$ rpki-client -vvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft File: vYeFXLaB4jNZv-waNPGZK2ceXu4.mft (raw, json) Hash identifier: MXwL+LVbmKKfa+I+QCHJ3Hf7Zjsvf7KJr/8pEj0XYdQ= Subject key identifier: B4:C9:FF:FE:B1:C5:8C:8A:CC:AD:BB:DC:9E:E4:57:D6:4F:33:50:4B Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE Certificate issuer: /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Certificate serial: 3434 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft Manifest number: 33FD Signing time: Sun 02 Jun 2024 16:21:23 +0000 Manifest this update: Sun 02 Jun 2024 16:21:22 +0000 Manifest next update: Sun 09 Jun 2024 16:21:22 +0000 Files and hashes: 1: vYeFXLaB4jNZv-waNPGZK2ceXu4.crl (hash: yWrKjp6fSexDVVVYMJDVr0iHetNuxKDQ7pWhP0c8jx0=) 2: 264A19E27A3D11E99D212E62C4F9AE02.roa (hash: 7bZz6cCgHTC9658y3NzIZERen9rMtVW0xNd6+sDCh7A=) 3: AF976FA2023311ED945EBE12C4F9AE02.roa (hash: N04kVTLDjl3tqLVRBpBLoHcWt+k6YZVwq9yF1azC5Dw=) 4: 9D03023EA86E11EDABA1FA2AC4F9AE02.roa (hash: 4uQI4pUXnWzfYHdgbJNZzm+RMbPwp0sMW3SM9UXkSAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 16:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13364 (0x3434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Validity Not Before: Jun 2 16:21:22 2024 GMT Not After : Jun 9 16:21:22 2024 GMT Subject: CN=665c9c02-a990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c0:24:2a:b1:ac:a1:de:5d:c2:be:e1:59:f8: 0d:fd:7d:59:6f:81:83:34:41:2b:47:73:7d:95:35: 59:be:47:5d:68:26:a0:b5:b0:1d:bb:5c:4f:65:10: c6:f0:ad:5e:fa:87:02:8b:7e:48:a3:89:f1:de:f3: 30:a1:0c:31:72:81:2c:d0:a8:89:bb:70:2e:d6:0e: 8f:1d:8f:63:9a:5e:78:44:16:dd:d1:3b:bd:c9:f0: 12:ec:1c:87:8e:c2:f3:1c:d2:b0:5a:26:f9:0c:c8: ac:34:ad:c4:30:74:fe:0c:ce:0e:c9:be:7c:10:90: d3:7d:5a:80:59:c4:1e:e0:65:97:79:ec:34:d0:59: be:85:37:4a:3a:fb:6f:c1:a5:26:ff:37:89:a6:4c: bc:f4:c0:12:19:6b:ff:f2:8d:13:19:10:da:49:e0: f5:da:7a:3c:da:db:b1:a7:74:f7:b9:5f:7a:e3:e0: f1:2a:de:2b:f2:84:89:88:ff:58:bc:7f:20:f7:84: 84:f6:d3:57:3b:95:96:68:e1:49:56:dc:32:32:e4: 46:ef:da:cb:b6:08:33:5b:43:08:07:22:2a:f5:8c: f4:9e:62:ae:09:1f:5a:1e:76:60:47:c5:b4:86:64: a9:63:35:74:c6:a2:8c:1f:fa:97:7b:e5:14:29:e1: 63:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C9:FF:FE:B1:C5:8C:8A:CC:AD:BB:DC:9E:E4:57:D6:4F:33:50:4B X509v3 Authority Key Identifier: keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c0:e1:bc:48:af:2d:88:b1:99:46:2c:87:9e:22:23:d3:62: ba:36:1f:54:d0:60:3b:03:8d:a7:7e:ce:f9:a4:0d:ac:72:fc: b5:5f:52:43:3c:b6:1e:04:5f:50:62:9f:43:fb:a9:9b:d0:ee: 7c:6f:e1:43:cd:3f:5c:43:21:68:39:5d:f2:ef:50:b2:05:40: ee:28:af:8e:e1:91:28:4f:32:38:41:b2:5c:2d:5f:2a:0f:92: 64:a1:7f:e9:cc:fb:63:d9:24:81:45:b1:76:2f:1f:ff:42:95: 0f:86:9c:c4:3f:c8:96:4c:0e:8e:84:21:e2:10:21:6b:ee:77: e3:83:af:59:04:3f:80:db:6c:67:1a:11:de:6a:24:40:0b:97: 9e:c6:7c:71:a7:88:f3:75:cf:03:70:87:4e:53:02:20:80:2b: 97:54:ca:1c:b7:e2:63:d1:9f:78:d2:59:cf:28:7d:35:bb:cc: 57:fb:09:a4:d9:f1:79:c6:a5:46:86:63:05:36:21:fb:d9:a7: 23:e1:49:b2:99:d5:99:18:41:94:b0:41:3e:71:7e:94:53:2d: b2:7e:cc:81:b5:ae:f6:32:f4:8e:85:79:ec:c4:c8:ad:2e:ec: f1:f6:65:7e:e7:44:b5:c9:67:0d:ba:cb:72:d4:30:c8:9f:d2: 53:5f:ab:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc3MjYxMTAvBgNVBAUTKEJEODc4NTVDQjY4MUUyMzM1OUJGRUMxQTM0RjE5OTJC NjcxRTVFRUUwHhcNMjQwNjAyMTYyMTIyWhcNMjQwNjA5MTYyMTIyWjAYMRYwFAYD VQQDEw02NjVjOWMwMi1hOTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMAkKrGsod5dwr7hWfgN/X1Zb4GDNEErR3N9lTVZvkddaCagtbAdu1xPZRDG 8K1e+ocCi35Io4nx3vMwoQwxcoEs0KiJu3Au1g6PHY9jml54RBbd0Tu9yfAS7ByH jsLzHNKwWib5DMisNK3EMHT+DM4Oyb58EJDTfVqAWcQe4GWXeew00Fm+hTdKOvtv waUm/zeJpky89MASGWv/8o0TGRDaSeD12no82tuxp3T3uV964+DxKt4r8oSJiP9Y vH8g94SE9tNXO5WWaOFJVtwyMuRG79rLtggzW0MIByIq9Yz0nmKuCR9aHnZgR8W0 hmSpYzV0xqKMH/qXe+UUKeFj8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTJ//6x xYyKzK273J7kV9ZPM1BLMB8GA1UdIwQYMBaAFL2HhVy2geIzWb/sGjTxmStnHl7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzcyNi9GOUZGRjZBQzFE QTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRqTlp2LXdhTlBHWksyY2VY dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZZUZYTGFCNGpOWnYtd2FOUEdaSzJjZVh1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzcyNi9GOUZGRjZBQzFEQTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRq Tlp2LXdhTlBHWksyY2VYdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBwOG8SK8tiLGZRiyHniIj02K6Nh9U0GA7A42nfs75pA2scvy1X1JD PLYeBF9QYp9D+6mb0O58b+FDzT9cQyFoOV3y71CyBUDuKK+O4ZEoTzI4QbJcLV8q D5JkoX/pzPtj2SSBRbF2Lx//QpUPhpzEP8iWTA6OhCHiECFr7nfjg69ZBD+A22xn GhHeaiRAC5eexnxxp4jzdc8DcIdOUwIggCuXVMoct+Jj0Z940lnPKH01u8xX+wmk 2fF5xqVGhmMFNiH72acj4UmymdWZGEGUsEE+cX6UUy2yfsyBta72MvSOhXnsxMit Luzx9mV+50S1yWcNusty1DDIn9JTX6sn -----END CERTIFICATE-----Generated at Sun Jun 2 18:46:14 2024 by rpki-client on console-ams.rpki-client.org