$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft File: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft (raw, json) Hash identifier: vLebV3j/wcHYGsTguPT09+tCO/jgmkwgHWHub6+j4uY= Subject key identifier: D8:6A:96:21:54:E2:1A:E7:69:D2:31:FD:0D:45:19:0D:F6:9E:0F:98 Authority key identifier: ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70 Certificate issuer: /CN=A9180542/serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70 Certificate serial: 0CAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft Manifest number: 10B2 Signing time: Sat 18 May 2024 18:49:56 +0000 Manifest this update: Sat 18 May 2024 18:49:56 +0000 Manifest next update: Sat 25 May 2024 18:49:56 +0000 Files and hashes: 1: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl (hash: P1iY1VN0w6zcCqFoGrPbJeDgOOF9TtWiwZf1HPSKMjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3247 (0xcaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180542/serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70 Validity Not Before: May 18 18:49:56 2024 GMT Not After : May 25 18:49:56 2024 GMT Subject: CN=6648f854-79ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:b7:9a:22:8f:58:7c:a0:0f:a8:4d:e8:ae: 45:12:8c:32:0a:e4:52:87:22:83:30:78:34:4b:8d: 59:ea:22:ad:b6:5f:cd:ef:8a:6b:f8:c1:19:e3:8b: 09:a1:44:00:b7:72:1e:9f:9d:eb:eb:44:98:63:b7: 3f:64:84:47:6d:c1:80:fd:bc:52:a3:25:08:72:56: 6d:4d:4b:a1:81:e5:9c:e4:1e:5a:90:1f:b4:fa:a8: 17:3a:af:cb:b2:ae:f8:3f:0c:16:a1:2c:5b:7d:7a: 9b:bf:c6:4e:eb:cb:4e:1c:f0:0c:84:f8:cd:39:b2: 7b:a9:2d:14:de:ad:77:96:90:84:b7:01:5e:15:af: 89:48:84:a8:5b:76:19:8e:72:fd:15:3d:86:17:dc: 8a:c8:fa:84:b2:1d:74:b4:33:5c:e8:34:06:1e:0f: 7a:49:26:42:40:49:30:ae:dd:41:52:0b:2e:d9:80: 45:d0:22:1b:8e:7a:a3:21:37:be:97:9d:93:0e:0b: 7e:60:a5:99:65:f2:b8:17:54:04:00:d9:7f:65:85: cf:bf:79:fa:b2:7e:05:d4:7b:90:67:95:00:d9:73: 22:86:3c:29:00:da:ae:5c:7d:8f:a8:bb:14:0f:66: 75:7d:7e:23:f2:55:2a:36:3a:ef:ce:a0:09:74:9b: 09:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6A:96:21:54:E2:1A:E7:69:D2:31:FD:0D:45:19:0D:F6:9E:0F:98 X509v3 Authority Key Identifier: keyid:ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:85:0e:d8:f2:2e:db:63:73:be:a5:6f:6c:4d:6a:1c:b5:12: d5:18:0c:86:2b:1d:5e:99:59:e1:7f:66:f8:1e:69:b9:ef:ef: d6:53:a0:7d:c5:60:53:fe:d2:05:59:47:2c:b6:c4:4d:26:be: 4d:2f:36:6c:96:8d:0d:e8:eb:f7:8d:8b:c2:c3:db:6a:32:36: 5e:f6:7c:24:bb:6e:fc:1f:63:ca:97:14:a8:9b:6a:51:0c:a9: cc:59:b2:f4:fa:eb:62:e2:ec:2a:cb:7e:4c:28:1d:90:17:83: 3a:aa:ff:b5:89:bf:0e:16:4a:43:8e:55:01:47:06:a7:be:e7: ca:33:24:95:fc:ec:a0:eb:b6:a2:73:f8:f8:71:4d:56:16:a0: 40:9b:0e:74:26:f0:93:7b:30:61:57:22:10:b5:ca:39:20:1b: 97:8a:4c:2b:5e:c9:78:d3:b9:74:5c:26:e5:c3:87:48:5a:e8: 54:b1:ab:9f:8d:a6:b9:8a:53:07:fc:2b:7d:bb:ac:2b:2e:95: 15:e0:90:6f:e2:17:04:0c:ac:fb:e1:ce:70:22:c1:a9:9f:5b: 74:48:7b:44:a3:c5:e8:6b:99:32:c2:5d:c0:8c:c0:22:98:25: c8:d8:d7:b5:c4:6e:ae:f1:57:98:d4:d6:37:96:59:fd:fc:2f: e9:fb:67:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NDIxMTAvBgNVBAUTKEVEODgyNkIzOEY5NDhCRTk1NDVCMjUyNEVCMEEwNTBF ODAyQTlCNzAwHhcNMjQwNTE4MTg0OTU2WhcNMjQwNTI1MTg0OTU2WjAYMRYwFAYD VQQDEw02NjQ4Zjg1NC03OWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNC3miKPWHygD6hN6K5FEowyCuRShyKDMHg0S41Z6iKttl/N74pr+MEZ44sJ oUQAt3Ien53r60SYY7c/ZIRHbcGA/bxSoyUIclZtTUuhgeWc5B5akB+0+qgXOq/L sq74PwwWoSxbfXqbv8ZO68tOHPAMhPjNObJ7qS0U3q13lpCEtwFeFa+JSISoW3YZ jnL9FT2GF9yKyPqEsh10tDNc6DQGHg96SSZCQEkwrt1BUgsu2YBF0CIbjnqjITe+ l52TDgt+YKWZZfK4F1QEANl/ZYXPv3n6sn4F1HuQZ5UA2XMihjwpANquXH2PqLsU D2Z1fX4j8lUqNjrvzqAJdJsJOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhqliFU 4hrnadIx/Q1FGQ32ng+YMB8GA1UdIwQYMBaAFO2IJrOPlIvpVFslJOsKBQ6AKptw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0Mi8wQTQ3OUM5MENB RTkxMUU5QkJFOTIxODNDNEY5QUUwMi83WWdtczQtVWktbFVXeVVrNndvRkRvQXFt M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZZ21zNC1VaS1sVVd5VWs2d29GRG9BcW0zQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0Mi8wQTQ3OUM5MENBRTkxMUU5QkJFOTIxODNDNEY5QUUwMi83WWdtczQtVWkt bFVXeVVrNndvRkRvQXFtM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAhQ7Y8i7bY3O+pW9sTWoctRLVGAyGKx1emVnhf2b4Hmm57+/WU6B9 xWBT/tIFWUcstsRNJr5NLzZslo0N6Ov3jYvCw9tqMjZe9nwku278H2PKlxSom2pR DKnMWbL0+uti4uwqy35MKB2QF4M6qv+1ib8OFkpDjlUBRwanvufKMySV/Oyg67ai c/j4cU1WFqBAmw50JvCTezBhVyIQtco5IBuXikwrXsl407l0XCblw4dIWuhUsauf jaa5ilMH/Ct9u6wrLpUV4JBv4hcEDKz74c5wIsGpn1t0SHtEo8Xoa5kywl3AjMAi mCXI2Ne1xG6u8VeY1NY3lln9/C/p+2f7 -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org