$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft File: yzDTXHDfyGaoN8rt_vzm_sv8W18.mft (raw, json) Hash identifier: lnabR/dWPoKhM52VeaDnbDDOVBYXdV7RCqj5sqO0ZGI= Subject key identifier: E0:DD:A2:95:2C:95:1B:2B:9B:48:8B:87:7E:9F:F9:B2:EB:61:61:04 Authority key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F Certificate issuer: /CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F Certificate serial: 06D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft Manifest number: 06D1 Signing time: Thu 02 May 2024 23:04:43 +0000 Manifest this update: Thu 02 May 2024 23:04:43 +0000 Manifest next update: Thu 09 May 2024 23:04:43 +0000 Files and hashes: 1: yzDTXHDfyGaoN8rt_vzm_sv8W18.crl (hash: BqfBeHAYjIygKLup1KyfiT2lpthRSw2xKhIq9bwU+Gk=) 2: 588BE670071211EB87554839C4F9AE02.roa (hash: ujXxHhbApMMPTnDuWxcJaWx4r3wmMI3pwTSLIUDnA38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F Validity Not Before: May 2 23:04:43 2024 GMT Not After : May 9 23:04:43 2024 GMT Subject: CN=66341c0b-54b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:b9:eb:bf:31:07:4e:99:f0:ee:aa:06:10: c7:a8:bb:73:f2:34:9f:25:27:77:1e:30:bb:45:d2: 06:7c:2d:8a:c4:23:04:f9:eb:25:aa:0e:b1:03:94: ed:b9:d0:ed:73:56:a7:be:cb:79:53:23:be:04:4a: 3b:ba:92:30:a9:0e:ef:d2:ce:8d:41:5e:8b:61:58: 25:69:72:1e:07:f1:3f:56:9a:c6:64:ef:45:11:6b: 52:53:20:88:33:f2:c3:70:6c:f7:3a:6e:bb:32:45: 9c:79:34:e0:6c:65:cc:1b:ab:fd:83:15:97:bd:de: 63:a3:29:97:e5:7d:10:83:5f:89:78:01:30:f2:d6: ce:f8:a9:4d:e6:2d:e9:b1:97:b2:72:82:04:a6:77: d0:4d:33:1b:20:b9:ee:7d:d2:21:b0:30:0e:1e:d5: d7:12:d2:af:3a:4a:48:9e:fa:fb:9a:7c:dc:d8:22: 5b:46:96:e0:ae:b2:04:25:ed:55:12:18:e0:74:cf: 77:da:4a:99:1d:e9:47:a0:11:49:9d:8c:ee:42:3b: 8e:2c:bc:32:a9:28:a9:0e:ed:9b:f1:fc:97:a0:44: 9e:0c:3f:2b:6c:44:5b:77:e4:36:ee:2b:14:79:44: 94:c1:de:bc:bc:7e:dc:97:53:fe:1b:64:1d:db:3d: e4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DD:A2:95:2C:95:1B:2B:9B:48:8B:87:7E:9F:F9:B2:EB:61:61:04 X509v3 Authority Key Identifier: keyid:CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:dc:1e:36:c6:cd:6b:7f:cd:64:2b:f4:ce:ac:34:4d:1e:ed: 41:77:bf:3f:9a:ae:9a:fe:de:4f:f7:11:22:4c:16:be:6d:47: 74:06:bf:80:3e:72:f3:2c:e8:70:63:17:22:7e:f9:b0:07:d8: 7f:ba:51:61:4a:f0:1e:6d:93:a1:81:3c:fd:68:65:11:ea:68: 59:6f:6e:e4:4b:9d:de:b1:01:fd:fc:4b:37:98:c8:d9:8c:cc: 2e:19:05:54:e7:75:c1:f6:0e:3a:7f:5b:67:c4:b7:b2:f6:47: b5:f2:bb:db:8c:0a:14:da:51:07:c6:19:37:88:ba:7d:3c:b2: 0b:41:47:1e:76:1f:33:85:40:cd:18:88:f1:1a:63:a9:64:7b: d4:b6:ac:24:8b:53:c3:ae:15:06:dc:19:fa:ea:44:2a:6d:63: 51:0b:46:45:64:ac:41:7c:fc:a2:74:22:e9:89:39:58:02:ea: 9a:24:18:85:60:bd:75:8c:88:95:23:09:53:27:f4:24:78:b7: 10:d5:d5:06:54:12:d2:27:06:7d:98:2c:b0:29:ce:9a:94:7a: df:f1:a8:c4:64:fc:8d:f2:d1:b8:cb:77:33:07:06:cc:fe:75: be:fd:7b:f4:6d:e7:84:ad:52:6b:23:83:d2:78:f1:66:e6:c0: eb:1b:42:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYyQ0YxMTAvBgNVBAUTKENCMzBEMzVDNzBERkM4NjZBODM3Q0FFREZFRkNFNkZF Q0JGQzVCNUYwHhcNMjQwNTAyMjMwNDQzWhcNMjQwNTA5MjMwNDQzWjAYMRYwFAYD VQQDEw02NjM0MWMwYi01NGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYq5678xB06Z8O6qBhDHqLtz8jSfJSd3HjC7RdIGfC2KxCME+eslqg6xA5Tt udDtc1anvst5UyO+BEo7upIwqQ7v0s6NQV6LYVglaXIeB/E/VprGZO9FEWtSUyCI M/LDcGz3Om67MkWceTTgbGXMG6v9gxWXvd5joymX5X0Qg1+JeAEw8tbO+KlN5i3p sZeycoIEpnfQTTMbILnufdIhsDAOHtXXEtKvOkpInvr7mnzc2CJbRpbgrrIEJe1V EhjgdM932kqZHelHoBFJnYzuQjuOLLwyqSipDu2b8fyXoESeDD8rbERbd+Q27isU eUSUwd68vH7cl1P+G2Qd2z3k7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODdopUs lRsrm0iLh36f+bLrYWEEMB8GA1UdIwQYMBaAFMsw01xw38hmqDfK7f785v7L/Ftf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjJDRi9GNUMxNEVEMjA3 MTAxMUVCOTdGOUY1MzdDNEY5QUUwMi95ekRUWEhEZnlHYW9OOHJ0X3Z6bV9zdjhX MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l6RFRYSERmeUdhb044cnRfdnptX3N2OFcxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjJDRi9GNUMxNEVEMjA3MTAxMUVCOTdGOUY1MzdDNEY5QUUwMi95ekRUWEhEZnlH YW9OOHJ0X3Z6bV9zdjhXMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDC3B42xs1rf81kK/TOrDRNHu1Bd78/mq6a/t5P9xEiTBa+bUd0Br+A PnLzLOhwYxcifvmwB9h/ulFhSvAebZOhgTz9aGUR6mhZb27kS53esQH9/Es3mMjZ jMwuGQVU53XB9g46f1tnxLey9ke18rvbjAoU2lEHxhk3iLp9PLILQUcedh8zhUDN GIjxGmOpZHvUtqwki1PDrhUG3Bn66kQqbWNRC0ZFZKxBfPyidCLpiTlYAuqaJBiF YL11jIiVIwlTJ/QkeLcQ1dUGVBLSJwZ9mCywKc6alHrf8ajEZPyN8tG4y3czBwbM /nW+/Xv0beeErVJrI4PSePFm5sDrG0JF -----END CERTIFICATE-----Generated at Thu May 2 23:48:42 2024 by rpki-client on console-fra.rpki-client.org