$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft File: y36OVMh-Ac6Gec_lUPH-myNhCD4.mft (raw, json) Hash identifier: 68e1qNqCVp1ZQYm6w5Zh9LkuJi49ysI+pdkw26T3FVo= Subject key identifier: 6F:C9:C4:7D:FB:2F:8B:15:3F:D9:97:4C:80:53:12:40:50:4B:F3:8F Authority key identifier: CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E Certificate issuer: /CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft Manifest number: 57 Signing time: Fri 31 May 2024 08:49:18 +0000 Manifest this update: Fri 31 May 2024 08:49:18 +0000 Manifest next update: Fri 07 Jun 2024 08:49:18 +0000 Files and hashes: 1: y36OVMh-Ac6Gec_lUPH-myNhCD4.crl (hash: kH3ja+myusV7wWp/p9Z3HrHzTEOwofAEVUgRE8Dt4hk=) 2: 1C977098A54911EEA5726C58C4F9AE02.roa (hash: OuC4t3nITzYryfz/hqccR37lOLmIcnx4T7dnBiaFxSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E Validity Not Before: May 31 08:49:18 2024 GMT Not After : Jun 7 08:49:18 2024 GMT Subject: CN=66598f0e-86d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:44:e8:c1:40:1c:9c:78:b1:18:7a:ad:96: a0:a3:d9:63:93:bb:1a:81:50:e6:78:c8:05:28:67: 3d:10:76:aa:48:c2:dd:f3:4d:f6:ef:52:77:66:bb: 26:e3:9e:41:c6:06:f8:30:6e:14:64:51:46:59:06: 75:58:2a:87:6b:fa:28:5e:94:1c:d2:7f:bb:06:98: a9:23:0a:13:a6:e0:ca:76:36:b5:07:a6:13:8d:f0: 4e:8f:86:ec:91:6b:4f:a5:42:6c:ac:19:06:bb:c5: b5:66:ac:4a:89:e7:db:48:e4:0b:83:ab:06:13:3b: 62:4a:93:73:03:bb:c8:2d:49:65:a5:d0:f9:8d:f8: 1d:96:7e:8a:e9:e1:95:7c:c9:22:0a:99:19:5e:7d: 1b:ab:5b:b6:05:4b:35:96:a7:d5:23:10:d1:91:4e: 38:6c:2b:4f:4f:b5:76:1b:b8:ea:c7:09:ff:9a:66: 24:67:5e:54:5a:f1:e2:6b:97:bd:57:a3:f5:5e:a1: 14:3e:d7:ec:48:0a:ba:d8:7f:0f:54:c6:0c:4b:77: ab:a6:73:de:8f:c5:86:59:ea:ae:4b:93:b4:cc:0d: a2:01:93:ad:1b:b9:8e:78:83:77:95:40:8e:4f:07: d0:35:5f:7a:06:91:81:5e:1c:03:1f:e1:e5:9f:d4: 00:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C9:C4:7D:FB:2F:8B:15:3F:D9:97:4C:80:53:12:40:50:4B:F3:8F X509v3 Authority Key Identifier: keyid:CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:04:22:44:21:ca:2f:c5:7d:bf:ba:ef:08:87:c6:eb:8e:ee: ee:79:c9:4b:4d:31:23:e5:d9:45:71:9b:88:fb:5f:69:e8:4b: 27:85:52:e0:64:ff:93:1b:38:40:0c:3c:ca:25:2f:77:e1:fb: 58:32:01:56:2d:e7:1c:ee:32:53:a3:e2:80:3c:3d:b4:9c:1b: 84:0e:6c:eb:e3:6a:68:dd:60:a9:12:71:01:48:e7:9e:7e:df: 51:58:e8:5d:e6:5b:b4:0c:fb:5f:b2:9f:54:26:c5:43:50:6b: ce:91:01:84:a8:d2:dd:77:e5:cf:5e:de:6e:e4:2a:3b:89:6b: a2:cb:71:1f:29:44:3e:b5:0d:4d:63:5a:49:85:7d:e2:15:f7: 63:be:9c:7a:90:dd:8a:31:1e:7d:da:45:6b:35:6f:8e:48:c4: fe:95:54:86:33:29:ba:e1:af:5f:b3:0b:c4:37:10:1f:ea:d6: 20:57:fa:7e:4a:bd:89:6f:28:f4:45:51:1b:42:e0:a9:98:6b: 79:e5:d7:3f:d3:07:7a:38:e2:3f:6a:2a:33:12:38:a2:95:c5: 11:7c:2f:10:5d:26:32:99:27:33:79:4f:50:ec:f5:2c:6c:15: 2a:3e:e5:99:5b:70:9e:04:62:ed:77:20:d9:55:80:34:6d:92: ac:2f:0a:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkUwMTExMC8GA1UEBRMoQ0I3RThFNTRDODdFMDFDRTg2NzlDRkU1NTBGMUZFOUIy MzYxMDgzRTAeFw0yNDA1MzEwODQ5MThaFw0yNDA2MDcwODQ5MThaMBgxFjAUBgNV BAMTDTY2NTk4ZjBlLTg2ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEhETowUAcnHixGHqtlqCj2WOTuxqBUOZ4yAUoZz0QdqpIwt3zTfbvUndmuybj nkHGBvgwbhRkUUZZBnVYKodr+ihelBzSf7sGmKkjChOm4Mp2NrUHphON8E6PhuyR a0+lQmysGQa7xbVmrEqJ59tI5AuDqwYTO2JKk3MDu8gtSWWl0PmN+B2Wforp4ZV8 ySIKmRlefRurW7YFSzWWp9UjENGRTjhsK09PtXYbuOrHCf+aZiRnXlRa8eJrl71X o/VeoRQ+1+xICrrYfw9UxgxLd6umc96PxYZZ6q5Lk7TMDaIBk60buY54g3eVQI5P B9A1X3oGkYFeHAMf4eWf1ADBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb8nEffsv ixU/2ZdMgFMSQFBL848wHwYDVR0jBBgwFoAUy36OVMh+Ac6Gec/lUPH+myNhCD4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGRTAxL0E0RjlDRDY2OUY1 QzExRUU4QTIzMDQ3RUM0RjlBRTAyL3kzNk9WTWgtQWM2R2VjX2xVUEgtbXlOaENE NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveTM2T1ZNaC1BYzZHZWNfbFVQSC1teU5oQ0Q0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG RTAxL0E0RjlDRDY2OUY1QzExRUU4QTIzMDQ3RUM0RjlBRTAyL3kzNk9WTWgtQWM2 R2VjX2xVUEgtbXlOaENENC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFMEIkQhyi/Ffb+67wiHxuuO7u55yUtNMSPl2UVxm4j7X2noSyeFUuBk /5MbOEAMPMolL3fh+1gyAVYt5xzuMlOj4oA8PbScG4QObOvjamjdYKkScQFI555+ 31FY6F3mW7QM+1+yn1QmxUNQa86RAYSo0t135c9e3m7kKjuJa6LLcR8pRD61DU1j WkmFfeIV92O+nHqQ3YoxHn3aRWs1b45IxP6VVIYzKbrhr1+zC8Q3EB/q1iBX+n5K vYlvKPRFURtC4KmYa3nl1z/TB3o44j9qKjMSOKKVxRF8LxBdJjKZJzN5T1Ds9Sxs FSo+5ZlbcJ4EYu13INlVgDRtkqwvCic= -----END CERTIFICATE-----Generated at Fri May 31 10:42:50 2024 by rpki-client on console-fra.rpki-client.org