$ rpki-client -vvf rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft File: yVDnh1o97uCC2cxQNQC_3ndwhuE.mft (raw, json) Hash identifier: oLlL23HoiVS1F5n5muSpHJSSIwxUn6+2DU+2BlEU7K0= Subject key identifier: C2:AF:81:A0:05:5F:9B:33:6F:96:30:F2:B2:9A:19:DA:38:EF:69:CF Authority key identifier: C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1 Certificate issuer: /CN=A9153766/serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft Manifest number: A4 Signing time: Wed 15 May 2024 06:47:44 +0000 Manifest this update: Wed 15 May 2024 06:47:43 +0000 Manifest next update: Wed 22 May 2024 06:47:43 +0000 Files and hashes: 1: yVDnh1o97uCC2cxQNQC_3ndwhuE.crl (hash: UC3bMngSqL3i5ErY/mG3+iquvlaf68zaChpzcrvBXAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153766/serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1 Validity Not Before: May 15 06:47:43 2024 GMT Not After : May 22 06:47:43 2024 GMT Subject: CN=66445a90-2d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:3f:e0:86:09:4d:ae:af:fb:d0:62:ab:f4: 60:35:20:e1:98:fa:c9:b9:f9:68:5a:a6:5c:f4:24: 52:18:a4:bf:74:76:3f:d3:44:3c:ba:bd:ed:0d:9e: c1:b0:13:12:62:c1:f0:db:f6:a4:b0:ac:b8:6a:da: 6b:2d:d6:07:89:b2:fe:ca:62:5b:df:5b:aa:b0:ba: 7c:56:ed:63:01:47:64:34:63:98:4e:83:7d:6b:cd: f1:43:cb:7d:c8:4e:62:e1:15:21:88:0c:bf:20:92: a7:d1:72:6a:49:f4:53:14:a0:be:a2:01:a6:6b:8f: 7c:ee:bd:49:cd:d4:20:77:d6:36:0c:47:95:d9:cd: 2b:3d:80:26:c1:56:e9:b6:74:71:20:3d:0b:7e:f0: a5:1e:d8:8a:83:cc:96:28:20:14:85:5c:64:d1:3d: c7:9e:1b:46:e2:b4:56:43:66:92:bd:04:16:ab:4a: 70:af:a1:d5:78:36:70:fe:8e:02:db:9e:b0:36:2f: 6c:d6:22:00:88:f9:b7:c7:51:38:12:85:aa:7c:a9: b2:64:21:c5:83:5a:4a:7f:06:a2:ce:13:6f:83:d0: 20:e0:cc:f2:0e:cb:ab:ff:ec:d0:dd:ce:0f:4a:1f: 42:02:ca:0d:ee:1f:63:f9:37:c9:3d:af:cf:b4:b3: a7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AF:81:A0:05:5F:9B:33:6F:96:30:F2:B2:9A:19:DA:38:EF:69:CF X509v3 Authority Key Identifier: keyid:C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:15:08:ba:a4:21:4e:6d:47:4f:89:6d:54:17:66:4e:08:09: 9d:a3:56:72:3f:73:56:a7:bb:0f:d0:49:3b:80:54:f8:94:be: a4:d1:96:1c:39:10:50:5f:8c:c6:a2:3a:78:25:a5:8f:7c:60: 63:66:ba:4f:93:c8:af:45:ee:6b:42:ef:f5:59:a7:ee:d6:c6: 81:e7:db:82:02:60:3f:cf:b8:55:79:05:7a:91:72:49:f3:9d: 4d:ff:62:00:4a:d4:89:e1:43:f0:59:4b:d9:bf:fc:3b:47:42: 8b:3d:8d:af:40:5f:2c:82:c6:34:91:c0:a5:b7:2b:41:ad:25: 91:8a:6f:94:b1:14:5e:d0:14:57:ce:60:34:32:47:8f:7f:a0: ea:81:41:6e:db:4a:aa:81:cc:58:f7:13:99:a9:d1:ce:0b:58: 19:37:e1:ab:f8:9b:ec:d0:8c:2c:62:e5:0d:f8:16:6e:8f:66: a9:56:21:7c:07:a1:05:fd:e0:18:cb:3a:01:0d:b2:b3:04:2d: 44:1c:d4:dd:99:c3:0a:9c:53:80:e1:8c:20:3c:d4:5e:c6:db: f2:b6:05:c2:e1:a6:2b:45:ab:57:d6:38:6d:05:72:48:1d:56: 0b:02:5b:4e:df:30:aa:8b:7b:6d:1a:91:8e:c2:34:9d:04:76: 24:55:b6:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3NjYxMTAvBgNVBAUTKEM5NTBFNzg3NUEzREVFRTA4MkQ5Q0M1MDM1MDBCRkRF Nzc3MDg2RTEwHhcNMjQwNTE1MDY0NzQzWhcNMjQwNTIyMDY0NzQzWjAYMRYwFAYD VQQDEw02NjQ0NWE5MC0yZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/g/4IYJTa6v+9Biq/RgNSDhmPrJufloWqZc9CRSGKS/dHY/00Q8ur3tDZ7B sBMSYsHw2/aksKy4atprLdYHibL+ymJb31uqsLp8Vu1jAUdkNGOYToN9a83xQ8t9 yE5i4RUhiAy/IJKn0XJqSfRTFKC+ogGma4987r1JzdQgd9Y2DEeV2c0rPYAmwVbp tnRxID0LfvClHtiKg8yWKCAUhVxk0T3HnhtG4rRWQ2aSvQQWq0pwr6HVeDZw/o4C 256wNi9s1iIAiPm3x1E4EoWqfKmyZCHFg1pKfwaizhNvg9Ag4MzyDsur/+zQ3c4P Sh9CAsoN7h9j+TfJPa/PtLOnKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKvgaAF X5szb5Yw8rKaGdo472nPMB8GA1UdIwQYMBaAFMlQ54daPe7ggtnMUDUAv953cIbh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mzc2Ni9EQjdDRDg4NDE2 NzExMUVFODExOTYyNDdDNEY5QUUwMi95VkRuaDFvOTd1Q0MyY3hRTlFDXzNuZHdo dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWRG5oMW85N3VDQzJjeFFOUUNfM25kd2h1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Mzc2Ni9EQjdDRDg4NDE2NzExMUVFODExOTYyNDdDNEY5QUUwMi95VkRuaDFvOTd1 Q0MyY3hRTlFDXzNuZHdodUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSFQi6pCFObUdPiW1UF2ZOCAmdo1ZyP3NWp7sP0Ek7gFT4lL6k0ZYc ORBQX4zGojp4JaWPfGBjZrpPk8ivRe5rQu/1Wafu1saB59uCAmA/z7hVeQV6kXJJ 851N/2IAStSJ4UPwWUvZv/w7R0KLPY2vQF8sgsY0kcCltytBrSWRim+UsRRe0BRX zmA0MkePf6DqgUFu20qqgcxY9xOZqdHOC1gZN+Gr+Jvs0IwsYuUN+BZuj2apViF8 B6EF/eAYyzoBDbKzBC1EHNTdmcMKnFOA4YwgPNRextvytgXC4aYrRatX1jhtBXJI HVYLAltO3zCqi3ttGpGOwjSdBHYkVbYi -----END CERTIFICATE-----Generated at Wed May 15 09:04:09 2024 by rpki-client on console-ams.rpki-client.org