$ rpki-client -vvf rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/yodzM7cSNF8F0txnBlcuHLYhF3g.mft File: yodzM7cSNF8F0txnBlcuHLYhF3g.mft (raw, json) Hash identifier: fLvcGvUqO380OCtwMQWI8DJRizKvdGQK2aRZLkmHpGY= Subject key identifier: FB:51:B2:98:BA:03:BB:1A:EA:12:E7:F1:7A:58:AC:51:AC:8D:1A:BD Authority key identifier: CA:87:73:33:B7:12:34:5F:05:D2:DC:67:06:57:2E:1C:B6:21:17:78 Certificate issuer: /CN=A915059B/serialNumber=CA877333B712345F05D2DC6706572E1CB6211778 Certificate serial: 0776 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yodzM7cSNF8F0txnBlcuHLYhF3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/yodzM7cSNF8F0txnBlcuHLYhF3g.mft Manifest number: 123F Signing time: Tue 30 Apr 2024 20:29:13 +0000 Manifest this update: Tue 30 Apr 2024 20:29:13 +0000 Manifest next update: Tue 07 May 2024 20:29:13 +0000 Files and hashes: 1: yodzM7cSNF8F0txnBlcuHLYhF3g.crl (hash: EQZcyPhn6+/k4+3ZPqkMcGrxO412Mkfhj89wZobD+7g=) 2: D69878F04AC511ED84750D0BC4F9AE02.roa (hash: dWKmGg3ss87BRvLPTdzat+vk5i1cbRH/a2B+0FzIz2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/yodzM7cSNF8F0txnBlcuHLYhF3g.crl rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/yodzM7cSNF8F0txnBlcuHLYhF3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yodzM7cSNF8F0txnBlcuHLYhF3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1910 (0x776) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915059B/serialNumber=CA877333B712345F05D2DC6706572E1CB6211778 Validity Not Before: Apr 30 20:29:13 2024 GMT Not After : May 7 20:29:13 2024 GMT Subject: CN=66315499-2325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:f0:f8:e9:c8:b7:45:8f:17:0d:cd:a6:f6: 53:eb:5d:20:1f:fa:09:f3:17:0c:1f:a0:30:b3:da: 7d:4d:fc:34:d2:a2:79:76:7d:94:cf:8b:ff:e1:4c: 1c:01:a0:64:90:ae:f5:9d:f4:cf:2e:92:bd:54:81: f6:ba:64:64:de:12:d0:2c:6d:ae:80:4d:ff:9c:9e: 40:5c:03:14:31:98:a3:ff:13:b8:c9:9c:25:97:4e: 68:3a:82:3c:a1:aa:97:f0:7a:e9:98:27:ea:82:ec: 6e:28:3a:3e:76:bb:be:17:05:e5:f8:28:28:72:95: de:9c:43:80:b2:32:83:1e:21:dc:5e:2a:bc:1e:e3: 37:ce:79:f9:07:97:62:2b:19:4b:39:c8:61:df:6c: 9f:8c:2d:3c:87:b2:68:32:dc:6a:69:3a:ee:2b:17: 7e:bb:4a:e3:88:e4:26:8a:94:8a:74:d6:b8:96:e7: 15:28:74:8d:de:a1:46:93:78:e8:09:26:1a:49:7f: e0:92:d0:d1:78:03:67:34:ea:28:09:2a:41:1f:e6: 99:eb:4c:9f:1c:40:88:77:c1:f8:7c:19:d9:a1:90: 43:37:31:01:ae:95:2f:cd:da:b7:e4:00:df:3d:b7: da:2a:f2:a2:9c:c5:09:86:e0:f7:2d:03:7f:c7:0d: b8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:51:B2:98:BA:03:BB:1A:EA:12:E7:F1:7A:58:AC:51:AC:8D:1A:BD X509v3 Authority Key Identifier: keyid:CA:87:73:33:B7:12:34:5F:05:D2:DC:67:06:57:2E:1C:B6:21:17:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/yodzM7cSNF8F0txnBlcuHLYhF3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yodzM7cSNF8F0txnBlcuHLYhF3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915059B/74FB42A8227311EA8A0F3822C4F9AE02/yodzM7cSNF8F0txnBlcuHLYhF3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:03:e2:2f:b6:76:0c:c0:20:28:d2:4b:12:be:8d:83:69:cc: c6:4f:56:71:06:08:e3:50:07:a9:e5:1b:06:f2:c6:a7:77:eb: 83:81:8d:40:b8:fa:38:84:07:71:0a:0a:a9:99:4d:cf:6b:72: ba:6a:99:de:bc:64:d8:7b:68:b0:95:3a:5a:52:60:50:80:f1: a8:d2:61:ce:f5:f7:1c:a5:08:fe:29:c1:a6:c2:42:68:f8:49: f9:ea:cc:15:a6:ab:32:b4:95:8e:d2:2e:b5:fb:ed:f8:5d:d5: 6a:8d:17:d1:5c:3b:c6:b9:53:48:f7:e6:78:c4:e7:8f:7e:b8: 79:6f:3f:97:c7:53:c0:c7:5e:bc:7d:ff:0e:23:0b:a8:2f:0c: 57:01:6a:81:f1:76:79:e7:ce:6f:ad:bd:54:8f:6f:e8:c1:aa: 41:e9:4a:6e:d6:74:f1:25:a1:dc:62:70:81:2d:3a:04:d3:db: 17:3f:dd:22:b1:65:ae:3d:d6:a5:b2:be:9b:4e:9b:c6:e4:40: 8e:e9:71:7a:c6:45:87:58:87:0d:9f:b6:5e:e8:74:db:a9:ac: 48:8a:e2:db:c8:ef:a8:fa:56:69:4d:86:5e:73:10:7e:2f:30: 92:86:f6:88:cf:12:6d:59:71:47:68:e3:d6:d7:3e:f4:5c:72: 21:e5:ef:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1OUIxMTAvBgNVBAUTKENBODc3MzMzQjcxMjM0NUYwNUQyREM2NzA2NTcyRTFD QjYyMTE3NzgwHhcNMjQwNDMwMjAyOTEzWhcNMjQwNTA3MjAyOTEzWjAYMRYwFAYD VQQDEw02NjMxNTQ5OS0yMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtfw+OnIt0WPFw3NpvZT610gH/oJ8xcMH6Aws9p9Tfw00qJ5dn2Uz4v/4Uwc AaBkkK71nfTPLpK9VIH2umRk3hLQLG2ugE3/nJ5AXAMUMZij/xO4yZwll05oOoI8 oaqX8HrpmCfqguxuKDo+dru+FwXl+CgocpXenEOAsjKDHiHcXiq8HuM3znn5B5di KxlLOchh32yfjC08h7JoMtxqaTruKxd+u0rjiOQmipSKdNa4lucVKHSN3qFGk3jo CSYaSX/gktDReANnNOooCSpBH+aZ60yfHECId8H4fBnZoZBDNzEBrpUvzdq35ADf PbfaKvKinMUJhuD3LQN/xw245wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtRspi6 A7sa6hLn8XpYrFGsjRq9MB8GA1UdIwQYMBaAFMqHczO3EjRfBdLcZwZXLhy2IRd4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDU5Qi83NEZCNDJBODIy NzMxMUVBOEEwRjM4MjJDNEY5QUUwMi95b2R6TTdjU05GOEYwdHhuQmxjdUhMWWhG M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvZHpNN2NTTkY4RjB0eG5CbGN1SExZaEYzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDU5Qi83NEZCNDJBODIyNzMxMUVBOEEwRjM4MjJDNEY5QUUwMi95b2R6TTdjU05G OEYwdHhuQmxjdUhMWWhGM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5A+IvtnYMwCAo0ksSvo2DaczGT1ZxBgjjUAep5RsG8sand+uDgY1A uPo4hAdxCgqpmU3Pa3K6apnevGTYe2iwlTpaUmBQgPGo0mHO9fccpQj+KcGmwkJo +En56swVpqsytJWO0i61++34XdVqjRfRXDvGuVNI9+Z4xOePfrh5bz+Xx1PAx168 ff8OIwuoLwxXAWqB8XZ5585vrb1Uj2/owapB6Upu1nTxJaHcYnCBLToE09sXP90i sWWuPdalsr6bTpvG5ECO6XF6xkWHWIcNn7Ze6HTbqaxIiuLbyO+o+lZpTYZecxB+ LzCShvaIzxJtWXFHaOPW1z70XHIh5e/0 -----END CERTIFICATE-----Generated at Tue Apr 30 21:37:57 2024 by rpki-client on console-fra.rpki-client.org