$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft File: Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json) Hash identifier: 2UKhjaUvfLwIFxVEBvy5FA0mBRl9j81ZJAPPTd6GRqI= Subject key identifier: 7D:2A:F6:84:24:85:9D:00:4D:03:7C:54:AC:35:BA:BC:AC:1B:E0:27 Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft Manifest number: 97 Signing time: Fri 31 May 2024 08:04:11 +0000 Manifest this update: Fri 31 May 2024 08:04:10 +0000 Manifest next update: Fri 07 Jun 2024 08:04:10 +0000 Files and hashes: 1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: jLe3tWp8Q49wMfVcPLQs7qnIyvVN2SZ5VUYvyEiys2Y=) 2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: txFXdabrwb9rotse9oV5dX9NAzYwQjuUobWlYcV7Wo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Validity Not Before: May 31 08:04:10 2024 GMT Not After : Jun 7 08:04:10 2024 GMT Subject: CN=6659847a-8757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:64:e1:02:fb:90:74:2f:29:3e:de:3d:24: 07:d5:00:03:4a:af:0d:2b:cd:39:ea:65:e2:28:f5: d8:5b:b0:6f:5a:31:19:86:67:57:d0:aa:69:4a:10: 60:b0:a5:2c:60:fa:01:82:5e:4a:ac:e2:42:00:0a: 42:83:61:b9:1e:94:d4:15:0e:50:3c:44:08:e3:c4: a3:7b:2d:33:af:3e:c1:b8:c3:71:5d:13:7c:3a:3e: ee:67:60:2b:b4:d9:c0:21:d5:66:62:28:48:4c:9f: 24:89:66:8e:c0:43:43:9c:3f:17:71:f9:55:c6:da: 9b:39:17:76:64:00:70:ca:90:8a:3d:b5:4e:f1:c5: 8a:34:af:c8:36:2c:00:02:b4:3a:8b:7b:ce:eb:a0: 6d:b8:fe:f0:de:41:f4:89:75:52:4c:90:fb:34:fd: b9:51:d0:4b:d8:a5:7d:47:00:2e:e2:13:86:f3:67: 04:d6:f5:76:f1:0c:b0:9c:f0:34:70:7e:be:45:32: d2:76:f2:84:74:0d:70:5a:cd:ec:e1:1f:ed:25:8d: 33:e3:83:87:e5:20:8d:cd:38:13:ef:15:f6:d8:ae: fe:86:09:a1:f8:bb:ba:00:eb:07:6b:87:a5:97:b0: c6:30:e3:c6:50:54:72:8c:43:7f:e8:43:3a:24:e8: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2A:F6:84:24:85:9D:00:4D:03:7C:54:AC:35:BA:BC:AC:1B:E0:27 X509v3 Authority Key Identifier: keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:57:3a:6b:8f:b9:bc:17:f5:83:a9:aa:6e:b8:5d:c7:61:43: 29:63:a3:ad:fd:08:7f:42:07:c6:22:44:b9:ab:a3:0c:f0:d7: 47:3a:0c:c7:37:28:bd:e2:f3:11:91:0c:ee:44:aa:73:4e:0e: 19:e5:3d:1d:84:72:8a:9a:32:38:7a:da:75:1b:92:44:45:a1: e8:6c:e6:15:33:95:d4:9f:91:35:b5:b1:aa:34:36:83:bb:12: 13:c0:59:f9:3f:04:c8:15:7b:01:bf:8b:33:87:96:3c:cf:d8: 93:5f:ea:63:31:14:0e:57:08:ad:47:ac:e7:fc:01:84:73:8b: 86:b3:d4:1e:9c:1e:63:4d:c7:8f:3a:a5:3a:ac:29:3f:bb:8c: 1f:19:48:bf:e4:4a:28:82:80:e3:26:21:c6:17:00:56:86:87: f9:4f:20:5b:c4:18:df:be:a0:74:8a:3c:d2:33:a9:8e:de:45: 3d:90:ed:2b:3c:02:4f:76:6e:81:22:c8:2f:02:f4:66:34:43: 75:c9:9d:28:42:21:35:62:3b:ad:f9:d4:61:59:ff:44:20:ee: 7f:e6:bf:f9:76:e1:43:5c:cc:1b:44:6f:04:4a:d4:9e:98:7f: ec:d9:89:9c:81:97:91:56:67:38:63:55:78:35:c2:08:3b:e4: aa:a5:01:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDMEQxMTAvBgNVBAUTKDYzNEUyOEIxMDAyRTU1NkU4RUIxNEY5NTNFQUQ2M0I2 RDY3NzU4MDkwHhcNMjQwNTMxMDgwNDEwWhcNMjQwNjA3MDgwNDEwWjAYMRYwFAYD VQQDEw02NjU5ODQ3YS04NzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3Rk4QL7kHQvKT7ePSQH1QADSq8NK8056mXiKPXYW7BvWjEZhmdX0KppShBg sKUsYPoBgl5KrOJCAApCg2G5HpTUFQ5QPEQI48Sjey0zrz7BuMNxXRN8Oj7uZ2Ar tNnAIdVmYihITJ8kiWaOwENDnD8XcflVxtqbORd2ZABwypCKPbVO8cWKNK/INiwA ArQ6i3vO66BtuP7w3kH0iXVSTJD7NP25UdBL2KV9RwAu4hOG82cE1vV28QywnPA0 cH6+RTLSdvKEdA1wWs3s4R/tJY0z44OH5SCNzTgT7xX22K7+hgmh+Lu6AOsHa4el l7DGMOPGUFRyjEN/6EM6JOinuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0q9oQk hZ0ATQN8VKw1urysG+AnMB8GA1UdIwQYMBaAFGNOKLEALlVujrFPlT6tY7bWd1gJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BRDI1ODg5MDU3 NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZXNk9zVS1WUHExanR0WjNX QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kwNG9zUUF1Vlc2T3NVLVZQcTFqdHRaM1dBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEMwRC9BRDI1ODg5MDU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZX Nk9zVS1WUHExanR0WjNXQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCVzprj7m8F/WDqapuuF3HYUMpY6Ot/Qh/QgfGIkS5q6MM8NdHOgzH Nyi94vMRkQzuRKpzTg4Z5T0dhHKKmjI4etp1G5JERaHobOYVM5XUn5E1tbGqNDaD uxITwFn5PwTIFXsBv4szh5Y8z9iTX+pjMRQOVwitR6zn/AGEc4uGs9QenB5jTceP OqU6rCk/u4wfGUi/5EoogoDjJiHGFwBWhof5TyBbxBjfvqB0ijzSM6mO3kU9kO0r PAJPdm6BIsgvAvRmNEN1yZ0oQiE1Yjut+dRhWf9EIO5/5r/5duFDXMwbRG8EStSe mH/s2YmcgZeRVmc4Y1V4NcIIO+SqpQEE -----END CERTIFICATE-----Generated at Fri May 31 08:38:58 2024 by rpki-client on console-fra.rpki-client.org