$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json) Hash identifier: YQGBCObjSgboin4gue3u/Tft1tmJ5ZGfTh8MqU8mUKE= Subject key identifier: 6C:BB:44:C2:3F:40:00:83:A4:39:5A:26:7C:BB:77:15:1E:9F:7B:DA Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Certificate serial: 069F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft Manifest number: 0690 Signing time: Thu 02 May 2024 23:31:22 +0000 Manifest this update: Thu 02 May 2024 23:31:21 +0000 Manifest next update: Thu 09 May 2024 23:31:21 +0000 Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: d8yPuJTuzSvNnCzceDL24jeMprb6F7p4oiGImKMEHAQ=) 2: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (hash: sQ4xQdkKUpU+0+qXrtQjpiuCOyP0QcObH62lq38LzWU=) 3: DEBA0696C12C11EEB6FEFB23C4F9AE02.roa (hash: GVpypGXyQ7kBr/6SfKOTfh1lIt3ZzFWGaH0+LRJhSk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1695 (0x69f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Validity Not Before: May 2 23:31:21 2024 GMT Not After : May 9 23:31:21 2024 GMT Subject: CN=6634224a-1cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:8f:2a:34:ac:bc:2c:79:13:d2:14:51:77: 3c:30:38:2b:0e:97:b9:da:33:21:49:75:e0:d1:a9: fd:03:7b:a2:cc:ab:4d:5f:1a:1b:93:5c:8a:f6:36: 13:be:93:32:bc:00:1c:c7:bb:46:45:89:5e:ea:58: 12:a2:1b:3e:b1:45:74:74:8c:14:35:ec:46:da:5e: c0:11:6c:9f:58:84:50:de:f5:de:51:4a:49:67:ae: 4c:c1:cc:0a:14:81:34:60:78:bc:86:14:c1:af:36: de:ce:19:9a:71:69:7b:2b:d5:01:ef:d1:fa:6c:08: d9:c5:02:f6:56:b2:ab:3d:38:18:83:58:e8:62:57: a5:bc:d7:4e:3c:14:3a:9d:99:1e:bb:48:64:b0:96: 61:92:6c:d1:ed:b5:62:87:25:75:36:09:cd:e8:11: 83:83:46:5e:19:30:93:73:f7:64:47:83:91:47:a1: 2c:00:14:13:51:f0:1a:1b:3b:bb:12:94:07:48:7e: 11:ae:74:aa:ff:07:f7:ba:47:7c:e0:92:91:04:07: 89:f8:b0:08:98:a6:45:26:98:9d:58:aa:e0:10:a0: de:e9:f0:91:e2:42:4f:1a:38:9a:13:19:fc:1c:e8: b9:38:cf:26:70:fc:60:01:8b:b5:6f:be:30:7f:a8: a9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BB:44:C2:3F:40:00:83:A4:39:5A:26:7C:BB:77:15:1E:9F:7B:DA X509v3 Authority Key Identifier: keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:46:f6:ac:d9:f5:a9:ac:37:44:44:ac:89:85:d3:9a:35:a5: f8:e7:da:cc:e4:9e:85:de:fe:7a:84:af:a7:68:f0:3e:d7:e5: 85:49:a0:ca:16:a4:0a:43:5e:99:cb:88:08:31:35:11:c1:2a: 60:61:97:c7:d5:a1:2f:4c:0c:89:1e:2c:16:9a:fa:1d:18:0e: a6:b2:ae:f1:8f:27:d2:9f:be:a7:0c:64:0d:89:6b:bd:5d:34: d2:cd:67:78:c9:e0:04:30:24:01:5d:fb:ae:1f:d2:8b:39:1a: 38:c6:08:93:8e:3e:df:0e:cd:61:df:eb:dc:fd:d4:7b:cf:27: c9:b6:a6:f1:fb:d7:0c:6c:01:d8:ed:c8:15:92:d9:81:42:3e: 2f:36:e2:21:4f:ee:2c:6c:1d:03:68:ee:a0:0b:3f:c6:a0:92: 19:db:25:24:c6:ed:08:44:ec:8a:4c:9b:08:6b:21:49:6b:af: f5:5e:84:ea:ad:fc:ef:20:f5:4f:55:9a:bd:b0:a3:2f:ae:d2: c4:b2:06:88:91:d1:fd:2f:c9:11:6e:7c:0f:af:81:93:39:b9: c9:75:4b:80:29:20:64:0e:5f:ff:40:d1:bb:00:22:bb:09:4e: e5:8b:69:d4:8c:73:42:38:00:6e:9d:c8:69:83:b4:f6:22:ff: 35:dd:bf:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE Njk5QjRGNDcwHhcNMjQwNTAyMjMzMTIxWhcNMjQwNTA5MjMzMTIxWjAYMRYwFAYD VQQDEw02NjM0MjI0YS0xY2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvuPKjSsvCx5E9IUUXc8MDgrDpe52jMhSXXg0an9A3uizKtNXxobk1yK9jYT vpMyvAAcx7tGRYle6lgSohs+sUV0dIwUNexG2l7AEWyfWIRQ3vXeUUpJZ65MwcwK FIE0YHi8hhTBrzbezhmacWl7K9UB79H6bAjZxQL2VrKrPTgYg1joYlelvNdOPBQ6 nZkeu0hksJZhkmzR7bVihyV1NgnN6BGDg0ZeGTCTc/dkR4ORR6EsABQTUfAaGzu7 EpQHSH4RrnSq/wf3ukd84JKRBAeJ+LAImKZFJpidWKrgEKDe6fCR4kJPGjiaExn8 HOi5OM8mcPxgAYu1b74wf6ip0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGy7RMI/ QACDpDlaJny7dxUen3vaMB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1 QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM4Ri9DNzU5MEJENjI1QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6 NkJYd25kLWhrWlBXbWJUMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByRvas2fWprDdERKyJhdOaNaX459rM5J6F3v56hK+naPA+1+WFSaDK FqQKQ16Zy4gIMTURwSpgYZfH1aEvTAyJHiwWmvodGA6msq7xjyfSn76nDGQNiWu9 XTTSzWd4yeAEMCQBXfuuH9KLORo4xgiTjj7fDs1h3+vc/dR7zyfJtqbx+9cMbAHY 7cgVktmBQj4vNuIhT+4sbB0DaO6gCz/GoJIZ2yUkxu0IROyKTJsIayFJa6/1XoTq rfzvIPVPVZq9sKMvrtLEsgaIkdH9L8kRbnwPr4GTObnJdUuAKSBkDl//QNG7ACK7 CU7li2nUjHNCOABunchpg7T2Iv813b+O -----END CERTIFICATE-----Generated at Fri May 3 00:28:36 2024 by rpki-client on console-fra.rpki-client.org