$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft File: yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft (raw, json) Hash identifier: eNdV+gObDAienuywsxKyogvCVSgOmIps0FNoqzUjNF8= Subject key identifier: 6E:48:D0:A3:ED:15:62:0C:C8:E2:05:49:9F:EB:24:37:2B:3D:73:3D Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft Manifest number: AB Signing time: Sun 19 May 2024 06:37:33 +0000 Manifest this update: Sun 19 May 2024 06:37:32 +0000 Manifest next update: Sun 26 May 2024 06:37:32 +0000 Files and hashes: 1: yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl (hash: MfLKguIiNFf6opt/EoklmUBDMHk+clx9Yte9BVTAmS8=) 2: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (hash: AbcAhXpEUwqrte3TdSnAkobY7buex53zSvuax181UZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: May 19 06:37:32 2024 GMT Not After : May 26 06:37:32 2024 GMT Subject: CN=66499e2c-c324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:19:d1:e9:b2:db:08:2e:91:6d:28:26:64:09: 89:bd:64:80:e9:9d:c8:86:74:85:c0:a0:43:84:cf: a2:34:a7:c8:33:d8:73:6d:19:38:da:e6:97:3b:75: 8c:24:df:6b:8a:56:a3:0c:67:86:5a:d2:87:a5:06: f2:b0:3a:ea:b4:71:25:16:9a:58:89:ea:b3:56:df: bf:12:86:f1:d3:ac:b4:25:df:0e:18:07:0d:07:dd: d9:d1:d9:21:76:2e:a7:b5:41:2c:81:0a:c9:b6:33: b2:ef:7e:78:3e:d4:8c:3a:a1:46:5d:03:be:50:34: d0:48:21:6f:c4:23:51:30:2d:18:29:05:78:e5:67: 8d:09:9f:36:47:92:7e:46:9f:fa:2e:b3:b8:05:46: fd:f2:ac:3b:bb:de:8e:58:73:c6:ab:f5:73:53:ee: 92:e2:9c:ed:2c:9f:96:4e:3c:9d:36:cb:e5:5d:60: d6:22:03:18:db:01:0e:c6:d4:00:8d:44:a5:14:e0: 4f:f0:61:9b:57:ff:ff:89:20:37:0f:91:8f:8e:7b: 40:b4:fa:02:4e:17:38:1b:e4:05:c3:12:0d:21:97: af:f3:d1:17:8a:55:96:04:ea:c2:a6:f7:3c:70:ca: 6d:cb:52:10:2b:37:2c:55:5d:8a:2c:b9:19:42:17: 7e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:48:D0:A3:ED:15:62:0C:C8:E2:05:49:9F:EB:24:37:2B:3D:73:3D X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d1:bb:6e:54:c9:91:d9:e1:75:19:a0:ab:ec:65:25:7f:09: 65:87:48:62:3e:78:71:c1:e7:8a:f8:f5:7a:8c:30:6d:9b:51: 2d:f0:31:a0:bf:e5:0c:de:59:02:fc:38:59:40:ac:69:af:9c: 8a:14:65:57:d7:91:14:17:b2:97:00:26:b6:b9:c3:3b:64:93: b3:11:4d:f1:45:93:7d:10:18:ac:3c:79:78:ae:fc:49:96:51: 9d:2f:15:32:1f:e2:c9:d0:51:cc:8f:41:db:fa:09:c8:85:96: 24:ab:b6:29:d5:ae:5b:45:72:bf:ac:9d:55:85:71:66:87:fc: d0:d2:b7:52:4a:37:62:fc:12:05:e5:f8:e0:32:b0:6a:cd:cf: d4:50:f3:a4:f5:ec:50:62:22:b6:b8:b9:4b:40:96:36:d4:8d: 3e:bc:15:5d:ad:d3:34:10:88:1f:dc:2c:21:25:21:c2:67:ea: 84:5b:e9:55:68:26:0f:e5:1f:d8:f7:b8:06:b3:14:bb:81:78: c2:af:21:13:8a:b3:58:54:c6:14:30:7a:7f:c1:8a:28:6a:29: 52:ea:13:1f:03:90:80:21:ed:8c:bc:94:cc:01:54:d8:7b:ab: 21:d0:e9:3a:9f:26:13:a9:19:19:7c:57:d3:55:7b:26:1d:18: 6f:d7:a1:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjQwNTE5MDYzNzMyWhcNMjQwNTI2MDYzNzMyWjAYMRYwFAYD VQQDEw02NjQ5OWUyYy1jMzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRnR6bLbCC6RbSgmZAmJvWSA6Z3IhnSFwKBDhM+iNKfIM9hzbRk42uaXO3WM JN9rilajDGeGWtKHpQbysDrqtHElFppYieqzVt+/Eobx06y0Jd8OGAcNB93Z0dkh di6ntUEsgQrJtjOy7354PtSMOqFGXQO+UDTQSCFvxCNRMC0YKQV45WeNCZ82R5J+ Rp/6LrO4BUb98qw7u96OWHPGq/VzU+6S4pztLJ+WTjydNsvlXWDWIgMY2wEOxtQA jUSlFOBP8GGbV///iSA3D5GPjntAtPoCThc4G+QFwxINIZev89EXilWWBOrCpvc8 cMpty1IQKzcsVV2KLLkZQhd+bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5I0KPt FWIMyOIFSZ/rJDcrPXM9MB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZDRS9FOTBCRDY2ODBGODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0tx TEQ0cTF0OUF1TlRSNndOWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb0btuVMmR2eF1GaCr7GUlfwllh0hiPnhxweeK+PV6jDBtm1Et8DGg v+UM3lkC/DhZQKxpr5yKFGVX15EUF7KXACa2ucM7ZJOzEU3xRZN9EBisPHl4rvxJ llGdLxUyH+LJ0FHMj0Hb+gnIhZYkq7Yp1a5bRXK/rJ1VhXFmh/zQ0rdSSjdi/BIF 5fjgMrBqzc/UUPOk9exQYiK2uLlLQJY21I0+vBVdrdM0EIgf3CwhJSHCZ+qEW+lV aCYP5R/Y97gGsxS7gXjCryETirNYVMYUMHp/wYooailS6hMfA5CAIe2MvJTMAVTY e6sh0Ok6nyYTqRkZfFfTVXsmHRhv16Gm -----END CERTIFICATE-----Generated at Sun May 19 07:40:40 2024 by rpki-client on console-fra.rpki-client.org