$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft File: yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json) Hash identifier: dtl+AEtVOOtHUHsuTMPRvgSlyDQCFLisERjfjTjEcAw= Subject key identifier: 1E:0F:BE:DD:01:F0:AD:F7:27:43:57:A3:9B:B8:E3:0D:11:48:9D:E2 Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft Manifest number: C7 Signing time: Fri 03 May 2024 06:22:26 +0000 Manifest this update: Fri 03 May 2024 06:22:25 +0000 Manifest next update: Fri 10 May 2024 06:22:25 +0000 Files and hashes: 1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: wNrH8R2hXi/kH+4C38EPKAm83J9yfVfQuBpBkrxdmYc=) 2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: 0gX4UrZECG0FToJDBxjG8qBIchgjnj/y4QahR0VE2wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Validity Not Before: May 3 06:22:25 2024 GMT Not After : May 10 06:22:25 2024 GMT Subject: CN=663482a2-1bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2f:6f:2e:be:01:46:de:25:cd:52:d4:18:92: a8:bf:16:d2:cf:09:16:77:6a:a6:bb:43:a9:35:05: 75:3f:79:88:89:99:62:08:28:1f:de:6b:3a:d7:f7: 14:b4:8d:96:00:02:5b:8d:bd:62:70:88:dc:c8:af: 06:18:29:e1:7a:93:cf:6e:ce:54:ca:24:1d:ff:38: 8c:a6:dc:bf:27:21:3b:23:cc:73:94:c2:ea:43:0e: 26:a3:c1:b0:0a:94:2b:a8:19:2d:13:6d:42:04:bc: ac:f5:cc:cd:5d:93:e1:71:7c:3d:ec:03:c9:f3:d7: e3:40:97:e9:62:b4:e0:db:e7:4f:0e:51:a3:1e:14: 7f:45:97:29:c1:14:5e:a8:5a:cd:5c:0f:94:a9:e3: cb:7f:a6:1a:ea:2d:c3:5f:3e:11:19:9a:d3:04:21: 72:26:ba:03:31:58:25:be:26:60:e0:00:cc:69:90: c5:c7:f1:bd:79:5b:ed:fd:f9:5c:e6:86:a8:11:1a: dc:51:60:54:14:6c:81:da:2c:7e:fe:cd:64:af:86: bc:4b:1d:5b:b4:80:b2:83:c3:92:72:c0:5c:d1:26: e5:67:5c:84:4b:10:c3:aa:43:7a:83:9a:87:10:37: 5a:83:30:0f:20:da:96:d0:d8:cb:e5:82:05:f3:2c: 8c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0F:BE:DD:01:F0:AD:F7:27:43:57:A3:9B:B8:E3:0D:11:48:9D:E2 X509v3 Authority Key Identifier: keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:dc:f0:c5:4a:d5:c2:38:74:1b:1d:3d:16:9f:a8:ea:81:5b: 83:c5:2c:77:41:93:11:71:80:b5:f9:75:91:0c:97:39:1d:01: 69:30:5b:d1:c9:0e:66:e3:8d:6d:2f:00:92:d4:18:c7:0d:41: 42:54:3a:1c:15:f3:ed:ef:dc:7a:17:60:80:81:03:3f:2d:58: a7:84:1c:eb:2a:b0:c5:89:da:8b:64:f1:b5:d7:22:b8:7c:84: 6e:7a:74:44:51:0e:db:07:22:48:87:92:f4:6c:f8:0d:55:15: 7b:5a:d6:f2:42:a1:fa:83:78:af:b5:87:01:b4:e0:38:3d:f2: c9:3c:17:62:26:0b:da:11:c3:66:a3:aa:39:af:e2:dd:60:83: ae:45:5c:e6:94:46:7e:f1:23:c0:67:de:f9:f9:eb:d5:ee:b0: 4b:74:66:80:c6:55:84:8b:60:1e:ce:12:a1:41:8a:91:3d:ca: 9f:2a:92:6f:70:88:ad:d4:2b:7a:d2:5f:7a:66:1e:3a:ae:87: 0f:2a:3d:fb:9e:18:12:26:f5:d1:ab:bb:da:ad:01:75:56:98: cc:33:17:8e:4d:fc:af:d9:1b:a9:cb:97:7b:91:91:72:89:43: 29:26:fc:3c:c6:ef:08:47:28:c3:47:9c:92:80:1c:35:8b:4c: 94:b4:98:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy QkM5QzQ0OEIwHhcNMjQwNTAzMDYyMjI1WhcNMjQwNTEwMDYyMjI1WjAYMRYwFAYD VQQDEw02NjM0ODJhMi0xYmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0C9vLr4BRt4lzVLUGJKovxbSzwkWd2qmu0OpNQV1P3mIiZliCCgf3ms61/cU tI2WAAJbjb1icIjcyK8GGCnhepPPbs5UyiQd/ziMpty/JyE7I8xzlMLqQw4mo8Gw CpQrqBktE21CBLys9czNXZPhcXw97APJ89fjQJfpYrTg2+dPDlGjHhR/RZcpwRRe qFrNXA+UqePLf6Ya6i3DXz4RGZrTBCFyJroDMVglviZg4ADMaZDFx/G9eVvt/flc 5oaoERrcUWBUFGyB2ix+/s1kr4a8Sx1btICyg8OScsBc0SblZ1yESxDDqkN6g5qH EDdagzAPINqW0NjL5YIF8yyMMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4Pvt0B 8K33J0NXo5u44w0RSJ3iMB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg5MC9BREUxMzE4NkRBREYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lS UlhSbzNKSm5YR3NyeWNSSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM3PDFStXCOHQbHT0Wn6jqgVuDxSx3QZMRcYC1+XWRDJc5HQFpMFvR yQ5m441tLwCS1BjHDUFCVDocFfPt79x6F2CAgQM/LVinhBzrKrDFidqLZPG11yK4 fIRuenREUQ7bByJIh5L0bPgNVRV7WtbyQqH6g3ivtYcBtOA4PfLJPBdiJgvaEcNm o6o5r+LdYIOuRVzmlEZ+8SPAZ975+evV7rBLdGaAxlWEi2AezhKhQYqRPcqfKpJv cIit1Ct60l96Zh46rocPKj37nhgSJvXRq7varQF1VpjMMxeOTfyv2Rupy5d7kZFy iUMpJvw8xu8IRyjDR5ySgBw1i0yUtJip -----END CERTIFICATE-----Generated at Fri May 3 08:21:38 2024 by rpki-client on console-ams.rpki-client.org