$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft File: YZBA6DW609z1wgE5bYVxmVp6zFA.mft (raw, json) Hash identifier: bVst9q5ATuR8f0VePacYBPQYOYsklYAy8xAMHkJzMjg= Subject key identifier: B7:56:23:73:1F:3A:DF:F5:59:E4:FA:8D:2D:3C:D4:01:CC:79:7C:B6 Authority key identifier: 61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50 Certificate issuer: /CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft Manifest number: 32 Signing time: Fri 17 May 2024 08:31:25 +0000 Manifest this update: Fri 17 May 2024 08:31:24 +0000 Manifest next update: Fri 24 May 2024 08:31:24 +0000 Files and hashes: 1: YZBA6DW609z1wgE5bYVxmVp6zFA.crl (hash: o+nQ1PCAr1k6vDpQPiqONlXJnkVTCpa0W1SMXJpznpM=) 2: 8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa (hash: G9EIa2BVNO7fX3LicRxHEyaNZZ8dyrZGH4JhXSaCDa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50 Validity Not Before: May 17 08:31:24 2024 GMT Not After : May 24 08:31:24 2024 GMT Subject: CN=664715dc-f9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1d:eb:74:27:82:10:26:9d:d9:d0:7f:29:42: b4:0a:a9:ee:8e:fc:d5:d9:d5:78:b1:2d:91:86:d9: 0b:41:dc:4d:97:12:c0:a9:13:04:c0:21:c6:f2:d4: af:02:c9:97:3e:c9:c2:dc:27:ed:e0:80:af:3b:d9: d3:8b:90:f6:66:14:8e:1a:71:82:15:74:9b:86:55: b0:e8:cb:b6:b0:10:cd:56:db:e0:25:26:9a:08:57: c4:c9:92:5b:56:02:f4:76:ce:44:65:c2:87:07:3f: 2f:6b:fc:59:bd:eb:27:b4:74:bc:4d:39:1c:0f:46: 6d:51:61:97:eb:72:e6:88:87:87:f8:96:ac:b9:8d: c0:85:32:5e:f8:6b:1b:02:dd:51:5c:1c:9a:28:af: 2f:dd:7d:73:e4:37:1a:31:fb:78:86:7d:88:f9:9f: 51:86:5f:a1:38:c2:8f:c7:7e:78:b7:b9:5a:03:ca: 9a:b3:a2:dc:5c:63:85:ab:4c:58:83:4b:e4:52:25: 59:32:6d:5d:13:21:88:85:e4:25:f7:c9:91:fe:56: bb:fa:36:52:48:e1:53:77:61:49:76:3a:b3:cd:f2: d4:3b:3e:30:49:cb:22:2f:f6:3e:39:f7:78:f0:13: 75:57:eb:54:89:75:4a:13:ca:f8:fe:de:04:ba:34: 1c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:56:23:73:1F:3A:DF:F5:59:E4:FA:8D:2D:3C:D4:01:CC:79:7C:B6 X509v3 Authority Key Identifier: keyid:61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:5a:ef:55:49:80:bf:95:ba:8b:06:8e:f2:08:fd:1d:82:e3: 47:47:16:1f:2a:ba:22:2f:fc:57:eb:d2:d3:f0:c0:c2:67:eb: 9c:c9:30:f6:4e:80:84:6c:fc:56:ca:7e:9e:71:5d:fe:f3:32: 91:f2:3f:5e:87:de:86:31:41:79:bc:51:2a:d9:db:2f:fb:c6: a2:17:b9:e8:55:13:eb:8d:97:f9:4f:37:0a:0a:b1:ca:50:8d: 55:f9:83:4b:7f:6c:d7:c9:54:fd:42:7c:2c:35:ba:a6:a6:62: 15:b5:48:5c:fa:01:d1:9d:2f:7f:b4:cd:99:d3:41:44:fd:16: 66:3b:92:e1:92:45:74:b3:b1:55:88:ef:67:66:50:93:dc:6e: 87:5e:3c:d2:b1:7b:2a:b0:82:48:9f:93:c7:5b:95:01:6f:bf: fe:e5:72:85:e4:71:3d:1c:2f:3b:ae:d3:dc:86:c3:4e:05:78: 95:07:26:0e:f6:1e:24:55:9e:25:7a:2b:70:17:d7:d6:34:7e: ac:a4:79:49:86:d3:59:12:75:81:6b:e8:52:c1:8f:ef:6e:48: ad:be:4c:a3:0c:9d:58:60:35:cc:89:12:79:56:f1:44:38:8b: 75:be:e3:93:0b:e2:96:7f:9f:46:67:db:d6:25:71:05:98:ed: f7:4a:11:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QUJFRjExMC8GA1UEBRMoNjE5MDQwRTgzNUJBRDNEQ0Y1QzIwMTM5NkQ4NTcxOTk1 QTdBQ0M1MDAeFw0yNDA1MTcwODMxMjRaFw0yNDA1MjQwODMxMjRaMBgxFjAUBgNV BAMTDTY2NDcxNWRjLWY5YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmHet0J4IQJp3Z0H8pQrQKqe6O/NXZ1XixLZGG2QtB3E2XEsCpEwTAIcby1K8C yZc+ycLcJ+3ggK872dOLkPZmFI4acYIVdJuGVbDoy7awEM1W2+AlJpoIV8TJkltW AvR2zkRlwocHPy9r/Fm96ye0dLxNORwPRm1RYZfrcuaIh4f4lqy5jcCFMl74axsC 3VFcHJoory/dfXPkNxox+3iGfYj5n1GGX6E4wo/Hfni3uVoDypqzotxcY4WrTFiD S+RSJVkybV0TIYiF5CX3yZH+Vrv6NlJI4VN3YUl2OrPN8tQ7PjBJyyIv9j4593jw E3VX61SJdUoTyvj+3gS6NBwHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt1Yjcx86 3/VZ5PqNLTzUAcx5fLYwHwYDVR0jBBgwFoAUYZBA6DW609z1wgE5bYVxmVp6zFAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQkVGL0MwNzY0NTcyQ0Ix OTExRUU4MTVGQUI2OEM0RjlBRTAyL1laQkE2RFc2MDl6MXdnRTViWVZ4bVZwNnpG QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWVpCQTZEVzYwOXoxd2dFNWJZVnhtVnA2ekZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB QkVGL0MwNzY0NTcyQ0IxOTExRUU4MTVGQUI2OEM0RjlBRTAyL1laQkE2RFc2MDl6 MXdnRTViWVZ4bVZwNnpGQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEla71VJgL+VuosGjvII/R2C40dHFh8quiIv/Ffr0tPwwMJn65zJMPZO gIRs/FbKfp5xXf7zMpHyP16H3oYxQXm8USrZ2y/7xqIXuehVE+uNl/lPNwoKscpQ jVX5g0t/bNfJVP1CfCw1uqamYhW1SFz6AdGdL3+0zZnTQUT9FmY7kuGSRXSzsVWI 72dmUJPcbodePNKxeyqwgkifk8dblQFvv/7lcoXkcT0cLzuu09yGw04FeJUHJg72 HiRVniV6K3AX19Y0fqykeUmG01kSdYFr6FLBj+9uSK2+TKMMnVhgNcyJEnlW8UQ4 i3W+45ML4pZ/n0Zn29YlcQWY7fdKEeM= -----END CERTIFICATE-----Generated at Fri May 17 10:59:15 2024 by rpki-client on console-ams.rpki-client.org