$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft File: yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json) Hash identifier: TULcoWu8UvKdHfREdkcI6hgJaJXK75wnyrHkUr7FcDE= Subject key identifier: 4D:39:64:7A:13:B1:43:10:BF:61:9D:DC:4A:32:D1:03:46:AE:14:C1 Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 Certificate issuer: /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft Manifest number: 9F Signing time: Wed 15 May 2024 06:55:06 +0000 Manifest this update: Wed 15 May 2024 06:55:06 +0000 Manifest next update: Wed 22 May 2024 06:55:06 +0000 Files and hashes: 1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: o0Wl6wHpIMLXsmtcHcw6hJW+mRQOcazTXN2yI666hiM=) 2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: EWmD2TzId7urN7d4b0zYJ6Grmbtag0AP78b5qR9SOqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Validity Not Before: May 15 06:55:06 2024 GMT Not After : May 22 06:55:06 2024 GMT Subject: CN=66445c4a-d6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:aa:a5:33:00:d8:00:ad:4a:53:95:58:1e: 98:8b:3b:f2:2a:eb:c0:14:91:64:2a:b0:d0:78:87: c0:d4:89:69:83:09:36:20:f2:78:61:fd:e4:0a:45: 20:8a:4e:2a:cd:5a:36:61:72:af:24:6d:d8:98:fb: 1e:66:d1:25:69:59:16:96:62:4a:3c:0f:81:df:41: 84:10:03:a1:45:12:76:cf:54:9f:63:08:1a:a0:fb: 10:a7:f2:01:c5:3b:cd:5f:64:93:4f:42:ea:0d:20: 70:d0:32:de:a4:ee:f0:2e:09:14:f8:26:f8:a0:eb: d0:47:db:66:63:98:88:ab:6a:e2:f1:7b:b5:47:b8: b8:62:30:ca:bc:86:ab:ab:a6:08:ba:5d:10:78:27: 1e:01:9e:94:af:25:a7:1e:c5:97:50:7b:73:7e:6e: 1e:f0:73:15:d2:93:78:60:60:f1:27:70:50:16:1f: 7e:7a:ec:5a:1f:5d:71:6b:57:44:07:48:f7:69:e7: 50:7f:78:85:60:ba:de:3d:38:6c:54:11:fa:41:d1: 7b:49:75:02:d6:cb:b5:f4:57:d0:19:f8:f8:c9:aa: 05:32:09:68:e2:a8:16:35:06:b4:3c:8b:20:de:b2: 80:94:85:10:07:b9:6b:48:93:5e:3b:a2:7a:21:7d: 43:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:39:64:7A:13:B1:43:10:BF:61:9D:DC:4A:32:D1:03:46:AE:14:C1 X509v3 Authority Key Identifier: keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:b3:2e:67:f0:43:15:da:2b:88:43:a4:ba:95:f7:a1:7d:a0: 0d:e4:b0:5f:3d:6d:5f:d0:b6:78:6e:b1:87:36:11:48:66:99: 60:76:aa:bf:fa:e8:a4:38:0b:ce:a6:c8:31:bc:99:8c:55:ec: 8c:b1:5f:f5:bc:0f:19:ae:19:8d:72:31:b6:9f:72:60:ae:d5: 5f:ac:d9:f1:42:9f:fa:74:0a:4e:6f:83:f6:38:e5:8f:bd:ec: a7:56:09:5c:90:0c:57:00:d3:41:74:5d:3b:1f:82:2e:61:9b: d9:b2:f7:12:34:92:1e:9e:c9:84:36:70:03:11:06:36:cf:8f: fd:d8:48:4d:c7:15:e8:28:4e:00:b2:f8:d9:75:19:b9:a5:3f: 52:f1:ec:4c:4b:36:13:63:e9:c0:9c:eb:1b:0f:35:70:34:da: f6:25:37:6f:72:fe:06:91:a6:3b:cf:87:c1:90:8f:1e:3f:ba: 07:1d:a2:92:a5:f4:8e:ab:03:79:7b:b6:0f:a6:45:50:e0:0b: 04:6a:d3:d9:79:f1:36:ec:70:d0:85:ef:59:4b:fa:f8:7c:0a: 34:e6:81:50:c5:5f:bb:c0:b4:49:8d:ce:f0:7d:4f:a3:2d:8c: 54:93:64:8d:c3:eb:cf:b9:53:58:9b:da:69:74:c5:dd:20:c9: 22:74:9e:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5NjkxMTAvBgNVBAUTKEM5OEVGMjJBREZGRjYxM0Y1Njk4MzUzRkM4NUIwQzkw NkRGNDdFOTEwHhcNMjQwNTE1MDY1NTA2WhcNMjQwNTIyMDY1NTA2WjAYMRYwFAYD VQQDEw02NjQ0NWM0YS1kNmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIeqpTMA2ACtSlOVWB6YizvyKuvAFJFkKrDQeIfA1Ilpgwk2IPJ4Yf3kCkUg ik4qzVo2YXKvJG3YmPseZtElaVkWlmJKPA+B30GEEAOhRRJ2z1SfYwgaoPsQp/IB xTvNX2STT0LqDSBw0DLepO7wLgkU+Cb4oOvQR9tmY5iIq2ri8Xu1R7i4YjDKvIar q6YIul0QeCceAZ6UryWnHsWXUHtzfm4e8HMV0pN4YGDxJ3BQFh9+euxaH11xa1dE B0j3aedQf3iFYLrePThsVBH6QdF7SXUC1su19FfQGfj4yaoFMglo4qgWNQa0PIsg 3rKAlIUQB7lrSJNeO6J6IX1D+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE05ZHoT sUMQv2Gd3Eoy0QNGrhTBMB8GA1UdIwQYMBaAFMmO8irf/2E/Vpg1P8hbDJBt9H6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjk2OS8wREIzNDQzMjI2 MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lUOVdtRFVfeUZzTWtHMzBm cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZN3lLdF9fWVQ5V21EVV95RnNNa0czMGZwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mjk2OS8wREIzNDQzMjI2MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lU OVdtRFVfeUZzTWtHMzBmcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCssy5n8EMV2iuIQ6S6lfehfaAN5LBfPW1f0LZ4brGHNhFIZplgdqq/ +uikOAvOpsgxvJmMVeyMsV/1vA8ZrhmNcjG2n3JgrtVfrNnxQp/6dApOb4P2OOWP veynVglckAxXANNBdF07H4IuYZvZsvcSNJIensmENnADEQY2z4/92EhNxxXoKE4A svjZdRm5pT9S8exMSzYTY+nAnOsbDzVwNNr2JTdvcv4GkaY7z4fBkI8eP7oHHaKS pfSOqwN5e7YPpkVQ4AsEatPZefE27HDQhe9ZS/r4fAo05oFQxV+7wLRJjc7wfU+j LYxUk2SNw+vPuVNYm9ppdMXdIMkidJ42 -----END CERTIFICATE-----Generated at Wed May 15 09:27:33 2024 by rpki-client on console-fra.rpki-client.org