$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft File: yoPUPlpeWcd1mxubL72YqUff07w.mft (raw, json) Hash identifier: okrGFkzNc//E3mOys/pEu8kPB610IjSSK09Qu0+sFKM= Subject key identifier: A8:57:1C:E1:60:ED:9D:AD:DF:C1:49:88:1A:0E:61:B9:AF:9A:EB:ED Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC Certificate issuer: /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC Certificate serial: 0FC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft Manifest number: 0F9D Signing time: Thu 02 May 2024 18:13:10 +0000 Manifest this update: Thu 02 May 2024 18:13:09 +0000 Manifest next update: Thu 09 May 2024 18:13:09 +0000 Files and hashes: 1: yoPUPlpeWcd1mxubL72YqUff07w.crl (hash: hD+NeYUPuE4oC84UbOzE3Hp4fIM6DGrzyrB1U+pOF1A=) 2: 7B306A34218D11EC87C96D6DC4F9AE02.roa (hash: SH4ht9mpJYf8cKX0vcP54ZxApzU7aueABR3AMhEMgD4=) 3: AAAA30A6288411EEAD22D65DC4F9AE02.roa (hash: KVKT+SoOIIvbwFg98zKGLvjWKODI79GfngUhLoZVXBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4038 (0xfc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC Validity Not Before: May 2 18:13:09 2024 GMT Not After : May 9 18:13:09 2024 GMT Subject: CN=6633d7b6-b2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:cb:d6:98:84:69:8f:86:ad:da:d6:c7:bf: 17:f0:ae:e3:63:f1:f3:1e:98:68:de:32:c0:37:76: 77:28:0b:9b:3b:7e:fb:02:84:2b:82:2f:67:a3:ba: 08:5e:a7:07:4e:08:3e:10:b7:ec:f5:08:a6:15:c7: 1e:f4:7b:c3:d5:91:c1:83:ea:5e:3f:52:a1:e0:24: c0:2d:86:e7:91:99:81:18:9c:3e:65:ec:b1:01:84: d5:62:4a:fd:5d:16:83:21:b4:59:ad:ce:70:84:4d: 82:55:8e:8b:a2:a3:4e:f6:e6:78:50:08:c6:42:a6: 21:3c:21:20:5d:ee:52:9d:c9:55:18:7e:89:bb:2e: 32:20:0e:c1:2b:59:42:66:16:63:4f:24:f9:82:8a: 07:9f:10:84:5d:e2:76:41:8e:22:bf:88:7e:01:59: d6:39:34:a0:f3:4f:13:85:3d:0e:32:ca:25:0f:5a: ab:90:88:0d:80:28:87:93:20:2f:50:41:36:f1:41: df:6e:a4:2b:76:b6:5b:b4:90:b5:3f:bc:e1:58:1b: 3e:ce:7f:16:b1:fd:4c:02:6f:99:25:d0:7d:7c:e0: 67:21:9f:3a:ea:d2:4b:b3:34:aa:45:7e:ee:31:6f: 79:40:c0:17:58:ab:c7:37:b2:ec:5f:75:2c:57:5c: cd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:57:1C:E1:60:ED:9D:AD:DF:C1:49:88:1A:0E:61:B9:AF:9A:EB:ED X509v3 Authority Key Identifier: keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a5:84:fc:72:47:af:d3:e4:f1:ea:45:f6:52:38:60:56:14: e8:61:8b:f5:0e:30:4c:ef:4f:39:56:4f:f3:43:c6:fe:20:31: fb:74:49:a7:ec:c4:36:eb:97:03:b6:dc:6b:17:a8:f9:26:43: 26:86:bc:e1:5a:2e:55:2d:57:c3:a9:30:0a:b4:5f:a0:86:5f: ab:a7:83:38:0d:59:d5:f0:1e:72:2d:4c:b4:9b:7e:14:49:f8: c9:9a:e2:aa:b9:18:a9:94:c1:2e:5a:f4:4a:98:85:6f:a6:93: 87:04:0d:3e:63:3f:b6:52:b1:7b:16:42:3e:2a:52:ff:fa:7a: ae:03:45:91:c9:5f:1a:53:8b:d7:57:77:ab:fe:5d:ce:72:74: e7:6d:bc:a2:f9:83:0b:a1:60:61:65:01:ec:a4:07:b9:ea:e0: b1:74:cd:9e:33:50:a2:b7:f4:b5:af:40:77:f6:b5:e0:2d:d6: 68:b5:55:7b:f8:53:2f:3e:20:23:68:e0:a0:54:fb:e3:c5:69: 4c:d1:ea:8b:54:8c:07:35:40:17:7e:06:98:c7:67:b7:4d:6d: 62:53:63:66:d3:4d:93:e3:28:75:7a:a4:12:68:b1:30:a9:15: fc:bc:98:97:75:c0:e3:5a:11:42:07:32:8d:df:40:65:dd:07: 48:cc:8b:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKENBODNENDNFNUE1RTU5Qzc3NTlCMUI5QjJGQkQ5OEE5 NDdERkQzQkMwHhcNMjQwNTAyMTgxMzA5WhcNMjQwNTA5MTgxMzA5WjAYMRYwFAYD VQQDEw02NjMzZDdiNi1iMmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArm7L1piEaY+GrdrWx78X8K7jY/HzHpho3jLAN3Z3KAubO377AoQrgi9no7oI XqcHTgg+ELfs9QimFcce9HvD1ZHBg+peP1Kh4CTALYbnkZmBGJw+ZeyxAYTVYkr9 XRaDIbRZrc5whE2CVY6LoqNO9uZ4UAjGQqYhPCEgXe5SnclVGH6Juy4yIA7BK1lC ZhZjTyT5gooHnxCEXeJ2QY4iv4h+AVnWOTSg808ThT0OMsolD1qrkIgNgCiHkyAv UEE28UHfbqQrdrZbtJC1P7zhWBs+zn8Wsf1MAm+ZJdB9fOBnIZ866tJLszSqRX7u MW95QMAXWKvHN7LsX3UsV1zNDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhXHOFg 7Z2t38FJiBoOYbmvmuvtMB8GA1UdIwQYMBaAFMqD1D5aXlnHdZsbmy+9mKlH39O8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9ERjM4OTU1RTNC MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi95b1BVUGxwZVdjZDFteHViTDcyWXFVZmYw N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvUFVQbHBlV2NkMW14dWJMNzJZcVVmZjA3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9ERjM4OTU1RTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi95b1BVUGxwZVdj ZDFteHViTDcyWXFVZmYwN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqpYT8ckev0+Tx6kX2UjhgVhToYYv1DjBM7085Vk/zQ8b+IDH7dEmn 7MQ265cDttxrF6j5JkMmhrzhWi5VLVfDqTAKtF+ghl+rp4M4DVnV8B5yLUy0m34U SfjJmuKquRiplMEuWvRKmIVvppOHBA0+Yz+2UrF7FkI+KlL/+nquA0WRyV8aU4vX V3er/l3OcnTnbbyi+YMLoWBhZQHspAe56uCxdM2eM1Cit/S1r0B39rXgLdZotVV7 +FMvPiAjaOCgVPvjxWlM0eqLVIwHNUAXfgaYx2e3TW1iU2Nm002T4yh1eqQSaLEw qRX8vJiXdcDjWhFCBzKN30Bl3QdIzIsr -----END CERTIFICATE-----Generated at Thu May 2 20:50:22 2024 by rpki-client on console-fra.rpki-client.org