$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json) Hash identifier: DSv8gRiVUeqHsclpWurP7tgCvkBLKsmuJU1F2Cy+tm4= Subject key identifier: F5:8D:04:BF:82:85:D8:68:F8:85:32:9E:BA:43:4B:13:45:75:5A:FE Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Certificate serial: 33C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft Manifest number: 33C6 Signing time: Sat 18 May 2024 15:14:52 +0000 Manifest this update: Sat 18 May 2024 15:14:51 +0000 Manifest next update: Sat 25 May 2024 15:14:51 +0000 Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: G+0+nj6xCpQAirR0RD6e12QbrdU3Mf6q/IAv1q+IoX0=) 2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: p0J4iQWOSRUXxYwANu5RD+0254OeMFaT1rF1HZWFpI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13257 (0x33c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Validity Not Before: May 18 15:14:51 2024 GMT Not After : May 25 15:14:51 2024 GMT Subject: CN=6648c5eb-7e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:a4:63:02:0f:30:e6:48:f9:d6:70:48:3d: f4:46:8f:f6:2a:9c:03:11:9c:d0:a1:c4:ab:4f:18: ee:3f:ae:6e:31:5c:e0:3d:38:bf:67:dc:b5:0e:c0: be:61:cf:f2:8a:99:01:ef:0e:07:d6:99:87:a4:b0: 07:fc:53:5c:ca:2c:50:23:28:b1:2d:55:ca:5a:f6: 19:b8:c7:83:9a:b0:71:24:5b:3f:ef:39:f5:0e:98: 10:0e:e6:f1:d8:1e:86:4e:6f:a0:71:51:9e:1f:78: 6b:8d:60:59:13:fc:1e:6b:aa:54:ed:38:be:0e:30: 70:46:3e:80:ea:a6:0b:12:a9:70:77:0b:bc:bd:05: f0:a2:78:22:b8:34:fd:b6:ea:26:01:40:20:9f:3b: 87:2e:eb:23:3d:92:f1:59:23:83:8e:e5:6c:07:1d: 76:88:8d:1c:1f:31:78:2b:9d:0b:ec:bb:2c:8f:ed: 6f:82:d1:a0:7b:23:c3:77:b5:75:68:80:db:38:c3: 2a:3b:3b:91:02:fd:22:43:23:0a:54:e1:52:06:22: 94:93:94:4f:4a:04:aa:00:67:7d:d0:a8:ed:4b:d6: 5c:bf:ba:74:2e:25:f6:3b:78:19:e5:da:ec:12:e9: 46:21:2e:32:70:30:0e:79:1b:aa:20:a3:8a:a3:4f: 17:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8D:04:BF:82:85:D8:68:F8:85:32:9E:BA:43:4B:13:45:75:5A:FE X509v3 Authority Key Identifier: keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:72:41:90:a0:55:bf:cc:b9:db:65:72:c2:fe:45:36:06:4d: 4b:90:3f:59:58:9c:69:80:0f:9b:82:c3:b8:88:89:31:d8:90: f5:ea:68:a5:70:51:c6:ad:4b:b6:36:61:61:ce:10:55:b3:be: 46:d7:18:1c:2c:05:57:aa:5d:21:dd:e5:4c:f8:d3:fb:51:a9: fe:96:b0:22:27:fa:17:23:f6:3e:0c:8d:aa:aa:0b:b2:60:6c: d2:07:0d:b4:4c:af:67:36:c3:a4:9f:18:b8:de:ce:a0:59:97: 95:3a:0a:36:7c:c5:7f:c2:5c:2e:58:8b:ba:cd:ec:66:13:cb: c8:f8:3f:d8:61:d1:de:b4:b0:62:9d:24:e5:e9:83:b1:0d:53: 3f:67:6a:0b:6e:e8:fe:1c:8f:84:76:c9:fb:82:9d:8c:48:f4: 21:c6:cf:e1:63:04:59:44:e9:2a:f4:23:c9:65:b0:e5:9b:7d: a2:0e:56:48:13:d1:3e:8c:61:0d:96:23:61:2e:41:69:a5:61: 8b:78:1f:e3:bd:cd:2a:f0:5f:1f:35:66:3a:e3:4d:58:08:b0: df:75:62:19:1c:fe:cf:a0:13:4c:77:fd:c1:49:79:3b:7d:c1: e0:b4:57:dd:42:0f:a6:b7:be:98:75:4f:24:d8:be:ad:d4:c9: 18:1e:c8:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKDYzMkM4REUwMjIwQjhDMTBCNDFGRjQ5QkZGOEI0MzJD RjhGRkQyNTQwHhcNMjQwNTE4MTUxNDUxWhcNMjQwNTI1MTUxNDUxWjAYMRYwFAYD VQQDEw02NjQ4YzVlYi03ZTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupukYwIPMOZI+dZwSD30Ro/2KpwDEZzQocSrTxjuP65uMVzgPTi/Z9y1DsC+ Yc/yipkB7w4H1pmHpLAH/FNcyixQIyixLVXKWvYZuMeDmrBxJFs/7zn1DpgQDubx 2B6GTm+gcVGeH3hrjWBZE/wea6pU7Ti+DjBwRj6A6qYLEqlwdwu8vQXwongiuDT9 tuomAUAgnzuHLusjPZLxWSODjuVsBx12iI0cHzF4K50L7Lssj+1vgtGgeyPDd7V1 aIDbOMMqOzuRAv0iQyMKVOFSBiKUk5RPSgSqAGd90KjtS9Zcv7p0LiX2O3gZ5drs EulGIS4ycDAOeRuqIKOKo08XcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWNBL+C hdho+IUynrpDSxNFdVr+MB8GA1UdIwQYMBaAFGMsjeAiC4wQtB/0m/+LQyz4/9JU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy80NDlCQTUwNjFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpCQzBIX1NiXzR0RExQal8w bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l5eU40Q0lMakJDMEhfU2JfNHRETFBqXzBsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy80NDlCQTUwNjFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpC QzBIX1NiXzR0RExQal8wbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6ckGQoFW/zLnbZXLC/kU2Bk1LkD9ZWJxpgA+bgsO4iIkx2JD16mil cFHGrUu2NmFhzhBVs75G1xgcLAVXql0h3eVM+NP7Uan+lrAiJ/oXI/Y+DI2qqguy YGzSBw20TK9nNsOknxi43s6gWZeVOgo2fMV/wlwuWIu6zexmE8vI+D/YYdHetLBi nSTl6YOxDVM/Z2oLbuj+HI+Edsn7gp2MSPQhxs/hYwRZROkq9CPJZbDlm32iDlZI E9E+jGENliNhLkFppWGLeB/jvc0q8F8fNWY6401YCLDfdWIZHP7PoBNMd/3BSXk7 fcHgtFfdQg+mt76YdU8k2L6t1MkYHsg1 -----END CERTIFICATE-----Generated at Sat May 18 15:58:27 2024 by rpki-client on console-ams.rpki-client.org