$ rpki-client -vvf rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft File: yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft (raw, json) Hash identifier: dV3umiGE0Uo4z8iX8xPOmlZJ4+cHCogIoYoW4J5ksMg= Subject key identifier: 0A:6E:7D:A8:8D:95:70:90:F4:05:1D:92:CD:44:F8:DF:FE:D3:87:F4 Authority key identifier: CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B Certificate issuer: /CN=A9162914/serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft Manifest number: 01BC Signing time: Sun 19 May 2024 04:31:30 +0000 Manifest this update: Sun 19 May 2024 04:31:30 +0000 Manifest next update: Sun 26 May 2024 04:31:30 +0000 Files and hashes: 1: yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl (hash: UNJjCEsWN1vXJhqODoFU5+0SGojceIav7y2ox5F92rg=) 2: 755581D40D7E11EDA9F2CA4AC4F9AE02.roa (hash: PDL8r9tZRfgflY7VPbsALk8qdKKZXRf5oj0NmGKRBus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162914/serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B Validity Not Before: May 19 04:31:30 2024 GMT Not After : May 26 04:31:30 2024 GMT Subject: CN=664980a2-739f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:2b:a0:00:73:88:a2:20:64:17:21:6a:d1: ef:79:ce:3f:ad:2b:b6:5d:8e:3a:5c:28:1e:44:1f: ce:e9:09:4b:8f:68:16:5a:ee:bb:89:a8:05:48:0c: 00:70:36:53:12:48:e0:c6:94:42:7a:12:9b:ed:ba: 40:83:2f:bf:60:34:6a:01:4e:b2:38:be:f9:cb:07: 91:45:1b:50:2a:de:51:88:16:c0:f9:ec:1b:c3:3e: a4:1d:3f:3a:ea:e4:3d:8e:f2:10:80:3d:ed:48:29: 21:ef:45:44:e2:d1:d2:3d:39:87:e9:5a:a1:19:c4: 25:55:b3:c2:4d:40:60:6d:37:ae:3c:3d:f5:bc:e6: 9c:f7:91:15:a5:6c:f2:d9:e3:57:a6:47:11:72:a8: 2b:cf:c9:a7:3e:b4:42:5b:77:06:fc:ec:7e:50:cb: 36:ce:70:a5:2e:ed:64:e2:90:ae:ac:0e:c6:68:b6: 4a:06:f2:4d:ce:eb:ca:09:85:cf:e7:3b:d8:ad:59: 47:75:29:7a:f6:69:6d:10:2d:9d:b2:11:42:96:dd: af:a3:b2:74:3f:51:d2:c4:95:d0:36:2b:c3:8b:8f: f1:a8:41:e2:55:45:cc:f3:e3:95:03:a3:52:23:e0: cd:64:42:0f:fe:de:3b:a2:ec:dd:e5:ba:c3:6c:f8: 53:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6E:7D:A8:8D:95:70:90:F4:05:1D:92:CD:44:F8:DF:FE:D3:87:F4 X509v3 Authority Key Identifier: keyid:CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0f:e8:64:5f:d5:b4:97:ba:f5:85:3d:6a:41:ae:f5:69:9f: 78:d0:1d:5b:c7:38:10:64:e8:25:ba:50:97:90:20:e4:7e:ca: b6:af:c5:cd:a7:a0:14:eb:8b:e4:8f:4e:6b:ed:29:88:4a:e2: 10:f0:c4:01:8f:25:6e:51:f0:54:08:90:b8:93:79:78:20:6d: f0:c6:be:87:50:c4:29:f7:d7:2d:ed:ac:d5:92:9c:3a:1e:36: b9:6f:19:72:32:3b:1b:f1:cb:dd:0a:43:a8:ff:68:8d:8f:37: 3d:44:f8:54:50:23:ab:ab:88:e9:4e:a3:c6:1d:a7:bf:76:f2: 2c:b5:bb:91:4c:92:9a:36:2f:5d:2f:75:6b:3b:6a:b1:45:67: 98:03:15:94:d4:a2:ce:d3:4e:68:0b:b0:72:3d:a0:3e:8c:db: 31:2f:15:6a:dc:9d:32:51:df:7b:1c:93:b3:18:1c:e4:30:1f: 12:99:b4:56:da:78:f4:0b:46:68:e7:28:c2:8e:b4:ae:2e:21: 65:e3:c5:23:e9:54:0c:91:35:58:e6:1b:c8:ee:53:ff:2e:c8: 68:99:62:5b:f3:cc:27:28:0c:9b:0e:f7:b2:f6:be:c6:5b:a3: 3a:eb:fa:42:b1:aa:6f:a8:6a:68:3a:8a:dd:39:fe:98:6b:4a: 5c:9d:42:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5MTQxMTAvBgNVBAUTKENCMUM4MEI0MDM0QkU0MUI1OEMzQzY0QjI0QTA4Q0Q5 Qzc3Qjk2M0IwHhcNMjQwNTE5MDQzMTMwWhcNMjQwNTI2MDQzMTMwWjAYMRYwFAYD VQQDEw02NjQ5ODBhMi03MzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJQroABziKIgZBchatHvec4/rSu2XY46XCgeRB/O6QlLj2gWWu67iagFSAwA cDZTEkjgxpRCehKb7bpAgy+/YDRqAU6yOL75yweRRRtQKt5RiBbA+ewbwz6kHT86 6uQ9jvIQgD3tSCkh70VE4tHSPTmH6VqhGcQlVbPCTUBgbTeuPD31vOac95EVpWzy 2eNXpkcRcqgrz8mnPrRCW3cG/Ox+UMs2znClLu1k4pCurA7GaLZKBvJNzuvKCYXP 5zvYrVlHdSl69mltEC2dshFClt2vo7J0P1HSxJXQNivDi4/xqEHiVUXM8+OVA6NS I+DNZEIP/t47ouzd5brDbPhTBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApufaiN lXCQ9AUdks1E+N/+04f0MB8GA1UdIwQYMBaAFMscgLQDS+QbWMPGSySgjNnHe5Y7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjkxNC9ENjZDOTNGQzBE NzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVCdFl3OFpMSktDTTJjZDds anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l4eUF0QU5MNUJ0WXc4WkxKS0NNMmNkN2xqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjkxNC9ENjZDOTNGQzBENzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVC dFl3OFpMSktDTTJjZDdsanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMD+hkX9W0l7r1hT1qQa71aZ940B1bxzgQZOglulCXkCDkfsq2r8XN p6AU64vkj05r7SmISuIQ8MQBjyVuUfBUCJC4k3l4IG3wxr6HUMQp99ct7azVkpw6 Hja5bxlyMjsb8cvdCkOo/2iNjzc9RPhUUCOrq4jpTqPGHae/dvIstbuRTJKaNi9d L3VrO2qxRWeYAxWU1KLO005oC7ByPaA+jNsxLxVq3J0yUd97HJOzGBzkMB8SmbRW 2nj0C0Zo5yjCjrSuLiFl48Uj6VQMkTVY5hvI7lP/LshomWJb88wnKAybDvey9r7G W6M66/pCsapvqGpoOordOf6Ya0pcnUI8 -----END CERTIFICATE-----Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org