$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft File: yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json) Hash identifier: nxOpNKX/vGCcfVY1MWMPoHoRTBvLxRzYCT67m88K1ZA= Subject key identifier: A7:3C:61:01:31:0B:3C:83:2D:4A:3D:9C:9C:37:0B:B7:4C:79:4F:04 Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 Certificate issuer: /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft Manifest number: 15 Signing time: Wed 23 Oct 2024 06:39:34 +0000 Manifest this update: Wed 23 Oct 2024 06:39:33 +0000 Manifest next update: Wed 30 Oct 2024 06:39:33 +0000 Files and hashes: 1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: EM9FG+AtwRzC8BEOybshVcGXm3JyOHtm/bQbbWVgt8s=) 2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: rHJo5UtLh1VULKC52eRZg4xQTH8t25GY8hXDj9/zGnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Validity Not Before: Oct 23 06:39:33 2024 GMT Not After : Oct 30 06:39:33 2024 GMT Subject: CN=67189a25-ef98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:29:45:08:83:30:01:41:4e:5c:91:41:ac:bc: d2:b2:90:23:1f:d1:fd:62:7f:fa:ef:52:f4:12:f5: d9:53:e4:cc:0c:ed:09:34:55:07:bd:ad:09:6c:8f: 38:4a:88:78:56:32:b3:92:84:c3:8a:4d:9b:c1:c4: 02:61:65:b6:1d:64:64:9f:36:fd:bc:70:07:d6:2c: e2:44:57:03:37:d9:13:bb:bd:00:1e:56:47:94:91: 43:55:7a:b9:41:54:09:4b:71:72:ce:15:6a:7b:57: c5:dd:e8:0b:67:88:0c:be:46:66:25:50:4f:b5:33: df:df:2f:1b:1d:ec:4f:3e:66:38:52:6a:ae:f9:f3: 83:6a:0a:4d:0a:d5:de:ae:83:c4:1a:75:1e:d3:9a: 5e:11:00:5a:b0:c3:1d:9a:ef:5b:02:e0:f5:1a:a4: 62:46:22:28:50:48:45:13:f1:75:e1:b1:c2:ad:dd: b4:72:f8:39:01:c7:73:72:4e:72:93:f8:7d:fe:70: ff:35:9a:7e:83:e9:1d:9d:9c:3d:f3:49:dc:56:f0: 5a:3a:16:dd:ac:d9:48:27:c4:c7:86:05:7b:7c:67: eb:2d:71:e7:67:31:ad:3d:e1:45:80:0c:cb:2d:a8: 24:2d:16:29:7b:56:f9:a7:17:9b:70:19:73:23:93: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3C:61:01:31:0B:3C:83:2D:4A:3D:9C:9C:37:0B:B7:4C:79:4F:04 X509v3 Authority Key Identifier: keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:d0:6a:76:d6:d4:be:2e:52:ad:8b:e0:2e:f1:33:0e:06:2d: 6d:12:ff:60:6d:d3:82:07:e8:6a:1d:4e:36:a7:b7:a7:d3:7b: b9:d3:dc:9a:02:14:a0:4f:0a:49:31:a9:18:a0:f2:6c:8d:1a: 0a:cb:45:20:10:20:35:14:a1:e4:c1:91:97:57:e1:ab:7f:8b: 32:68:02:62:9e:28:e1:20:bd:5a:aa:23:05:94:40:a7:bd:96: 9f:18:41:0a:ea:b6:3c:71:ab:04:4b:49:c9:a0:ff:d2:77:39: 80:f0:95:23:d3:a1:cc:36:58:f1:6a:99:cf:d9:b8:2e:0f:e8: f1:da:0e:53:93:f9:0a:83:9b:67:87:a0:e5:6f:d0:e4:4d:64: 58:95:1c:09:4d:c8:cd:16:74:56:f2:69:79:2f:86:cb:6c:3b: 49:e6:27:37:43:3e:da:90:1c:53:34:7f:b0:d1:9e:10:8e:5a: f2:d7:fc:10:65:dd:aa:e5:66:77:08:1b:90:2e:7f:37:6a:20: 94:b8:2e:ec:88:ef:04:4c:2b:ac:a7:fe:d8:06:75:57:36:c7: b5:01:fb:1f:48:bc:aa:ed:24:f0:a2:7a:75:10:56:15:aa:49: 4e:b9:9e:bf:bd:e7:cd:cf:d4:91:54:a0:b2:77:4c:45:89:89: ca:97:e9:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MERBNTExMC8GA1UEBRMoQzg0OUMxRjZFQjhEMUIwQjM3OTRCMDYwQzQ5QzVBOUJE NTNBRDRDOTAeFw0yNDEwMjMwNjM5MzNaFw0yNDEwMzAwNjM5MzNaMBgxFjAUBgNV BAMTDTY3MTg5YTI1LWVmOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAKUUIgzABQU5ckUGsvNKykCMf0f1if/rvUvQS9dlT5MwM7Qk0VQe9rQlsjzhK iHhWMrOShMOKTZvBxAJhZbYdZGSfNv28cAfWLOJEVwM32RO7vQAeVkeUkUNVerlB VAlLcXLOFWp7V8Xd6AtniAy+RmYlUE+1M9/fLxsd7E8+ZjhSaq7584NqCk0K1d6u g8QadR7Tml4RAFqwwx2a71sC4PUapGJGIihQSEUT8XXhscKt3bRy+DkBx3NyTnKT +H3+cP81mn6D6R2dnD3zSdxW8Fo6Ft2s2UgnxMeGBXt8Z+stcednMa094UWADMst qCQtFil7VvmnF5twGXMjk64TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpzxhATEL PIMtSj2cnDcLt0x5TwQwHwYDVR0jBBgwFoAUyEnB9uuNGws3lLBgxJxam9U61Mkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwREE1L0E3MzM3QzZBNzNF RDExRUZCMEJBMDI1QUM0RjlBRTAyL3lFbkI5dXVOR3dzM2xMQmd4SnhhbTlVNjFN ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveUVuQjl1dU5Hd3MzbExCZ3hKeGFtOVU2MU1rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw REE1L0E3MzM3QzZBNzNFRDExRUZCMEJBMDI1QUM0RjlBRTAyL3lFbkI5dXVOR3dz M2xMQmd4SnhhbTlVNjFNay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALPQanbW1L4uUq2L4C7xMw4GLW0S/2Bt04IH6GodTjant6fTe7nT3JoC FKBPCkkxqRig8myNGgrLRSAQIDUUoeTBkZdX4at/izJoAmKeKOEgvVqqIwWUQKe9 lp8YQQrqtjxxqwRLScmg/9J3OYDwlSPTocw2WPFqmc/ZuC4P6PHaDlOT+QqDm2eH oOVv0ORNZFiVHAlNyM0WdFbyaXkvhstsO0nmJzdDPtqQHFM0f7DRnhCOWvLX/BBl 3arlZncIG5AufzdqIJS4LuyI7wRMK6yn/tgGdVc2x7UB+x9IvKrtJPCienUQVhWq SU65nr+9583P1JFUoLJ3TEWJicqX6Z8= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:56 2024 by rpki-client on console-ams.rpki-client.org