c:fe:7f:06:a0:11:2f:13:08:62:e5:8a:6e:f6:a0:34:d1:9f: 76:20:06:e1:26:46:3b:bb:d1:87:c0:f6:96:01:bb:58:1f:33: 85:36:08:49:41:fb:d8:69:00:64:69:65:bc:f9:4b:18:3f:4e: 57:67:5c:3d:a6:64:4a:47:0b:9f:cd:d0:0d:70:d3:f7:29:f6: a0:b3:53:51:c0:81:03:44:31:06:c6:c1:b8:0d:1e:72:69:48: a8:fe:d8:54:df:91:a0:e9:96:58:83:ce:2d:f0:1c:27:a9:db: 3c:0f:8d:07:d9:57:bc:20:e2:96:8f:f7:85:17:a2:c7:82:ec: bb:ef:6e:77:1f:f1:0e:3d:98:3b:f0:4f:fd:41:31:d2:b0:45: 24:82:ac:91:52:f9:c4:27:56:c6:54:6b:cd:65:d8:ef:34:2a: be:62:ec:c3:e2:26:ea:6e:81:11:4f:46:e0:ed:0a:30:29:cc: 15:3c:8e:18:3b:10:3b:24:04:a8:b9:fd:1e:90:49:ab:63:a7: 21:3b:ec:68:ac:72:1b:3f:b7:61:f2:11:cc:81:e4:6a:94:cb: 8c:c0:d8:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTA5ODExMC8GA1UEBRMoNjAzMkY2M0ZEMjYxNjgxQTQwRjczMEI5Nzg3MjUxRTYz MzI4Q0Q2RTAeFw0yNDA1MTkwODQ5MDFaFw0yNDA1MjYwODQ5MDFaMBgxFjAUBgNV BAMTDTY2NDliY2ZkLTNlOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC50NGWL/h1ySHhPkMnuyBMMqGuUFpTYAyf9LWOI2CG1B2PyK05wmFGYexVP274 v8st+w8fuWtSe3TBDY91lt4hsNw9ICMRm7nDNLu6Gzgjv1o2fLzQheRaMC0ZJ900 QPg70elsYSuVeKxolIbG8gTWs48LtyVaZJQLFecahACHcTM9PfmFEhVPQaAMJb5H npPDAOjy+LMe9FdC+aNg8Ny0V3Oy/kPv7P9AG2JP0GQJse/9GihmbD9zIsjTApQR Jcrvylw1I/HKmwRxh+v2Yi6CzahonfgCJ7/E1bukG9mVnycFAp3wooNQDqV6Yhgi G4NlGLTHrRyvfMAEHFRo2DzlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQlRgqEZ7 QDKxeP3lhknOLmmfeXEwHwYDVR0jBBgwFoAUYDL2P9JhaBpA9zC5eHJR5jMozW4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1MDk4L0IyQjFBMkI4RkM3 MTExRUVCRENDNEI1M0M0RjlBRTAyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pX NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWURMMlA5SmhhQnBBOXpDNWVISlI1ak1velc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 MDk4L0IyQjFBMkI4RkM3MTExRUVCRENDNEI1M0M0RjlBRTAyL1lETDJQOUpoYUJw QTl6QzVlSEpSNWpNb3pXNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAcgOkGb0eVRFIlVAxm5VrXdy9wE5LFBZWYR9x7hc/4I7sjspAz+fwag ES8TCGLlim72oDTRn3YgBuEmRju70YfA9pYBu1gfM4U2CElB+9hpAGRpZbz5Sxg/ TldnXD2mZEpHC5/N0A1w0/cp9qCzU1HAgQNEMQbGwbgNHnJpSKj+2FTfkaDplliD zi3wHCep2zwPjQfZV7wg4paP94UXoseC7Lvvbncf8Q49mDvwT/1BMdKwRSSCrJFS +cQnVsZUa81l2O80Kr5i7MPiJupugRFPRuDtCjApzBU8jhg7EDskBKi5/R6QSatj pyE77Gischs/t2HyEcyB5GqUy4zA2MI= -----END CERTIFICATE-----Generated at Sun May 19 09:38:26 2024 by rpki-client on console-fra.rpki-client.org