$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft File: yUoDUOcJ9WwjluMLRwyLXh37FwA.mft (raw, json) Hash identifier: ULO+C/HXgttjy968OYD48TuQwgCbjbVZ09xW/rwPUuE= Subject key identifier: 6A:2B:24:D2:5B:B0:E9:42:23:E3:31:F7:45:61:D5:9F:43:71:DD:F6 Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 Certificate issuer: /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Certificate serial: 13A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft Manifest number: 13A8 Signing time: Tue 30 Apr 2024 17:41:52 +0000 Manifest this update: Tue 30 Apr 2024 17:41:52 +0000 Manifest next update: Tue 07 May 2024 17:41:52 +0000 Files and hashes: 1: yUoDUOcJ9WwjluMLRwyLXh37FwA.crl (hash: jiMw1kBtFEjxxC8nZbC2YvWSAefJBGJaFJlC8QRFMDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5032 (0x13a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Validity Not Before: Apr 30 17:41:52 2024 GMT Not After : May 7 17:41:52 2024 GMT Subject: CN=66312d60-2a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:70:5f:d2:3d:ca:ac:a4:0d:29:55:fa:6c: 0f:76:88:42:18:ce:9a:3f:cb:6b:19:92:27:6f:8c: 1d:13:43:02:78:0b:b1:ef:b0:44:e7:49:05:3e:21: 6a:22:1b:1c:22:53:26:b1:0f:c9:0a:ff:a0:d6:f7: 35:3a:76:85:b9:f3:d2:62:1e:aa:a7:b9:72:5b:72: 4e:13:ed:bf:94:48:57:f3:8d:28:f5:c8:15:9a:ab: bb:e9:dd:60:d1:ea:3c:dd:73:4d:51:5a:73:4b:c1: c5:39:b2:90:3a:c4:e5:2e:b7:fd:b5:37:91:da:e5: d6:ce:3f:24:43:79:1c:f9:06:6e:a6:28:6c:95:25: 72:12:63:d1:75:7e:be:f9:21:9f:e8:f3:a7:e2:27: a0:00:ee:b4:f7:4c:70:b0:e4:7b:5b:56:46:5c:a6: f7:1e:be:d1:ff:91:f2:c7:02:3d:36:e1:eb:30:b9: 9f:62:d8:b4:5e:1c:60:64:d5:0d:22:b7:58:7e:8a: 9b:46:bd:4e:a4:6f:8c:20:18:fd:b7:49:53:84:86: 5b:d1:bb:70:55:82:e1:6f:e6:00:7f:71:46:fb:6d: 60:45:61:3d:db:c9:cf:89:b7:43:fe:8f:f9:71:ba: 97:ab:ac:a7:6e:0f:44:ac:0d:72:27:81:46:3f:d3: 81:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2B:24:D2:5B:B0:E9:42:23:E3:31:F7:45:61:D5:9F:43:71:DD:F6 X509v3 Authority Key Identifier: keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:08:18:2b:76:52:df:9b:b6:52:47:aa:c2:bd:ad:fd:fd:a0: 55:a5:b9:b2:20:00:a7:e4:96:3d:b6:5c:4a:e1:7a:8f:b4:5d: c5:eb:eb:12:14:e0:31:d0:64:87:ae:83:a9:99:f8:4f:b2:03: 29:1e:29:4c:8f:16:23:0c:11:03:f8:22:1e:74:01:e7:6a:5f: 50:71:b1:08:3e:48:38:26:4b:f7:85:60:53:2d:bb:73:6d:2c: e8:7d:b6:3e:35:3e:d0:ae:cf:f1:6b:1a:53:8d:5a:0c:48:94: 2f:11:07:bb:83:ec:de:93:a6:87:47:7e:0a:50:a9:7a:13:71: 58:71:f6:4f:36:ae:4a:59:5d:09:d6:9c:56:dc:5b:47:f4:0f: e6:b6:32:5a:89:d9:fd:67:ce:29:03:1f:ca:52:8c:3a:94:75: 07:e2:ff:e5:b1:d1:e6:1e:e1:42:14:9b:ed:53:7a:c5:fb:59: 75:e6:10:60:24:e3:5c:27:8b:bc:ab:a3:2d:c7:07:72:e8:da: b3:e0:e1:9a:66:e3:6b:65:06:0c:3f:fe:5b:0b:c6:aa:1b:21: 1d:41:3f:05:70:09:e0:71:1d:21:c1:b5:53:8e:9e:2b:e9:6f: 6c:06:4f:58:dc:b7:4c:e7:c9:20:b8:3e:3d:db:29:e1:0e:ec: e4:9b:50:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEM5NEEwMzUwRTcwOUY1NkMyMzk2RTMwQjQ3MEM4QjVF MURGQjE3MDAwHhcNMjQwNDMwMTc0MTUyWhcNMjQwNTA3MTc0MTUyWjAYMRYwFAYD VQQDEw02NjMxMmQ2MC0yYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvNwX9I9yqykDSlV+mwPdohCGM6aP8trGZInb4wdE0MCeAux77BE50kFPiFq IhscIlMmsQ/JCv+g1vc1OnaFufPSYh6qp7lyW3JOE+2/lEhX840o9cgVmqu76d1g 0eo83XNNUVpzS8HFObKQOsTlLrf9tTeR2uXWzj8kQ3kc+QZupihslSVyEmPRdX6+ +SGf6POn4iegAO6090xwsOR7W1ZGXKb3Hr7R/5HyxwI9NuHrMLmfYti0XhxgZNUN IrdYfoqbRr1OpG+MIBj9t0lThIZb0btwVYLhb+YAf3FG+21gRWE928nPibdD/o/5 cbqXq6ynbg9ErA1yJ4FGP9OB6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGorJNJb sOlCI+Mx90Vh1Z9Dcd32MB8GA1UdIwQYMBaAFMlKA1DnCfVsI5bjC0cMi14d+xcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8wMjMyODM0ODY3 Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlXd2psdU1MUnd5TFhoMzdG d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVb0RVT2NKOVd3amx1TUxSd3lMWGgzN0Z3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8wMjMyODM0ODY3Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlX d2psdU1MUnd5TFhoMzdGd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtCBgrdlLfm7ZSR6rCva39/aBVpbmyIACn5JY9tlxK4XqPtF3F6+sS FOAx0GSHroOpmfhPsgMpHilMjxYjDBED+CIedAHnal9QcbEIPkg4Jkv3hWBTLbtz bSzofbY+NT7Qrs/xaxpTjVoMSJQvEQe7g+zek6aHR34KUKl6E3FYcfZPNq5KWV0J 1pxW3FtH9A/mtjJaidn9Z84pAx/KUow6lHUH4v/lsdHmHuFCFJvtU3rF+1l15hBg JONcJ4u8q6Mtxwdy6Nqz4OGaZuNrZQYMP/5bC8aqGyEdQT8FcAngcR0hwbVTjp4r 6W9sBk9Y3LdM58kguD492ynhDuzkm1Do -----END CERTIFICATE-----Generated at Tue Apr 30 18:56:57 2024 by rpki-client on console-fra.rpki-client.org