$ rpki-client -vvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft File: yPzMxL6JiqkgZxNmoP15UynpIB0.mft (raw, json) Hash identifier: IoIRnbYsnwx6R/I4oQA6b6KesHkcVuhq3en0lK2EJGs= Subject key identifier: CA:EB:5A:52:8C:36:0B:B0:73:00:20:B5:EE:FF:30:9E:54:F2:9F:09 Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D Certificate issuer: /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D Certificate serial: 0AEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft Manifest number: 0ADF Signing time: Mon 06 May 2024 20:09:31 +0000 Manifest this update: Mon 06 May 2024 20:09:31 +0000 Manifest next update: Mon 13 May 2024 20:09:31 +0000 Files and hashes: 1: yPzMxL6JiqkgZxNmoP15UynpIB0.crl (hash: d0RzduPU+BPIgevifjIlTlNKfjxqHJUUdtrEHb4+p/Q=) 2: 5407E320236911EA9967DA1CC4F9AE02.roa (hash: LG99ahzKvHUI50lMm8kLGCqoH21CgLDO/v0pGeQRVeM=) 3: 20748896236511EABCF20E10C4F9AE02.roa (hash: djgV07qrDHH6crDLVxxC1a/aDQKWs88VoXNwUP4VqXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2794 (0xaea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D Validity Not Before: May 6 20:09:31 2024 GMT Not After : May 13 20:09:31 2024 GMT Subject: CN=663938fb-1112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:65:40:f8:e0:41:ee:ae:8b:fe:42:3e:3b:d5: 01:9c:25:80:55:e1:07:08:17:f4:94:a2:2e:2c:61: 04:c6:f0:88:7d:30:3e:b3:13:d3:b9:c4:c4:10:1f: 86:b9:29:e7:33:71:03:0e:f9:01:97:2b:b5:a9:9d: e5:54:61:b3:7b:d2:bc:78:5f:38:6c:32:e6:0d:60: e5:02:52:ad:74:83:94:eb:93:c2:90:62:ff:9c:89: 7e:80:8f:03:36:70:29:af:cb:4b:0c:b7:8c:7b:4b: f1:2b:46:e0:e7:dd:e8:91:73:9b:1f:4a:71:66:37: 33:c9:8d:7d:f1:da:8d:21:48:a2:3e:63:2a:c5:96: 37:36:88:e2:b0:2d:f4:13:9e:66:b0:6e:e9:08:e7: aa:7f:e2:7a:58:a3:de:b0:a1:bb:2a:c3:bf:d1:de: 03:97:8e:20:df:2d:88:01:ad:67:29:a8:5e:d4:67: 31:13:11:b0:a0:88:2a:a9:4b:c2:a7:ad:b8:16:41: 39:4c:c2:85:7a:1e:24:7a:33:04:1f:91:46:74:57: 0b:e7:4a:aa:4e:87:c0:bf:dc:cd:fa:d6:a9:94:57: 67:5e:a8:6f:55:d5:67:70:a4:6f:74:7a:1e:51:ce: 73:2d:c3:e3:fc:7c:34:9d:f9:b8:d1:81:98:88:51: 7c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EB:5A:52:8C:36:0B:B0:73:00:20:B5:EE:FF:30:9E:54:F2:9F:09 X509v3 Authority Key Identifier: keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:9e:64:2d:0f:a3:64:cd:35:8f:56:23:be:4a:f2:11:dd:0c: 80:cc:e1:20:60:73:9e:d7:74:71:e3:98:3d:65:22:85:33:c4: 00:76:43:1d:b1:98:19:d1:a4:2f:49:ed:f0:8e:38:12:ba:06: 98:f1:c7:5e:66:de:d0:0c:0d:e0:c2:37:21:ed:be:b6:45:72: f8:31:bf:3b:db:b3:db:bc:26:05:21:9a:7e:0b:5a:01:23:fe: ef:59:75:fa:2e:87:4f:08:4d:be:a9:42:c1:68:71:25:df:85: 39:16:18:01:90:5e:6f:ea:40:d6:51:9f:b8:ac:1b:6f:18:b0: f4:e2:39:e0:10:01:9f:40:c6:64:55:fd:39:ef:74:26:87:f9: 1f:a7:64:a7:1a:ef:78:64:e0:ca:bc:f0:58:93:8b:b0:45:ad: 8a:7d:fe:c4:72:eb:83:41:b9:ed:25:cc:b7:80:96:ba:df:81: 10:49:f3:45:88:84:88:7e:64:3f:08:fd:33:9a:67:85:6c:01: 95:28:46:81:5b:c6:5b:05:fd:44:29:07:68:57:76:41:5d:cf: 4d:2b:79:2b:fc:ef:b9:3f:14:74:32:b0:ab:fb:02:07:40:e3: 33:12:13:16:42:b7:8b:f4:da:38:6f:49:fd:1e:9f:9b:a8:59: 55:48:40:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA0MEYxMTAvBgNVBAUTKEM4RkNDQ0M0QkU4OThBQTkyMDY3MTM2NkEwRkQ3OTUz MjlFOTIwMUQwHhcNMjQwNTA2MjAwOTMxWhcNMjQwNTEzMjAwOTMxWjAYMRYwFAYD VQQDEw02NjM5MzhmYi0xMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWVA+OBB7q6L/kI+O9UBnCWAVeEHCBf0lKIuLGEExvCIfTA+sxPTucTEEB+G uSnnM3EDDvkBlyu1qZ3lVGGze9K8eF84bDLmDWDlAlKtdIOU65PCkGL/nIl+gI8D NnApr8tLDLeMe0vxK0bg593okXObH0pxZjczyY198dqNIUiiPmMqxZY3NojisC30 E55msG7pCOeqf+J6WKPesKG7KsO/0d4Dl44g3y2IAa1nKahe1GcxExGwoIgqqUvC p624FkE5TMKFeh4kejMEH5FGdFcL50qqTofAv9zN+taplFdnXqhvVdVncKRvdHoe Uc5zLcPj/Hw0nfm40YGYiFF8dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrrWlKM NguwcwAgte7/MJ5U8p8JMB8GA1UdIwQYMBaAFMj8zMS+iYqpIGcTZqD9eVMp6SAd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDQwRi83MDdCN0I4MDIz NjMxMUVBOEI0RjM5MEJDNEY5QUUwMi95UHpNeEw2Smlxa2daeE5tb1AxNVV5bnBJ QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lQek14TDZKaXFrZ1p4Tm1vUDE1VXlucElCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDQwRi83MDdCN0I4MDIzNjMxMUVBOEI0RjM5MEJDNEY5QUUwMi95UHpNeEw2Smlx a2daeE5tb1AxNVV5bnBJQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnnmQtD6NkzTWPViO+SvIR3QyAzOEgYHOe13Rx45g9ZSKFM8QAdkMd sZgZ0aQvSe3wjjgSugaY8cdeZt7QDA3gwjch7b62RXL4Mb8727PbvCYFIZp+C1oB I/7vWXX6LodPCE2+qULBaHEl34U5FhgBkF5v6kDWUZ+4rBtvGLD04jngEAGfQMZk Vf0573Qmh/kfp2SnGu94ZODKvPBYk4uwRa2Kff7EcuuDQbntJcy3gJa634EQSfNF iISIfmQ/CP0zmmeFbAGVKEaBW8ZbBf1EKQdoV3ZBXc9NK3kr/O+5PxR0MrCr+wIH QOMzEhMWQreL9No4b0n9Hp+bqFlVSEB+ -----END CERTIFICATE-----Generated at Mon May 6 23:05:45 2024 by rpki-client on console-fra.rpki-client.org