$ rpki-client -vvf rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft File: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft (raw, json) Hash identifier: L685LSu/iZxcGCYkDC0tkBmr2hJhCKyoGI8vG618qh8= Subject key identifier: C9:97:F7:82:B3:3D:10:EF:2D:BA:1C:EB:2A:32:02:25:F1:5A:C4:C9 Authority key identifier: CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09 Certificate issuer: /CN=A919B5BB/serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309 Certificate serial: 2005 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft Manifest number: 1FFC Signing time: Sat 04 May 2024 16:23:00 +0000 Manifest this update: Sat 04 May 2024 16:22:59 +0000 Manifest next update: Sat 11 May 2024 16:22:59 +0000 Files and hashes: 1: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl (hash: 9boBiZLiLrQ8UF9+ULG33tq+xtoAolme5cYYnsd5c78=) 2: C49E2E22FF0111E591C15659C4F9AE02.roa (hash: yTQS466mHs7BS5mengP5a8caAa4dq37tTIGgTXA1kwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8197 (0x2005) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B5BB/serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309 Validity Not Before: May 4 16:22:59 2024 GMT Not After : May 11 16:22:59 2024 GMT Subject: CN=663660e3-13cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:99:61:fb:d4:61:53:5b:11:1d:51:04:af:e2: 1e:93:cf:8a:48:2c:d2:03:75:8c:17:4a:84:0a:6b: 82:1a:bc:da:18:c8:40:d3:1d:5e:e8:0e:35:46:d0: d7:2c:ac:3e:26:88:de:41:15:00:3f:b2:47:a3:e5: c1:df:f4:79:a3:69:c9:51:b2:2f:b1:08:1f:e1:aa: f2:ec:55:1a:de:ce:b4:75:26:ef:e6:1e:6c:33:a2: 91:18:13:14:bc:cd:93:34:12:38:e8:bd:96:42:33: 08:2f:bd:15:46:ae:88:8a:f9:e3:8c:5c:14:4f:a7: 50:5b:96:6c:a1:d6:33:d1:07:34:2b:40:8e:3d:6f: 7a:43:fe:95:ef:c9:fc:cd:02:fd:b3:a5:29:60:1d: 35:10:ba:8b:0d:ae:d6:9b:56:e5:7b:93:4f:bb:e5: df:47:66:6a:50:33:68:0f:1d:e6:a5:93:ec:6b:76: 56:0f:b1:61:c4:c1:da:17:bc:23:bc:af:77:a3:82: f5:a2:56:d4:97:b1:1b:68:f8:1c:61:6a:5e:1b:a6: 31:ec:2b:df:ed:a0:af:0f:9c:1f:01:12:06:fb:fb: 72:32:52:0f:dc:79:52:32:b6:b9:9e:84:fc:24:aa: 6f:00:d2:8c:a3:04:0b:14:18:d9:38:f8:94:7e:a6: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:97:F7:82:B3:3D:10:EF:2D:BA:1C:EB:2A:32:02:25:F1:5A:C4:C9 X509v3 Authority Key Identifier: keyid:CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:24:10:8c:31:1a:81:99:a8:17:b5:6c:c0:ec:e6:2b:35:10: 6d:cb:39:2b:36:fa:9e:a9:d4:78:aa:62:ed:03:ad:97:f7:47: 2b:52:01:27:2d:41:59:3f:e3:7d:af:51:b5:ca:11:04:e0:6f: 9d:8b:ab:14:19:d5:7e:0e:aa:21:ff:b6:f7:29:55:ce:66:12: f5:fc:ab:a7:06:a4:8a:af:3f:6d:f2:a1:be:48:69:b2:48:cb: 8d:e3:7f:a0:28:88:f4:38:40:e2:1a:28:ed:6d:ad:14:8c:44: a7:0b:5b:bd:94:d2:2f:e0:b3:ec:c1:21:8d:4b:4d:93:18:8d: 50:81:46:e6:56:2b:11:e8:9d:a9:01:f5:92:ee:d4:ee:69:1c: ae:ee:e1:b0:de:6e:b0:25:ca:04:f7:46:00:cd:68:f7:60:90: 66:3c:3d:67:0b:40:d1:6f:cb:cf:2f:d8:fb:f6:90:f9:b9:88: 8f:ac:2c:88:43:32:4c:fb:36:24:df:a4:20:9e:45:9c:c8:18: 3d:7c:7d:ad:88:65:a1:f7:97:40:ed:eb:85:08:9a:94:db:47: ef:85:12:22:9f:56:3b:18:23:54:62:fe:56:fd:b8:37:06:0a: f4:ce:0f:ba:5a:93:db:f3:16:21:e8:e7:f5:9d:72:03:65:2e: 70:7b:96:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI1QkIxMTAvBgNVBAUTKENBQzQ0NzhGMEZERDlBRTQxRTI0RTlGQzY3Rjg1MUZG NDNDMzMzMDkwHhcNMjQwNTA0MTYyMjU5WhcNMjQwNTExMTYyMjU5WjAYMRYwFAYD VQQDEw02NjM2NjBlMy0xM2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35lh+9RhU1sRHVEEr+Iek8+KSCzSA3WMF0qECmuCGrzaGMhA0x1e6A41RtDX LKw+JojeQRUAP7JHo+XB3/R5o2nJUbIvsQgf4ary7FUa3s60dSbv5h5sM6KRGBMU vM2TNBI46L2WQjMIL70VRq6IivnjjFwUT6dQW5ZsodYz0Qc0K0COPW96Q/6V78n8 zQL9s6UpYB01ELqLDa7Wm1ble5NPu+XfR2ZqUDNoDx3mpZPsa3ZWD7FhxMHaF7wj vK93o4L1olbUl7EbaPgcYWpeG6Yx7Cvf7aCvD5wfARIG+/tyMlIP3HlSMra5noT8 JKpvANKMowQLFBjZOPiUfqbowQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmX94Kz PRDvLboc6yoyAiXxWsTJMB8GA1UdIwQYMBaAFMrER48P3ZrkHiTp/Gf4Uf9DwzMJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjVCQi80NEJCQzE0Q0ZG MDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11UWVKT244Wl9oUl8wUERN d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lzUkhqd19kbXVRZUpPbjhaX2hSXzBQRE13ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjVCQi80NEJCQzE0Q0ZGMDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11 UWVKT244Wl9oUl8wUERNd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFJBCMMRqBmagXtWzA7OYrNRBtyzkrNvqeqdR4qmLtA62X90crUgEn LUFZP+N9r1G1yhEE4G+di6sUGdV+Dqoh/7b3KVXOZhL1/KunBqSKrz9t8qG+SGmy SMuN43+gKIj0OEDiGijtba0UjESnC1u9lNIv4LPswSGNS02TGI1QgUbmVisR6J2p AfWS7tTuaRyu7uGw3m6wJcoE90YAzWj3YJBmPD1nC0DRb8vPL9j79pD5uYiPrCyI QzJM+zYk36QgnkWcyBg9fH2tiGWh95dA7euFCJqU20fvhRIin1Y7GCNUYv5W/bg3 Bgr0zg+6WpPb8xYh6Of1nXIDZS5we5bb -----END CERTIFICATE-----Generated at Sat May 4 17:19:49 2024 by rpki-client on console-fra.rpki-client.org