$ rpki-client -vvf rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft File: yH_T4kCIpNnfHF0CaFII6Qph7_c.mft (raw, json) Hash identifier: 5wz9gmi9Hv6SHERYjX/YVVpYOeGokOj1sXzdungoMew= Subject key identifier: D0:EB:08:D8:95:9B:48:88:E0:D3:09:33:9D:9A:1C:CF:38:99:46:6D Authority key identifier: C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7 Certificate issuer: /CN=A9161065/serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft Manifest number: CE Signing time: Mon 27 May 2024 06:24:46 +0000 Manifest this update: Mon 27 May 2024 06:24:45 +0000 Manifest next update: Mon 03 Jun 2024 06:24:45 +0000 Files and hashes: 1: yH_T4kCIpNnfHF0CaFII6Qph7_c.crl (hash: iowg2OFYwyaqFzxEd4QnGosqnPI+xOY/YCMD0jH7u4w=) 2: CDE70CB2E52011EDB505E014C4F9AE02.roa (hash: P7xeVkF9emdICYiycbS/SwtoKKwOg3DUAb73pIqVFKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 06:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161065/serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7 Validity Not Before: May 27 06:24:45 2024 GMT Not After : Jun 3 06:24:45 2024 GMT Subject: CN=6654272d-ed06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:cd:03:0d:4a:59:68:63:ac:fc:3f:81:d5: fd:fd:ad:1b:04:fe:ae:5f:36:3e:48:58:f9:f8:2e: be:07:1c:3d:b4:23:22:ca:d9:d7:7a:b0:9f:cc:82: 29:ea:29:5a:39:7c:f2:99:ca:c4:bc:40:6e:58:9c: 4d:8b:60:cf:8d:77:85:48:46:59:2a:6c:c0:c3:dc: 89:1c:36:1f:2a:f2:4f:95:22:f4:9d:aa:ab:87:ec: 58:86:15:be:f9:54:49:8d:41:24:4d:03:b3:d5:d9: d9:63:b9:dd:32:35:21:e9:2f:de:a7:b2:fc:67:8b: c8:8a:f3:87:a5:9c:29:0a:cb:28:32:ff:73:c7:14: e8:f0:60:1d:18:d1:8c:75:a4:97:99:9b:b5:67:dc: 60:fb:74:d3:1e:ec:e9:6b:28:60:f9:f0:c0:88:46: 9b:25:06:86:ed:a8:e4:22:a1:52:2f:8b:da:3a:70: 51:64:cb:c7:f4:4e:4a:65:e0:28:c1:00:ba:83:6a: c6:d0:af:9a:f0:bf:91:3c:0d:aa:d1:22:8a:0c:b5: fc:9f:71:6d:11:3c:cf:4d:c8:76:21:48:a1:16:4d: 7a:7e:71:98:d1:05:43:de:fa:33:9e:76:27:6c:cc: 0f:89:1e:15:a6:8e:b8:86:05:00:fe:06:32:3f:40: a7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EB:08:D8:95:9B:48:88:E0:D3:09:33:9D:9A:1C:CF:38:99:46:6D X509v3 Authority Key Identifier: keyid:C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:cb:cb:37:e4:a4:5c:67:59:4a:9f:6c:2a:42:ec:ec:36:29: a8:31:e3:81:58:50:35:c0:67:ed:a9:81:30:d1:3c:a9:3c:2f: c3:bb:04:fb:b9:8f:40:ab:17:04:f1:3e:10:85:67:ed:a7:ce: b2:3b:79:15:50:f6:9a:d3:94:ff:ca:c6:74:27:20:c0:5e:2d: db:e6:da:ca:ba:47:9c:e4:3e:00:1b:9b:f5:77:71:11:4a:46: 30:ca:ed:88:29:8d:f2:3e:f3:5e:2f:a6:f5:50:6b:3f:73:f1: 59:5c:5d:2e:ab:f8:c6:1d:6b:0e:3f:c9:99:54:b9:82:a1:ff: c5:0d:cc:b2:db:94:a4:a8:7e:f7:8a:e6:22:de:8a:77:82:91: 63:3e:59:9e:0b:ba:ea:86:ad:3f:dd:e2:c1:cb:fb:f6:49:40: 56:ec:79:7c:5b:22:cb:45:88:0b:5b:be:c0:87:95:ec:75:9f: 71:0a:0a:77:af:1a:2c:06:bc:7a:dd:19:bf:84:68:f5:89:63: c6:6c:cc:93:0c:0d:cc:99:4a:ab:38:2f:f9:1b:e8:36:ea:7c: 87:18:1a:39:a1:40:95:6b:d4:82:f7:e3:72:88:be:d3:86:10: 40:4f:ac:84:9f:a7:5c:e1:18:c3:db:4b:ae:5d:fb:a9:e9:33: 4d:b2:81:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwNjUxMTAvBgNVBAUTKEM4N0ZEM0UyNDA4OEE0RDlERjFDNUQwMjY4NTIwOEU5 MEE2MUVGRjcwHhcNMjQwNTI3MDYyNDQ1WhcNMjQwNjAzMDYyNDQ1WjAYMRYwFAYD VQQDEw02NjU0MjcyZC1lZDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0jNAw1KWWhjrPw/gdX9/a0bBP6uXzY+SFj5+C6+Bxw9tCMiytnXerCfzIIp 6ilaOXzymcrEvEBuWJxNi2DPjXeFSEZZKmzAw9yJHDYfKvJPlSL0naqrh+xYhhW+ +VRJjUEkTQOz1dnZY7ndMjUh6S/ep7L8Z4vIivOHpZwpCssoMv9zxxTo8GAdGNGM daSXmZu1Z9xg+3TTHuzpayhg+fDAiEabJQaG7ajkIqFSL4vaOnBRZMvH9E5KZeAo wQC6g2rG0K+a8L+RPA2q0SKKDLX8n3FtETzPTch2IUihFk16fnGY0QVD3voznnYn bMwPiR4Vpo64hgUA/gYyP0CnzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDrCNiV m0iI4NMJM52aHM84mUZtMB8GA1UdIwQYMBaAFMh/0+JAiKTZ3xxdAmhSCOkKYe/3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTA2NS8xQTI1RDI3NEU1 MUQxMUVEODUzOEIyNDZDNEY5QUUwMi95SF9UNGtDSXBObmZIRjBDYUZJSTZRcGg3 X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIX1Q0a0NJcE5uZkhGMENhRklJNlFwaDdfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTA2NS8xQTI1RDI3NEU1MUQxMUVEODUzOEIyNDZDNEY5QUUwMi95SF9UNGtDSXBO bmZIRjBDYUZJSTZRcGg3X2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIy8s35KRcZ1lKn2wqQuzsNimoMeOBWFA1wGftqYEw0TypPC/DuwT7 uY9AqxcE8T4QhWftp86yO3kVUPaa05T/ysZ0JyDAXi3b5trKukec5D4AG5v1d3ER SkYwyu2IKY3yPvNeL6b1UGs/c/FZXF0uq/jGHWsOP8mZVLmCof/FDcyy25SkqH73 iuYi3op3gpFjPlmeC7rqhq0/3eLBy/v2SUBW7Hl8WyLLRYgLW77Ah5XsdZ9xCgp3 rxosBrx63Rm/hGj1iWPGbMyTDA3MmUqrOC/5G+g26nyHGBo5oUCVa9SC9+NyiL7T hhBAT6yEn6dc4RjD20uuXfup6TNNsoEd -----END CERTIFICATE-----Generated at Mon May 27 08:08:01 2024 by rpki-client on console-ams.rpki-client.org