$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft File: Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json) Hash identifier: 1+tZ8g+yu2XoAcueUDvYOef/ybHeqI33C8OVTexx+nk= Subject key identifier: 65:DF:7D:10:67:DC:11:E9:E4:8C:72:83:59:7A:86:38:D8:E9:20:0F Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft Manifest number: 62 Signing time: Wed 15 May 2024 07:47:22 +0000 Manifest this update: Wed 15 May 2024 07:47:22 +0000 Manifest next update: Wed 22 May 2024 07:47:22 +0000 Files and hashes: 1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: 6mSp1ZtaqE3Q7Zp6t/7Dcu0CXPNzh1np+gnU22TC99E=) 2: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: SFK4LkswKgJKpjLsUlOU6N9BFaXKfbDMklrr+fOsUEY=) 3: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: DDDWCUvLLUaDHYW+Z+jfGD9hV7RB8mJKRDsZIAW3tkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Validity Not Before: May 15 07:47:22 2024 GMT Not After : May 22 07:47:22 2024 GMT Subject: CN=6644688a-fccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cb:bd:59:b1:c9:5c:eb:a6:48:b3:5e:2d:6e: e7:c5:56:c5:fb:b2:99:c2:55:68:39:04:49:fb:db: 50:49:ba:92:4b:f3:a5:a3:cd:11:24:b3:22:41:62: ae:dc:c0:35:71:d3:43:79:6d:4e:7d:70:eb:be:9d: 0a:a8:af:f7:42:98:76:a9:73:9a:2d:7b:d0:3f:9d: c2:a2:87:28:2c:33:ed:c1:c4:f0:4d:62:6d:1d:52: 85:58:d4:64:9a:12:9d:d8:77:d3:6f:9c:5d:7a:d3: fd:e4:a0:a7:b9:59:af:6b:ce:df:cb:1d:d2:74:01: ca:ba:0c:44:27:3a:1f:2e:a5:81:81:55:c4:27:7b: dd:24:dd:1e:42:6d:59:37:f2:74:a0:22:03:e9:83: 10:76:19:00:a9:f3:9a:c5:13:f9:d8:55:12:95:3b: 21:47:1a:c8:ff:9c:a1:4c:31:96:51:3d:87:06:61: 2e:75:0d:7d:a5:9f:e9:d7:f5:1d:79:cf:43:fb:25: 22:5f:41:d9:83:30:1b:91:14:d5:ad:b1:93:a2:c8: 9e:fb:ab:2b:33:77:68:c6:d2:8f:37:59:62:77:40: 19:90:45:58:9d:97:0e:07:ad:fa:10:99:bb:69:f2: e9:9b:b6:22:4c:03:26:d7:e5:e0:5c:61:e3:5e:43: ac:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DF:7D:10:67:DC:11:E9:E4:8C:72:83:59:7A:86:38:D8:E9:20:0F X509v3 Authority Key Identifier: keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:2f:0a:ed:1c:12:7c:a3:5f:77:e1:e3:ee:77:29:1b:70:aa: c4:0a:10:cd:b8:6e:ff:54:61:ae:7c:11:8e:a9:aa:94:bf:38: 0c:ad:90:2a:e9:69:84:18:54:5c:9b:89:4b:0d:e3:23:52:76: ed:01:f6:20:66:27:f7:c6:89:f8:69:e7:54:84:86:2b:01:77: da:a3:f9:6b:75:a7:0e:e4:47:4e:a2:ce:b9:fc:c6:5f:02:dc: 4d:32:a7:bc:f5:df:eb:cf:f8:f7:70:ff:84:40:7d:fa:5b:ff: 25:ca:d2:67:cf:15:b7:5b:ef:b2:88:c1:84:23:d8:08:e1:00: a8:4a:25:62:cc:ae:d5:c6:d8:36:35:f9:b8:c6:6b:49:00:de: 6b:f9:dc:72:2a:88:b1:ff:de:77:23:dc:f6:5d:7f:2c:b7:40: ab:1d:08:60:3b:c1:e7:04:7a:1f:f8:4e:fe:b9:30:b4:37:07: 2b:80:eb:78:42:93:73:cd:26:57:a8:86:7b:75:82:77:c8:70: 29:37:1e:8a:a5:37:1f:2a:07:30:9d:b0:c4:75:c7:81:7f:3f: 3f:b5:34:7a:6a:cd:20:e5:2e:41:4c:a1:8c:f2:81:69:7b:85: 4c:7d:30:f3:ca:5a:30:e8:f9:c6:b5:2b:af:8a:8f:1b:c8:35: 60:7e:30:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MjUwQzExMC8GA1UEBRMoNjNERTZGNzFGMThEOUE5MzVBOUJFMUNDQkFGNUJGRUVD MEE4NzZGODAeFw0yNDA1MTUwNzQ3MjJaFw0yNDA1MjIwNzQ3MjJaMBgxFjAUBgNV BAMTDTY2NDQ2ODhhLWZjY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChy71Zsclc66ZIs14tbufFVsX7spnCVWg5BEn721BJupJL86WjzREksyJBYq7c wDVx00N5bU59cOu+nQqor/dCmHapc5ote9A/ncKihygsM+3BxPBNYm0dUoVY1GSa Ep3Yd9NvnF160/3koKe5Wa9rzt/LHdJ0Acq6DEQnOh8upYGBVcQne90k3R5CbVk3 8nSgIgPpgxB2GQCp85rFE/nYVRKVOyFHGsj/nKFMMZZRPYcGYS51DX2ln+nX9R15 z0P7JSJfQdmDMBuRFNWtsZOiyJ77qyszd2jG0o83WWJ3QBmQRVidlw4HrfoQmbtp 8umbtiJMAybX5eBcYeNeQ6w1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZd99EGfc EenkjHKDWXqGONjpIA8wHwYDVR0jBBgwFoAUY95vcfGNmpNam+HMuvW/7sCodvgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyNTBDLzgzRUVDQzRBODM3 QjExRUU4NUM0RjEwRkM0RjlBRTAyL1k5NXZjZkdObXBOYW0tSE11dldfN3NDb2R2 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTk1dmNmR05tcE5hbS1ITXV2V183c0NvZHZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy NTBDLzgzRUVDQzRBODM3QjExRUU4NUM0RjEwRkM0RjlBRTAyL1k5NXZjZkdObXBO YW0tSE11dldfN3NDb2R2Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGEvCu0cEnyjX3fh4+53KRtwqsQKEM24bv9UYa58EY6pqpS/OAytkCrp aYQYVFybiUsN4yNSdu0B9iBmJ/fGifhp51SEhisBd9qj+Wt1pw7kR06izrn8xl8C 3E0yp7z13+vP+Pdw/4RAffpb/yXK0mfPFbdb77KIwYQj2AjhAKhKJWLMrtXG2DY1 +bjGa0kA3mv53HIqiLH/3ncj3PZdfyy3QKsdCGA7wecEeh/4Tv65MLQ3ByuA63hC k3PNJleohnt1gnfIcCk3HoqlNx8qBzCdsMR1x4F/Pz+1NHpqzSDlLkFMoYzygWl7 hUx9MPPKWjDo+ca1K6+KjxvINWB+MCE= -----END CERTIFICATE-----Generated at Wed May 15 09:04:07 2024 by rpki-client on console-ams.rpki-client.org