$ rpki-client -vvf rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft File: YiiraKJGC9xWaItuVYkXkN2ASxA.mft (raw, json) Hash identifier: I6+6wuKmH0sUbeJJN5PAx9mj4/DaQ3k1wQbvKsV0kxI= Subject key identifier: 57:0E:AC:A7:0E:DF:74:01:D9:73:4A:01:10:F9:57:2E:80:0B:1E:C6 Authority key identifier: 62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10 Certificate issuer: /CN=A916A285/serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft Manifest number: E4 Signing time: Sun 19 May 2024 05:55:10 +0000 Manifest this update: Sun 19 May 2024 05:55:09 +0000 Manifest next update: Sun 26 May 2024 05:55:09 +0000 Files and hashes: 1: YiiraKJGC9xWaItuVYkXkN2ASxA.crl (hash: 6qcJY+nmMHOS/PwHTOxIXEreSM+17DqgmeRlNfRRRfU=) 2: CCA801A2B97F11ED98ED3A74C4F9AE02.roa (hash: s4rQaco4ff6xs+m3PT25pKqq9I6A1uhItS4VaVYLziQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A285/serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10 Validity Not Before: May 19 05:55:09 2024 GMT Not After : May 26 05:55:09 2024 GMT Subject: CN=6649943d-4bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:01:7a:b9:3c:19:05:f3:1e:5a:ca:3e:e8:77: 35:52:8c:5a:64:4e:2c:53:2c:45:0b:2e:32:07:49: ab:78:d1:e2:ce:2f:bd:02:15:2f:58:c2:dc:8c:a7: 77:ab:ff:40:a2:89:22:1a:a2:ea:58:fd:4d:37:99: d8:b6:6f:69:5d:97:d1:02:b0:80:68:42:5a:89:cc: 23:f7:13:c6:a7:94:29:9a:91:01:9b:be:b1:cf:15: 20:b5:f5:f3:e7:7d:39:22:54:f6:08:c3:a6:d4:81: d3:f7:d9:1b:37:3a:ef:39:da:08:95:3a:c6:d3:69: 7e:4d:4b:bc:ea:2e:9c:18:b7:be:20:f4:d8:58:c9: 12:fc:83:96:14:bc:5d:f3:06:49:ad:8d:f1:de:1f: ad:89:d0:ad:14:78:2a:9f:d6:13:c4:bf:1c:fa:ec: fd:b8:2d:0b:33:a6:6f:8f:d5:5c:8b:6e:4a:04:99: fa:0a:1a:53:8a:c8:e6:d8:9b:c9:29:bc:82:db:e5: 8d:e3:a0:24:e1:63:5c:04:d3:a1:59:ae:ec:b1:eb: 80:7f:c7:9a:ec:b7:1a:b0:23:d7:4c:a1:93:34:91: 39:3f:c9:2f:74:74:26:fb:44:93:c4:c0:ef:8c:49: df:2d:cc:43:4b:27:c1:e7:94:6b:2d:05:24:33:1b: 6d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0E:AC:A7:0E:DF:74:01:D9:73:4A:01:10:F9:57:2E:80:0B:1E:C6 X509v3 Authority Key Identifier: keyid:62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:16:97:5a:63:07:db:ed:95:27:e6:e9:49:77:fe:58:95:a8: 19:f7:15:d7:4c:76:d7:b8:c3:11:d1:a0:0b:09:2e:a9:fd:bf: d3:1f:d9:32:21:77:a4:84:ed:f9:d2:08:c5:55:7c:9e:75:02: 1b:3f:a1:c7:51:ff:39:66:e8:af:7d:49:c2:b2:91:72:ac:80: 0f:7b:3e:a1:e3:40:ab:b5:7c:d0:c4:e2:5a:fe:3d:f0:3a:f9: 64:e8:e5:20:37:c0:7f:13:d8:89:87:3a:e2:22:e2:e4:47:72: 7b:81:0b:bb:3d:24:f5:86:70:1c:e7:5c:57:cf:18:62:2a:97: 58:94:e7:48:9b:01:8b:2f:c2:0a:b2:4b:12:e2:b4:eb:a5:c6: 0e:1c:52:fa:76:fd:4d:08:b2:bd:d1:ef:36:ce:a0:be:20:5f: 45:87:7e:dc:d1:a1:46:9b:2f:52:30:ad:c0:c0:f4:b4:e1:f9: 79:d2:7d:58:2d:40:08:15:09:92:bf:dc:ac:4d:da:62:35:22: ed:a6:e0:31:9a:eb:5c:80:3f:4c:48:2d:7e:d2:28:1a:8b:15: 4d:b5:97:3e:68:89:3c:fe:c6:a7:a9:98:e1:f2:53:33:84:da: 62:90:f9:06:b4:f1:79:57:17:88:80:a5:b4:a7:ce:57:4b:17: c9:74:97:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEyODUxMTAvBgNVBAUTKDYyMjhBQjY4QTI0NjBCREM1NjY4OEI2RTU1ODkxNzkw REQ4MDRCMTAwHhcNMjQwNTE5MDU1NTA5WhcNMjQwNTI2MDU1NTA5WjAYMRYwFAYD VQQDEw02NjQ5OTQzZC00YmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwF6uTwZBfMeWso+6Hc1UoxaZE4sUyxFCy4yB0mreNHizi+9AhUvWMLcjKd3 q/9AookiGqLqWP1NN5nYtm9pXZfRArCAaEJaicwj9xPGp5QpmpEBm76xzxUgtfXz 5305IlT2CMOm1IHT99kbNzrvOdoIlTrG02l+TUu86i6cGLe+IPTYWMkS/IOWFLxd 8wZJrY3x3h+tidCtFHgqn9YTxL8c+uz9uC0LM6Zvj9Vci25KBJn6ChpTisjm2JvJ KbyC2+WN46Ak4WNcBNOhWa7sseuAf8ea7LcasCPXTKGTNJE5P8kvdHQm+0STxMDv jEnfLcxDSyfB55RrLQUkMxttqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcOrKcO 33QB2XNKARD5Vy6ACx7GMB8GA1UdIwQYMBaAFGIoq2iiRgvcVmiLblWJF5DdgEsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTI4NS9FODE5MjAzOEI5 N0ExMUVEQTI4NUE1NTRDNEY5QUUwMi9ZaWlyYUtKR0M5eFdhSXR1VllrWGtOMkFT eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpaXJhS0pHQzl4V2FJdHVWWWtYa04yQVN4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTI4NS9FODE5MjAzOEI5N0ExMUVEQTI4NUE1NTRDNEY5QUUwMi9ZaWlyYUtKR0M5 eFdhSXR1VllrWGtOMkFTeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAFpdaYwfb7ZUn5ulJd/5YlagZ9xXXTHbXuMMR0aALCS6p/b/TH9ky IXekhO350gjFVXyedQIbP6HHUf85ZuivfUnCspFyrIAPez6h40CrtXzQxOJa/j3w Ovlk6OUgN8B/E9iJhzriIuLkR3J7gQu7PST1hnAc51xXzxhiKpdYlOdImwGLL8IK sksS4rTrpcYOHFL6dv1NCLK90e82zqC+IF9Fh37c0aFGmy9SMK3AwPS04fl50n1Y LUAIFQmSv9ysTdpiNSLtpuAxmutcgD9MSC1+0igaixVNtZc+aIk8/sanqZjh8lMz hNpikPkGtPF5VxeIgKW0p85XSxfJdJdt -----END CERTIFICATE-----Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org