$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft File: yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft (raw, json) Hash identifier: 2DR7en4hjqtmrOzphlESEARN3U48GSPPQkCdL4dJPkk= Subject key identifier: 9C:02:E3:26:A0:5C:C9:66:2F:9F:2D:E8:C6:76:55:C6:FE:35:6C:7C Authority key identifier: C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28 Certificate issuer: /CN=A91C1710/serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft Manifest number: 04EB Signing time: Sun 19 May 2024 03:05:53 +0000 Manifest this update: Sun 19 May 2024 03:05:53 +0000 Manifest next update: Sun 26 May 2024 03:05:53 +0000 Files and hashes: 1: yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl (hash: j2uX+kWofmX7msvR9cGrC8nd3uI8CYD2oCg82KtjzFE=) 2: 99667AD4F83211ED97101D26C4F9AE02.roa (hash: MCVKksxhrGPeFaXG6jI+y2FpN/ON3PY9O0Ypa8BfH80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1710/serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228 Validity Not Before: May 19 03:05:53 2024 GMT Not After : May 26 03:05:53 2024 GMT Subject: CN=66496c91-7374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:30:b4:81:60:8b:13:84:f3:b7:0c:bd:08:88: a0:51:73:db:93:cb:29:7a:ad:10:a7:fb:ea:91:e9: dc:d8:d5:c3:50:2d:4d:90:63:11:46:ad:fb:bd:3f: e4:5c:d2:ab:06:9a:b0:3b:54:eb:6d:97:78:15:df: bb:61:80:81:81:d5:d8:03:65:92:42:45:a1:da:61: bf:1e:4b:a3:29:f3:c6:a9:68:44:8f:0b:92:3a:18: 45:8b:e4:7f:4e:48:2a:08:bb:58:62:2b:95:b0:82: 08:17:56:03:ee:c8:be:0a:68:08:d9:fe:f9:44:cd: d3:1a:38:46:88:96:fd:2c:12:55:ac:87:d1:28:51: 6f:7c:79:ad:c9:bd:a6:03:7d:4c:13:f9:b1:96:37: 28:b4:fc:a4:0a:fc:eb:e4:41:fe:18:0c:f2:6e:e3: 8a:44:de:7f:cc:f1:b1:2c:bf:c3:63:5e:a2:30:bb: 45:76:1c:80:58:c4:cc:18:8d:73:06:7c:bc:08:14: 9b:b2:98:8d:95:d2:0d:5b:fb:98:9a:4f:b3:1a:fe: b1:55:a9:cd:53:4f:77:4a:6c:1d:9f:8b:9e:e1:a3: 4a:2c:b1:7f:c2:e8:b0:34:c7:d8:e3:45:fc:0b:c7: 22:4d:13:25:1c:39:69:b7:f7:41:c6:84:41:53:9a: cf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:02:E3:26:A0:5C:C9:66:2F:9F:2D:E8:C6:76:55:C6:FE:35:6C:7C X509v3 Authority Key Identifier: keyid:C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:8c:a3:83:58:03:f7:8d:b1:0c:0e:ff:a3:58:33:78:eb:d3: 72:60:7f:e0:a9:a3:52:c9:21:19:73:34:f9:f8:d9:17:4d:87: 9c:1f:51:5b:67:e1:53:9c:d5:e1:4b:6b:e2:88:41:28:6c:55: 01:87:92:58:72:c7:18:3c:46:71:53:6c:0c:46:ee:62:62:72: 66:2c:67:1f:29:dd:68:2c:8d:da:5c:c9:c1:f5:bc:65:df:c0: 39:05:e7:07:b7:90:db:09:10:50:37:de:93:4f:1e:46:c8:97: 99:87:43:c4:36:91:af:5d:d3:91:72:45:20:78:c1:0a:2f:1b: cb:48:d1:51:c8:d4:94:11:03:db:92:75:76:ec:1a:58:ca:dc: 18:82:e8:76:fe:1c:93:b2:49:1b:8f:f5:b7:16:e8:48:8e:a5: 00:fe:9a:9c:43:ef:3c:36:aa:b1:16:65:5e:54:60:35:42:f9: 5b:74:5d:76:e7:51:3d:20:00:75:8c:8c:f4:3d:d7:3e:98:b8: 09:df:41:44:59:4d:89:98:4d:8d:ab:83:dc:2f:51:fa:73:80: 62:c8:9a:3b:6b:93:4c:1d:69:ac:38:08:48:bb:e4:10:4e:b8: 08:89:c8:f0:92:ab:9f:95:5d:13:e0:c8:da:84:c5:4b:15:81: e4:a4:32:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE3MTAxMTAvBgNVBAUTKEM5Mzc1M0E5QUFBMkE4NkU1NkNBNEVBMEMzRkY4NTdD MzBFMzQyMjgwHhcNMjQwNTE5MDMwNTUzWhcNMjQwNTI2MDMwNTUzWjAYMRYwFAYD VQQDEw02NjQ5NmM5MS03Mzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jC0gWCLE4Tztwy9CIigUXPbk8speq0Qp/vqkenc2NXDUC1NkGMRRq37vT/k XNKrBpqwO1TrbZd4Fd+7YYCBgdXYA2WSQkWh2mG/HkujKfPGqWhEjwuSOhhFi+R/ TkgqCLtYYiuVsIIIF1YD7si+CmgI2f75RM3TGjhGiJb9LBJVrIfRKFFvfHmtyb2m A31ME/mxljcotPykCvzr5EH+GAzybuOKRN5/zPGxLL/DY16iMLtFdhyAWMTMGI1z Bny8CBSbspiNldINW/uYmk+zGv6xVanNU093Smwdn4ue4aNKLLF/wuiwNMfY40X8 C8ciTRMlHDlpt/dBxoRBU5rPEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwC4yag XMlmL58t6MZ2Vcb+NWx8MB8GA1UdIwQYMBaAFMk3U6mqoqhuVspOoMP/hXww40Io MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy NkIxMUVDQTExQkE1MkJDNEY5QUUwMi95VGRUcWFxaXFHNVd5azZnd18tRmZERGpR aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lUZFRxYXFpcUc1V3lrNmd3Xy1GZkREalFpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi95VGRUcWFxaXFH NVd5azZnd18tRmZERGpRaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYjKODWAP3jbEMDv+jWDN469NyYH/gqaNSySEZczT5+NkXTYecH1Fb Z+FTnNXhS2viiEEobFUBh5JYcscYPEZxU2wMRu5iYnJmLGcfKd1oLI3aXMnB9bxl 38A5BecHt5DbCRBQN96TTx5GyJeZh0PENpGvXdORckUgeMEKLxvLSNFRyNSUEQPb knV27BpYytwYguh2/hyTskkbj/W3FuhIjqUA/pqcQ+88NqqxFmVeVGA1QvlbdF12 51E9IAB1jIz0Pdc+mLgJ30FEWU2JmE2Nq4PcL1H6c4BiyJo7a5NMHWmsOAhIu+QQ TrgIicjwkquflV0T4MjahMVLFYHkpDL6 -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org