$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft File: yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json) Hash identifier: jVLSYE8/tk+d5+jhnvEypr4zih8U1BKEGyQdnAo8km4= Subject key identifier: 8E:21:C1:9F:7B:6C:DF:9A:D9:13:A8:0D:F1:52:8D:63:5A:F4:AF:AF Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 Certificate issuer: /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft Manifest number: A1 Signing time: Sun 19 May 2024 06:48:12 +0000 Manifest this update: Sun 19 May 2024 06:48:12 +0000 Manifest next update: Sun 26 May 2024 06:48:12 +0000 Files and hashes: 1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: LWgCI3Lk9sYPIoWYNVj5Z8EY1Rd7ZwqR3uiwgcPc7XA=) 2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: EWmD2TzId7urN7d4b0zYJ6Grmbtag0AP78b5qR9SOqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Validity Not Before: May 19 06:48:12 2024 GMT Not After : May 26 06:48:12 2024 GMT Subject: CN=6649a0ac-4caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:fa:cb:bc:a5:2f:b1:ba:b6:53:21:92:e8: 95:ca:93:f5:1c:c8:76:8f:56:c5:9a:61:df:bd:5b: ab:2c:b4:66:25:bb:20:25:33:58:27:bb:c1:12:43: 7e:ab:8c:d9:4d:19:fb:6a:91:fe:ff:34:9a:04:5e: ee:08:37:d6:96:0d:70:ee:b8:20:d2:fb:a0:2f:7a: fe:71:d0:b5:f8:55:ec:af:3e:44:95:1d:5a:64:dc: 16:e9:86:78:7f:da:03:a9:3f:41:62:8b:f4:bf:85: 81:41:70:64:11:f6:f3:4b:54:50:ae:95:2a:fe:9f: 47:77:40:98:ad:05:d9:68:42:50:42:4a:e7:83:07: e6:79:50:3b:c6:6f:14:48:8d:ea:80:bf:9e:46:00: a0:ec:0f:3b:52:de:53:ba:9d:98:8c:52:eb:03:29: ab:57:c1:e5:12:7a:ee:14:53:03:6c:4b:06:3e:44: 89:56:ef:a5:62:d3:1f:31:7f:d4:87:30:3f:1d:9f: 44:c8:61:e4:c5:71:9a:d7:5d:a8:90:46:99:61:ff: 4c:5c:b7:93:23:f5:b0:70:a3:98:d4:3c:c9:d4:ae: c9:00:38:04:87:bf:bd:55:43:10:bd:69:95:c0:9a: d2:5a:ce:8c:65:51:e0:23:0c:06:93:6e:1d:d9:95: 13:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:21:C1:9F:7B:6C:DF:9A:D9:13:A8:0D:F1:52:8D:63:5A:F4:AF:AF X509v3 Authority Key Identifier: keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:27:8d:a4:2c:48:a2:22:05:d4:5a:5e:9a:57:5e:c0:13:f9: 98:5e:7c:81:25:c1:bd:81:58:98:d1:7f:fb:a5:da:91:db:a8: 11:c8:08:41:4f:f3:c5:d4:4f:61:86:49:ad:65:94:df:21:c0: 32:3e:22:4c:6a:b0:24:10:c0:4f:91:35:6b:c3:73:11:d9:f2: e8:57:2e:14:41:11:b2:68:56:73:c4:88:e4:84:e7:a8:da:c9: 68:19:ca:29:16:a0:25:3f:0e:71:f9:99:d1:29:5b:d3:80:a8: cf:f4:d7:84:d8:6c:2a:ff:cc:c9:8f:c2:5d:02:60:cf:10:7e: 27:c4:18:c8:19:f1:a9:16:e7:1a:f6:4e:c1:be:f7:ae:5b:ff: e1:05:c2:cc:06:8d:1f:ec:c5:91:13:81:59:52:4f:07:62:e9: cc:1e:0f:1e:c9:d9:c3:6f:4c:1b:0c:21:04:cc:b3:f7:f1:43: c2:02:67:16:0f:3b:74:69:16:6d:66:36:93:ed:cc:96:87:b9: 07:37:36:ff:11:8b:49:30:23:b6:76:36:c4:43:bc:99:85:30: 55:54:ef:5b:72:bd:cf:56:04:9a:5e:07:6a:f9:95:9c:9f:70: 52:da:2d:3c:89:dd:d0:d8:e1:2c:ef:32:57:ed:f7:75:f2:94: 4a:a3:65:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5NjkxMTAvBgNVBAUTKEM5OEVGMjJBREZGRjYxM0Y1Njk4MzUzRkM4NUIwQzkw NkRGNDdFOTEwHhcNMjQwNTE5MDY0ODEyWhcNMjQwNTI2MDY0ODEyWjAYMRYwFAYD VQQDEw02NjQ5YTBhYy00Y2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv536y7ylL7G6tlMhkuiVypP1HMh2j1bFmmHfvVurLLRmJbsgJTNYJ7vBEkN+ q4zZTRn7apH+/zSaBF7uCDfWlg1w7rgg0vugL3r+cdC1+FXsrz5ElR1aZNwW6YZ4 f9oDqT9BYov0v4WBQXBkEfbzS1RQrpUq/p9Hd0CYrQXZaEJQQkrngwfmeVA7xm8U SI3qgL+eRgCg7A87Ut5Tup2YjFLrAymrV8HlEnruFFMDbEsGPkSJVu+lYtMfMX/U hzA/HZ9EyGHkxXGa112okEaZYf9MXLeTI/WwcKOY1DzJ1K7JADgEh7+9VUMQvWmV wJrSWs6MZVHgIwwGk24d2ZUT8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4hwZ97 bN+a2ROoDfFSjWNa9K+vMB8GA1UdIwQYMBaAFMmO8irf/2E/Vpg1P8hbDJBt9H6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjk2OS8wREIzNDQzMjI2 MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lUOVdtRFVfeUZzTWtHMzBm cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZN3lLdF9fWVQ5V21EVV95RnNNa0czMGZwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mjk2OS8wREIzNDQzMjI2MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lU OVdtRFVfeUZzTWtHMzBmcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfJ42kLEiiIgXUWl6aV17AE/mYXnyBJcG9gViY0X/7pdqR26gRyAhB T/PF1E9hhkmtZZTfIcAyPiJMarAkEMBPkTVrw3MR2fLoVy4UQRGyaFZzxIjkhOeo 2sloGcopFqAlPw5x+ZnRKVvTgKjP9NeE2Gwq/8zJj8JdAmDPEH4nxBjIGfGpFuca 9k7BvveuW//hBcLMBo0f7MWRE4FZUk8HYunMHg8eydnDb0wbDCEEzLP38UPCAmcW Dzt0aRZtZjaT7cyWh7kHNzb/EYtJMCO2djbEQ7yZhTBVVO9bcr3PVgSaXgdq+ZWc n3BS2i08id3Q2OEs7zJX7fd18pRKo2Vn -----END CERTIFICATE-----Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org