$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft File: YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft (raw, json) Hash identifier: thDy7HKxu2MYCc8HpnB8GHrNtKSCSqiNliiyG8D/XzA= Subject key identifier: 20:CC:ED:E3:2B:85:A7:5B:51:10:25:93:F3:FB:E2:14:8E:69:DE:74 Authority key identifier: 61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A Certificate issuer: /CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft Manifest number: 43 Signing time: Fri 17 May 2024 08:09:52 +0000 Manifest this update: Fri 17 May 2024 08:09:52 +0000 Manifest next update: Fri 24 May 2024 08:09:52 +0000 Files and hashes: 1: YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl (hash: J5O6voOck0TIo6VwvTdIoUDf+wAZ/hFeYcLC0YotMlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Validity Not Before: May 17 08:09:52 2024 GMT Not After : May 24 08:09:52 2024 GMT Subject: CN=664710d0-2f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:ea:c1:c7:f1:36:c8:ea:c1:df:b3:5c:52: c7:8e:c6:8b:c8:57:72:57:2c:73:6f:3a:9e:29:81: 17:3e:a7:8d:21:ad:86:97:14:3a:f0:bd:52:dc:ec: 38:ce:22:28:15:3b:d5:dc:3c:d8:2e:4b:2c:76:52: 89:69:e8:af:0e:eb:b6:9f:af:54:85:05:e9:cf:39: fa:92:69:26:0b:ec:f9:52:9c:f1:25:ac:90:7c:cf: 28:71:7f:cf:f2:97:df:18:8b:27:f1:f7:8f:d7:5d: ef:5e:8e:29:67:d3:90:c2:57:92:5c:73:9b:3b:61: 9a:48:a5:99:8c:4a:79:30:2d:0a:c7:94:50:b8:fc: e1:86:22:be:72:2d:00:82:d3:65:21:9a:3d:68:51: 20:a7:8d:fe:d5:2d:13:a9:26:5d:04:d9:99:b0:8e: 0d:df:47:19:d7:3b:64:57:a5:03:93:77:4a:ee:8f: 9d:0b:8a:56:c6:f5:e0:14:18:a2:1e:17:7f:e6:81: 57:2d:fb:e3:1c:ab:3c:8e:76:da:6b:95:6d:7e:f2: 9a:d4:c6:8d:5e:c7:54:74:c1:08:e8:2b:e5:d0:9d: e0:65:18:6e:e8:b2:5d:93:31:58:df:3b:a9:15:3e: 5c:24:88:0e:bc:5b:9c:dc:9d:d7:74:5d:e5:a5:c9: 82:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CC:ED:E3:2B:85:A7:5B:51:10:25:93:F3:FB:E2:14:8E:69:DE:74 X509v3 Authority Key Identifier: keyid:61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:95:d3:d6:58:63:f1:5f:9e:83:c8:ec:61:25:cc:c5:ef:dc: c0:bf:9f:f2:75:4a:0e:87:fe:3d:8f:9e:ed:6f:22:12:9b:04: 3b:a2:8f:0f:76:7e:31:d6:84:c0:4b:b2:cc:d8:dc:2a:d8:7b: 2e:ac:01:96:88:c0:27:7e:a7:bf:9a:6e:69:7d:05:9e:70:90: fb:9e:dd:a1:18:3d:5a:f2:b7:2f:82:07:9c:a7:f2:2e:50:a1: 70:bc:ad:69:31:06:aa:39:69:e1:e6:9d:52:2b:cc:a4:e8:a9: 86:12:8c:24:c1:df:70:8e:56:9f:b0:fe:b5:cd:c4:0f:ae:2e: ec:a5:a4:24:0d:ed:20:41:e0:6e:f6:c2:e4:8a:25:93:e4:39: cd:06:26:81:38:26:9a:e7:e7:03:51:05:c5:09:43:4c:b3:f1: 76:cc:c3:d7:63:d1:27:67:fb:1a:81:12:bf:4f:60:f3:fa:b4: 53:ad:8e:54:24:1f:f9:b3:c5:7a:d5:c6:fa:f0:ba:9d:68:f1: 35:a7:46:b6:eb:c4:df:c9:9e:25:28:a7:37:51:85:5d:e0:61: a3:e6:dd:87:58:51:5c:92:05:6a:d6:45:eb:39:b2:b2:35:23: 2a:8b:31:78:ea:98:2e:5b:ab:79:2f:07:34:6d:08:aa:da:cf: 41:15:5f:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUQxNjExMC8GA1UEBRMoNjEzNTQ5QThENTk2MzczRDg2NUEyMjBFMkVCMUE4NjA0 QkQ3NTE4QTAeFw0yNDA1MTcwODA5NTJaFw0yNDA1MjQwODA5NTJaMBgxFjAUBgNV BAMTDTY2NDcxMGQwLTJmNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLMOrBx/E2yOrB37NcUseOxovIV3JXLHNvOp4pgRc+p40hrYaXFDrwvVLc7DjO IigVO9XcPNguSyx2Uolp6K8O67afr1SFBenPOfqSaSYL7PlSnPElrJB8zyhxf8/y l98Yiyfx94/XXe9ejiln05DCV5Jcc5s7YZpIpZmMSnkwLQrHlFC4/OGGIr5yLQCC 02Uhmj1oUSCnjf7VLROpJl0E2Zmwjg3fRxnXO2RXpQOTd0ruj50LilbG9eAUGKIe F3/mgVct++McqzyOdtprlW1+8prUxo1ex1R0wQjoK+XQneBlGG7osl2TMVjfO6kV PlwkiA68W5zcndd0XeWlyYI9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIMzt4yuF p1tRECWT8/viFI5p3nQwHwYDVR0jBBgwFoAUYTVJqNWWNz2GWiIOLrGoYEvXUYow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxRDE2LzZFQTMwQjAyQUU5 QzExRUU5MTFBRkI2M0M0RjlBRTAyL1lUVkpxTldXTnoyR1dpSU9MckdvWUV2WFVZ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVRWSnFOV1dOejJHV2lJT0xyR29ZRXZYVVlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx RDE2LzZFQTMwQjAyQUU5QzExRUU5MTFBRkI2M0M0RjlBRTAyL1lUVkpxTldXTnoy R1dpSU9MckdvWUV2WFVZby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABuV09ZYY/FfnoPI7GElzMXv3MC/n/J1Sg6H/j2Pnu1vIhKbBDuijw92 fjHWhMBLsszY3CrYey6sAZaIwCd+p7+abml9BZ5wkPue3aEYPVryty+CB5yn8i5Q oXC8rWkxBqo5aeHmnVIrzKToqYYSjCTB33COVp+w/rXNxA+uLuylpCQN7SBB4G72 wuSKJZPkOc0GJoE4Jprn5wNRBcUJQ0yz8XbMw9dj0Sdn+xqBEr9PYPP6tFOtjlQk H/mzxXrVxvrwup1o8TWnRrbrxN/JniUopzdRhV3gYaPm3YdYUVySBWrWRes5srI1 IyqLMXjqmC5bq3kvBzRtCKraz0EVX9k= -----END CERTIFICATE-----Generated at Fri May 17 10:10:50 2024 by rpki-client on console-fra.rpki-client.org