$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft File: yddu42nMHPDmKcUQpLr0ZeFfteE.mft (raw, json) Hash identifier: ogfHunKTDHNTbfrj0vN9jGMtTXUki7y3gQetFM9hFo8= Subject key identifier: 5A:78:56:59:08:7E:2B:0E:DD:56:0B:1C:F3:5A:D3:13:9A:E7:DC:9C Authority key identifier: C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 Certificate issuer: /CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Certificate serial: 0352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft Manifest number: 034E Signing time: Tue 07 May 2024 02:53:46 +0000 Manifest this update: Tue 07 May 2024 02:53:46 +0000 Manifest next update: Tue 14 May 2024 02:53:46 +0000 Files and hashes: 1: yddu42nMHPDmKcUQpLr0ZeFfteE.crl (hash: E+JRro3PrFckc5yaDZ8NXMsLkABqJ6nKi+j5iWqhpiY=) 2: AD9D02406C6811ECB7C0925AC4F9AE02.roa (hash: 3m69N55k503nBZXkA2Wc4jTSELjgmgkJcqb5mw8T6ng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Validity Not Before: May 7 02:53:46 2024 GMT Not After : May 14 02:53:46 2024 GMT Subject: CN=663997ba-7f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:21:9f:94:b5:96:21:c0:f0:0f:12:29:78: 43:47:80:d2:8f:27:82:64:47:2b:06:fd:10:3b:0a: 23:7e:de:42:21:30:bb:c1:9d:fc:3e:09:a3:f2:23: 3d:cc:8b:03:66:63:01:63:52:6a:76:be:cb:bd:01: 9a:1c:35:86:99:2c:75:57:43:ad:84:7b:b4:d6:7e: 59:b7:f6:0b:2b:63:06:37:2f:a5:58:b5:7e:a3:a5: 66:68:fe:57:b1:b7:05:76:68:ff:29:7b:aa:a1:77: eb:73:26:cb:03:65:3b:e5:c5:1c:b4:5a:af:ef:e4: 69:c0:24:b6:1e:72:75:24:34:47:91:93:ca:f2:19: 3f:23:05:06:d3:53:a2:5a:cc:36:a2:0e:23:c4:76: 8d:b2:29:60:45:b2:6f:2e:fe:3a:70:7d:c0:8f:75: 94:e3:11:ab:b9:fa:1a:4b:bf:c2:9c:53:8e:cf:5f: 89:03:67:79:ca:bc:5c:5e:be:d0:28:b3:36:e5:f7: 66:ff:de:e3:27:dd:5c:4c:da:59:40:e6:a1:23:3f: 86:b8:40:6f:a6:80:f1:7e:9a:1a:23:7f:02:d2:5b: d2:3d:c0:b6:14:47:79:47:db:fb:83:ec:37:88:4f: 59:f1:b7:0b:90:1f:4a:1c:59:f3:5a:69:72:f7:06: b7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:78:56:59:08:7E:2B:0E:DD:56:0B:1C:F3:5A:D3:13:9A:E7:DC:9C X509v3 Authority Key Identifier: keyid:C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:18:34:ec:d9:a4:00:7b:7f:8d:2f:de:95:74:10:f8:a2:df: cd:14:1f:9b:00:dd:71:48:35:a1:75:73:58:19:22:d6:8c:1f: 20:a1:cd:c2:aa:84:df:15:1e:a1:5d:09:f9:7f:8d:d0:87:65: a5:4b:3a:a8:68:af:80:5f:17:97:37:ad:37:76:49:b7:4d:4b: e4:2f:e0:51:c9:e2:df:80:89:ec:51:17:dd:36:2f:04:59:8c: 39:a0:76:72:d0:ba:61:ec:73:d0:4e:aa:c2:fc:ec:a2:6d:88: 8f:b9:af:a7:1f:52:6b:08:49:6f:13:29:f8:65:76:c3:b8:5b: e5:fa:d9:7c:ed:22:f3:f7:02:64:6f:9f:ee:7c:ba:f0:f9:25: ca:bb:5a:6d:0e:23:7a:9c:2a:7a:13:32:1c:1e:5c:b2:47:02: dd:49:87:88:b5:ee:97:ce:73:43:cc:e1:ba:43:0c:7c:a5:12: 1a:18:86:0b:fa:76:cc:cc:a6:c6:a6:3c:0e:e4:de:51:16:be: ad:44:3b:04:65:3a:82:b2:98:14:0d:28:2b:5f:8a:bb:15:ac: fe:ab:2b:d8:e7:70:33:24:8a:b4:29:55:c6:f3:5b:3d:ed:c7: f7:a7:08:d9:e5:0e:af:6f:b2:b1:ab:a6:b6:67:08:83:67:0f: 47:6a:13:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTkxMTAvBgNVBAUTKEM5RDc2RUUzNjlDQzFDRjBFNjI5QzUxMEE0QkFGNDY1 RTE1RkI1RTEwHhcNMjQwNTA3MDI1MzQ2WhcNMjQwNTE0MDI1MzQ2WjAYMRYwFAYD VQQDEw02NjM5OTdiYS03ZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7shn5S1liHA8A8SKXhDR4DSjyeCZEcrBv0QOwojft5CITC7wZ38Pgmj8iM9 zIsDZmMBY1Jqdr7LvQGaHDWGmSx1V0OthHu01n5Zt/YLK2MGNy+lWLV+o6VmaP5X sbcFdmj/KXuqoXfrcybLA2U75cUctFqv7+RpwCS2HnJ1JDRHkZPK8hk/IwUG01Oi Wsw2og4jxHaNsilgRbJvLv46cH3Aj3WU4xGrufoaS7/CnFOOz1+JA2d5yrxcXr7Q KLM25fdm/97jJ91cTNpZQOahIz+GuEBvpoDxfpoaI38C0lvSPcC2FEd5R9v7g+w3 iE9Z8bcLkB9KHFnzWmly9wa3fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFp4VlkI fisO3VYLHPNa0xOa59ycMB8GA1UdIwQYMBaAFMnXbuNpzBzw5inFEKS69GXhX7Xh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1OS9BQjYxMTFCNDZD NjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQRG1LY1VRcExyMFplRmZ0 ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lkZHU0Mm5NSFBEbUtjVVFwTHIwWmVGZnRlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1OS9BQjYxMTFCNDZDNjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQ RG1LY1VRcExyMFplRmZ0ZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkGDTs2aQAe3+NL96VdBD4ot/NFB+bAN1xSDWhdXNYGSLWjB8goc3C qoTfFR6hXQn5f43Qh2WlSzqoaK+AXxeXN603dkm3TUvkL+BRyeLfgInsURfdNi8E WYw5oHZy0Lph7HPQTqrC/OyibYiPua+nH1JrCElvEyn4ZXbDuFvl+tl87SLz9wJk b5/ufLrw+SXKu1ptDiN6nCp6EzIcHlyyRwLdSYeIte6XznNDzOG6Qwx8pRIaGIYL +nbMzKbGpjwO5N5RFr6tRDsEZTqCspgUDSgrX4q7Faz+qyvY53AzJIq0KVXG81s9 7cf3pwjZ5Q6vb7Kxq6a2ZwiDZw9HahNJ -----END CERTIFICATE-----Generated at Tue May 7 03:49:59 2024 by rpki-client on console-ams.rpki-client.org