$ rpki-client -vvf rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft File: D60b00YYTHGSfILGHT-m1-Ry7p4.mft (raw, json) Hash identifier: puD6DcY/zKlpcH0GOe2g4bLkF5TX+68PkSPtt9FJ5iM= Subject key identifier: AB:DA:FA:8E:26:62:B8:DC:3B:6A:C6:A4:D8:04:C2:ED:78:37:6A:F8 Authority key identifier: 0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E Certificate issuer: /CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E Certificate serial: 0807 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft Manifest number: 0802 Signing time: Thu 02 May 2024 22:01:05 +0000 Manifest this update: Thu 02 May 2024 22:01:05 +0000 Manifest next update: Thu 09 May 2024 22:01:05 +0000 Files and hashes: 1: D60b00YYTHGSfILGHT-m1-Ry7p4.crl (hash: fT6b0ysKpxQuSFKmIJnY68VYdKIh8hrsCyGDcrjH3jQ=) 2: BED97520B1D911EA912C632EC4F9AE02.roa (hash: yZtfC9LSMoXTGmKuqHvmMWSYTC6XY4ts4luZ57LmnKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2055 (0x807) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E Validity Not Before: May 2 22:01:05 2024 GMT Not After : May 9 22:01:05 2024 GMT Subject: CN=66340d21-2020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:5c:ba:5a:32:3b:93:f0:49:17:af:22:a7: 50:e2:a4:b4:4e:26:a6:26:b6:92:d3:3d:6b:f4:36: 11:37:04:82:68:47:83:32:bd:e2:eb:4d:17:61:8c: 8d:1a:b6:d7:82:36:39:e8:e5:9d:18:7f:75:cc:9f: 39:93:93:4a:76:5e:74:30:55:2f:21:ec:7a:d7:ee: cc:f5:8d:dc:16:f6:45:af:67:ec:63:f2:c6:0a:ad: 0a:f2:c2:e7:14:1a:b2:2a:45:85:8f:f4:fa:d6:71: f7:81:e4:28:f7:13:d7:bc:52:7c:cb:d2:59:1a:7d: 73:74:ab:bf:9f:d2:36:56:67:52:04:f4:9e:8d:08: 9d:3f:e2:3e:da:fd:51:7a:f6:e3:c6:2a:f0:62:ee: 85:77:48:3c:7b:db:84:26:5f:ba:91:75:94:30:6f: 3e:a1:41:af:02:4a:74:3d:e7:90:01:ec:3c:c4:7a: b2:63:97:a9:51:48:40:07:64:42:3a:6a:4d:71:6b: ad:e9:ee:58:60:ce:7e:fb:21:80:ac:a6:07:a8:64: 51:c7:b2:08:f2:f1:3c:4c:dc:3c:e2:21:e1:f4:87: 7c:14:6d:d0:7c:52:5f:c8:8c:ee:96:5f:ed:c0:1a: 88:7e:2c:af:89:76:0c:cb:22:30:8a:0f:c6:25:1d: de:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:DA:FA:8E:26:62:B8:DC:3B:6A:C6:A4:D8:04:C2:ED:78:37:6A:F8 X509v3 Authority Key Identifier: keyid:0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:08:2e:78:db:20:99:b7:28:c6:d1:10:92:89:5a:58:75:21: a5:d8:d8:16:54:0b:e2:29:92:69:39:22:ed:38:42:4a:a7:c8: 66:9a:7a:23:4d:49:a9:92:55:dc:40:77:91:cd:4b:ff:88:44: 4e:dd:7d:77:7b:c6:fe:0b:36:47:01:50:af:b0:7a:2d:28:08: 05:7b:6c:18:7d:36:35:89:4d:f6:cd:9b:bb:ce:e3:70:47:72: 01:b3:3a:ce:b3:50:04:8d:77:75:3b:17:45:3a:3c:27:a0:73: 5d:c1:ee:9f:73:57:11:f1:15:46:3d:0e:b1:3c:1d:65:c8:3b: 0e:8c:2a:60:a3:7c:71:79:3f:95:77:1a:b3:11:27:67:a2:c1: 9b:a6:84:c9:f3:c3:47:e9:51:12:7d:df:89:2e:68:27:d5:de: eb:e3:0a:e4:30:58:d3:4b:d0:80:ca:90:f3:e4:90:ed:3d:9a: 92:7e:8e:20:84:f4:34:c2:f0:f0:e9:06:2c:4c:c0:81:d9:46: f3:83:8e:4a:6b:27:4f:d9:a4:6e:66:a5:10:45:0b:fb:7c:97: 7e:ed:7e:6f:38:d5:77:92:8f:ac:54:5b:b2:0d:54:85:cf:13: 97:94:20:df:9f:dd:bd:c1:1b:93:1d:7c:4c:ea:33:07:9f:7b: df:f0:dc:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0NTUxMTAvBgNVBAUTKDBGQUQxQkQzNDYxODRDNzE5MjdDODJDNjFEM0ZBNkQ3 RTQ3MkVFOUUwHhcNMjQwNTAyMjIwMTA1WhcNMjQwNTA5MjIwMTA1WjAYMRYwFAYD VQQDEw02NjM0MGQyMS0yMDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsdculoyO5PwSRevIqdQ4qS0TiamJraS0z1r9DYRNwSCaEeDMr3i600XYYyN GrbXgjY56OWdGH91zJ85k5NKdl50MFUvIex61+7M9Y3cFvZFr2fsY/LGCq0K8sLn FBqyKkWFj/T61nH3geQo9xPXvFJ8y9JZGn1zdKu/n9I2VmdSBPSejQidP+I+2v1R evbjxirwYu6Fd0g8e9uEJl+6kXWUMG8+oUGvAkp0PeeQAew8xHqyY5epUUhAB2RC OmpNcWut6e5YYM5++yGArKYHqGRRx7II8vE8TNw84iHh9Id8FG3QfFJfyIzull/t wBqIfiyviXYMyyIwig/GJR3evQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKva+o4m YrjcO2rGpNgEwu14N2r4MB8GA1UdIwQYMBaAFA+tG9NGGExxknyCxh0/ptfkcu6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTQ1NS84NDFDOEREQ0Ix RDQxMUVBOTJGNkFBMUJDNEY5QUUwMi9ENjBiMDBZWVRIR1NmSUxHSFQtbTEtUnk3 cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q2MGIwMFlZVEhHU2ZJTEdIVC1tMS1SeTdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTQ1NS84NDFDOEREQ0IxRDQxMUVBOTJGNkFBMUJDNEY5QUUwMi9ENjBiMDBZWVRI R1NmSUxHSFQtbTEtUnk3cDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXCC542yCZtyjG0RCSiVpYdSGl2NgWVAviKZJpOSLtOEJKp8hmmnoj TUmpklXcQHeRzUv/iERO3X13e8b+CzZHAVCvsHotKAgFe2wYfTY1iU32zZu7zuNw R3IBszrOs1AEjXd1OxdFOjwnoHNdwe6fc1cR8RVGPQ6xPB1lyDsOjCpgo3xxeT+V dxqzESdnosGbpoTJ88NH6VESfd+JLmgn1d7r4wrkMFjTS9CAypDz5JDtPZqSfo4g hPQ0wvDw6QYsTMCB2Ubzg45KaydP2aRuZqUQRQv7fJd+7X5vONV3ko+sVFuyDVSF zxOXlCDfn929wRuTHXxM6jMHn3vf8Nw8 -----END CERTIFICATE-----Generated at Thu May 2 23:19:00 2024 by rpki-client on console-ams.rpki-client.org