$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft File: yvg06LwFd8t93bA-7UaRLns0ccw.mft (raw, json) Hash identifier: dOU9JafQu48rI+U2OD7Te7ig1NdJkCVd2sn7UXC1kQI= Subject key identifier: 30:CF:87:88:F0:5B:1D:A8:18:2F:6E:F1:6F:DE:24:36:07:65:50:92 Authority key identifier: CA:F8:34:E8:BC:05:77:CB:7D:DD:B0:3E:ED:46:91:2E:7B:34:71:CC Certificate issuer: /CN=A9158D5B/serialNumber=CAF834E8BC0577CB7DDDB03EED46912E7B3471CC Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft Manifest number: 1F Signing time: Sun 15 Sep 2024 10:22:18 +0000 Manifest this update: Sun 15 Sep 2024 10:22:17 +0000 Manifest next update: Sun 22 Sep 2024 10:22:17 +0000 Files and hashes: 1: yvg06LwFd8t93bA-7UaRLns0ccw.crl (hash: SNZLmNpejGLdt8jIBD3YESke6yQYLojgPQSOMWhjGDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.crl rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B/serialNumber=CAF834E8BC0577CB7DDDB03EED46912E7B3471CC Validity Not Before: Sep 15 10:22:17 2024 GMT Not After : Sep 22 10:22:17 2024 GMT Subject: CN=66e6b55a-5137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a3:ba:85:72:cb:1b:58:a3:7c:0f:a7:19:ab: 27:91:0a:57:9c:95:31:00:6a:d4:3a:d3:17:c8:34: d9:9c:53:db:01:7e:fe:11:77:43:d8:dd:e3:a2:f8: 29:ae:6e:91:bf:70:88:da:88:48:d2:57:42:d8:f8: c1:81:61:67:19:78:e9:0c:7d:35:4f:e7:7f:21:e4: 3d:16:af:1b:95:64:a8:c5:e4:27:7e:5f:08:d5:d4: 44:c2:a4:67:10:22:17:d0:20:f6:09:a8:65:ff:8a: 7c:4f:62:96:a7:63:e4:6c:db:3f:0f:0f:53:7a:0f: e7:0c:10:5f:7f:3a:60:c2:04:de:d2:78:04:42:3e: f2:25:41:7f:52:20:fb:fa:2d:2c:fb:93:c4:01:98: 3c:47:67:9d:c3:e6:81:2a:b2:52:fe:96:1c:51:67: 10:5e:28:7b:e4:b8:4f:a4:25:a6:88:0d:11:fc:6e: d0:b9:47:43:b5:f9:21:57:68:56:84:b6:e6:fd:b0: e9:6c:02:dc:b0:02:4f:14:eb:44:03:50:a7:27:cd: 64:be:69:f1:1a:c9:b7:95:09:59:97:25:67:ee:a4: 99:01:66:0c:ea:ef:f2:0f:04:ae:b7:30:6d:75:f9: 24:a5:26:bd:23:f6:2e:3e:2d:a2:d6:12:40:e2:58: 23:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CF:87:88:F0:5B:1D:A8:18:2F:6E:F1:6F:DE:24:36:07:65:50:92 X509v3 Authority Key Identifier: keyid:CA:F8:34:E8:BC:05:77:CB:7D:DD:B0:3E:ED:46:91:2E:7B:34:71:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:12:86:76:07:85:0b:26:e1:8f:41:7b:be:c2:76:05:56:a0: f6:82:e3:c5:a9:cd:bc:4b:6b:15:15:03:d0:90:4a:1e:52:11: 1b:ad:de:a7:e6:25:31:ae:33:f3:4e:84:2d:be:4c:6f:ef:12: 2d:0e:ff:9d:09:92:83:e6:3b:ee:10:0c:3f:56:60:3c:d1:2e: 4f:d3:e4:21:99:a4:1c:ab:0c:a6:5d:75:16:bb:1b:2f:15:f1: 91:90:e3:f4:c0:25:ef:76:4b:cf:4a:8d:cd:99:53:38:3c:c2: 76:86:93:de:2d:f8:a5:d7:74:2d:3c:e9:ff:63:b1:e4:4d:bc: b5:14:43:0b:38:78:30:16:22:58:92:d8:ed:14:59:ff:3f:cb: 54:ed:d4:27:a5:e2:76:0a:54:12:27:6e:d1:ba:60:95:20:06: 1c:6d:b5:eb:e2:9a:c3:12:65:1a:f7:e8:5e:33:87:a4:8f:70: 7f:fe:d6:b4:ab:bd:4d:99:43:ee:33:01:9f:f7:77:7a:48:25: 9c:91:39:1e:7d:20:b4:6a:91:4c:16:c8:a3:a1:89:16:2e:2f: c3:1f:c7:3a:a3:49:e0:db:91:af:4a:66:f6:ff:4f:c4:cd:74: 26:32:24:06:3f:7b:fa:27:dc:6d:01:62:41:97:a4:59:6d:f7: 5e:52:32:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEQ1QjExMC8GA1UEBRMoQ0FGODM0RThCQzA1NzdDQjdERERCMDNFRUQ0NjkxMkU3 QjM0NzFDQzAeFw0yNDA5MTUxMDIyMTdaFw0yNDA5MjIxMDIyMTdaMBgxFjAUBgNV BAMTDTY2ZTZiNTVhLTUxMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVo7qFcssbWKN8D6cZqyeRCleclTEAatQ60xfINNmcU9sBfv4Rd0PY3eOi+Cmu bpG/cIjaiEjSV0LY+MGBYWcZeOkMfTVP538h5D0WrxuVZKjF5Cd+XwjV1ETCpGcQ IhfQIPYJqGX/inxPYpanY+Rs2z8PD1N6D+cMEF9/OmDCBN7SeARCPvIlQX9SIPv6 LSz7k8QBmDxHZ53D5oEqslL+lhxRZxBeKHvkuE+kJaaIDRH8btC5R0O1+SFXaFaE tub9sOlsAtywAk8U60QDUKcnzWS+afEaybeVCVmXJWfupJkBZgzq7/IPBK63MG11 +SSlJr0j9i4+LaLWEkDiWCNlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMM+HiPBb HagYL27xb94kNgdlUJIwHwYDVR0jBBgwFoAUyvg06LwFd8t93bA+7UaRLns0ccww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RDVCLzg0QjJGQkQ0NDVC NzExRUZBNkRGRDAzMkM0RjlBRTAyL3l2ZzA2THdGZDh0OTNiQS03VWFSTG5zMGNj dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveXZnMDZMd0ZkOHQ5M2JBLTdVYVJMbnMwY2N3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 RDVCLzg0QjJGQkQ0NDVCNzExRUZBNkRGRDAzMkM0RjlBRTAyL3l2ZzA2THdGZDh0 OTNiQS03VWFSTG5zMGNjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAUShnYHhQsm4Y9Be77CdgVWoPaC48WpzbxLaxUVA9CQSh5SERut3qfm JTGuM/NOhC2+TG/vEi0O/50JkoPmO+4QDD9WYDzRLk/T5CGZpByrDKZddRa7Gy8V 8ZGQ4/TAJe92S89Kjc2ZUzg8wnaGk94t+KXXdC086f9jseRNvLUUQws4eDAWIliS 2O0UWf8/y1Tt1Cel4nYKVBInbtG6YJUgBhxttevimsMSZRr36F4zh6SPcH/+1rSr vU2ZQ+4zAZ/3d3pIJZyROR59ILRqkUwWyKOhiRYuL8MfxzqjSeDbka9KZvb/T8TN dCYyJAY/e/on3G0BYkGXpFlt915SMhU= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:33 2024 by rpki-client on console-ams.rpki-client.org