$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json) Hash identifier: 0FGcdx4Go7F6Ee6TA/r53rlOuJv8iuk2v4+cXR1SWLc= Subject key identifier: C3:2F:AF:45:DE:B5:6C:A9:26:F2:7F:47:85:92:7F:7D:C9:E1:E3:98 Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft Manifest number: 17 Signing time: Fri 05 Jul 2024 07:49:46 +0000 Manifest this update: Fri 05 Jul 2024 07:49:45 +0000 Manifest next update: Fri 12 Jul 2024 07:49:45 +0000 Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: 0PuDSimWCtrKABfZrBkVuVP0n41jCOWZV1AUPzO0/EY=) 2: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: 4EHRpeMi8/g5A65WYX96AeSBYgGFYLJaPZfMVf/nA+U=) 3: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: 6APWnum5XO+1AjxPLod4M585Hvd075IxDDxMYdDbIE0=) 4: 680D797023E611EF8165F17BC4F9AE02.roa (hash: A1M8cgXwpueoyV//ap2OtyS//Qc9zVR+BitCHlrnuUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jul 2024 07:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Validity Not Before: Jul 5 07:49:45 2024 GMT Not After : Jul 12 07:49:45 2024 GMT Subject: CN=6687a59a-1ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8d:85:a4:fd:9a:a3:8b:ee:24:28:34:6d:c5: 06:61:7e:fd:69:80:42:ec:70:7c:81:69:ca:57:36: 4d:e0:1e:a7:14:cd:9c:4d:52:69:82:3b:ae:a2:25: 30:89:09:b2:08:3b:aa:48:a9:07:21:2e:d2:76:89: 40:a6:5c:4d:6c:6f:67:68:9a:ed:27:d4:4c:83:8c: 8e:c9:be:68:cc:16:2f:98:69:ef:02:f4:9b:d5:a1: 70:49:84:b9:bb:9b:50:53:ef:39:51:8e:cc:99:f3: a6:70:d2:21:a0:5d:62:d4:87:ef:be:76:75:c0:06: c7:7b:e8:5c:7f:2b:6e:af:91:14:54:f0:a3:34:87: 10:c0:06:fd:de:d2:e1:37:62:c1:8c:8b:01:cf:6f: 6d:88:e6:b4:ec:f4:d4:0a:62:a6:82:e7:c5:d9:47: 69:79:55:d0:ed:f4:1a:31:9b:99:57:2e:d5:dd:8f: 0b:9a:ef:44:e9:cc:40:7a:f2:ff:f1:f2:02:6b:b8: 19:7b:88:f3:82:9c:75:2c:63:24:3d:71:94:8e:ea: bc:46:02:c0:01:38:36:a2:10:84:1e:77:46:af:d0: 22:a8:b1:d6:28:64:a3:c2:1e:52:ab:05:0f:c0:dc: fd:c1:11:a1:b7:b4:0d:82:25:52:93:11:2b:ae:08: 37:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2F:AF:45:DE:B5:6C:A9:26:F2:7F:47:85:92:7F:7D:C9:E1:E3:98 X509v3 Authority Key Identifier: keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f9:69:83:26:95:58:7d:8a:6d:4a:e0:ff:39:e7:46:74:5d: 06:a4:b3:3b:a7:f5:5e:e0:90:b1:26:38:c6:e9:de:86:17:da: b2:d6:5f:b2:5d:db:3f:2a:1e:24:f8:67:43:ad:8e:ba:de:2a: 6e:d5:14:c0:5c:0f:2e:ee:c8:3d:11:c2:e0:6f:93:23:a8:e7: 7d:87:95:38:50:f5:50:6c:3e:1d:c4:0d:90:81:dc:49:68:94: 7a:51:a5:4b:f7:35:a4:52:ff:ce:05:76:d2:7e:2b:3a:1d:38: c1:4b:90:54:4b:64:30:3f:d6:19:a4:b4:7e:04:bd:2b:94:87: 69:a2:d8:61:5f:21:69:44:94:6d:6d:7e:d2:c6:84:15:f5:9a: af:a3:d0:9e:65:f5:f0:0f:66:9e:f4:d6:ac:47:8f:4e:13:95: c2:d8:a6:19:5b:18:63:56:a5:01:75:fd:c5:70:c7:9b:fd:7a: 4e:77:b7:d3:17:9f:67:70:57:06:85:f0:d4:7a:f5:0f:38:d9: 3c:66:4e:b4:d3:6e:b0:e6:ed:9e:07:9b:47:0c:19:3b:d7:9f: f4:09:43:7f:e7:ea:1c:e2:d4:fd:3f:d4:33:57:9e:30:18:fe: 29:4a:fe:3d:e5:63:5f:1f:97:49:03:6b:7e:55:41:a8:aa:2e: 4a:1d:a7:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkYxNDExMC8GA1UEBRMoQ0IyOTM1QTE0NzhCNEY4QjQ0NjMxMDBEQjJFOTVCMDY1 NDQwNjc3MzAeFw0yNDA3MDUwNzQ5NDVaFw0yNDA3MTIwNzQ5NDVaMBgxFjAUBgNV BAMTDTY2ODdhNTlhLTFmZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjjYWk/Zqji+4kKDRtxQZhfv1pgELscHyBacpXNk3gHqcUzZxNUmmCO66iJTCJ CbIIO6pIqQchLtJ2iUCmXE1sb2domu0n1EyDjI7JvmjMFi+Yae8C9JvVoXBJhLm7 m1BT7zlRjsyZ86Zw0iGgXWLUh+++dnXABsd76Fx/K26vkRRU8KM0hxDABv3e0uE3 YsGMiwHPb22I5rTs9NQKYqaC58XZR2l5VdDt9Boxm5lXLtXdjwua70TpzEB68v/x 8gJruBl7iPOCnHUsYyQ9cZSO6rxGAsABODaiEIQed0av0CKosdYoZKPCHlKrBQ/A 3P3BEaG3tA2CJVKTESuuCDd3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwy+vRd61 bKkm8n9HhZJ/fcnh45gwHwYDVR0jBBgwFoAUyyk1oUeLT4tEYxANsulbBlRAZ3Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2RjE0LzNGMTI4ODYyMUZE QjExRUZBNzUxRjc0N0M0RjlBRTAyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVoz TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveXlrMW9VZUxUNHRFWXhBTnN1bGJCbFJBWjNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 RjE0LzNGMTI4ODYyMUZEQjExRUZBNzUxRjc0N0M0RjlBRTAyL3l5azFvVWVMVDR0 RVl4QU5zdWxiQmxSQVozTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ/5aYMmlVh9im1K4P8550Z0XQakszun9V7gkLEmOMbp3oYX2rLWX7Jd 2z8qHiT4Z0OtjrreKm7VFMBcDy7uyD0RwuBvkyOo532HlThQ9VBsPh3EDZCB3Elo lHpRpUv3NaRS/84FdtJ+KzodOMFLkFRLZDA/1hmktH4EvSuUh2mi2GFfIWlElG1t ftLGhBX1mq+j0J5l9fAPZp701qxHj04TlcLYphlbGGNWpQF1/cVwx5v9ek53t9MX n2dwVwaF8NR69Q842TxmTrTTbrDm7Z4Hm0cMGTvXn/QJQ3/n6hzi1P0/1DNXnjAY /ilK/j3lY18fl0kDa35VQaiqLkodp/c= -----END CERTIFICATE-----Generated at Fri Jul 5 08:36:42 2024 by rpki-client on console-ams.rpki-client.org