$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft File: ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json) Hash identifier: 0fZg8JZHqkacnceIzhkUkYHh4RG48hUXVLMgk99xuAI= Subject key identifier: E3:32:88:43:13:3D:90:79:33:ED:5D:3A:55:88:20:42:19:41:0C:AE Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 Certificate issuer: /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Certificate serial: 0A97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft Manifest number: 0A81 Signing time: Thu 02 May 2024 20:24:24 +0000 Manifest this update: Thu 02 May 2024 20:24:24 +0000 Manifest next update: Thu 09 May 2024 20:24:24 +0000 Files and hashes: 1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: /lylcOOr3n8eg4C2feP0CXrblPgud+xIoyXGgQyCYk8=) 2: AD989788E05511EEADC7D67EC4F9AE02.roa (hash: bSu0/aJwqyDIpSQexz7gKeDLygCiwIxJotGQrEfJHow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2711 (0xa97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Validity Not Before: May 2 20:24:24 2024 GMT Not After : May 9 20:24:24 2024 GMT Subject: CN=6633f678-0ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e4:03:64:19:ae:20:20:c8:4f:8d:98:b7:83: 14:03:c2:07:fb:8a:8a:8e:a3:2f:9a:1a:85:b9:e3: d5:2e:8e:11:83:9d:42:69:0a:6b:09:4a:11:2d:19: ac:10:9f:8c:ea:cd:3f:ce:90:5f:ce:4b:e8:f4:94: 03:83:7e:c1:bb:44:6d:61:7e:4d:83:04:53:6a:30: 00:c4:37:d4:05:c3:58:8e:48:f6:ae:0a:77:7b:af: 79:1f:87:05:6d:a6:5b:f4:0e:76:ea:3b:9f:65:7b: fa:7e:bf:e3:ae:12:c2:70:03:25:23:c7:39:e4:bd: 4f:03:85:80:74:40:68:d2:ba:73:05:b9:17:a1:9e: 2c:51:20:1d:1e:11:54:cb:f7:c6:df:4f:79:25:80: 31:67:b6:f4:d7:07:db:b7:2c:16:1f:c1:b9:f0:49: da:fb:25:19:61:72:29:87:d0:dd:a5:12:e3:8e:70: ab:c2:15:b4:28:fc:5a:d9:27:c0:97:82:66:41:80: c7:83:d2:88:90:ee:b1:60:bb:5a:cc:cc:93:7e:72: 62:ba:9e:f5:5b:88:ac:2e:9c:21:f6:2b:d4:f6:db: 1c:0a:2e:b4:7e:55:5e:45:21:86:d9:5f:2f:1d:99: ea:2d:8c:71:e5:a6:88:b1:cd:6f:9f:fd:e6:b1:c8: ac:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:32:88:43:13:3D:90:79:33:ED:5D:3A:55:88:20:42:19:41:0C:AE X509v3 Authority Key Identifier: keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:b2:7a:55:bc:d5:00:19:08:44:a0:bc:60:8b:a5:6f:08:1f: 99:2f:e1:57:ce:6d:58:41:ea:f7:a6:6f:a9:68:d6:45:cb:34: 42:f9:3a:ec:0d:5e:eb:39:d6:de:d8:8e:1c:d8:84:56:cb:5c: 0d:73:3c:42:22:9f:aa:e5:dc:7b:99:ab:d2:8a:5b:a2:f1:27: 0a:12:ac:6c:bd:b3:a3:1d:c5:17:3d:3a:f5:a6:5d:12:e6:0f: 3d:19:e0:06:ef:25:f0:bc:88:71:f3:9a:09:bc:31:f8:e3:6a: 5d:1e:75:f4:7a:56:ad:e4:ba:c8:14:2f:bc:cd:89:4d:bd:1e: 91:6e:eb:0d:56:29:e3:ed:50:71:dd:48:f1:af:96:6d:38:4c: 54:3f:17:6e:18:62:d6:85:49:32:a1:21:9c:f5:f7:70:b9:ed: 83:fc:85:38:b4:0d:51:ef:89:4a:7c:37:2f:86:d2:55:b0:ef: ce:d0:bd:bd:03:ff:c6:8d:43:80:81:7b:a1:9f:35:f4:64:84: 2e:93:eb:43:85:8c:47:57:26:82:6b:1c:bb:ca:76:bd:dc:b3: 9c:25:14:ce:46:da:b8:2e:2c:ab:6e:6b:22:f0:e1:9d:d5:73: 73:b5:29:33:78:9b:46:f9:3c:00:bc:6f:f1:3d:fc:df:6f:a4: 24:fa:b8:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNDMxMTAvBgNVBAUTKENBMENFMkNCQTk5Q0RFMEQ5MDI3RkNFNDg2NEYyNkM5 MTNENDE5RTMwHhcNMjQwNTAyMjAyNDI0WhcNMjQwNTA5MjAyNDI0WjAYMRYwFAYD VQQDEw02NjMzZjY3OC0wY2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreQDZBmuICDIT42Yt4MUA8IH+4qKjqMvmhqFuePVLo4Rg51CaQprCUoRLRms EJ+M6s0/zpBfzkvo9JQDg37Bu0RtYX5NgwRTajAAxDfUBcNYjkj2rgp3e695H4cF baZb9A526jufZXv6fr/jrhLCcAMlI8c55L1PA4WAdEBo0rpzBbkXoZ4sUSAdHhFU y/fG3095JYAxZ7b01wfbtywWH8G58Ena+yUZYXIph9DdpRLjjnCrwhW0KPxa2SfA l4JmQYDHg9KIkO6xYLtazMyTfnJiup71W4isLpwh9ivU9tscCi60flVeRSGG2V8v HZnqLYxx5aaIsc1vn/3mscis7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMyiEMT PZB5M+1dOlWIIEIZQQyuMB8GA1UdIwQYMBaAFMoM4supnN4NkCf85IZPJskT1Bnj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM0My9EQzJGNTQ2ODM5 RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNnMlFKX3praGs4bXlSUFVH ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lneml5Nm1jM2cyUUpfemtoazhteVJQVUdlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM0My9EQzJGNTQ2ODM5RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNn MlFKX3praGs4bXlSUFVHZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEsnpVvNUAGQhEoLxgi6VvCB+ZL+FXzm1YQer3pm+paNZFyzRC+Trs DV7rOdbe2I4c2IRWy1wNczxCIp+q5dx7mavSilui8ScKEqxsvbOjHcUXPTr1pl0S 5g89GeAG7yXwvIhx85oJvDH442pdHnX0elat5LrIFC+8zYlNvR6RbusNVinj7VBx 3Ujxr5ZtOExUPxduGGLWhUkyoSGc9fdwue2D/IU4tA1R74lKfDcvhtJVsO/O0L29 A//GjUOAgXuhnzX0ZIQuk+tDhYxHVyaCaxy7yna93LOcJRTORtq4Liyrbmsi8OGd 1XNztSkzeJtG+TwAvG/xPfzfb6Qk+riV -----END CERTIFICATE-----Generated at Thu May 2 22:13:22 2024 by rpki-client on console-fra.rpki-client.org