$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft File: y51BptqW92pP8FhrXoqIn8AjVFc.mft (raw, json) Hash identifier: d3ZmUd4c9LnQo4sjWQH8mMd8JZ8d+K8eYBzamPQk5yA= Subject key identifier: 54:12:23:2C:79:8B:B0:26:60:62:CF:3F:C5:6C:79:6F:11:FB:C5:AC Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 026C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft Manifest number: 0268 Signing time: Sun 05 May 2024 03:55:40 +0000 Manifest this update: Sun 05 May 2024 03:55:39 +0000 Manifest next update: Sun 12 May 2024 03:55:39 +0000 Files and hashes: 1: y51BptqW92pP8FhrXoqIn8AjVFc.crl (hash: Pz0CQlbdafqMUf70ZaQ6He6kQGuPdBEJ0gzcs3CTLxc=) 2: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (hash: Ev0nDvkLlRNvzsvGeZZyQLqh4efVJk/u06lrQKwckCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: May 5 03:55:39 2024 GMT Not After : May 12 03:55:39 2024 GMT Subject: CN=6637033b-b588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0b:0d:a6:84:11:83:85:11:34:9b:54:d7:c2: 7b:d2:de:7f:f9:16:0a:c6:f5:97:ad:4d:40:7e:e1: 2b:8b:4a:ed:23:42:4b:15:ac:64:d5:5e:25:af:11: b9:ab:37:6e:ca:d4:a3:ff:f9:68:8c:d0:1a:10:b5: 18:0d:67:03:f3:5b:e1:8f:e5:ab:fb:bf:8c:34:b1: 98:15:71:b8:92:2e:c3:32:b2:85:2f:ad:03:f5:be: 85:bd:52:0a:98:24:3d:48:2f:53:3b:38:d8:31:4c: ae:6a:91:44:c4:45:67:b4:a4:96:db:88:4c:d9:16: d4:ce:af:13:2e:77:d7:55:e1:12:5f:40:8f:96:5a: ce:c0:b3:29:63:0b:03:73:9a:b5:50:87:3d:2c:f9: d6:db:32:cb:80:67:7c:e2:be:11:49:7a:7c:e6:69: 8c:a1:76:ac:38:0c:14:76:b3:e7:d6:e1:c7:49:a7: 6d:a0:07:9c:79:20:85:04:f2:86:31:8c:18:33:c0: 82:b3:1e:64:1d:7d:03:15:a9:ac:f7:83:83:4f:7c: 37:b9:06:6f:f4:3f:50:fd:94:e0:dc:e2:cf:16:07: 57:89:5b:9c:97:9e:3b:72:26:98:45:bd:9b:bd:bb: c1:03:b3:9c:b9:76:f1:05:c9:60:a1:3e:6b:3c:68: be:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:12:23:2C:79:8B:B0:26:60:62:CF:3F:C5:6C:79:6F:11:FB:C5:AC X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:e8:09:87:e3:17:b9:0b:ea:b6:92:27:f3:48:6c:9a:d3:e3: 32:32:43:04:00:7d:14:a0:9d:fc:39:2f:75:c7:92:1e:07:f6: 6f:c7:2f:69:92:90:c6:3d:84:5a:a7:04:59:b0:97:21:ea:d6: 94:b6:00:36:96:2e:aa:a2:c5:e0:f3:a8:4b:4c:8a:83:52:99: 40:42:d2:70:d2:e3:3c:ef:74:5e:db:f8:e5:bc:e5:fc:f5:cb: 8b:cc:72:50:19:84:2c:85:f2:5f:1e:83:a1:81:61:d9:9e:26: e9:e6:28:b3:d5:be:f3:04:16:cf:95:36:51:09:ed:8b:ab:ea: 07:5a:44:89:d1:dc:fa:fa:96:11:5d:d7:d2:c4:c1:11:70:76: fd:51:f2:6f:54:d6:33:5c:33:53:6a:9b:76:92:1c:0e:b8:a9: e2:64:2a:8f:86:11:f7:a5:89:e2:ce:a3:ca:79:69:ab:93:b6: 70:1d:5c:a6:1c:3c:f9:1d:06:24:b6:65:70:40:b9:ae:58:98: aa:e2:23:0f:7d:14:a2:1c:cd:f8:b4:0f:49:94:af:04:57:3d: 27:e9:0c:13:04:7d:fe:1b:33:68:3f:23:70:2f:27:89:bf:d6: 17:23:69:5a:31:c9:8b:fd:70:ce:aa:fc:46:28:a6:2a:b2:40: 3f:97:7f:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjQwNTA1MDM1NTM5WhcNMjQwNTEyMDM1NTM5WjAYMRYwFAYD VQQDEw02NjM3MDMzYi1iNTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogsNpoQRg4URNJtU18J70t5/+RYKxvWXrU1AfuEri0rtI0JLFaxk1V4lrxG5 qzduytSj//lojNAaELUYDWcD81vhj+Wr+7+MNLGYFXG4ki7DMrKFL60D9b6FvVIK mCQ9SC9TOzjYMUyuapFExEVntKSW24hM2RbUzq8TLnfXVeESX0CPllrOwLMpYwsD c5q1UIc9LPnW2zLLgGd84r4RSXp85mmMoXasOAwUdrPn1uHHSadtoAeceSCFBPKG MYwYM8CCsx5kHX0DFams94ODT3w3uQZv9D9Q/ZTg3OLPFgdXiVucl547ciaYRb2b vbvBA7OcuXbxBclgoT5rPGi+xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQSIyx5 i7AmYGLPP8VseW8R+8WsMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0E2OS84QUYzRDVCMkM2MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzky cFA4RmhyWG9xSW44QWpWRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDF6AmH4xe5C+q2kifzSGya0+MyMkMEAH0UoJ38OS91x5IeB/Zvxy9p kpDGPYRapwRZsJch6taUtgA2li6qosXg86hLTIqDUplAQtJw0uM873Re2/jlvOX8 9cuLzHJQGYQshfJfHoOhgWHZnibp5iiz1b7zBBbPlTZRCe2Lq+oHWkSJ0dz6+pYR XdfSxMERcHb9UfJvVNYzXDNTapt2khwOuKniZCqPhhH3pYnizqPKeWmrk7ZwHVym HDz5HQYktmVwQLmuWJiq4iMPfRSiHM34tA9JlK8EVz0n6QwTBH3+GzNoPyNwLyeJ v9YXI2laMcmL/XDOqvxGKKYqskA/l38x -----END CERTIFICATE-----Generated at Sun May 5 04:34:56 2024 by rpki-client on console-fra.rpki-client.org