$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft File: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft (raw, json) Hash identifier: s3ew9syWy946ozkGWDU5zMAKrtlAAA9/kZJJ8yOwB/o= Subject key identifier: 80:DE:A7:04:E6:C8:F2:45:FE:6A:9D:C3:C1:48:3B:46:41:E7:B1:2F Authority key identifier: C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B Certificate issuer: /CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B Certificate serial: 0B69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft Manifest number: 0B62 Signing time: Sat 18 May 2024 19:34:15 +0000 Manifest this update: Sat 18 May 2024 19:34:15 +0000 Manifest next update: Sat 25 May 2024 19:34:15 +0000 Files and hashes: 1: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl (hash: b3iccUojUQMA0VdKZKBnIwXKVROI3EmQmANmUGtNL9Q=) 2: 69308C200A9611EABF034172C4F9AE02.roa (hash: 7tTtY2UG5+baXyuNQBfwIK8ila3VnuaOeuIjzJ0fpoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2921 (0xb69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B Validity Not Before: May 18 19:34:15 2024 GMT Not After : May 25 19:34:15 2024 GMT Subject: CN=664902b7-f7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:57:d5:aa:fd:91:a0:54:2e:73:70:70:a0: 5c:fe:1a:c0:91:1d:f5:50:30:d5:72:e7:86:42:be: 40:b0:5f:3a:a8:12:55:aa:70:d7:08:e6:9e:72:0e: 50:36:63:73:8b:80:b9:0d:b5:a5:7a:3a:10:78:ee: 93:63:db:ce:6e:fb:21:25:61:45:d7:24:a9:a5:61: 0a:b7:f7:ae:9c:fd:f7:b0:c3:25:19:d6:29:4c:10: 9f:72:5b:05:3b:08:ca:6a:c8:46:ec:6c:ba:ca:be: b5:b9:f6:1c:04:dc:57:64:32:1a:f2:51:76:61:cd: 9b:0f:9e:4a:f8:af:53:07:78:8f:a7:25:49:a8:e5: dd:99:cd:78:19:e9:0d:68:fd:b7:e2:40:18:ee:be: 0f:18:95:48:15:cc:47:bd:3a:c0:13:b3:12:35:b2: ef:9b:b5:8d:0b:de:e5:be:f5:4c:f3:c6:e6:fb:64: b9:e1:4d:a3:ce:19:69:44:9e:80:2f:a5:04:9b:47: 10:3b:1b:a8:97:9a:25:cb:b8:d8:f9:09:83:33:ed: ef:2a:7e:c9:40:cb:54:6b:1b:29:46:12:10:f7:ce: 11:f0:1f:fe:28:70:ff:34:49:0c:33:f5:9e:98:50: 3f:bd:70:67:cd:0c:8c:90:9a:48:5f:86:7a:c3:b1: f0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DE:A7:04:E6:C8:F2:45:FE:6A:9D:C3:C1:48:3B:46:41:E7:B1:2F X509v3 Authority Key Identifier: keyid:C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f1:f7:9e:bd:86:62:26:10:60:dc:4d:e6:d0:20:50:d5:82: 47:b8:19:c0:d8:c6:b6:e1:07:22:66:ab:40:b3:1f:23:70:22: 38:bb:18:f8:15:aa:dc:2e:56:4e:54:89:de:81:6b:e6:60:df: 33:55:a4:af:a5:c2:f5:93:d9:4c:0a:44:37:2b:1c:73:67:d9: 81:45:9d:83:12:99:f2:cc:6f:83:b4:56:9d:dc:34:60:b3:16: a2:ae:cd:82:9e:b8:1f:fa:6d:72:6d:7a:fa:da:ec:1a:ed:5e: 9c:65:38:70:fd:77:4a:c6:6e:bf:f8:b2:9e:ad:1c:b6:c0:c9: 68:0b:59:66:65:68:01:62:40:9e:3c:c7:16:07:37:34:60:27: 27:6c:a5:e5:71:6e:a5:bd:78:1a:23:d1:59:c9:c3:27:72:d8: 31:5f:55:f7:7e:00:e7:cd:0c:f1:b7:4a:54:b1:bd:be:60:b9: ec:25:b9:bb:4e:f3:82:e4:c0:52:87:1f:45:74:cb:15:01:f9: fa:94:21:15:c6:dd:ec:2a:9d:34:27:b5:17:1e:c9:5a:63:24: a6:2d:d4:1b:f1:d8:e4:b0:c2:f3:64:a0:5d:d5:26:e4:47:7f: ae:17:30:86:f9:cb:ac:a7:c6:6e:a8:75:17:4d:72:45:3b:02: d9:4b:8c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M4QjExMTAvBgNVBAUTKEM4N0ZDQUU5MDdCRDIwNUEwOEU1NEM2N0E2MzM1NkQ5 MjFDNTkxM0IwHhcNMjQwNTE4MTkzNDE1WhcNMjQwNTI1MTkzNDE1WjAYMRYwFAYD VQQDEw02NjQ5MDJiNy1mN2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzS1X1ar9kaBULnNwcKBc/hrAkR31UDDVcueGQr5AsF86qBJVqnDXCOaecg5Q NmNzi4C5DbWlejoQeO6TY9vObvshJWFF1ySppWEKt/eunP33sMMlGdYpTBCfclsF OwjKashG7Gy6yr61ufYcBNxXZDIa8lF2Yc2bD55K+K9TB3iPpyVJqOXdmc14GekN aP234kAY7r4PGJVIFcxHvTrAE7MSNbLvm7WNC97lvvVM88bm+2S54U2jzhlpRJ6A L6UEm0cQOxuol5oly7jY+QmDM+3vKn7JQMtUaxspRhIQ984R8B/+KHD/NEkMM/We mFA/vXBnzQyMkJpIX4Z6w7HwGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDepwTm yPJF/mqdw8FIO0ZB57EvMB8GA1UdIwQYMBaAFMh/yukHvSBaCOVMZ6YzVtkhxZE7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzhCMS9DRTg1MUE1NjBB OTUxMUVBODVGRkFBNzFDNEY5QUUwMi95SF9LNlFlOUlGb0k1VXhucGpOVzJTSEZr VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIX0s2UWU5SUZvSTVVeG5wak5XMlNIRmtUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzhCMS9DRTg1MUE1NjBBOTUxMUVBODVGRkFBNzFDNEY5QUUwMi95SF9LNlFlOUlG b0k1VXhucGpOVzJTSEZrVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/8feevYZiJhBg3E3m0CBQ1YJHuBnA2Ma24QciZqtAsx8jcCI4uxj4 FarcLlZOVInegWvmYN8zVaSvpcL1k9lMCkQ3KxxzZ9mBRZ2DEpnyzG+DtFad3DRg sxairs2Cnrgf+m1ybXr62uwa7V6cZThw/XdKxm6/+LKerRy2wMloC1lmZWgBYkCe PMcWBzc0YCcnbKXlcW6lvXgaI9FZycMnctgxX1X3fgDnzQzxt0pUsb2+YLnsJbm7 TvOC5MBShx9FdMsVAfn6lCEVxt3sKp00J7UXHslaYySmLdQb8djksMLzZKBd1Sbk R3+uFzCG+cusp8ZuqHUXTXJFOwLZS4wY -----END CERTIFICATE-----Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org