$ rpki-client -vvf rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft File: YfRdxU9H4lL6xlUt27OWWFTGyAE.mft (raw, json) Hash identifier: 87Qy8AfgKcyltGGNcxaBsx9y+W6fBT1+Z5VTxgmY8cs= Subject key identifier: 68:B9:77:6F:85:3D:F4:76:D8:43:EB:75:1E:DB:61:D2:05:8C:1C:9A Authority key identifier: 61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01 Certificate issuer: /CN=A9162CCE/serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801 Certificate serial: 0527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft Manifest number: 0521 Signing time: Sat 01 Jun 2024 02:02:54 +0000 Manifest this update: Sat 01 Jun 2024 02:02:54 +0000 Manifest next update: Sat 08 Jun 2024 02:02:54 +0000 Files and hashes: 1: YfRdxU9H4lL6xlUt27OWWFTGyAE.crl (hash: ixDVJ7EGW9/QRJ9EpDlbgzNziN3HZ5qvg9SLXL3xmoU=) 2: 6D5F7C74B99611EBB5E9AE5EC4F9AE02.roa (hash: inV57aEFQYsgNDwEQlzRsIvBso5mFUr5urdtIa2D6os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1319 (0x527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162CCE/serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801 Validity Not Before: Jun 1 02:02:54 2024 GMT Not After : Jun 8 02:02:54 2024 GMT Subject: CN=665a814e-1815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:a6:a8:6f:78:57:62:a2:44:eb:48:0d:62: 52:72:8b:56:4f:d6:7d:8c:e4:c9:80:2d:d3:23:59: 80:02:5f:aa:0b:28:d9:3a:22:f5:71:7b:da:7c:53: ac:0f:e1:f3:21:fc:4f:55:15:20:0b:d3:ad:0c:73: 8f:c1:1d:f6:52:00:55:5d:99:22:2c:c4:81:79:c4: f3:86:9f:86:48:f5:81:a1:93:75:fd:8d:60:48:1c: 52:b9:8a:47:7a:60:7d:78:30:ca:d4:b0:82:5b:a3: 3b:8a:ea:77:9d:b0:a4:83:01:03:ba:48:6a:39:25: e6:25:28:22:15:04:58:3a:0d:17:5a:31:56:d2:f8: b0:6a:a4:ba:1a:f6:38:3c:84:14:43:2a:fe:e7:a1: df:f6:ae:40:d9:fe:a6:8b:c1:be:bb:25:c8:e1:08: e0:48:b5:08:09:3c:24:37:fe:fd:e0:7d:2a:bb:18: 4f:98:23:44:d4:df:1d:09:35:56:d1:29:11:0f:76: ff:63:48:2f:e8:55:0e:db:54:3c:61:4f:d6:fc:78: e3:59:ea:cc:f0:62:53:30:c2:7c:95:af:ba:a6:1d: f1:a4:7a:6e:2a:3a:03:fa:56:11:98:e2:94:02:ff: 9c:e2:6e:d0:22:67:67:51:ec:78:7a:d9:60:05:ab: 3d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B9:77:6F:85:3D:F4:76:D8:43:EB:75:1E:DB:61:D2:05:8C:1C:9A X509v3 Authority Key Identifier: keyid:61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:87:57:54:60:b4:6a:0f:d1:3e:b9:23:b9:b1:d4:73:bf:aa: 54:e7:72:91:c9:cb:c8:ef:f1:a1:76:2d:e8:8b:61:20:e4:69: 2f:64:6d:ab:32:72:f2:29:a8:77:ea:f4:ec:c1:34:16:eb:1c: 21:b2:ef:27:21:ee:a3:7b:36:ad:42:14:e8:bf:f7:ce:f9:87: aa:7d:d4:e3:8f:76:1f:2a:97:a4:ba:14:50:28:37:77:6b:83: 03:89:94:1c:79:22:ab:d2:e3:87:56:77:3f:54:49:70:78:f8: 50:40:16:57:6b:22:3a:b8:6e:55:20:9f:79:de:f9:26:0a:9d: 0b:ef:3f:9c:1c:5e:4d:c4:bd:9c:da:a4:3a:83:5d:a4:ab:f5: cf:57:e3:b9:49:76:00:65:bd:b7:09:e2:40:5f:7f:f6:03:bf: 35:88:e8:d5:14:78:d7:69:59:52:45:65:a8:06:82:c0:8f:80: 93:7c:31:6e:70:e6:9b:04:45:77:ff:69:12:fe:47:82:c4:1c: fc:34:45:6b:5f:60:1b:52:e8:dd:d8:d6:8d:98:c0:c2:4b:ff: c6:ce:36:ad:0b:f6:dc:fd:e6:69:a7:fc:0d:09:96:dd:76:9f: e5:5a:a6:d3:be:01:ef:c3:5e:1c:69:25:c0:9d:b6:a2:97:74: d4:be:8c:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDQ0UxMTAvBgNVBAUTKDYxRjQ1REM1NEY0N0UyNTJGQUM2NTUyRERCQjM5NjU4 NTRDNkM4MDEwHhcNMjQwNjAxMDIwMjU0WhcNMjQwNjA4MDIwMjU0WjAYMRYwFAYD VQQDEw02NjVhODE0ZS0xODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgGmqG94V2KiROtIDWJScotWT9Z9jOTJgC3TI1mAAl+qCyjZOiL1cXvafFOs D+HzIfxPVRUgC9OtDHOPwR32UgBVXZkiLMSBecTzhp+GSPWBoZN1/Y1gSBxSuYpH emB9eDDK1LCCW6M7iup3nbCkgwEDukhqOSXmJSgiFQRYOg0XWjFW0viwaqS6GvY4 PIQUQyr+56Hf9q5A2f6mi8G+uyXI4QjgSLUICTwkN/794H0quxhPmCNE1N8dCTVW 0SkRD3b/Y0gv6FUO21Q8YU/W/HjjWerM8GJTMMJ8la+6ph3xpHpuKjoD+lYRmOKU Av+c4m7QImdnUex4etlgBas9dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGi5d2+F PfR22EPrdR7bYdIFjByaMB8GA1UdIwQYMBaAFGH0XcVPR+JS+sZVLduzllhUxsgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkNDRS9CNzU1REEyOEI5 OTQxMUVCOTNGODI2NURDNEY5QUUwMi9ZZlJkeFU5SDRsTDZ4bFV0MjdPV1dGVEd5 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lmUmR4VTlINGxMNnhsVXQyN09XV0ZUR3lBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkNDRS9CNzU1REEyOEI5OTQxMUVCOTNGODI2NURDNEY5QUUwMi9ZZlJkeFU5SDRs TDZ4bFV0MjdPV1dGVEd5QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnh1dUYLRqD9E+uSO5sdRzv6pU53KRycvI7/Ghdi3oi2Eg5GkvZG2r MnLyKah36vTswTQW6xwhsu8nIe6jezatQhTov/fO+YeqfdTjj3YfKpekuhRQKDd3 a4MDiZQceSKr0uOHVnc/VElwePhQQBZXayI6uG5VIJ953vkmCp0L7z+cHF5NxL2c 2qQ6g12kq/XPV+O5SXYAZb23CeJAX3/2A781iOjVFHjXaVlSRWWoBoLAj4CTfDFu cOabBEV3/2kS/keCxBz8NEVrX2AbUujd2NaNmMDCS//GzjatC/bc/eZpp/wNCZbd dp/lWqbTvgHvw14caSXAnbail3TUvozd -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:27 2024 by rpki-client on console-ams.rpki-client.org