$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft File: yzDTXHDfyGaoN8rt_vzm_sv8W18.mft (raw, json) Hash identifier: OcluQPw0X/qHiDJGCECMCv0ytDTYwfiOu9rOZUgvcjs= Subject key identifier: 25:9D:90:3E:86:6C:8D:14:E0:11:4F:71:00:F3:BC:C5:77:03:FB:BC Authority key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F Certificate issuer: /CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F Certificate serial: 06DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft Manifest number: 06D8 Signing time: Sat 18 May 2024 22:54:22 +0000 Manifest this update: Sat 18 May 2024 22:54:21 +0000 Manifest next update: Sat 25 May 2024 22:54:21 +0000 Files and hashes: 1: yzDTXHDfyGaoN8rt_vzm_sv8W18.crl (hash: 4BIIKFqfsVmluzif+JG+mguaL3vf/wgOZsua8JCVuj4=) 2: 588BE670071211EB87554839C4F9AE02.roa (hash: ujXxHhbApMMPTnDuWxcJaWx4r3wmMI3pwTSLIUDnA38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1757 (0x6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F Validity Not Before: May 18 22:54:21 2024 GMT Not After : May 25 22:54:21 2024 GMT Subject: CN=6649319d-f6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:37:fd:48:79:da:5a:bf:31:a7:47:46:dc:42: 60:00:a2:95:72:5e:9f:db:de:32:8c:f2:46:ae:de: 63:0d:8e:24:5c:5b:02:50:79:18:71:e7:ed:1b:75: 3e:2f:d6:2d:63:9d:cd:31:0c:e8:11:b1:6e:23:d0: 81:e6:da:54:30:07:69:89:39:74:9d:db:0d:34:67: 2d:af:4e:8b:b5:75:6c:2e:a5:0e:c1:77:4c:73:55: c2:80:ad:05:77:28:41:fe:bc:03:9d:01:de:cd:28: 60:d8:90:0c:a3:8b:9c:0f:cb:97:56:ab:e1:58:74: d5:8c:10:67:02:12:19:4b:91:af:b2:b3:4d:64:9b: 0a:df:82:0e:a7:ff:90:66:43:45:39:7f:fa:0b:1a: 4e:61:45:75:fb:a9:71:8e:59:e0:0f:0b:a8:0f:e9: 60:94:01:9e:a7:ed:ea:02:f8:9e:f9:7e:f0:c2:de: a4:ca:29:3b:66:52:96:f4:6d:71:b8:2d:d8:9b:f6: 0f:85:11:66:88:ec:f7:c8:6b:0a:6e:2e:06:f6:17: 75:e8:c5:62:9a:b1:2b:fa:f6:57:d5:1c:62:e0:ef: 49:59:ed:49:d9:2a:90:dc:67:b8:76:ce:94:62:97: 23:1a:3d:b3:5a:81:7a:18:f0:ed:37:44:d1:98:2f: 81:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9D:90:3E:86:6C:8D:14:E0:11:4F:71:00:F3:BC:C5:77:03:FB:BC X509v3 Authority Key Identifier: keyid:CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:15:8c:c4:78:3d:34:d3:2b:af:0e:a9:c2:31:9f:04:94:af: 58:b3:fa:6f:06:32:6a:73:86:dd:b5:64:96:4a:80:b1:8c:3c: b4:68:86:f1:d5:ab:41:2c:f9:c7:d6:97:0d:e8:47:76:f3:4f: 68:a8:90:f6:2d:c9:46:89:28:e8:ad:f4:b0:fc:62:c2:36:51: 55:f1:ca:e9:c9:e5:2f:8f:df:39:dc:8f:5f:ec:d7:ac:e5:15: b8:c5:ef:95:8e:a4:48:3e:5c:bd:f4:54:79:ec:77:e1:0c:04: bc:6b:3f:f3:38:77:b2:3c:c0:b5:38:80:2b:e1:5d:e9:22:b4: 4c:46:cd:98:19:3a:ad:d5:2d:75:ba:50:57:d9:1e:f7:8b:4f: c3:b9:24:18:43:45:cf:fe:c6:76:19:6f:3e:ed:d9:f8:57:e1: f0:2a:73:40:bb:01:97:a7:1d:79:d4:da:23:a7:e7:a6:f7:a2: 03:bd:a4:31:83:3b:d8:e1:0d:75:24:a1:88:63:2e:b7:62:15: 9c:ab:be:59:f1:7c:c7:99:9d:ec:13:c2:b3:a7:5b:3f:9e:8c: 63:0b:31:46:a1:3d:b4:81:02:ad:04:e4:cb:b8:d7:cb:2d:04: 75:98:41:32:35:16:a1:eb:f9:85:3d:88:9f:04:14:a6:ee:fb: 48:00:33:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYyQ0YxMTAvBgNVBAUTKENCMzBEMzVDNzBERkM4NjZBODM3Q0FFREZFRkNFNkZF Q0JGQzVCNUYwHhcNMjQwNTE4MjI1NDIxWhcNMjQwNTI1MjI1NDIxWjAYMRYwFAYD VQQDEw02NjQ5MzE5ZC1mNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Df9SHnaWr8xp0dG3EJgAKKVcl6f294yjPJGrt5jDY4kXFsCUHkYceftG3U+ L9YtY53NMQzoEbFuI9CB5tpUMAdpiTl0ndsNNGctr06LtXVsLqUOwXdMc1XCgK0F dyhB/rwDnQHezShg2JAMo4ucD8uXVqvhWHTVjBBnAhIZS5GvsrNNZJsK34IOp/+Q ZkNFOX/6CxpOYUV1+6lxjlngDwuoD+lglAGep+3qAvie+X7wwt6kyik7ZlKW9G1x uC3Ym/YPhRFmiOz3yGsKbi4G9hd16MVimrEr+vZX1Rxi4O9JWe1J2SqQ3Ge4ds6U YpcjGj2zWoF6GPDtN0TRmC+BSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWdkD6G bI0U4BFPcQDzvMV3A/u8MB8GA1UdIwQYMBaAFMsw01xw38hmqDfK7f785v7L/Ftf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjJDRi9GNUMxNEVEMjA3 MTAxMUVCOTdGOUY1MzdDNEY5QUUwMi95ekRUWEhEZnlHYW9OOHJ0X3Z6bV9zdjhX MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l6RFRYSERmeUdhb044cnRfdnptX3N2OFcxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjJDRi9GNUMxNEVEMjA3MTAxMUVCOTdGOUY1MzdDNEY5QUUwMi95ekRUWEhEZnlH YW9OOHJ0X3Z6bV9zdjhXMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQFYzEeD000yuvDqnCMZ8ElK9Ys/pvBjJqc4bdtWSWSoCxjDy0aIbx 1atBLPnH1pcN6Ed2809oqJD2LclGiSjorfSw/GLCNlFV8crpyeUvj9853I9f7Nes 5RW4xe+VjqRIPly99FR57HfhDAS8az/zOHeyPMC1OIAr4V3pIrRMRs2YGTqt1S11 ulBX2R73i0/DuSQYQ0XP/sZ2GW8+7dn4V+HwKnNAuwGXpx151Nojp+em96IDvaQx gzvY4Q11JKGIYy63YhWcq75Z8XzHmZ3sE8Kzp1s/noxjCzFGoT20gQKtBOTLuNfL LQR1mEEyNRah6/mFPYifBBSm7vtIADMA -----END CERTIFICATE-----Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org