$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft File: y0yV-DniHR3g9FhVPZpM4o5BTYg.mft (raw, json) Hash identifier: XZNrASpS2BM8YZKxFKmLstaD/uW5hmlkFh1YJj5o4qg= Subject key identifier: 45:D8:83:08:52:2A:8B:AC:AE:C4:A7:97:75:49:9D:1F:FA:24:3B:4D Authority key identifier: CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88 Certificate issuer: /CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88 Certificate serial: 0830 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft Manifest number: 080E Signing time: Sat 18 May 2024 21:53:53 +0000 Manifest this update: Sat 18 May 2024 21:53:53 +0000 Manifest next update: Sat 25 May 2024 21:53:53 +0000 Files and hashes: 1: y0yV-DniHR3g9FhVPZpM4o5BTYg.crl (hash: RuYPpAr2j8R/g+lMGAqNIk3LM2KOSPFpk8AFFtUSI3s=) 2: 9768CAB2550211EDA744F948C4F9AE02.roa (hash: +c7JrobNieG+ZMgvcidemgeezLPPKCFpg7+084o7JoA=) 3: 8CE5EE808E1A11EC96B4970AC4F9AE02.roa (hash: EZBagVr/hD3KJ6ELkAAEEOXAeLi6XW6fcfcVyYg3wjQ=) 4: 8C3B232E8E1A11EC96B4970AC4F9AE02.roa (hash: 8QLJCSW7Dx5LXrLw450pRNDRNzSQEQRY9thpGou2vRw=) 5: F407F0D49B8C11EC98C88432C4F9AE02.roa (hash: S/k+u3wzST4BAkpqg+O7+3Um9PXES4RfHWYozst9ucQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2096 (0x830) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88 Validity Not Before: May 18 21:53:53 2024 GMT Not After : May 25 21:53:53 2024 GMT Subject: CN=66492371-78ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:14:e0:32:74:ef:8d:6b:55:cb:0f:86:05:3b: 8e:73:45:f1:19:49:16:b0:62:eb:c0:fd:04:53:59: d5:df:73:8b:2e:ad:e3:dd:4f:39:0b:e1:fa:3b:bf: 55:7c:7d:8f:4f:b8:5e:78:82:b9:20:d0:15:5b:28: b3:03:28:25:de:5c:8e:86:62:ed:c2:56:2f:71:00: e4:e2:07:60:77:d7:f8:05:01:5b:4a:ed:09:65:33: 05:af:be:44:ca:3a:f2:72:03:eb:0e:bb:b3:85:c2: d5:61:7d:cf:95:5d:18:0e:0b:c2:7f:b6:04:47:3a: 58:fe:a1:c0:9d:b1:f3:69:96:f9:db:b7:6f:12:39: 1b:d3:6f:c2:9a:23:ba:fc:02:79:9a:a2:50:d2:4d: 83:9c:6c:d2:2a:36:f3:03:61:ce:b9:44:9c:8f:4c: c8:29:13:58:be:87:ab:1f:7b:1d:54:17:78:0b:ca: 12:0b:ce:6d:3c:f1:a8:4d:2b:bc:bd:2b:5d:2b:2e: 8b:f9:0d:ef:e3:32:a4:20:ca:fa:87:f9:ec:53:4b: 29:15:01:35:ff:c7:d6:8d:b6:67:b0:a4:cc:a0:9f: 2a:c9:e6:ff:e5:72:ea:16:c8:88:e5:a6:e0:71:92: 0f:1f:cd:fe:6b:bd:d7:1b:c2:55:6e:0e:88:b1:98: a8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D8:83:08:52:2A:8B:AC:AE:C4:A7:97:75:49:9D:1F:FA:24:3B:4D X509v3 Authority Key Identifier: keyid:CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:25:a9:01:fa:6a:58:77:f1:c0:bf:86:b5:53:8c:75:d4:32: ff:a6:bc:ed:41:92:d8:bf:dd:15:a7:10:f0:98:6f:93:e6:7a: b2:c1:cd:c1:ef:70:e0:2c:e4:f0:c8:17:03:d1:8f:37:75:8f: 1c:8a:31:f8:48:72:55:9b:d6:34:2a:fe:03:84:24:f5:31:ae: 0a:87:92:23:f7:c6:42:d8:ef:32:49:3d:c7:65:75:b0:ad:a3: 23:85:5c:78:83:6d:fd:e5:0a:2a:a0:a2:27:65:a6:66:7c:32: 64:e3:d9:75:f9:d1:13:8d:d4:6a:c2:30:88:08:8b:e3:0b:29: 70:41:ba:dd:02:19:0e:72:73:0c:0a:91:b0:ea:76:be:39:cf: 95:8b:b3:97:98:6a:99:34:95:3d:2f:5f:54:99:87:bd:be:d6: 0b:88:ed:9c:18:c9:a6:02:dd:ee:ee:c8:bf:3c:f3:53:e5:ba: fe:e1:d4:42:9b:dc:09:ce:5c:a5:d9:34:5c:35:56:64:67:20: ef:c9:9f:81:d4:23:a4:5a:62:3e:ce:23:8b:bf:6e:58:ab:db: 38:9c:eb:51:77:5d:60:f4:1b:e6:58:c2:ed:99:88:c4:f3:d6: eb:4e:cf:f5:d6:f9:b7:97:95:57:8f:18:ac:19:0e:86:e6:48: ba:73:e8:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1MDIxMTAvBgNVBAUTKENCNEM5NUY4MzlFMjFEMURFMEY0NTg1NTNEOUE0Q0Uy OEU0MTREODgwHhcNMjQwNTE4MjE1MzUzWhcNMjQwNTI1MjE1MzUzWjAYMRYwFAYD VQQDEw02NjQ5MjM3MS03OGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRTgMnTvjWtVyw+GBTuOc0XxGUkWsGLrwP0EU1nV33OLLq3j3U85C+H6O79V fH2PT7heeIK5INAVWyizAygl3lyOhmLtwlYvcQDk4gdgd9f4BQFbSu0JZTMFr75E yjrycgPrDruzhcLVYX3PlV0YDgvCf7YERzpY/qHAnbHzaZb527dvEjkb02/CmiO6 /AJ5mqJQ0k2DnGzSKjbzA2HOuUScj0zIKRNYvoerH3sdVBd4C8oSC85tPPGoTSu8 vStdKy6L+Q3v4zKkIMr6h/nsU0spFQE1/8fWjbZnsKTMoJ8qyeb/5XLqFsiI5abg cZIPH83+a73XG8JVbg6IsZioNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXYgwhS KousrsSnl3VJnR/6JDtNMB8GA1UdIwQYMBaAFMtMlfg54h0d4PRYVT2aTOKOQU2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDUwMi80MEUyREZDQ0I1 MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhSM2c5RmhWUFpwTTRvNUJU WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kweVYtRG5pSFIzZzlGaFZQWnBNNG81QlRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDUwMi80MEUyREZDQ0I1MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhS M2c5RmhWUFpwTTRvNUJUWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiJakB+mpYd/HAv4a1U4x11DL/prztQZLYv90VpxDwmG+T5nqywc3B 73DgLOTwyBcD0Y83dY8cijH4SHJVm9Y0Kv4DhCT1Ma4Kh5Ij98ZC2O8yST3HZXWw raMjhVx4g2395QoqoKInZaZmfDJk49l1+dETjdRqwjCICIvjCylwQbrdAhkOcnMM CpGw6na+Oc+Vi7OXmGqZNJU9L19UmYe9vtYLiO2cGMmmAt3u7si/PPNT5br+4dRC m9wJzlyl2TRcNVZkZyDvyZ+B1COkWmI+ziOLv25Yq9s4nOtRd11g9BvmWMLtmYjE 89brTs/11vm3l5VXjxisGQ6G5ki6c+h3 -----END CERTIFICATE-----Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org