$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft File: yuPbit7noWq2ylN_I0ewIFvfT3Y.mft (raw, json) Hash identifier: /KdR5pEf/Ic26cvjvaLJzAMK3zeyLE1ifNAlxh1nPJE= Subject key identifier: 8A:4E:E4:6C:F1:47:22:2E:B7:09:A4:72:DC:14:FE:AA:6F:2C:80:D0 Authority key identifier: CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76 Certificate issuer: /CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft Manifest number: 34 Signing time: Sun 15 Sep 2024 10:04:33 +0000 Manifest this update: Sun 15 Sep 2024 10:04:33 +0000 Manifest next update: Sun 22 Sep 2024 10:04:33 +0000 Files and hashes: 1: yuPbit7noWq2ylN_I0ewIFvfT3Y.crl (hash: j+XfD0tqm51u5fk8htmLgT6iyqcgndB78HbgT2T9PqQ=) 2: 12032AE02EAC11EFB73C0767C4F9AE02.roa (hash: xTsY4iW+fb2o0N8YA+SXz8YOTeNUYyhxpihIk2CiRFI=) 3: 66476E182EAC11EFAAAF8E67C4F9AE02.roa (hash: 5AufB2RsG7jdJMojc2DVF486w/PxZ39VMbcx9j28U7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76 Validity Not Before: Sep 15 10:04:33 2024 GMT Not After : Sep 22 10:04:33 2024 GMT Subject: CN=66e6b131-0278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:86:7c:bd:05:09:28:62:3f:d7:8e:d7:32: a8:b3:e2:e2:48:58:a4:eb:fb:cf:fb:fd:c5:08:39: cb:52:35:a1:7b:59:5d:a0:91:da:75:47:3b:1a:3a: a7:88:fb:4a:5d:fa:5f:b9:57:46:b8:b5:b2:dd:a2: d4:0f:be:af:1f:24:16:9b:95:b0:5a:f9:a0:a7:00: 6e:bb:a3:6d:5e:50:96:0f:f0:84:8d:eb:39:ca:31: 9b:2f:5d:6d:38:0b:dd:1f:1f:53:50:67:f9:36:ba: 83:7c:57:7f:e5:41:0d:93:56:48:d0:1a:99:81:13: 8e:6f:ee:c1:46:7f:9a:b2:c1:47:32:cb:fe:b7:3d: f1:ac:6a:f7:bd:47:af:00:c8:dd:95:00:4d:23:5b: 19:b7:b5:43:c2:86:99:8a:4c:54:53:a7:ff:4f:75: 4f:89:a4:1c:90:e9:6e:ee:cf:41:6d:df:be:4b:e1: d5:4d:f9:a4:ee:d3:f2:bc:b0:13:33:c1:32:d1:38: 8a:f4:63:eb:96:bc:69:35:87:35:52:98:6b:f8:a0: 19:ba:ac:f3:7d:cc:f8:31:3e:de:d0:92:dd:33:87: 96:c6:d9:5b:be:d2:1a:2c:08:4c:5a:7a:5c:3b:c8: e7:46:9d:b2:ae:ca:2b:a6:31:66:8c:93:2d:4a:f8: b7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4E:E4:6C:F1:47:22:2E:B7:09:A4:72:DC:14:FE:AA:6F:2C:80:D0 X509v3 Authority Key Identifier: keyid:CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:6b:4b:34:2a:48:72:a5:77:b8:9e:62:cf:af:04:d3:ac:b9: 3b:75:b3:af:30:da:04:dc:df:f2:27:c1:68:ed:13:f1:0f:aa: 84:e8:d9:68:b9:f3:c3:84:16:ae:02:65:ff:c3:fb:4e:ca:45: 78:57:a5:50:77:8b:e3:75:76:23:4f:27:17:ba:f2:0d:43:7c: 7d:ce:9d:78:bf:de:42:44:1c:c3:30:98:03:a7:c4:74:9a:6a: d3:c1:4f:d5:6d:39:9b:c6:4f:83:02:7a:da:a7:1f:73:b9:47: 08:6a:b4:4b:c2:47:1f:2b:6d:9a:b2:fb:d3:6f:aa:81:02:d6: 10:29:fa:1b:6a:0a:13:62:a9:28:08:ce:3d:f8:87:70:d9:62: fe:42:20:98:f4:e4:0f:0f:d2:e0:cc:bc:e5:f8:48:cf:3b:ae: 8e:3e:ca:2f:2b:6f:ed:e4:e8:c1:3b:cd:dc:01:e1:19:3f:41: ec:74:1c:d5:1d:1b:bf:09:42:3e:b4:b3:c7:01:8f:c7:45:c0: 8c:45:b3:47:f7:99:22:06:f8:e8:fe:63:ef:e4:74:11:95:78: 9f:a0:f0:ef:a9:6c:bb:29:e5:3c:57:aa:20:f2:d8:86:61:f2: 71:4f:fd:81:08:b7:1b:dc:b6:74:b4:6e:24:8b:19:18:cd:70: 3c:0f:1b:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QTZGRjExMC8GA1UEBRMoQ0FFM0RCOEFERUU3QTE2QUI2Q0E1MzdGMjM0N0IwMjA1 QkRGNEY3NjAeFw0yNDA5MTUxMDA0MzNaFw0yNDA5MjIxMDA0MzNaMBgxFjAUBgNV BAMTDTY2ZTZiMTMxLTAyNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxEYZ8vQUJKGI/147XMqiz4uJIWKTr+8/7/cUIOctSNaF7WV2gkdp1RzsaOqeI +0pd+l+5V0a4tbLdotQPvq8fJBablbBa+aCnAG67o21eUJYP8ISN6znKMZsvXW04 C90fH1NQZ/k2uoN8V3/lQQ2TVkjQGpmBE45v7sFGf5qywUcyy/63PfGsave9R68A yN2VAE0jWxm3tUPChpmKTFRTp/9PdU+JpByQ6W7uz0Ft375L4dVN+aTu0/K8sBMz wTLROIr0Y+uWvGk1hzVSmGv4oBm6rPN9zPgxPt7Qkt0zh5bG2Vu+0hosCExaelw7 yOdGnbKuyiumMWaMky1K+LcvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUik7kbPFH Ii63CaRy3BT+qm8sgNAwHwYDVR0jBBgwFoAUyuPbit7noWq2ylN/I0ewIFvfT3Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBNkZGL0QyODFFNzMwMkUy OTExRUZCQUVENkExQUM0RjlBRTAyL3l1UGJpdDdub1dxMnlsTl9JMGV3SUZ2ZlQz WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveXVQYml0N25vV3EyeWxOX0kwZXdJRnZmVDNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB NkZGL0QyODFFNzMwMkUyOTExRUZCQUVENkExQUM0RjlBRTAyL3l1UGJpdDdub1dx MnlsTl9JMGV3SUZ2ZlQzWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH5rSzQqSHKld7ieYs+vBNOsuTt1s68w2gTc3/InwWjtE/EPqoTo2Wi5 88OEFq4CZf/D+07KRXhXpVB3i+N1diNPJxe68g1DfH3OnXi/3kJEHMMwmAOnxHSa atPBT9VtOZvGT4MCetqnH3O5RwhqtEvCRx8rbZqy+9NvqoEC1hAp+htqChNiqSgI zj34h3DZYv5CIJj05A8P0uDMvOX4SM87ro4+yi8rb+3k6ME7zdwB4Rk/Qex0HNUd G78JQj60s8cBj8dFwIxFs0f3mSIG+Oj+Y+/kdBGVeJ+g8O+pbLsp5TxXqiDy2IZh 8nFP/YEItxvctnS0biSLGRjNcDwPG7Y= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:37 2024 by rpki-client on console-ams.rpki-client.org