$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json) Hash identifier: XnTpaAF9SzrG4Za/nqy/Qw0WLJWg79F8TQoB372k30w= Subject key identifier: 2A:F8:02:0D:A9:93:37:50:04:F7:DD:28:F6:2F:9F:57:85:A0:34:F0 Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft Manifest number: B6 Signing time: Sun 19 May 2024 06:29:17 +0000 Manifest this update: Sun 19 May 2024 06:29:17 +0000 Manifest next update: Sun 26 May 2024 06:29:17 +0000 Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: uc9jTTn3w596Xp5/O7y+gzBbGMupz8ZsKOfpTdRmfEY=) 2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: 8jnHar0/NAHwDbGrkxQO7RGVg5lEfs0Dc5aRFxVX8Fo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Validity Not Before: May 19 06:29:17 2024 GMT Not After : May 26 06:29:17 2024 GMT Subject: CN=66499c3d-d1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6e:d7:33:97:6f:35:de:62:4e:82:27:ac:b9: b0:bd:ad:39:61:b4:61:c0:38:fc:c8:6b:36:79:3e: f3:c5:d8:16:ca:99:70:05:1f:99:00:4e:ad:18:4f: 98:d7:02:28:1d:f7:00:65:4c:06:b3:cd:cd:e7:ca: fa:40:2d:66:34:37:14:b1:ea:80:61:fe:37:06:7d: b1:a6:be:6f:93:61:31:45:fe:bf:e4:37:1f:9e:0e: 7d:cd:5e:eb:c2:4d:da:4f:d9:61:e1:f8:b1:97:f1: 4e:8f:f2:82:0a:61:40:ee:a5:ff:c4:87:25:94:e1: 29:9a:ad:00:56:40:c0:57:fc:2f:ea:fe:a4:be:b8: 5c:b1:57:bf:63:7e:dd:65:ea:50:93:fb:2c:39:d5: a6:67:fb:74:1f:14:c8:91:40:e0:c3:a7:10:ce:c2: 96:b9:95:51:00:56:d5:90:24:e2:05:af:7e:6d:12: 0b:3a:1b:32:c2:4e:cc:5f:80:4f:b5:3c:01:6b:b6: 79:3f:f7:f5:0b:04:bd:52:6e:ae:d8:08:47:83:0c: f3:0a:f3:f8:1b:cb:30:3d:1b:7a:36:2e:01:82:41: 91:f9:5d:6e:f3:75:15:64:68:af:1d:28:af:e4:fc: fe:03:27:50:9c:84:b5:29:9a:70:69:5b:d5:8e:43: c0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F8:02:0D:A9:93:37:50:04:F7:DD:28:F6:2F:9F:57:85:A0:34:F0 X509v3 Authority Key Identifier: keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:51:67:3d:e1:77:c4:b7:67:08:ac:2b:6c:d2:c3:53:2a:31: 8b:fa:b9:29:c4:9e:f7:55:83:83:9f:4f:c5:77:a4:04:44:e9: 59:0f:e2:6f:f3:cf:e3:32:68:01:74:4c:29:a8:07:d0:cf:c2: 30:0f:e6:d4:d2:f4:56:00:af:ec:e7:bd:c2:32:0a:23:3a:3c: 65:95:4e:0e:40:d5:cb:07:8b:9c:60:44:57:0c:4e:7a:e3:b6: c0:8f:92:af:b1:dc:8a:14:c3:aa:ae:c0:ff:d0:9b:40:53:12: 43:ec:25:da:89:d0:fc:38:3f:8d:12:6f:6f:2e:ec:58:c4:80: 71:ac:9e:4b:c9:61:b8:74:46:0d:4a:a1:8f:ba:85:7c:c4:21: 41:13:ab:3c:2e:49:ba:9a:35:fd:5d:2c:74:2c:9f:d0:b9:16: 8e:96:f2:56:a8:52:19:e8:3f:a8:86:cd:92:66:39:7b:28:fe: 3c:3a:51:7f:35:ba:e8:c8:7a:72:d6:5a:ab:07:25:1e:80:06: 60:0d:78:b3:ce:11:fa:87:9a:4c:3b:21:c5:b6:b0:ec:8d:b9: 7e:9d:1a:88:57:a5:af:0f:86:3f:eb:ee:32:69:f1:38:f3:a0: bb:e8:61:71:ed:a5:43:1e:3e:80:35:92:c8:c5:94:56:6b:f0: 81:49:c7:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERjMxMTAvBgNVBAUTKEM5MTVGRDNCRDQ1QjgyMThCOTVGNTczNzQ5RDNBQTQ5 ODAxNkFBQTkwHhcNMjQwNTE5MDYyOTE3WhcNMjQwNTI2MDYyOTE3WjAYMRYwFAYD VQQDEw02NjQ5OWMzZC1kMWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA527XM5dvNd5iToInrLmwva05YbRhwDj8yGs2eT7zxdgWyplwBR+ZAE6tGE+Y 1wIoHfcAZUwGs83N58r6QC1mNDcUseqAYf43Bn2xpr5vk2ExRf6/5Dcfng59zV7r wk3aT9lh4fixl/FOj/KCCmFA7qX/xIcllOEpmq0AVkDAV/wv6v6kvrhcsVe/Y37d ZepQk/ssOdWmZ/t0HxTIkUDgw6cQzsKWuZVRAFbVkCTiBa9+bRILOhsywk7MX4BP tTwBa7Z5P/f1CwS9Um6u2AhHgwzzCvP4G8swPRt6Ni4BgkGR+V1u83UVZGivHSiv 5Pz+AydQnIS1KZpwaVvVjkPAWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCr4Ag2p kzdQBPfdKPYvn1eFoDTwMB8GA1UdIwQYMBaAFMkV/TvUW4IYuV9XN0nTqkmAFqqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RGMy80MkRFNDgzNkZG NzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdoaTVYMWMzU2RPcVNZQVdx cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lSWDlPOVJiZ2hpNVgxYzNTZE9xU1lBV3Fxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RGMy80MkRFNDgzNkZGNzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdo aTVYMWMzU2RPcVNZQVdxcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOUWc94XfEt2cIrCts0sNTKjGL+rkpxJ73VYODn0/Fd6QEROlZD+Jv 88/jMmgBdEwpqAfQz8IwD+bU0vRWAK/s573CMgojOjxllU4OQNXLB4ucYERXDE56 47bAj5KvsdyKFMOqrsD/0JtAUxJD7CXaidD8OD+NEm9vLuxYxIBxrJ5LyWG4dEYN SqGPuoV8xCFBE6s8Lkm6mjX9XSx0LJ/QuRaOlvJWqFIZ6D+ohs2SZjl7KP48OlF/ NbroyHpy1lqrByUegAZgDXizzhH6h5pMOyHFtrDsjbl+nRqIV6WvD4Y/6+4yafE4 86C76GFx7aVDHj6ANZLIxZRWa/CBSccE -----END CERTIFICATE-----Generated at Sun May 19 07:40:45 2024 by rpki-client on console-fra.rpki-client.org