$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json) Hash identifier: V3+JHvZlyQPNYDmQq3XvhHQOMDSSTNXrSQHuR7y7R8c= Subject key identifier: F3:42:24:E1:AD:D1:AC:44:09:F9:3C:E4:05:AE:C1:26:0D:D1:B0:66 Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft Manifest number: 5E Signing time: Thu 21 Nov 2024 05:11:23 +0000 Manifest this update: Thu 21 Nov 2024 05:11:22 +0000 Manifest next update: Thu 28 Nov 2024 05:11:22 +0000 Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: tVKaZU8EBqoVHIzvhp/uzT1hl4dfZE1/EeNn3IMaaC4=) 2: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: 4EHRpeMi8/g5A65WYX96AeSBYgGFYLJaPZfMVf/nA+U=) 3: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: 6APWnum5XO+1AjxPLod4M585Hvd075IxDDxMYdDbIE0=) 4: 680D797023E611EF8165F17BC4F9AE02.roa (hash: A1M8cgXwpueoyV//ap2OtyS//Qc9zVR+BitCHlrnuUc=) 5: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: qoBV7sb5eaX6g1s+qv3xkdJSZExJ62bMwOk41VIcbsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Validity Not Before: Nov 21 05:11:22 2024 GMT Not After : Nov 28 05:11:22 2024 GMT Subject: CN=673ec0fb-9917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:76:08:23:da:b1:b0:f1:c8:90:29:46:a0: d3:a8:84:81:32:bb:22:91:d7:26:54:1d:49:23:58: 07:56:2f:3f:20:12:b9:e0:ca:f8:08:a6:c4:4c:92: 3c:d2:1d:ae:f1:9f:25:be:48:34:4d:8f:43:07:41: b2:15:e8:e7:0e:eb:c9:f2:06:8d:7f:bb:4c:dd:c5: ac:74:1e:7f:e7:22:17:b1:23:75:09:71:c8:8a:bb: a6:1d:b6:b4:26:8e:c5:a8:f9:46:fd:65:fb:2c:41: 3b:40:69:19:fc:28:f0:af:b4:4e:99:c9:6d:9d:f5: 7e:d0:b4:86:97:92:85:c3:6a:2f:e3:40:f2:69:22: 9a:6f:8a:2d:8e:8f:18:a0:d0:42:a5:15:04:d6:3c: 56:39:c3:51:bb:ca:97:12:f5:ce:4a:4e:c2:01:42: 83:74:45:ba:ee:f2:b2:68:6d:11:ae:6a:83:5a:f0: 7c:b5:8a:fe:4a:c0:db:b4:c3:e2:be:12:47:01:96: c7:08:2d:92:c6:62:5b:ff:77:c7:e2:df:e6:c8:cb: 6f:d5:3a:07:5c:df:2f:e6:e0:a2:0e:59:d1:f0:97: e7:97:8b:ff:0d:96:2c:ed:6c:a7:93:a9:28:40:14: 7b:72:ae:b6:8d:4a:58:d1:67:03:54:5e:75:c1:ca: 93:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:42:24:E1:AD:D1:AC:44:09:F9:3C:E4:05:AE:C1:26:0D:D1:B0:66 X509v3 Authority Key Identifier: keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:53:78:b2:9c:da:13:91:e5:b0:07:e1:88:a0:c0:04:5c:85: 02:7b:cf:13:b4:19:b2:72:b8:bf:5d:4f:c4:48:34:43:e6:bd: e0:c2:d9:8b:3e:fa:25:b2:27:51:fc:60:55:84:d2:93:b5:a5: ad:ec:9b:1a:07:c2:d0:b1:1b:29:33:6a:e1:7d:d7:7d:bf:30: b5:34:f0:b3:7b:84:74:13:cd:eb:cf:e7:8b:ba:37:b2:77:d2: aa:b4:77:75:2b:bd:71:c5:c4:5b:69:9f:f2:a4:7a:e9:81:ea: 48:e0:fd:8f:fb:95:39:06:6e:d8:70:59:19:81:6a:6c:42:d1: 1d:43:e1:22:a4:71:0a:9c:00:f5:40:9d:3b:3f:ae:d4:47:d8: 74:d0:14:b1:e3:a1:6f:de:87:c7:0e:c8:9b:0d:23:96:6d:aa: c8:99:e3:38:3f:cd:f8:12:8d:1c:fc:96:4a:2f:90:84:a0:5d: e2:64:dd:95:04:17:76:9f:25:43:8b:d1:bb:d9:7b:ec:58:12: e4:ee:cd:1b:a1:ba:28:87:42:8c:c6:91:21:8c:e3:c2:75:8c: 76:34:64:ff:eb:4c:43:aa:3e:74:8c:f7:59:64:3d:6b:37:b4: 18:a0:10:35:d2:6d:65:16:38:c1:8c:7e:63:4e:09:d5:35:f7: f4:57:ce:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkYxNDExMC8GA1UEBRMoQ0IyOTM1QTE0NzhCNEY4QjQ0NjMxMDBEQjJFOTVCMDY1 NDQwNjc3MzAeFw0yNDExMjEwNTExMjJaFw0yNDExMjgwNTExMjJaMBgxFjAUBgNV BAMTDTY3M2VjMGZiLTk5MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuYnYII9qxsPHIkClGoNOohIEyuyKR1yZUHUkjWAdWLz8gErngyvgIpsRMkjzS Ha7xnyW+SDRNj0MHQbIV6OcO68nyBo1/u0zdxax0Hn/nIhexI3UJcciKu6YdtrQm jsWo+Ub9ZfssQTtAaRn8KPCvtE6ZyW2d9X7QtIaXkoXDai/jQPJpIppvii2Ojxig 0EKlFQTWPFY5w1G7ypcS9c5KTsIBQoN0Rbru8rJobRGuaoNa8Hy1iv5KwNu0w+K+ EkcBlscILZLGYlv/d8fi3+bIy2/VOgdc3y/m4KIOWdHwl+eXi/8NliztbKeTqShA FHtyrraNSljRZwNUXnXBypOvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU80Ik4a3R rEQJ+TzkBa7BJg3RsGYwHwYDVR0jBBgwFoAUyyk1oUeLT4tEYxANsulbBlRAZ3Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2RjE0LzNGMTI4ODYyMUZE QjExRUZBNzUxRjc0N0M0RjlBRTAyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVoz TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveXlrMW9VZUxUNHRFWXhBTnN1bGJCbFJBWjNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 RjE0LzNGMTI4ODYyMUZEQjExRUZBNzUxRjc0N0M0RjlBRTAyL3l5azFvVWVMVDR0 RVl4QU5zdWxiQmxSQVozTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAINTeLKc2hOR5bAH4YigwARchQJ7zxO0GbJyuL9dT8RINEPmveDC2Ys+ +iWyJ1H8YFWE0pO1pa3smxoHwtCxGykzauF9132/MLU08LN7hHQTzevP54u6N7J3 0qq0d3UrvXHFxFtpn/KkeumB6kjg/Y/7lTkGbthwWRmBamxC0R1D4SKkcQqcAPVA nTs/rtRH2HTQFLHjoW/eh8cOyJsNI5ZtqsiZ4zg/zfgSjRz8lkovkISgXeJk3ZUE F3afJUOL0bvZe+xYEuTuzRuhuiiHQozGkSGM48J1jHY0ZP/rTEOqPnSM91lkPWs3 tBigEDXSbWUWOMGMfmNOCdU19/RXzg8= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:04 2024 by rpki-client on console-ams.rpki-client.org