$ rpki-client -vvf rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft File: yizBAkNd6FHdppmDFZEvBvQQTrE.mft (raw, json) Hash identifier: 7JHOW4xDOw1ksRcTe8b21HRfZvAfV1hzVVA/1e4Crt0= Subject key identifier: 2D:8B:43:5E:02:17:6D:A8:10:A2:48:1D:87:22:B5:20:D6:10:00:AC Authority key identifier: CA:2C:C1:02:43:5D:E8:51:DD:A6:99:83:15:91:2F:06:F4:10:4E:B1 Certificate issuer: /CN=A9177562/serialNumber=CA2CC102435DE851DDA6998315912F06F4104EB1 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft Manifest number: 0450 Signing time: Sun 19 May 2024 01:53:17 +0000 Manifest this update: Sun 19 May 2024 01:53:16 +0000 Manifest next update: Sun 26 May 2024 01:53:16 +0000 Files and hashes: 1: yizBAkNd6FHdppmDFZEvBvQQTrE.crl (hash: kl6047YrF8E7KFJ4GQM0cTpoidt0nkCu7UlB0nxtVKE=) 2: 973E6B76107C11ECB1F7DE5DC4F9AE02.roa (hash: VnB0tTJrX7/oc1GHmqdTduKbC0C1gFJf1L9PV4uxXDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.crl rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177562/serialNumber=CA2CC102435DE851DDA6998315912F06F4104EB1 Validity Not Before: May 19 01:53:16 2024 GMT Not After : May 26 01:53:16 2024 GMT Subject: CN=66495b8c-5f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:cb:b3:d1:ca:7d:24:1a:a9:b2:74:e4:a0: cf:bf:76:ed:cd:88:7e:06:ef:82:1a:0e:64:05:a2: 8d:6c:e5:db:57:fb:7b:4b:15:c9:1a:da:97:5a:97: 1c:89:81:42:e6:73:df:25:eb:34:b5:6a:a7:14:98: 7d:cf:67:05:26:01:a3:fc:0c:96:53:56:ba:bb:c3: a6:d3:78:e7:3a:61:cd:e1:42:d7:2b:5e:89:61:37: 10:f0:78:d7:06:aa:8f:88:d3:ac:00:29:c0:c6:b8: ba:76:6f:91:81:0d:79:c9:03:bf:95:1e:e5:72:30: 77:0b:e3:ce:69:5b:5b:d6:65:7a:ea:4f:4f:b8:bf: 9c:37:46:a0:e8:2a:77:ca:e3:59:3b:8d:91:69:7f: bb:b7:ae:24:4b:22:03:bb:1f:c4:d7:59:63:25:3b: f7:54:54:e8:cf:9f:a7:48:6d:79:fb:42:6c:98:26: 7a:6f:87:93:c5:6e:09:0e:d3:a8:18:eb:df:c5:a6: d4:cb:25:b5:d4:13:08:d3:3a:a4:88:24:d1:46:c3: 57:bc:4a:25:e0:65:02:59:eb:cf:3c:d3:76:08:0d: 8d:5b:6a:73:e9:33:a3:9b:5e:03:f9:f8:00:be:27: e3:5e:77:7c:d0:63:21:8e:11:38:35:a8:1e:c9:2b: 3d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8B:43:5E:02:17:6D:A8:10:A2:48:1D:87:22:B5:20:D6:10:00:AC X509v3 Authority Key Identifier: keyid:CA:2C:C1:02:43:5D:E8:51:DD:A6:99:83:15:91:2F:06:F4:10:4E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:48:9d:c8:ce:e3:16:ec:6e:6a:80:4d:35:1e:0b:bf:31:0c: 72:a4:7a:cc:cb:eb:d0:93:41:bf:5c:70:b6:e1:39:26:d2:ca: eb:59:a9:e7:f7:8f:fe:a1:6e:6d:bf:0c:02:fd:64:9d:fa:52: a6:83:b3:c6:67:8c:ef:9a:2f:15:e1:07:4f:a7:7d:48:12:19: 84:ac:3a:68:64:02:25:f5:bd:66:06:91:2f:86:15:6d:13:1d: 4b:a9:27:53:06:27:5a:7f:46:d6:28:5b:88:5f:68:75:c0:65: 82:a7:27:7e:a5:0a:f0:42:66:a7:69:27:ea:4f:7d:3c:90:35: e6:4a:86:b2:6a:5b:58:26:70:6e:b9:dc:d6:8d:47:bd:33:82: d2:45:a0:a3:da:55:ec:c8:3a:62:b3:3f:da:79:2b:83:ca:1d: 20:ef:d0:d6:eb:12:b3:46:6b:9f:a2:0f:65:cc:70:33:69:44: a7:be:e0:b5:24:a8:12:2f:5b:ce:a5:69:10:b3:aa:8d:71:59: ba:11:99:ed:bf:43:47:e8:50:89:9a:94:22:ce:95:d8:ed:b5: 1e:73:03:1a:f4:cd:2a:aa:cf:42:d2:c5:30:00:db:c8:ba:b2: c0:30:31:79:da:5e:f2:77:16:e2:45:c6:f5:18:44:a2:5d:d6: 03:05:00:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1NjIxMTAvBgNVBAUTKENBMkNDMTAyNDM1REU4NTFEREE2OTk4MzE1OTEyRjA2 RjQxMDRFQjEwHhcNMjQwNTE5MDE1MzE2WhcNMjQwNTI2MDE1MzE2WjAYMRYwFAYD VQQDEw02NjQ5NWI4Yy01ZjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxXLs9HKfSQaqbJ05KDPv3btzYh+Bu+CGg5kBaKNbOXbV/t7SxXJGtqXWpcc iYFC5nPfJes0tWqnFJh9z2cFJgGj/AyWU1a6u8Om03jnOmHN4ULXK16JYTcQ8HjX BqqPiNOsACnAxri6dm+RgQ15yQO/lR7lcjB3C+POaVtb1mV66k9PuL+cN0ag6Cp3 yuNZO42RaX+7t64kSyIDux/E11ljJTv3VFToz5+nSG15+0JsmCZ6b4eTxW4JDtOo GOvfxabUyyW11BMI0zqkiCTRRsNXvEol4GUCWevPPNN2CA2NW2pz6TOjm14D+fgA vifjXnd80GMhjhE4NageySs9ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2LQ14C F22oEKJIHYcitSDWEACsMB8GA1UdIwQYMBaAFMoswQJDXehR3aaZgxWRLwb0EE6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzU2Mi82QTNGOTIxQzA3 MzAxMUVDQjEyNDk4NDFDNEY5QUUwMi95aXpCQWtOZDZGSGRwcG1ERlpFdkJ2UVFU ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lpekJBa05kNkZIZHBwbURGWkV2QnZRUVRyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzU2Mi82QTNGOTIxQzA3MzAxMUVDQjEyNDk4NDFDNEY5QUUwMi95aXpCQWtOZDZG SGRwcG1ERlpFdkJ2UVFUckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjSJ3IzuMW7G5qgE01Hgu/MQxypHrMy+vQk0G/XHC24Tkm0srrWann 94/+oW5tvwwC/WSd+lKmg7PGZ4zvmi8V4QdPp31IEhmErDpoZAIl9b1mBpEvhhVt Ex1LqSdTBidaf0bWKFuIX2h1wGWCpyd+pQrwQmanaSfqT308kDXmSoayaltYJnBu udzWjUe9M4LSRaCj2lXsyDpisz/aeSuDyh0g79DW6xKzRmufog9lzHAzaUSnvuC1 JKgSL1vOpWkQs6qNcVm6EZntv0NH6FCJmpQizpXY7bUecwMa9M0qqs9C0sUwANvI urLAMDF52l7ydxbiRcb1GESiXdYDBQDz -----END CERTIFICATE-----Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org