$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: mhVr0EPASk9M0Hty3d0n0pSpkDRtjgDY3pj/NbcQlYU= Subject key identifier: E7:89:F2:42:61:EE:59:ED:48:A7:ED:5F:58:BD:7C:8C:53:B6:A6:14 Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 03EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 03E0 Signing time: Sun 05 May 2024 02:29:21 +0000 Manifest this update: Sun 05 May 2024 02:29:21 +0000 Manifest next update: Sun 12 May 2024 02:29:21 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: EDK9y4oMLdj8kE8OA75ud3Cy4fiSIvFrVB9IloOLTAw=) 2: 3E1855D602FD11EF9851C037C4F9AE02.roa (hash: PDV+naELo7Et7n0WH1CjypchiJQ3jNZlPFED72pEun4=) 3: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: PsyWk0XPgRaOQsmrSYL0NlL2ThTXodxGb7oDgi7tCj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1007 (0x3ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: May 5 02:29:21 2024 GMT Not After : May 12 02:29:21 2024 GMT Subject: CN=6636ef01-e874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:68:29:08:d2:da:96:d8:64:e5:8f:a4:86:67: ca:54:77:9b:66:b2:6e:65:ce:a5:61:3c:bf:a2:03: 61:a9:2e:fb:d9:d3:57:9a:6f:b9:46:31:53:3a:55: c9:a3:1e:4a:34:00:69:11:3a:05:fd:2a:d9:12:f8: 80:ce:5f:1a:90:57:1a:74:40:1c:7a:6d:2e:a3:aa: d9:6b:28:b3:df:17:4e:16:e0:7a:d0:a1:de:9f:7d: 90:20:cc:72:00:06:1d:35:50:8c:52:de:27:f1:c2: 7e:f1:fd:0f:82:88:2e:e5:dc:43:51:0f:41:95:15: 92:88:6f:08:42:3b:4f:c1:aa:11:bd:34:a4:95:b4: a1:08:33:67:00:57:c2:cf:26:ac:71:6b:9a:a0:04: 6d:b5:bb:f1:34:52:fc:e2:7b:67:df:fc:27:05:5b: f3:27:c6:ab:f7:ce:54:b1:13:9b:fb:70:6d:c0:bf: 2c:f4:0b:f2:1e:5d:09:b4:6a:89:27:d0:c1:50:44: 1b:43:40:b2:d3:f0:38:cc:c1:39:4d:3a:80:b0:93: 76:55:6d:24:40:7f:58:ee:44:ed:5a:ee:2e:72:1d: 5a:f2:d1:b3:94:c4:62:19:f1:93:e0:6d:af:eb:da: dc:88:47:37:8f:55:e2:de:42:83:b5:27:6b:e1:15: fe:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:89:F2:42:61:EE:59:ED:48:A7:ED:5F:58:BD:7C:8C:53:B6:A6:14 X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:0a:42:8c:63:a6:33:47:f6:1e:34:6f:19:f1:c1:64:0c:35: 54:db:7b:45:b7:4a:fc:4b:f4:56:66:f3:8a:43:a5:ff:d1:d4: ab:76:ab:d6:21:2f:03:35:7e:1f:77:47:91:88:6d:fa:d6:1b: 7d:83:ec:9b:05:4b:f8:df:54:83:23:3c:c6:26:9b:00:86:ae: a3:44:58:85:58:86:0d:5c:12:c8:57:ec:39:0b:fb:cc:3a:28: ca:20:98:f0:9b:7b:db:f9:1f:39:0d:7f:9c:d4:71:9b:77:45: f0:a4:ea:9e:4c:d0:ef:24:e5:3b:d0:88:60:cf:68:fc:28:74: 53:4a:5a:52:22:8b:24:73:7f:eb:7a:9b:4c:fd:e3:04:f2:97: 3e:23:54:46:df:fa:85:a1:75:fd:27:e8:5b:0b:56:e1:f3:5a: 02:04:35:4e:84:9d:f5:33:99:96:b3:b1:02:14:52:b6:65:40: 39:58:7e:4c:05:bf:52:a2:c9:50:02:f2:1a:1b:57:b9:c5:67: 71:aa:96:8e:88:24:e1:18:5b:1a:da:e6:0c:12:49:83:82:f4: aa:eb:a9:dc:2e:01:5f:44:6e:63:17:cd:1e:96:62:68:4d:01: 61:1f:8a:89:11:dc:3a:c3:f4:8d:d8:0f:6c:1a:b3:81:98:87: 93:2d:e8:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjQwNTA1MDIyOTIxWhcNMjQwNTEyMDIyOTIxWjAYMRYwFAYD VQQDEw02NjM2ZWYwMS1lODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WgpCNLalthk5Y+khmfKVHebZrJuZc6lYTy/ogNhqS772dNXmm+5RjFTOlXJ ox5KNABpEToF/SrZEviAzl8akFcadEAcem0uo6rZayiz3xdOFuB60KHen32QIMxy AAYdNVCMUt4n8cJ+8f0Pgogu5dxDUQ9BlRWSiG8IQjtPwaoRvTSklbShCDNnAFfC zyascWuaoARttbvxNFL84ntn3/wnBVvzJ8ar985UsROb+3BtwL8s9AvyHl0JtGqJ J9DBUEQbQ0Cy0/A4zME5TTqAsJN2VW0kQH9Y7kTtWu4uch1a8tGzlMRiGfGT4G2v 69rciEc3j1Xi3kKDtSdr4RX+jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeJ8kJh 7lntSKftX1i9fIxTtqYUMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUCkKMY6YzR/YeNG8Z8cFkDDVU23tFt0r8S/RWZvOKQ6X/0dSrdqvW IS8DNX4fd0eRiG361ht9g+ybBUv431SDIzzGJpsAhq6jRFiFWIYNXBLIV+w5C/vM OijKIJjwm3vb+R85DX+c1HGbd0XwpOqeTNDvJOU70Ihgz2j8KHRTSlpSIoskc3/r eptM/eME8pc+I1RG3/qFoXX9J+hbC1bh81oCBDVOhJ31M5mWs7ECFFK2ZUA5WH5M Bb9SoslQAvIaG1e5xWdxqpaOiCThGFsa2uYMEkmDgvSq66ncLgFfRG5jF80elmJo TQFhH4qJEdw6w/SN2A9sGrOBmIeTLegh -----END CERTIFICATE-----Generated at Sun May 5 03:09:54 2024 by rpki-client on console-ams.rpki-client.org