$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft File: y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json) Hash identifier: SRJJ3x58f8kLbcrikHUx/lSYGKsTruyeIGoMVd0ETcI= Subject key identifier: 17:75:2A:9D:10:E0:F1:E6:0D:06:72:1C:34:1A:5C:95:E8:71:AE:ED Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 Certificate issuer: /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Certificate serial: 06BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft Manifest number: 0D82 Signing time: Sat 18 May 2024 23:04:00 +0000 Manifest this update: Sat 18 May 2024 23:03:59 +0000 Manifest next update: Sat 25 May 2024 23:03:59 +0000 Files and hashes: 1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: Lgg2zNsD3Ot1C4a1tArXIzdWreXpOKbesq0RcVt/RbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1726 (0x6be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Validity Not Before: May 18 23:03:59 2024 GMT Not After : May 25 23:03:59 2024 GMT Subject: CN=664933df-63ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:47:06:4c:ea:22:60:6f:24:ec:0b:2f:f5:42: b7:df:53:c5:cd:9e:01:39:b4:5c:d2:32:e8:dd:47: 7e:cd:7a:ca:66:f9:1f:ee:15:5e:14:dd:6d:72:ed: d5:b5:20:d4:e2:07:00:0f:5a:fe:91:3d:47:19:32: 49:44:27:e4:2d:d0:67:40:c4:65:18:0f:24:4d:3c: 9d:23:bc:9e:03:64:f3:c9:aa:4b:8c:11:68:0e:67: bb:c1:9f:47:7d:ec:df:71:1d:bc:7a:f6:76:85:08: a5:63:18:32:55:5e:0e:11:15:21:bd:4b:22:d9:38: 2f:49:eb:44:46:fc:c0:fa:97:58:ab:bb:62:c6:f9: 9e:ce:57:e6:3c:63:72:bc:ec:1e:71:23:dd:fb:43: 7d:d7:82:be:27:43:80:83:1b:b9:b7:81:14:44:5f: c3:ab:c7:c7:09:7c:b3:5c:93:08:4c:6e:3a:0c:16: 13:82:b8:61:c1:bd:6a:1b:0b:f0:f4:52:05:7d:7f: 15:99:31:13:a6:99:06:20:17:a3:a8:53:a8:d9:36: 0e:33:bc:ca:eb:e9:f4:72:89:48:87:b2:b4:2d:ce: 62:7b:7b:44:d4:19:b9:ac:16:44:7d:ec:e9:85:ff: 7a:31:b2:b0:cb:10:cd:42:78:1f:b7:d1:df:87:dc: 06:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:75:2A:9D:10:E0:F1:E6:0D:06:72:1C:34:1A:5C:95:E8:71:AE:ED X509v3 Authority Key Identifier: keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:60:fe:c0:c1:52:e0:e1:00:22:54:1e:92:32:fd:ec:36:f1: b6:ce:6d:1b:14:8c:dc:91:88:4a:81:72:cd:f4:e8:55:c3:f4: 0e:0a:54:da:7d:71:bb:83:7d:ed:25:87:33:ed:52:0e:aa:b8: e3:bf:2f:57:31:0f:b2:58:96:93:cd:7d:81:3e:3d:44:9f:28: e8:fe:45:38:e5:5b:b3:9b:48:45:e0:1b:d9:4f:5b:5e:90:0d: 28:de:33:41:04:81:c2:a6:e8:35:4c:9b:98:a2:97:a5:f1:79: f8:f2:f7:cf:86:07:5a:28:3f:17:61:d2:7f:fd:81:e9:6a:7c: 36:29:ac:df:28:36:75:b5:f7:7e:bb:a9:f1:2f:d2:dd:c0:f4: 57:bd:81:36:52:3a:73:40:ce:05:9c:ad:4e:57:74:6f:7b:22: ed:c2:ad:f8:6d:33:8a:86:5c:f0:31:99:48:d9:2e:ca:f2:2e: 11:74:9e:8f:86:bf:45:30:a9:6b:0c:10:0c:cc:bd:e1:d1:b1: 59:7e:ea:38:1b:7e:5a:ad:01:13:27:a7:3b:06:77:4a:12:76: 6a:a0:fe:6d:27:c3:ad:22:39:bc:a6:fe:c1:57:00:c0:22:63: cb:9a:4e:a3:bc:be:4c:7b:60:a8:40:27:b9:06:3a:e3:f7:a9: 90:7b:f3:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKENCQjQ1RTcxMUY1MDM4QzQ3NTc1RTZGNEVFMEMwRThD NTY3QkUzODgwHhcNMjQwNTE4MjMwMzU5WhcNMjQwNTI1MjMwMzU5WjAYMRYwFAYD VQQDEw02NjQ5MzNkZi02M2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkcGTOoiYG8k7Asv9UK331PFzZ4BObRc0jLo3Ud+zXrKZvkf7hVeFN1tcu3V tSDU4gcAD1r+kT1HGTJJRCfkLdBnQMRlGA8kTTydI7yeA2TzyapLjBFoDme7wZ9H fezfcR28evZ2hQilYxgyVV4OERUhvUsi2TgvSetERvzA+pdYq7tixvmezlfmPGNy vOwecSPd+0N914K+J0OAgxu5t4EURF/Dq8fHCXyzXJMITG46DBYTgrhhwb1qGwvw 9FIFfX8VmTETppkGIBejqFOo2TYOM7zK6+n0colIh7K0Lc5ie3tE1Bm5rBZEfezp hf96MbKwyxDNQngft9Hfh9wGjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBd1Kp0Q 4PHmDQZyHDQaXJXoca7tMB8GA1UdIwQYMBaAFMu0XnEfUDjEdXXm9O4MDoxWe+OI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9NUjFkZWIwN2d3T2pGWjc0 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3UmVjUjlRT01SMWRlYjA3Z3dPakZaNzQ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9N UjFkZWIwN2d3T2pGWjc0NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxYP7AwVLg4QAiVB6SMv3sNvG2zm0bFIzckYhKgXLN9OhVw/QOClTa fXG7g33tJYcz7VIOqrjjvy9XMQ+yWJaTzX2BPj1Enyjo/kU45Vuzm0hF4BvZT1te kA0o3jNBBIHCpug1TJuYopel8Xn48vfPhgdaKD8XYdJ//YHpanw2KazfKDZ1tfd+ u6nxL9LdwPRXvYE2UjpzQM4FnK1OV3RveyLtwq34bTOKhlzwMZlI2S7K8i4RdJ6P hr9FMKlrDBAMzL3h0bFZfuo4G35arQETJ6c7BndKEnZqoP5tJ8OtIjm8pv7BVwDA ImPLmk6jvL5Me2CoQCe5Bjrj96mQe/Mx -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org