$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft File: yUpKujMViTObRlHAW5L_4BvLNMk.mft (raw, json) Hash identifier: MbiB8DMhkmMcuG/yrqOhblBqv665UqtN9777nLV7KrE= Subject key identifier: DE:3B:FE:4A:F0:E6:19:58:A9:0F:56:97:43:B2:34:E9:AB:59:CF:98 Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 Certificate issuer: /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft Manifest number: 63 Signing time: Fri 17 May 2024 07:44:08 +0000 Manifest this update: Fri 17 May 2024 07:44:07 +0000 Manifest next update: Fri 24 May 2024 07:44:07 +0000 Files and hashes: 1: yUpKujMViTObRlHAW5L_4BvLNMk.crl (hash: 1Ah0FbmcXwkUXu5kWhVnIGX7ka1rh75o2mriIe0c91o=) 2: 3863960C7E0311EE8BCA7D33C4F9AE02.roa (hash: KLVSwJ7SZxtidXSFtuAYDe/fMNZg+4aJlJuDECdA1Pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Validity Not Before: May 17 07:44:07 2024 GMT Not After : May 24 07:44:07 2024 GMT Subject: CN=66470ac8-71a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2c:7f:05:c9:5c:a3:c8:1e:c7:af:f6:6b:85: aa:8e:5c:e0:c4:24:48:33:60:65:f1:4c:5a:61:7e: c5:6d:db:74:c7:d1:df:36:37:40:f8:7a:70:9d:40: 92:80:6b:1a:ac:dc:c5:19:b3:f1:53:df:47:c6:f3: 83:78:01:1d:cc:aa:9d:95:02:0e:9b:9b:25:9d:28: 85:d3:06:16:65:3a:3f:48:42:6c:52:2e:cd:a3:03: c8:e2:8c:c6:83:89:60:6c:d4:6f:8f:78:7a:00:73: 93:0b:7f:ae:38:8f:91:ad:42:2e:8d:fe:d8:c3:da: 8e:96:20:5a:2c:71:68:24:32:78:de:0e:a5:eb:0b: 76:b1:1d:31:4c:7f:1b:a0:bf:0e:4f:79:9d:e9:70: 3d:4a:16:6c:f7:41:95:e3:1e:36:da:50:da:fb:04: 6c:70:c9:ed:4b:39:8d:2f:14:4e:45:37:13:ae:e2: ff:68:1c:ff:8e:09:15:2d:13:45:5b:5d:ca:6f:da: cf:43:72:21:2a:b7:31:9b:df:f5:90:38:6b:f3:02: 23:ee:80:6b:ab:fd:e5:2a:67:67:0d:89:05:31:76: af:7c:f5:da:e6:3b:34:84:7a:0c:14:45:42:c4:2f: f8:5f:95:03:d1:69:18:63:0a:e0:4c:f1:a4:cf:c9: b1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3B:FE:4A:F0:E6:19:58:A9:0F:56:97:43:B2:34:E9:AB:59:CF:98 X509v3 Authority Key Identifier: keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:e4:81:00:8c:02:b9:ee:04:5c:d3:9a:92:70:0e:6b:ab:e6: 61:0d:8f:57:78:f0:83:ed:fb:ae:42:8c:fb:fc:a9:d5:8a:4b: b4:6a:34:3e:05:ca:74:c4:02:98:e7:3b:fb:28:ac:cf:ed:42: 56:68:72:a5:11:b9:97:03:ca:8b:0e:90:ba:b3:01:a1:51:3a: 06:5d:7e:2a:af:ad:1d:bb:18:13:fc:e9:9f:f7:1b:90:56:d2: c1:17:b5:5a:97:3d:87:eb:cb:6c:af:bc:3d:b5:d1:7b:ff:f1: e4:2a:26:90:82:3a:d8:9f:cf:c7:c2:dc:0f:75:83:9c:55:ec: 43:12:84:98:f9:61:c5:c1:ba:01:cd:3f:85:02:3c:7c:30:00: 02:d5:8a:d6:f4:0d:d3:10:f2:ed:8b:e8:14:94:8d:12:80:e1: b4:66:b3:ac:d4:57:63:fe:43:c9:0f:7c:b4:7d:e1:48:8e:03: b1:71:f9:68:18:4d:b5:9b:0d:5d:a4:c6:bd:32:48:b2:ec:b2: c9:51:31:44:70:be:47:7c:7d:70:45:8e:63:70:58:42:df:76: da:0c:9b:fa:fc:c7:fa:8b:af:df:50:b0:09:4d:50:8b:d7:5e: 72:4b:33:b8:8b:48:c0:2d:d0:38:74:6e:7d:7d:ec:87:9f:f6: 4a:2d:16:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0UyMzExMC8GA1UEBRMoQzk0QTRBQkEzMzE1ODkzMzlCNDY1MUMwNUI5MkZGRTAx QkNCMzRDOTAeFw0yNDA1MTcwNzQ0MDdaFw0yNDA1MjQwNzQ0MDdaMBgxFjAUBgNV BAMTDTY2NDcwYWM4LTcxYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZLH8FyVyjyB7Hr/ZrhaqOXODEJEgzYGXxTFphfsVt23TH0d82N0D4enCdQJKA axqs3MUZs/FT30fG84N4AR3Mqp2VAg6bmyWdKIXTBhZlOj9IQmxSLs2jA8jijMaD iWBs1G+PeHoAc5MLf644j5GtQi6N/tjD2o6WIFoscWgkMnjeDqXrC3axHTFMfxug vw5PeZ3pcD1KFmz3QZXjHjbaUNr7BGxwye1LOY0vFE5FNxOu4v9oHP+OCRUtE0Vb Xcpv2s9DciEqtzGb3/WQOGvzAiPugGur/eUqZ2cNiQUxdq989drmOzSEegwURULE L/hflQPRaRhjCuBM8aTPybGRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3jv+SvDm GVipD1aXQ7I06atZz5gwHwYDVR0jBBgwFoAUyUpKujMViTObRlHAW5L/4BvLNMkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3RTIzL0JFOTdCMEE2N0Q2 NzExRUVCMDZBNDMxMkM0RjlBRTAyL3lVcEt1ak1WaVRPYlJsSEFXNUxfNEJ2TE5N ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVVwS3VqTVZpVE9iUmxIQVc1TF80QnZMTk1rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 RTIzL0JFOTdCMEE2N0Q2NzExRUVCMDZBNDMxMkM0RjlBRTAyL3lVcEt1ak1WaVRP YlJsSEFXNUxfNEJ2TE5Nay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGHkgQCMArnuBFzTmpJwDmur5mENj1d48IPt+65CjPv8qdWKS7RqND4F ynTEApjnO/sorM/tQlZocqURuZcDyosOkLqzAaFROgZdfiqvrR27GBP86Z/3G5BW 0sEXtVqXPYfry2yvvD210Xv/8eQqJpCCOtifz8fC3A91g5xV7EMShJj5YcXBugHN P4UCPHwwAALVitb0DdMQ8u2L6BSUjRKA4bRms6zUV2P+Q8kPfLR94UiOA7Fx+WgY TbWbDV2kxr0ySLLssslRMURwvkd8fXBFjmNwWELfdtoMm/r8x/qLr99QsAlNUIvX XnJLM7iLSMAt0Dh0bn197Ief9kotFhM= -----END CERTIFICATE-----Generated at Fri May 17 08:13:51 2024 by rpki-client on console-fra.rpki-client.org