$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft File: jyvUwSY28AWbQI0HFq8yyPVAaaU.mft (raw, json) Hash identifier: yTgC6LtcDBPWKE6UItVnnDxCkxdNKEfa+t705f/l8H0= Subject key identifier: 7E:96:E0:A1:5F:01:FD:3E:16:A3:10:88:57:69:4C:D5:97:48:0C:81 Authority key identifier: 8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 Certificate issuer: /CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Certificate serial: 03EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft Manifest number: 03E5 Signing time: Sat 27 Apr 2024 02:13:41 +0000 Manifest this update: Sat 27 Apr 2024 02:13:40 +0000 Manifest next update: Sat 04 May 2024 02:13:40 +0000 Files and hashes: 1: jyvUwSY28AWbQI0HFq8yyPVAaaU.crl (hash: GfBtYxZYx/6+VdgSsMeWTyMIgNdjYrt5OrtLJ+q0I8o=) 2: EDB1F68E3C8811EC889B9D78C4F9AE02.roa (hash: M28GSpsob0GcZZ2QTl/qwtN101CbqZ2q8yG6EV5VT+A=) 3: 8BE9B1A03C8B11EC8947D982C4F9AE02.roa (hash: FoYRsCuS7R3h5SKIzMxx0ziFPmPriW5U+D3CqE4wpEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1006 (0x3ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Validity Not Before: Apr 27 02:13:40 2024 GMT Not After : May 4 02:13:40 2024 GMT Subject: CN=662c5f54-5f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:34:c0:fa:df:30:bb:5c:ed:19:28:b3:8e:6c: b6:e0:a3:a2:f9:28:84:24:55:8c:f8:f1:42:59:ad: c2:11:b8:44:5e:de:06:c0:a8:f3:29:b0:60:97:07: 88:e7:76:28:41:59:c5:9b:12:2e:48:bc:63:e2:e0: 92:a9:5a:23:4d:65:67:23:f5:58:52:48:56:42:b3: 03:94:2f:98:9b:69:00:bd:15:ac:4a:77:f6:fd:47: 68:f3:aa:5d:03:47:23:6a:16:a0:84:6c:65:51:8b: c0:5a:9e:e5:85:1c:78:5f:9b:69:a6:de:c5:d9:74: 6b:45:38:73:c2:b5:0f:30:4b:43:88:f4:8d:8c:8d: 99:c0:16:1a:62:db:60:0e:4d:9a:3d:8d:c9:a0:c1: f8:cf:b0:94:62:8f:d6:02:c3:0b:1b:e6:05:61:63: d9:89:77:0b:56:91:1e:bd:75:79:41:44:35:1a:57: 22:05:64:6d:b3:4c:c1:25:23:23:57:5a:3b:78:22: 9e:d9:8c:b5:8d:45:ae:4e:8f:2d:62:24:9c:9e:05: a0:20:0a:cf:e9:a7:f0:af:c2:91:11:07:a7:37:46: 81:a2:80:d8:1b:ea:fd:b6:61:74:69:60:97:cf:e4: 28:71:28:68:97:e0:df:42:c3:71:41:6d:b4:b4:a6: ce:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:96:E0:A1:5F:01:FD:3E:16:A3:10:88:57:69:4C:D5:97:48:0C:81 X509v3 Authority Key Identifier: keyid:8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9c:c3:11:b8:92:94:95:85:10:7b:0e:e2:43:4b:64:a3:0f: a6:31:d7:6d:65:7d:33:32:93:3c:e7:0c:1d:8a:5d:f3:bf:02: 29:d0:e2:6e:d5:bd:10:28:10:9b:96:38:3a:09:3b:5d:b5:9c: fe:9a:e5:4f:32:6f:29:08:30:b5:62:e2:89:aa:50:48:be:79: b1:d9:94:12:fd:3f:92:8b:22:51:36:ae:12:d3:6c:de:f7:47: 77:82:80:c7:78:bb:4c:6e:2c:a6:15:6b:68:ec:a5:49:dd:54: 76:c6:ea:b2:0d:2c:2d:ed:c3:3d:40:5b:f2:00:b1:1c:cc:f5: 62:e4:cb:df:c4:78:fc:c9:6a:f7:68:66:6e:34:d7:39:e7:97: 35:86:fc:8a:2b:64:64:4a:e1:6e:f9:fc:45:d9:ad:5e:73:5b: 91:d7:0f:e7:a4:67:b6:ac:fa:c5:1a:13:27:ea:cf:ed:7a:cf: 2c:e0:c3:e1:e0:38:70:99:52:00:ac:d3:da:f2:d9:2a:13:c2: e5:9c:22:4e:bb:f0:3b:c6:d3:57:73:b1:e2:70:c8:99:86:38: 6c:94:c6:a3:42:5e:28:4c:fc:d6:8f:58:70:91:54:ea:b3:bb: 6b:46:b3:dd:c7:be:fb:e9:51:9b:a6:f2:0b:24:ee:b5:80:49: be:98:db:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDhGMkJENEMxMjYzNkYwMDU5QjQwOEQwNzE2QUYzMkM4 RjU0MDY5QTUwHhcNMjQwNDI3MDIxMzQwWhcNMjQwNTA0MDIxMzQwWjAYMRYwFAYD VQQDEw02NjJjNWY1NC01ZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTTA+t8wu1ztGSizjmy24KOi+SiEJFWM+PFCWa3CEbhEXt4GwKjzKbBglweI 53YoQVnFmxIuSLxj4uCSqVojTWVnI/VYUkhWQrMDlC+Ym2kAvRWsSnf2/Udo86pd A0cjahaghGxlUYvAWp7lhRx4X5tppt7F2XRrRThzwrUPMEtDiPSNjI2ZwBYaYttg Dk2aPY3JoMH4z7CUYo/WAsMLG+YFYWPZiXcLVpEevXV5QUQ1GlciBWRts0zBJSMj V1o7eCKe2Yy1jUWuTo8tYiScngWgIArP6afwr8KREQenN0aBooDYG+r9tmF0aWCX z+QocShol+DfQsNxQW20tKbOvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6W4KFf Af0+FqMQiFdpTNWXSAyBMB8GA1UdIwQYMBaAFI8r1MEmNvAFm0CNBxavMsj1QGml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS80ODAxN0QzODMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhBV2JRSTBIRnE4eXlQVkFh YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dlV3U1kyOEFXYlFJMEhGcTh5eVBWQWFhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS80ODAxN0QzODMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhB V2JRSTBIRnE4eXlQVkFhYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNnMMRuJKUlYUQew7iQ0tkow+mMddtZX0zMpM85wwdil3zvwIp0OJu 1b0QKBCbljg6CTtdtZz+muVPMm8pCDC1YuKJqlBIvnmx2ZQS/T+SiyJRNq4S02ze 90d3goDHeLtMbiymFWto7KVJ3VR2xuqyDSwt7cM9QFvyALEczPVi5MvfxHj8yWr3 aGZuNNc555c1hvyKK2RkSuFu+fxF2a1ec1uR1w/npGe2rPrFGhMn6s/tes8s4MPh 4DhwmVIArNPa8tkqE8LlnCJOu/A7xtNXc7HicMiZhjhslMajQl4oTPzWj1hwkVTq s7trRrPdx7776VGbpvILJO61gEm+mNv3 -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:31 2024 by rpki-client on console-ams.rpki-client.org