$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft File: yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft (raw, json) Hash identifier: w0cI+bNSAbCPBFIrS3dehPAWJDaSvkexgTuf+TXYLrs= Subject key identifier: 75:0E:9B:45:2C:08:E2:B8:FD:69:99:7D:9B:59:11:07:A1:6F:5C:76 Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D Certificate issuer: /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D Certificate serial: 0468 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft Manifest number: 0464 Signing time: Sat 01 Jun 2024 02:47:45 +0000 Manifest this update: Sat 01 Jun 2024 02:47:44 +0000 Manifest next update: Sat 08 Jun 2024 02:47:44 +0000 Files and hashes: 1: yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl (hash: Q9kRTDYn9jhQc0CraNl1ZCta3e6N9sBBplmJLH34hdI=) 2: F1C77A3C73E711ECA415F87FC4F9AE02.roa (hash: icMuekPT+somvjnbTIYNPF5q9vOtLMQKPg3cRa6WorY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1128 (0x468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D Validity Not Before: Jun 1 02:47:44 2024 GMT Not After : Jun 8 02:47:44 2024 GMT Subject: CN=665a8bd0-4bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:55:18:47:b9:23:44:ac:61:4b:83:70:3f:48: e9:55:ac:6e:5f:56:0c:be:97:99:d8:79:77:74:34: f4:9e:d0:52:8d:ad:f9:13:5e:21:35:06:33:ea:ce: 6e:2a:5a:5d:e7:fe:ac:92:54:d9:76:9b:da:ab:9a: a5:22:ad:38:f2:36:e0:54:02:1d:22:f2:82:dc:0a: d6:ca:44:e6:7c:1f:9f:d2:cc:f8:56:6a:20:15:b0: a6:c9:db:29:98:cc:c9:65:7b:92:ec:96:f6:33:c4: 54:c5:ba:a1:4b:a3:a5:ae:25:8f:0d:9a:18:bb:7a: e4:47:a8:c1:33:13:31:c3:87:c1:2a:7e:d1:51:6b: 23:17:1a:57:f3:df:01:4a:e2:a1:e1:cc:99:2a:7a: 47:8d:27:84:c3:a1:00:24:51:3f:7e:86:16:88:54: 76:92:2f:37:55:78:fc:4d:31:94:b0:30:f6:a6:9c: cc:55:0c:dc:01:35:7e:90:69:58:16:ea:0a:86:02: 1d:b9:c4:37:97:9c:0c:12:79:1d:8d:59:6e:c9:a7: 7f:5d:03:3f:b5:44:44:a9:bf:da:63:eb:8c:e1:74: 3b:8f:f6:d1:97:7b:01:74:a5:91:b9:06:8e:43:88: bb:da:e4:fc:bd:ad:e0:83:1b:af:f5:1a:d0:b4:95: 06:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0E:9B:45:2C:08:E2:B8:FD:69:99:7D:9B:59:11:07:A1:6F:5C:76 X509v3 Authority Key Identifier: keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f9:7b:5e:98:7f:cb:a8:92:f4:c4:fe:1a:32:5d:45:53:1c: c4:d1:cc:8d:8c:45:5a:ac:58:a3:c5:50:ce:30:12:9e:a1:55: bc:4b:19:d4:4f:a4:b2:12:d7:a1:76:33:fb:58:4f:dd:de:ea: de:bd:0d:a1:62:e0:f9:36:c8:25:2b:af:d2:e5:5f:1e:b4:51: a5:e1:98:7e:2e:f0:9f:68:fe:b4:30:97:b2:16:95:1a:dd:c3: 16:73:f5:45:5f:ad:93:bc:e7:5f:97:be:49:42:bf:c4:91:a8: 22:66:ea:4c:65:ea:0c:33:1a:84:1b:9f:35:9b:48:8d:4f:3f: 24:e1:88:ce:42:b3:0e:13:07:18:63:a6:63:5b:f2:e1:0a:e5: a6:cf:cc:a9:72:97:f2:80:20:97:2a:e1:6b:fa:0f:6b:25:c3: cb:7e:96:4d:02:1e:10:df:49:dd:b1:03:36:1e:0f:70:89:24: e7:61:36:07:8a:9a:e5:b2:29:cf:83:75:16:47:ba:fc:7e:f5: d7:09:e0:72:81:9a:f1:c4:be:f5:52:a1:96:b3:8d:3b:1e:0c: 03:a1:74:7b:8b:79:42:c2:02:6b:23:33:a9:8b:40:93:96:21: 2c:48:2d:cb:db:cb:98:31:17:dc:59:63:43:6c:1b:b4:51:0d: 9e:0b:89:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUzNTIxMTAvBgNVBAUTKENBQTZFQjk5QjNGRTBFRkI2NUQzOEYxNUIyQUFFNERD MzlEQUIzMUQwHhcNMjQwNjAxMDI0NzQ0WhcNMjQwNjA4MDI0NzQ0WjAYMRYwFAYD VQQDEw02NjVhOGJkMC00YmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FUYR7kjRKxhS4NwP0jpVaxuX1YMvpeZ2Hl3dDT0ntBSja35E14hNQYz6s5u Klpd5/6sklTZdpvaq5qlIq048jbgVAIdIvKC3ArWykTmfB+f0sz4VmogFbCmydsp mMzJZXuS7Jb2M8RUxbqhS6OlriWPDZoYu3rkR6jBMxMxw4fBKn7RUWsjFxpX898B SuKh4cyZKnpHjSeEw6EAJFE/foYWiFR2ki83VXj8TTGUsDD2ppzMVQzcATV+kGlY FuoKhgIducQ3l5wMEnkdjVluyad/XQM/tUREqb/aY+uM4XQ7j/bRl3sBdKWRuQaO Q4i72uT8va3ggxuv9RrQtJUGjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUOm0Us COK4/WmZfZtZEQehb1x2MB8GA1UdIwQYMBaAFMqm65mz/g77ZdOPFbKq5Nw52rMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTM1Mi9DOEUyMkU4QTAx MTYxMUVDOUNDREU3MjJDNEY5QUUwMi95cWJybWJQLUR2dGwwNDhWc3FyazNEbmFz eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxYnJtYlAtRHZ0bDA0OFZzcXJrM0RuYXN4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTM1Mi9DOEUyMkU4QTAxMTYxMUVDOUNDREU3MjJDNEY5QUUwMi95cWJybWJQLUR2 dGwwNDhWc3FyazNEbmFzeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq+XtemH/LqJL0xP4aMl1FUxzE0cyNjEVarFijxVDOMBKeoVW8SxnU T6SyEtehdjP7WE/d3urevQ2hYuD5NsglK6/S5V8etFGl4Zh+LvCfaP60MJeyFpUa 3cMWc/VFX62TvOdfl75JQr/EkagiZupMZeoMMxqEG581m0iNTz8k4YjOQrMOEwcY Y6ZjW/LhCuWmz8ypcpfygCCXKuFr+g9rJcPLfpZNAh4Q30ndsQM2Hg9wiSTnYTYH iprlsinPg3UWR7r8fvXXCeBygZrxxL71UqGWs407HgwDoXR7i3lCwgJrIzOpi0CT liEsSC3L28uYMRfcWWNDbBu0UQ2eC4kf -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:32 2024 by rpki-client on console-ams.rpki-client.org