$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft File: yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json) Hash identifier: lwAiOh7EjHn6E0Yk9z+oqTwUhSM6B9xDspQVT2BTMt8= Subject key identifier: 78:61:E5:F4:53:81:1D:0A:92:85:31:DE:D6:C9:52:9F:2E:0C:51:7A Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 Certificate issuer: /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Certificate serial: 073B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft Manifest number: 0737 Signing time: Sat 18 May 2024 22:25:28 +0000 Manifest this update: Sat 18 May 2024 22:25:28 +0000 Manifest next update: Sat 25 May 2024 22:25:28 +0000 Files and hashes: 1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: shKAyWTgiaHCSMnbIYge8qe5huCad0Gtb2dLEHJqyQc=) 2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: WaVflJkdp5p+sU2iLFDzrE5EbzZ3FIUHzUY1/HhDAYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1851 (0x73b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Validity Not Before: May 18 22:25:28 2024 GMT Not After : May 25 22:25:28 2024 GMT Subject: CN=66492ad8-112e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:e8:75:36:ce:96:4d:5c:51:97:48:f6:33:2f: c3:61:8b:28:9e:1b:af:2c:b4:75:1a:cf:76:f8:0f: 56:09:7f:7c:ab:f0:6e:f7:fa:3a:cf:d7:84:b6:b6: ce:ed:20:73:15:a0:c8:c3:62:fb:df:4d:bc:31:f7: dd:54:ce:cb:25:77:dc:8f:0d:9a:c4:b7:7b:e0:c0: 37:ce:36:02:98:a0:bb:5b:3b:f7:3f:fb:67:c1:91: 10:4c:95:46:6c:97:8d:3b:92:b3:ea:d4:e0:45:5a: f6:b8:19:24:0b:d9:09:0d:ba:99:ea:67:14:e9:c2: 96:3a:45:a5:f4:64:2e:4c:00:04:95:4f:92:37:3f: b4:e7:ea:6e:dd:30:2e:5f:72:d0:b6:e0:83:f9:e8: af:01:43:12:fc:e0:c5:ba:cc:fe:e2:ee:97:d3:08: e8:b7:20:b3:83:d5:eb:f2:c0:67:ba:4f:cb:ee:ab: ac:8f:c2:de:e0:a3:3e:2e:1e:b6:f5:70:1b:c1:a1: 75:1f:c5:a1:bc:d9:16:2a:a4:0f:3f:88:d9:95:c9: f1:fb:3b:8b:ad:e4:41:7a:0a:ad:a2:fa:08:d0:4f: ca:f9:81:bf:03:b7:61:7b:7f:d6:8f:bd:02:db:ba: e3:31:cc:db:24:f8:4e:94:15:bf:a2:62:6d:66:c1: c9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:61:E5:F4:53:81:1D:0A:92:85:31:DE:D6:C9:52:9F:2E:0C:51:7A X509v3 Authority Key Identifier: keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:3d:f3:ce:78:b2:5b:28:8d:28:88:5d:b2:6b:d9:94:23:85: 94:bf:2f:6b:8d:2d:3d:e5:f5:18:28:51:7e:8f:2e:45:54:c3: 1f:1c:ea:1c:96:b6:7f:19:a3:e3:e8:2b:cb:67:be:3d:e1:54: 35:1c:d5:c7:e5:82:e0:c3:0b:05:18:08:eb:17:44:bf:8b:d9: dc:5d:1b:5c:21:5c:8d:b1:52:31:9a:38:9c:91:04:69:d9:1a: 5a:e4:8d:36:e8:98:0a:63:be:b8:9e:a0:59:25:ec:ac:3c:ee: b7:c6:26:72:40:be:32:7d:48:be:8d:1d:45:86:95:17:d9:aa: c7:af:60:d9:4c:1b:0f:d9:21:1e:99:a2:a0:c7:32:1d:67:07: 3c:2f:10:dc:0e:59:16:a3:97:6b:b8:d7:16:6a:49:68:4a:f3: 76:50:03:d4:ec:f9:15:49:f4:c6:48:d5:d2:85:db:02:64:fd: a2:93:00:72:92:7d:1f:bc:bf:17:d1:04:96:3c:b7:b4:55:00: ec:ff:9b:d2:9c:69:45:61:09:5c:3b:54:ac:38:69:ac:e1:ff: c3:59:81:72:3e:8f:36:a7:d9:01:12:21:fe:7b:19:8a:f6:d8: 34:dd:25:4d:84:c3:5d:cd:03:8c:c0:8d:59:0a:62:24:e1:9c: 99:0e:ca:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBNjMxMTAvBgNVBAUTKENBMTk1RTdGRDI1OThEODVBMzZDOTlFQzQ4MUIzNTc0 QzA2RTNCMTcwHhcNMjQwNTE4MjIyNTI4WhcNMjQwNTI1MjIyNTI4WjAYMRYwFAYD VQQDEw02NjQ5MmFkOC0xMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+uh1Ns6WTVxRl0j2My/DYYsonhuvLLR1Gs92+A9WCX98q/Bu9/o6z9eEtrbO 7SBzFaDIw2L73028MffdVM7LJXfcjw2axLd74MA3zjYCmKC7Wzv3P/tnwZEQTJVG bJeNO5Kz6tTgRVr2uBkkC9kJDbqZ6mcU6cKWOkWl9GQuTAAElU+SNz+05+pu3TAu X3LQtuCD+eivAUMS/ODFusz+4u6X0wjotyCzg9Xr8sBnuk/L7qusj8Le4KM+Lh62 9XAbwaF1H8WhvNkWKqQPP4jZlcnx+zuLreRBegqtovoI0E/K+YG/A7dhe3/Wj70C 27rjMczbJPhOlBW/omJtZsHJnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhh5fRT gR0KkoUx3tbJUp8uDFF6MB8GA1UdIwQYMBaAFMoZXn/SWY2Fo2yZ7EgbNXTAbjsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REE2My8wMUJGN0JFRUUx RTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZV2piSm5zU0JzMWRNQnVP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lobGVmOUpaallXamJKbnNTQnMxZE1CdU94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REE2My8wMUJGN0JFRUUxRTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZ V2piSm5zU0JzMWRNQnVPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZPfPOeLJbKI0oiF2ya9mUI4WUvy9rjS095fUYKFF+jy5FVMMfHOoc lrZ/GaPj6CvLZ7494VQ1HNXH5YLgwwsFGAjrF0S/i9ncXRtcIVyNsVIxmjickQRp 2Rpa5I026JgKY764nqBZJeysPO63xiZyQL4yfUi+jR1FhpUX2arHr2DZTBsP2SEe maKgxzIdZwc8LxDcDlkWo5druNcWakloSvN2UAPU7PkVSfTGSNXShdsCZP2ikwBy kn0fvL8X0QSWPLe0VQDs/5vSnGlFYQlcO1SsOGms4f/DWYFyPo82p9kBEiH+exmK 9tg03SVNhMNdzQOMwI1ZCmIk4ZyZDsoa -----END CERTIFICATE-----Generated at Sun May 19 00:30:19 2024 by rpki-client on console-ams.rpki-client.org