$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft File: ry1FO-u_318ptjrBZ1THjRsPy4g.mft (raw, json) Hash identifier: UCGzh3Y79poMFUDKZFodiXSzjqQE+Ea0MGQTIUPNo+s= Subject key identifier: 04:92:81:A5:56:EE:A9:BA:28:61:41:80:67:15:B1:87:5E:38:AF:7A Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 Certificate issuer: /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Certificate serial: 0B8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft Manifest number: 0B84 Signing time: Sat 18 May 2024 19:20:47 +0000 Manifest this update: Sat 18 May 2024 19:20:47 +0000 Manifest next update: Sat 25 May 2024 19:20:47 +0000 Files and hashes: 1: ry1FO-u_318ptjrBZ1THjRsPy4g.crl (hash: d0nulhPFSxWk5HJVHxSUj0FOgGNP7hej/RREImliGTM=) 2: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (hash: Xx/j33V2abaEtkV0aKfmFr3cMW7aDKDlom4xDnkcRPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2956 (0xb8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Validity Not Before: May 18 19:20:47 2024 GMT Not After : May 25 19:20:47 2024 GMT Subject: CN=6648ff8f-302e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:53:1a:3a:1a:64:33:8b:dc:26:c0:63:3f: 1c:ad:70:e4:48:fc:a0:df:2d:e3:24:a7:18:be:26: d1:6a:44:db:0a:66:42:5c:0e:fe:2e:68:8b:df:ef: 0d:8a:44:c1:42:4a:56:a7:c5:dd:64:e2:cf:ce:9f: 33:3e:98:7e:d5:ca:b1:12:c2:56:e6:e5:b7:c5:07: d1:ed:86:b7:66:41:0a:b1:6c:c1:96:b4:c3:5b:0f: dc:01:45:0a:b5:84:11:f5:ac:92:bc:23:7c:9a:61: b2:b4:41:ff:a0:a1:6e:c4:86:24:3c:2d:f2:86:3e: d5:bc:26:de:22:26:42:bf:07:c3:66:52:83:65:a7: 7c:a6:3a:65:2d:c0:9e:d2:af:4d:12:12:f1:a1:e1: 45:f6:64:04:e5:87:b4:58:d8:d0:00:2f:fb:9c:92: f2:47:88:f3:fa:f1:29:3c:3b:4a:5b:4e:c2:95:aa: bb:7a:d3:bc:67:72:8c:d3:d4:51:72:94:66:d2:9c: 6b:52:c7:0f:66:57:4e:78:70:5f:28:83:20:05:be: f3:35:82:b9:81:ac:3f:da:72:e8:db:0d:a5:6e:d4: 18:6c:2d:eb:55:5b:29:30:0b:1b:c8:24:27:7f:8e: 96:de:fd:92:e7:66:39:c5:61:23:58:a0:a6:1c:84: c2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:92:81:A5:56:EE:A9:BA:28:61:41:80:67:15:B1:87:5E:38:AF:7A X509v3 Authority Key Identifier: keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:5c:00:40:d2:71:80:96:7e:83:c9:1f:a6:bb:0a:f3:b0:c6: bc:f6:52:e0:0c:b9:b9:aa:49:84:eb:a9:ec:7e:90:e4:e7:ee: 0e:f7:69:d3:0a:f2:6c:35:5d:46:04:88:7f:bf:44:90:9d:8f: 09:45:2a:47:16:60:db:a1:e5:65:bd:e6:ef:0c:5b:2d:d7:87: 63:07:72:47:9c:aa:13:fe:12:b9:ab:92:fd:09:6d:cf:39:06: 33:de:ad:c8:cc:3e:6c:8b:80:ae:cb:fa:29:20:ce:b6:f4:ff: 9e:29:99:84:1e:86:ef:34:4e:50:23:3a:1f:2d:d1:75:03:08: 51:7c:3a:de:ff:10:cb:31:25:6f:9b:8f:41:0b:5e:00:0a:69: 7f:ff:e7:3b:80:e0:7b:04:4d:9c:cd:11:88:b3:18:d0:21:f1: 4c:fd:17:a1:73:11:60:27:93:4b:4e:b4:2c:52:26:7f:55:df: 8c:2d:f7:76:e0:a5:98:7e:74:1d:22:86:69:47:b0:eb:f0:6f: 51:30:39:51:4a:a3:73:2e:01:3b:95:3e:0a:81:77:1a:38:ac: 7f:64:66:33:c0:6f:15:cd:03:32:0a:70:97:08:dd:1f:c0:34: fe:95:46:b0:a0:4e:f0:e4:15:0d:d9:db:33:62:56:e9:f6:1c: d0:52:c0:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKEFGMkQ0NTNCRUJCRkRGNUYyOUI2M0FDMTY3NTRDNzhE MUIwRkNCODgwHhcNMjQwNTE4MTkyMDQ3WhcNMjQwNTI1MTkyMDQ3WjAYMRYwFAYD VQQDEw02NjQ4ZmY4Zi0zMDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4BTGjoaZDOL3CbAYz8crXDkSPyg3y3jJKcYvibRakTbCmZCXA7+LmiL3+8N ikTBQkpWp8XdZOLPzp8zPph+1cqxEsJW5uW3xQfR7Ya3ZkEKsWzBlrTDWw/cAUUK tYQR9aySvCN8mmGytEH/oKFuxIYkPC3yhj7VvCbeIiZCvwfDZlKDZad8pjplLcCe 0q9NEhLxoeFF9mQE5Ye0WNjQAC/7nJLyR4jz+vEpPDtKW07Claq7etO8Z3KM09RR cpRm0pxrUscPZldOeHBfKIMgBb7zNYK5gaw/2nLo2w2lbtQYbC3rVVspMAsbyCQn f46W3v2S52Y5xWEjWKCmHITCxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASSgaVW 7qm6KGFBgGcVsYdeOK96MB8GA1UdIwQYMBaAFK8tRTvrv99fKbY6wWdUx40bD8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82ODEyREY5MjA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMxOHB0anJCWjFUSGpSc1B5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3J5MUZPLXVfMzE4cHRqckJaMVRIalJzUHk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82ODEyREY5MjA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMx OHB0anJCWjFUSGpSc1B5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyXABA0nGAln6DyR+muwrzsMa89lLgDLm5qkmE66nsfpDk5+4O92nT CvJsNV1GBIh/v0SQnY8JRSpHFmDboeVlvebvDFst14djB3JHnKoT/hK5q5L9CW3P OQYz3q3IzD5si4Cuy/opIM629P+eKZmEHobvNE5QIzofLdF1AwhRfDre/xDLMSVv m49BC14ACml//+c7gOB7BE2czRGIsxjQIfFM/RehcxFgJ5NLTrQsUiZ/Vd+MLfd2 4KWYfnQdIoZpR7Dr8G9RMDlRSqNzLgE7lT4KgXcaOKx/ZGYzwG8VzQMyCnCXCN0f wDT+lUawoE7w5BUN2dszYlbp9hzQUsAy -----END CERTIFICATE-----Generated at Sat May 18 20:15:59 2024 by rpki-client on console-ams.rpki-client.org