$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft File: ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft (raw, json) Hash identifier: Xn62vANDqVl4EHDKn3qgaWDSz2HHBaiMR2I4wuophXs= Subject key identifier: FD:03:BD:2C:EF:3C:B0:71:67:E6:EE:72:99:12:23:9E:80:E6:B7:83 Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8 Certificate issuer: /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8 Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft Manifest number: 07EF Signing time: Sat 04 May 2024 22:06:54 +0000 Manifest this update: Sat 04 May 2024 22:06:54 +0000 Manifest next update: Sat 11 May 2024 22:06:54 +0000 Files and hashes: 1: ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl (hash: 0jqLrctbI6VR/QWA/GldEDNHFd8togZuBv9C2KiSlfE=) 2: E43CFABEB67611ECACB17C42C4F9AE02.roa (hash: cB0H1hFji2yNj+KGqReoDT5kumWXJcghi6e/027wLzU=) 3: A778E94E598911EBA7B14777C4F9AE02.roa (hash: AdmVgbd6LJaEatudTHNpC7ywwy0SyN6LLzF9Rv24Ktw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8 Validity Not Before: May 4 22:06:54 2024 GMT Not After : May 11 22:06:54 2024 GMT Subject: CN=6636b17e-4423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a3:21:8a:15:20:bf:a8:20:1e:d7:c2:6a:2c: c7:51:96:eb:f8:45:bb:0f:38:cc:12:8f:d7:e6:f6: 08:52:22:77:5c:54:1d:db:b9:da:80:46:b9:43:fe: c1:ca:66:f1:9f:ad:b1:c8:0d:81:b6:ed:f8:e2:25: f3:da:41:e1:c3:be:d0:73:8b:16:57:6d:05:74:1e: f5:25:86:08:d7:ce:e7:55:7e:11:17:47:30:72:49: 32:04:d4:96:70:39:da:3a:b7:09:4b:1b:92:2c:39: 71:79:fe:29:a3:e9:ba:88:fa:1d:83:44:ab:82:a1: 64:36:e5:68:83:0b:78:42:d6:7f:67:98:dc:b1:f1: 32:f5:37:bb:f6:1a:46:a2:3f:77:c1:35:7c:6c:fa: a4:b1:4b:d8:67:f2:64:12:a0:2d:d1:78:cd:7a:33: e8:7d:0c:65:c0:e6:53:65:5d:d7:57:89:f5:ac:55: 97:31:d7:81:18:fe:db:09:c3:fd:83:b0:b8:76:ce: 2f:f4:5d:6e:74:4c:cc:4c:c8:94:df:1d:99:34:0b: 5c:99:17:36:e9:47:c2:4e:d4:b0:21:ca:7a:c9:a9: 55:0f:a9:37:65:a0:f8:84:48:e7:69:2c:b0:45:2c: b9:ad:cf:28:55:4e:bf:f6:64:3a:51:7b:b9:c4:aa: 3e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:03:BD:2C:EF:3C:B0:71:67:E6:EE:72:99:12:23:9E:80:E6:B7:83 X509v3 Authority Key Identifier: keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:54:ee:e0:6c:a3:ea:64:c6:c8:85:3c:ab:93:ef:1f:b5:a9: f4:42:94:9d:9d:b2:43:16:73:68:bc:9d:ff:c7:d3:79:a0:07: 06:49:b0:59:13:98:f4:18:44:f1:4c:61:b8:f0:7a:51:90:93: a1:bf:be:de:53:2a:b4:05:32:7c:15:18:fe:79:71:af:3d:f8: 30:99:d2:81:fa:2b:ca:c3:3e:4a:93:bd:dd:15:d0:61:e7:dc: e7:03:0d:dd:47:f0:ef:7e:fc:5c:ae:ab:7b:83:1e:ed:66:ef: b4:b4:83:73:6e:f0:36:1e:a4:5d:1a:df:c1:3a:46:ab:c9:28: 48:cd:16:49:87:a0:a5:17:37:98:86:10:d2:18:dc:a1:3f:18: 04:70:12:db:47:3a:9a:3a:ca:df:c4:ba:2a:a9:22:40:40:2a: da:54:1b:b1:ef:e0:c7:9d:a7:46:d5:55:f1:be:6d:de:b8:97: 7e:e2:50:30:8c:3e:63:1b:a5:44:5e:f4:d4:3d:59:3d:35:63: a5:bd:0c:d8:a5:e0:0b:86:bb:c9:4f:f9:f8:cd:67:68:f8:6c: 7e:ed:b9:f1:5d:91:16:68:23:b7:70:35:74:d8:90:54:96:dc: 2a:75:ae:fb:6a:34:b0:fb:da:25:7c:b7:c0:2b:4c:ce:3f:22: 07:8a:83:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2ODMxMTAvBgNVBAUTKENBN0M4NkJFMDBEQjQxNDUwM0VENUVFNkMwQUY5MjhG MzRDNUM3RDgwHhcNMjQwNTA0MjIwNjU0WhcNMjQwNTExMjIwNjU0WjAYMRYwFAYD VQQDEw02NjM2YjE3ZS00NDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaMhihUgv6ggHtfCaizHUZbr+EW7DzjMEo/X5vYIUiJ3XFQd27nagEa5Q/7B ymbxn62xyA2Btu344iXz2kHhw77Qc4sWV20FdB71JYYI187nVX4RF0cwckkyBNSW cDnaOrcJSxuSLDlxef4po+m6iPodg0SrgqFkNuVogwt4QtZ/Z5jcsfEy9Te79hpG oj93wTV8bPqksUvYZ/JkEqAt0XjNejPofQxlwOZTZV3XV4n1rFWXMdeBGP7bCcP9 g7C4ds4v9F1udEzMTMiU3x2ZNAtcmRc26UfCTtSwIcp6yalVD6k3ZaD4hEjnaSyw RSy5rc8oVU6/9mQ6UXu5xKo+XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0DvSzv PLBxZ+bucpkSI56A5reDMB8GA1UdIwQYMBaAFMp8hr4A20FFA+1e5sCvko80xcfY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY4My8zRjBCMzU2MkI3 OTMxMUVBQTRDNTRCMTRDNEY5QUUwMi95bnlHdmdEYlFVVUQ3Vjdtd0stU2p6VEZ4 OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lueUd2Z0RiUVVVRDdWN213Sy1TanpURng5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzY4My8zRjBCMzU2MkI3OTMxMUVBQTRDNTRCMTRDNEY5QUUwMi95bnlHdmdEYlFV VUQ3Vjdtd0stU2p6VEZ4OWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNVO7gbKPqZMbIhTyrk+8ftan0QpSdnbJDFnNovJ3/x9N5oAcGSbBZ E5j0GETxTGG48HpRkJOhv77eUyq0BTJ8FRj+eXGvPfgwmdKB+ivKwz5Kk73dFdBh 59znAw3dR/Dvfvxcrqt7gx7tZu+0tINzbvA2HqRdGt/BOkaryShIzRZJh6ClFzeY hhDSGNyhPxgEcBLbRzqaOsrfxLoqqSJAQCraVBux7+DHnadG1VXxvm3euJd+4lAw jD5jG6VEXvTUPVk9NWOlvQzYpeALhrvJT/n4zWdo+Gx+7bnxXZEWaCO3cDV02JBU ltwqda77ajSw+9olfLfAK0zOPyIHioNJ -----END CERTIFICATE-----Generated at Sun May 5 00:14:39 2024 by rpki-client on console-ams.rpki-client.org