$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json) Hash identifier: J/bpnKQr6MjVpBPDIJ31slU66GjT4c7/niy08VSSlz0= Subject key identifier: D7:25:7A:2A:22:2F:8B:64:8A:4D:C3:7C:33:87:5A:A9:2E:B1:20:57 Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Certificate serial: 09A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft Manifest number: 0FC3 Signing time: Sat 18 May 2024 20:50:50 +0000 Manifest this update: Sat 18 May 2024 20:50:49 +0000 Manifest next update: Sat 25 May 2024 20:50:49 +0000 Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: BohEKSBskunQgH8B6IwKd41WsyG29AE2wz8ZhBNe5s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2466 (0x9a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Validity Not Before: May 18 20:50:49 2024 GMT Not After : May 25 20:50:49 2024 GMT Subject: CN=664914aa-9e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b3:9c:64:b8:cf:d8:6a:02:07:b6:40:b3:41: 93:98:c6:23:fd:6f:d4:f8:8d:9d:cb:32:bd:a4:1f: b3:d2:6c:e2:6c:2b:4a:80:09:69:22:80:96:c7:92: f7:4b:7d:76:63:81:7a:7d:35:ba:7e:58:df:65:f9: 9e:a0:9c:35:8a:ae:09:81:03:ea:cd:49:4a:0e:21: 55:09:49:96:24:1a:1f:f8:14:16:ff:f0:57:fc:4a: 86:da:57:d2:8c:fb:88:fc:22:80:50:46:5c:a3:fd: 73:05:06:a4:bf:a2:c6:c1:a6:8d:d8:25:bb:d2:70: 3b:a4:1f:57:ce:ef:16:97:6e:27:b7:5f:3a:f0:a3: 18:42:e5:d5:03:43:8c:5c:ad:dc:b6:3b:dc:a7:b2: 6b:76:4d:6c:dc:ac:9e:eb:98:5e:45:5f:b2:0e:18: 08:8c:75:80:61:33:dd:cf:e2:35:97:cd:d8:74:c2: d8:63:a0:61:af:f8:8d:8f:7f:5d:53:ad:83:44:b7: 36:bc:36:3d:08:ae:4d:82:24:72:59:82:5d:17:c0: 5b:96:d7:36:ea:d7:32:b8:cf:7e:82:9d:c7:a4:44: 24:49:14:ae:65:aa:ad:3c:1f:94:3a:b5:4a:5c:0a: ce:cc:66:f8:2b:1a:e8:66:0b:4e:94:14:6a:64:42: c9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:25:7A:2A:22:2F:8B:64:8A:4D:C3:7C:33:87:5A:A9:2E:B1:20:57 X509v3 Authority Key Identifier: keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:83:56:ef:ac:90:ed:08:39:db:bf:35:60:67:20:17:fa:9f: d2:8a:22:62:da:14:51:5f:3f:c9:bc:43:d5:65:f7:c3:0e:79: 58:a0:9e:30:92:ad:9f:d4:b0:42:34:35:ef:43:30:f3:9f:63: d1:c9:39:c4:68:19:88:b6:e6:3c:bf:ec:0d:26:e4:c1:c3:ce: 41:3a:7a:e8:bd:ec:27:31:54:fc:50:c3:97:8a:14:20:bf:f0: 78:ac:05:46:49:4e:b4:da:f3:5f:c6:b8:60:a3:51:53:87:d5: 0a:64:01:63:4e:9a:10:72:6b:46:70:13:62:c1:a7:11:c4:74: 01:9f:23:ec:25:ae:67:b3:7f:ee:ae:45:c7:45:3c:ef:72:70: e1:e1:95:f3:29:ad:a2:aa:c7:8f:35:23:18:09:6b:e0:91:92: b9:ab:7b:8d:10:38:3e:b5:d9:f1:19:67:e7:2b:dc:73:85:7f: ce:8e:6d:d5:5e:31:bc:4a:68:34:65:6a:eb:4b:94:bb:e5:2d: d3:9c:b4:42:de:67:ad:cf:2f:a2:19:a0:22:0b:d2:0f:50:07: a0:a0:e8:a1:80:9d:44:3b:40:55:bd:fe:5a:15:5d:65:74:87: 28:8b:c5:cc:e2:6d:45:b5:47:a5:ed:0e:34:cb:e6:21:e5:b3: bb:f3:5c:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz RTRDRjM2NDQwHhcNMjQwNTE4MjA1MDQ5WhcNMjQwNTI1MjA1MDQ5WjAYMRYwFAYD VQQDEw02NjQ5MTRhYS05ZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLOcZLjP2GoCB7ZAs0GTmMYj/W/U+I2dyzK9pB+z0mzibCtKgAlpIoCWx5L3 S312Y4F6fTW6fljfZfmeoJw1iq4JgQPqzUlKDiFVCUmWJBof+BQW//BX/EqG2lfS jPuI/CKAUEZco/1zBQakv6LGwaaN2CW70nA7pB9Xzu8Wl24nt1868KMYQuXVA0OM XK3ctjvcp7Jrdk1s3Kye65heRV+yDhgIjHWAYTPdz+I1l83YdMLYY6Bhr/iNj39d U62DRLc2vDY9CK5NgiRyWYJdF8Bbltc26tcyuM9+gp3HpEQkSRSuZaqtPB+UOrVK XArOzGb4KxroZgtOlBRqZELJCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcleioi L4tkik3DfDOHWqkusSBXMB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIg1bvrJDtCDnbvzVgZyAX+p/SiiJi2hRRXz/JvEPVZffDDnlYoJ4w kq2f1LBCNDXvQzDzn2PRyTnEaBmItuY8v+wNJuTBw85BOnrovewnMVT8UMOXihQg v/B4rAVGSU602vNfxrhgo1FTh9UKZAFjTpoQcmtGcBNiwacRxHQBnyPsJa5ns3/u rkXHRTzvcnDh4ZXzKa2iqsePNSMYCWvgkZK5q3uNEDg+tdnxGWfnK9xzhX/Ojm3V XjG8Smg0ZWrrS5S75S3TnLRC3metzy+iGaAiC9IPUAegoOihgJ1EO0BVvf5aFV1l dIcoi8XM4m1FtUel7Q40y+Yh5bO781yK -----END CERTIFICATE-----Generated at Sat May 18 21:31:32 2024 by rpki-client on console-ams.rpki-client.org