$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft File: y4244fF7x3I0bdn_uyByz6j9plI.mft (raw, json) Hash identifier: IkzPmZQF7Qu9CQp7UmkCe8lmYmKdkIw2y7uLknWfyw4= Subject key identifier: D4:98:8D:3C:45:F1:A2:2C:80:6C:3F:4D:BE:78:69:39:DF:9E:61:DC Authority key identifier: CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52 Certificate issuer: /CN=A91DB7E9/serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft Manifest number: 79 Signing time: Sat 01 Jun 2024 08:47:48 +0000 Manifest this update: Sat 01 Jun 2024 08:47:47 +0000 Manifest next update: Sat 08 Jun 2024 08:47:47 +0000 Files and hashes: 1: y4244fF7x3I0bdn_uyByz6j9plI.crl (hash: pF66pldGJjLbvKr9UAxF76kyx4mV/0Z6mHj/SXEYzGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7E9/serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652 Validity Not Before: Jun 1 08:47:47 2024 GMT Not After : Jun 8 08:47:47 2024 GMT Subject: CN=665ae033-d1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:ed:76:7f:48:d9:72:65:af:42:0d:94:fd: 7f:d1:78:bf:50:30:48:ce:e4:17:4c:94:88:14:d0: 13:a7:39:08:25:de:8b:5e:cc:cd:ee:17:85:95:08: f4:54:db:37:e2:d6:e0:24:1c:56:54:0a:c0:22:ff: 2f:74:d1:04:91:83:ad:3a:f9:d6:27:17:81:33:58: 92:07:6b:cd:11:ea:fe:8a:35:32:fd:55:02:fb:5b: ee:2c:6c:ad:bc:21:3b:d0:a1:fa:6c:7b:93:8b:5b: 34:85:c1:f2:21:e0:08:f8:2a:38:c3:a8:7a:75:f8: 5a:b7:7c:e7:05:e8:d0:40:b8:5a:3a:9d:36:71:89: 0c:ea:75:a4:b5:53:37:b3:3f:b4:2b:54:64:d4:b1: a9:63:e1:67:c0:a6:63:c2:ff:1e:e0:97:19:02:0e: 99:40:eb:05:45:c6:e1:28:e4:f9:f9:52:38:3c:01: 28:cd:55:84:8e:dc:0f:45:2f:76:49:c0:84:78:da: 72:83:b6:f1:d6:29:11:ae:e2:ac:fe:88:46:d3:d2: a5:58:7b:8d:d7:0b:8e:7d:5b:79:3f:a5:ff:33:b5: e0:ff:0e:67:bf:02:3a:5d:5f:83:54:a1:5d:a6:c9: 49:8b:27:4b:fa:e7:99:f6:ae:2c:c5:97:66:61:7d: f8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:98:8D:3C:45:F1:A2:2C:80:6C:3F:4D:BE:78:69:39:DF:9E:61:DC X509v3 Authority Key Identifier: keyid:CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:88:84:3b:d7:7e:2b:2a:40:50:da:35:3d:2b:17:66:0d:31: c4:ce:17:e4:0d:5f:82:bb:90:f8:c1:a4:61:1b:f6:c2:e3:60: 64:a5:21:3e:31:3a:5f:19:fa:7a:b1:96:02:23:92:63:3d:26: 17:ad:0d:b6:90:13:d4:1d:51:b4:9a:2e:a9:c3:3f:26:a0:18: 96:96:2e:67:0a:ff:33:d0:75:38:a1:bf:b6:b8:fd:9a:aa:f6: e2:61:dd:fb:3d:0b:5d:f3:b3:0c:d5:4a:be:60:76:88:21:26: 14:cf:89:61:b2:9a:2f:39:48:14:75:25:b1:f0:14:9f:c6:c8: c9:fe:12:12:dd:87:d2:b1:92:4e:14:e7:4f:c7:9e:44:e7:fb: 64:66:2d:ea:6a:7e:d5:67:cd:77:48:64:22:65:52:f4:94:7a: aa:c8:92:c4:69:1b:22:a9:54:14:48:21:2e:af:a2:75:50:a5: 8c:3d:9d:4d:b5:9d:47:b1:bf:15:d8:6e:a3:fa:0b:d4:0d:93: ae:4d:1c:7b:ed:f6:d6:41:06:75:24:55:6c:d1:8f:33:1a:72: 1c:27:93:a8:f3:e3:3a:a9:6b:e1:d9:e3:7e:7c:3a:13:77:9d: 70:f2:a2:4f:d9:2d:78:54:9a:fb:50:4c:ea:04:3c:ea:31:0f: ac:88:94:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QjdFOTExMC8GA1UEBRMoQ0I4REI4RTFGMTdCQzc3MjM0NkREOUZGQkIyMDcyQ0ZB OEZEQTY1MjAeFw0yNDA2MDEwODQ3NDdaFw0yNDA2MDgwODQ3NDdaMBgxFjAUBgNV BAMTDTY2NWFlMDMzLWQxZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL5e12f0jZcmWvQg2U/X/ReL9QMEjO5BdMlIgU0BOnOQgl3otezM3uF4WVCPRU 2zfi1uAkHFZUCsAi/y900QSRg606+dYnF4EzWJIHa80R6v6KNTL9VQL7W+4sbK28 ITvQofpse5OLWzSFwfIh4Aj4KjjDqHp1+Fq3fOcF6NBAuFo6nTZxiQzqdaS1Uzez P7QrVGTUsalj4WfApmPC/x7glxkCDplA6wVFxuEo5Pn5Ujg8ASjNVYSO3A9FL3ZJ wIR42nKDtvHWKRGu4qz+iEbT0qVYe43XC459W3k/pf8zteD/Dme/AjpdX4NUoV2m yUmLJ0v655n2rizFl2ZhffiXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1JiNPEXx oiyAbD9NvnhpOd+eYdwwHwYDVR0jBBgwFoAUy4244fF7x3I0bdn/uyByz6j9plIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCN0U5L0UwQzQ2MTMwNkUy RTExRUU4NUQ5MkQzMkM0RjlBRTAyL3k0MjQ0ZkY3eDNJMGJkbl91eUJ5ejZqOXBs SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveTQyNDRmRjd4M0kwYmRuX3V5Qnl6Nmo5cGxJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC N0U5L0UwQzQ2MTMwNkUyRTExRUU4NUQ5MkQzMkM0RjlBRTAyL3k0MjQ0ZkY3eDNJ MGJkbl91eUJ5ejZqOXBsSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKaIhDvXfisqQFDaNT0rF2YNMcTOF+QNX4K7kPjBpGEb9sLjYGSlIT4x Ol8Z+nqxlgIjkmM9JhetDbaQE9QdUbSaLqnDPyagGJaWLmcK/zPQdTihv7a4/Zqq 9uJh3fs9C13zswzVSr5gdoghJhTPiWGymi85SBR1JbHwFJ/GyMn+EhLdh9Kxkk4U 50/HnkTn+2RmLepqftVnzXdIZCJlUvSUeqrIksRpGyKpVBRIIS6vonVQpYw9nU21 nUexvxXYbqP6C9QNk65NHHvt9tZBBnUkVWzRjzMachwnk6jz4zqpa+HZ4358OhN3 nXDyok/ZLXhUmvtQTOoEPOoxD6yIlHw= -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:32 2024 by rpki-client on console-fra.rpki-client.org