$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft File: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft (raw, json) Hash identifier: duPwbbvopwY9AC80wPjakC0Ph1B3mZBlvkhvsZJnU6E= Subject key identifier: C3:B3:9B:38:D8:CA:CA:85:47:A3:CE:1B:CA:C2:D7:F4:4D:D5:FF:D9 Authority key identifier: 61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79 Certificate issuer: /CN=A91A0277/serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779 Certificate serial: 05D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft Manifest number: 05C5 Signing time: Sun 19 May 2024 00:08:26 +0000 Manifest this update: Sun 19 May 2024 00:08:26 +0000 Manifest next update: Sun 26 May 2024 00:08:26 +0000 Files and hashes: 1: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl (hash: FGLFxzup+cReMXlckyYawia6Dh9bwqo16FnVwM9g0p8=) 2: 69233F20816611EE99E43B7AC4F9AE02.roa (hash: b+i7RewhBqVJaSyOzF7nUxr20Sf0qdl3mfbYC1YOR1k=) 3: 79EB047C816711EE9944837FC4F9AE02.roa (hash: bx88REcvELkt1FUUdwwFEae28uQZ8xcpJnXb1DGF3A4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1489 (0x5d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0277/serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779 Validity Not Before: May 19 00:08:26 2024 GMT Not After : May 26 00:08:26 2024 GMT Subject: CN=664942fa-1832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ee:44:87:32:82:77:60:7d:57:a0:7d:a2:17: fc:77:18:6f:be:df:b1:f5:ad:b0:68:a4:51:67:74: 1d:e1:7b:2f:60:64:1e:59:3f:7a:66:8f:62:34:9e: 37:86:6a:7d:7f:29:22:0f:fa:cd:72:c6:c1:a6:05: 3f:e6:0d:ca:70:48:63:ec:82:e9:c3:4d:3b:1a:5c: 83:5a:25:7a:f0:ff:45:60:09:6f:02:96:58:95:02: 36:e5:d1:e3:58:c7:25:fb:23:08:dc:11:ec:b0:99: 45:13:5f:d4:a2:97:04:c1:c0:d0:d8:31:e9:9c:d1: 6f:e2:5f:17:4e:d9:37:fc:18:a8:92:04:95:6b:b5: 3c:62:79:93:4c:95:38:42:26:fc:9b:67:bf:50:b8: 21:40:0e:cc:18:ce:07:ad:cc:df:ca:e0:29:78:18: 99:52:90:f6:aa:96:b4:36:ea:89:59:1d:83:d0:ea: 49:db:ab:2c:ce:17:f3:3c:46:0e:f8:7c:b9:7e:cf: 10:9e:33:ef:f4:dd:e5:17:d8:30:9c:5b:0a:d6:da: e7:83:0d:9e:90:06:89:8f:7c:b3:56:02:ef:8d:8c: 0b:56:12:9e:74:3f:12:2f:0c:da:43:48:91:1d:2f: e6:41:8c:fb:6a:ea:4c:6a:c0:8d:b1:8a:72:b8:d3: 8f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B3:9B:38:D8:CA:CA:85:47:A3:CE:1B:CA:C2:D7:F4:4D:D5:FF:D9 X509v3 Authority Key Identifier: keyid:61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:4f:f8:d7:f8:fd:d0:f6:37:6d:fe:20:a5:a9:c2:81:ea:74: 8f:36:11:5d:82:67:45:80:f7:2c:c4:27:70:f8:e0:73:73:44: 19:e9:1e:25:87:0e:2d:93:87:6b:56:54:d9:e2:d6:bf:5a:b4: 6f:98:dc:a7:67:77:9b:38:32:b0:86:76:f2:92:7a:d1:be:7f: c3:32:26:75:94:f4:50:6d:e6:7e:c8:15:52:41:be:e5:e0:4d: fe:4f:66:a1:2a:2b:aa:2e:0a:23:72:87:3b:9f:3a:2c:1b:f9: 5c:5a:a2:33:e1:12:7f:91:af:fa:d5:2a:02:bb:d1:d1:79:03: 91:79:60:0c:c7:c0:5a:38:24:04:ae:6e:1c:bb:1b:37:0c:bb: e8:de:46:cc:d4:5d:6b:a1:5b:10:95:f6:85:60:e4:22:ca:de: c3:ae:b5:ea:fb:f2:fa:de:cb:93:3c:b0:0e:49:eb:51:58:b0: 9b:fe:50:fb:a2:51:69:1a:d4:b1:70:fd:1b:26:23:86:45:0e: 86:2b:c6:b8:39:4d:49:35:bf:58:b3:94:be:b7:00:60:b2:5d: 90:ee:8d:55:04:b2:99:0e:87:a4:73:67:55:cc:2d:95:7c:f6: bf:fb:21:b1:76:c2:95:39:57:c0:cd:6a:05:6d:e3:08:df:9f: 7f:3a:88:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyNzcxMTAvBgNVBAUTKDYxRDkwOTQ5NEFBQzA5OUU1REM2N0JEOURFQ0NGRUJF NDRCNzc3NzkwHhcNMjQwNTE5MDAwODI2WhcNMjQwNTI2MDAwODI2WjAYMRYwFAYD VQQDEw02NjQ5NDJmYS0xODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxe5EhzKCd2B9V6B9ohf8dxhvvt+x9a2waKRRZ3Qd4XsvYGQeWT96Zo9iNJ43 hmp9fykiD/rNcsbBpgU/5g3KcEhj7ILpw007GlyDWiV68P9FYAlvApZYlQI25dHj WMcl+yMI3BHssJlFE1/UopcEwcDQ2DHpnNFv4l8XTtk3/BiokgSVa7U8YnmTTJU4 Qib8m2e/ULghQA7MGM4HrczfyuApeBiZUpD2qpa0NuqJWR2D0OpJ26sszhfzPEYO +Hy5fs8QnjPv9N3lF9gwnFsK1trngw2ekAaJj3yzVgLvjYwLVhKedD8SLwzaQ0iR HS/mQYz7aupMasCNsYpyuNOP2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOzmzjY ysqFR6POG8rC1/RN1f/ZMB8GA1UdIwQYMBaAFGHZCUlKrAmeXcZ72d7M/r5Et3d5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDI3Ny9ENDE5RDgxMDc1 Q0IxMUVCOTUyREQ2NkFDNEY5QUUwMi9ZZGtKU1Vxc0NaNWR4bnZaM3N6LXZrUzNk M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lka0pTVXFzQ1o1ZHhudlozc3otdmtTM2Qzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDI3Ny9ENDE5RDgxMDc1Q0IxMUVCOTUyREQ2NkFDNEY5QUUwMi9ZZGtKU1Vxc0Na NWR4bnZaM3N6LXZrUzNkM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAT/jX+P3Q9jdt/iClqcKB6nSPNhFdgmdFgPcsxCdw+OBzc0QZ6R4l hw4tk4drVlTZ4ta/WrRvmNynZ3ebODKwhnbyknrRvn/DMiZ1lPRQbeZ+yBVSQb7l 4E3+T2ahKiuqLgojcoc7nzosG/lcWqIz4RJ/ka/61SoCu9HReQOReWAMx8BaOCQE rm4cuxs3DLvo3kbM1F1roVsQlfaFYOQiyt7DrrXq+/L63suTPLAOSetRWLCb/lD7 olFpGtSxcP0bJiOGRQ6GK8a4OU1JNb9Ys5S+twBgsl2Q7o1VBLKZDoekc2dVzC2V fPa/+yGxdsKVOVfAzWoFbeMI359/OogP -----END CERTIFICATE-----Generated at Sun May 19 00:59:42 2024 by rpki-client on console-fra.rpki-client.org