$ rpki-client -vvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft File: P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft (raw, json) Hash identifier: w3QRKRMA04Aw5JhwEXKDGsw+eCxpbmV+udjqGzerkVw= Subject key identifier: A2:11:EA:41:04:1E:D0:D3:C1:A5:62:7E:5A:9A:EE:EC:01:1A:BC:7E Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 Certificate issuer: /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Certificate serial: 06F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft Manifest number: 06ED Signing time: Mon 06 May 2024 22:50:43 +0000 Manifest this update: Mon 06 May 2024 22:50:43 +0000 Manifest next update: Mon 13 May 2024 22:50:43 +0000 Files and hashes: 1: P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl (hash: i8nsMkihoVtloCdeCUs5pq5JUvL8F/yHal4RA1k3HaE=) 2: 4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (hash: VIgSvY7k14Jp04yXf8Mc1S+JFtvPqLWek996rtIVIv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1777 (0x6f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Validity Not Before: May 6 22:50:43 2024 GMT Not After : May 13 22:50:43 2024 GMT Subject: CN=66395ec3-7669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bf:fe:2f:f4:23:14:6a:f7:fc:07:3e:34:9a: 36:19:fc:a2:11:b9:bc:fe:98:c6:f4:85:d7:b3:ef: 8a:21:53:7f:3c:31:7a:ed:49:13:34:99:07:4b:53: 05:10:59:33:bd:0a:1b:bc:f7:ae:15:64:47:64:4a: cb:ce:90:c0:b1:06:75:8a:cf:cd:88:8f:08:7d:f2: ba:21:ad:24:09:1a:23:5d:19:7e:c5:28:c5:f8:29: 18:84:16:e3:dc:17:c4:2a:2c:4b:40:2c:1d:7c:eb: 12:df:f3:85:ee:b6:4a:49:a9:d5:f7:4a:ea:39:b9: d0:9f:44:e5:69:41:df:19:00:69:2a:32:57:fd:64: cc:97:c4:4c:50:77:fe:ec:a2:d1:74:86:a0:86:e0: 14:ce:e3:a1:3b:2b:bd:f9:a3:13:13:1d:bd:ae:bb: a7:e9:f2:d9:ad:26:81:b8:ae:3a:7e:ee:ad:d9:2d: f5:c4:de:3f:94:c5:56:83:be:3c:1b:08:6a:39:c2: fc:6e:86:a0:e1:fe:8a:a0:c2:2b:46:de:58:d9:86: ed:36:23:34:e0:07:62:8d:33:0a:f9:35:b1:2b:c7: 04:69:b3:af:4a:bd:63:04:7a:70:a8:59:6d:a4:51: 2d:3f:91:7f:cd:56:c1:17:f7:ad:15:7e:3f:8d:2c: dd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:11:EA:41:04:1E:D0:D3:C1:A5:62:7E:5A:9A:EE:EC:01:1A:BC:7E X509v3 Authority Key Identifier: keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:4b:7b:af:f7:e1:90:0e:a4:f5:1f:44:8d:97:41:4b:cb:68: c8:d9:e3:bf:a7:c3:35:08:ff:b1:36:b2:0b:5d:ce:c9:7c:03: 02:ed:a7:90:ba:0d:06:1e:00:31:8e:d9:74:ec:fc:b4:27:76: 15:da:72:35:96:4c:7d:17:2b:a3:9f:b9:92:fd:a5:b0:3f:db: 8b:28:b6:45:b8:68:4d:4b:ec:e5:d8:3a:3d:e1:2e:72:94:f7: e4:fb:36:58:10:b3:c6:fe:bc:94:d6:b2:2b:31:7c:e8:b3:b3: a7:1c:ba:4f:40:10:f4:28:58:bc:b9:7a:75:80:17:f9:ef:91: 34:5d:7c:3d:ea:c3:42:2c:a7:3b:88:c2:c3:b2:94:2a:e7:57: 99:29:19:47:ff:a1:6e:fc:2e:73:2e:a4:3f:2c:ad:77:32:d6: 4f:42:d3:8c:b1:b2:78:5c:88:4a:cb:af:71:1e:a9:c2:01:c7: ea:64:88:a3:18:2d:ff:c6:fe:23:72:af:8a:71:8f:6e:de:90: 73:4e:f4:ae:ca:b9:22:c8:9f:90:40:03:9f:49:9d:03:82:9c: c2:ba:ff:f2:5f:e9:8b:9b:a9:a0:07:3f:d5:f4:e2:ad:0b:94: ed:cd:85:81:6a:9d:8e:61:f0:a4:5e:2f:df:a2:a6:83:65:e4: f8:a4:09:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk4OEYxMTAvBgNVBAUTKDNGRTYwMzFGMjU1NjdBNDU0N0NERTE3MzFBMkQ4MTRE Qjg2RTIwOTQwHhcNMjQwNTA2MjI1MDQzWhcNMjQwNTEzMjI1MDQzWjAYMRYwFAYD VQQDEw02NjM5NWVjMy03NjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0b/+L/QjFGr3/Ac+NJo2GfyiEbm8/pjG9IXXs++KIVN/PDF67UkTNJkHS1MF EFkzvQobvPeuFWRHZErLzpDAsQZ1is/NiI8IffK6Ia0kCRojXRl+xSjF+CkYhBbj 3BfEKixLQCwdfOsS3/OF7rZKSanV90rqObnQn0TlaUHfGQBpKjJX/WTMl8RMUHf+ 7KLRdIaghuAUzuOhOyu9+aMTEx29rrun6fLZrSaBuK46fu6t2S31xN4/lMVWg748 GwhqOcL8boag4f6KoMIrRt5Y2YbtNiM04AdijTMK+TWxK8cEabOvSr1jBHpwqFlt pFEtP5F/zVbBF/etFX4/jSzdywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIR6kEE HtDTwaViflqa7uwBGrx+MB8GA1UdIwQYMBaAFD/mAx8lVnpFR83hcxotgU24biCU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTg4Ri8xOTI0N0ZCQUZF MjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2VrVkh6ZUZ6R2kyQlRiaHVJ SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtWURIeVZXZWtWSHplRnpHaTJCVGJodUlKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTg4Ri8xOTI0N0ZCQUZFMjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2Vr Vkh6ZUZ6R2kyQlRiaHVJSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHS3uv9+GQDqT1H0SNl0FLy2jI2eO/p8M1CP+xNrILXc7JfAMC7aeQ ug0GHgAxjtl07Py0J3YV2nI1lkx9Fyujn7mS/aWwP9uLKLZFuGhNS+zl2Do94S5y lPfk+zZYELPG/ryU1rIrMXzos7OnHLpPQBD0KFi8uXp1gBf575E0XXw96sNCLKc7 iMLDspQq51eZKRlH/6Fu/C5zLqQ/LK13MtZPQtOMsbJ4XIhKy69xHqnCAcfqZIij GC3/xv4jcq+KcY9u3pBzTvSuyrkiyJ+QQAOfSZ0DgpzCuv/yX+mLm6mgBz/V9OKt C5TtzYWBap2OYfCkXi/foqaDZeT4pAll -----END CERTIFICATE-----Generated at Tue May 7 01:58:17 2024 by rpki-client on console-fra.rpki-client.org