$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft File: yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json) Hash identifier: jNnRuS8TH7YMcVGfNHtiob0Q8rZ2uAxwotMp/rFGFlk= Subject key identifier: 92:75:21:E6:42:AE:AE:EE:72:70:7D:80:4D:3E:1F:BF:5F:F3:36:AA Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67 Certificate issuer: /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867 Certificate serial: 3425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft Manifest number: 3425 Signing time: Fri 22 Nov 2024 14:57:44 +0000 Manifest this update: Fri 22 Nov 2024 14:57:44 +0000 Manifest next update: Fri 29 Nov 2024 14:57:44 +0000 Files and hashes: 1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: 2Pd/BNzbJgdBzoP/vkwV4JBO2GootifV14WBF82E3mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13349 (0x3425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867 Validity Not Before: Nov 22 14:57:44 2024 GMT Not After : Nov 29 14:57:44 2024 GMT Subject: CN=67409be8-9537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c5:44:89:91:0e:69:5c:cc:30:0e:f0:81:19: bb:b3:db:c3:03:12:01:16:51:fb:bf:9f:f4:fd:29: 8c:35:cd:59:de:49:80:be:ec:80:0b:87:4a:1b:b4: e4:50:c2:4f:79:5a:ef:92:4b:62:7f:c1:39:54:55: 4e:b4:57:8d:26:06:69:f3:34:93:12:71:f6:bc:57: 7e:f1:fb:b6:3b:f5:5c:af:61:c0:e6:93:9f:5d:d2: c8:b5:09:21:54:91:53:a6:d5:78:ad:08:0f:2b:75: 87:cd:b4:80:d4:3a:4c:8d:f2:20:19:c3:3a:12:fa: 69:5d:86:3e:84:47:cb:8a:4d:ea:50:4b:b8:1f:f3: 61:18:cc:0a:2b:bc:43:2f:71:8b:e7:b9:f3:80:01: 33:26:cf:68:88:54:ff:c6:bb:ed:e0:22:1c:b3:db: 45:db:b9:7b:1d:b6:db:24:40:84:57:25:cf:3d:f9: a3:4e:29:f3:a0:db:ea:0b:e0:9b:d3:13:ae:bf:6a: 03:72:85:2a:46:19:f8:2c:25:8b:7c:85:3f:18:2e: 88:e8:4d:7c:51:08:0c:3a:a9:35:06:80:63:04:a8: 5d:a4:da:60:7c:64:e5:b0:50:11:d9:58:fc:5b:a4: 59:e0:0e:a2:79:37:d0:bd:dc:b8:0d:1e:ef:7a:dc: e6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:75:21:E6:42:AE:AE:EE:72:70:7D:80:4D:3E:1F:BF:5F:F3:36:AA X509v3 Authority Key Identifier: keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:80:20:c8:ac:e8:99:d4:ec:71:9c:60:b5:0f:c0:c8:e4:47: 34:fd:b2:6e:6e:23:36:50:08:c7:d0:c5:7a:bf:a6:87:16:3a: 28:bd:b0:83:c6:e7:f4:1a:81:fc:01:96:6e:f7:65:4c:13:a3: d4:82:b7:32:eb:9c:17:37:df:08:93:cc:4b:34:87:c5:9e:de: 16:33:c0:93:94:3a:a7:e6:9a:b4:eb:06:0c:77:67:87:bf:3a: 50:b0:1b:26:b5:3b:ae:35:23:1f:fd:8c:17:ce:3e:ec:d2:4d: 7d:fc:4c:c6:e1:82:bf:54:65:6b:f9:3a:5c:d8:6a:75:0e:d8: 8d:b8:50:13:04:15:87:7b:47:05:10:b9:c8:1c:f6:f0:ad:08: b6:5e:84:f7:b1:ce:ec:43:71:01:5a:52:58:73:25:bf:62:34: 76:39:c8:66:c0:6b:68:53:79:31:09:e9:b6:a9:1d:1e:85:ba: 56:71:3c:00:4b:87:c5:37:0b:d8:e5:b6:ad:36:fb:0d:36:63: ba:44:66:2d:ab:44:1c:40:53:b5:39:ac:fa:92:c8:40:ef:2a: 5c:a6:80:f0:cb:9e:69:16:4a:53:96:9c:6b:20:b2:81:5b:50: 0c:67:23:46:b3:36:29:e4:6c:33:ce:3c:ff:42:96:43:79:e9: 04:49:64:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NjgxMTAvBgNVBAUTKENBRTJDRkIxQTc5NzRBRDZCMDI0NUFFMzRFNEIwRENF RDgyMDk4NjcwHhcNMjQxMTIyMTQ1NzQ0WhcNMjQxMTI5MTQ1NzQ0WjAYMRYwFAYD VQQDEw02NzQwOWJlOC05NTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28VEiZEOaVzMMA7wgRm7s9vDAxIBFlH7v5/0/SmMNc1Z3kmAvuyAC4dKG7Tk UMJPeVrvkktif8E5VFVOtFeNJgZp8zSTEnH2vFd+8fu2O/Vcr2HA5pOfXdLItQkh VJFTptV4rQgPK3WHzbSA1DpMjfIgGcM6EvppXYY+hEfLik3qUEu4H/NhGMwKK7xD L3GL57nzgAEzJs9oiFT/xrvt4CIcs9tF27l7HbbbJECEVyXPPfmjTinzoNvqC+Cb 0xOuv2oDcoUqRhn4LCWLfIU/GC6I6E18UQgMOqk1BoBjBKhdpNpgfGTlsFAR2Vj8 W6RZ4A6ieTfQvdy4DR7vetzmsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJ1IeZC rq7ucnB9gE0+H79f8zaqMB8GA1UdIwQYMBaAFMriz7Gnl0rWsCRa405LDc7YIJhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2OC8wOEVDRUU0ODFE OUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0YXdKRnJqVGtzTnp0Z2dt R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1TFBzYWVYU3Rhd0pGcmpUa3NOenRnZ21HYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2OC8wOEVDRUU0ODFEOUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0 YXdKRnJqVGtzTnp0Z2dtR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrgCDIrOiZ1OxxnGC1D8DI5Ec0/bJubiM2UAjH0MV6v6aHFjoovbCD xuf0GoH8AZZu92VME6PUgrcy65wXN98Ik8xLNIfFnt4WM8CTlDqn5pq06wYMd2eH vzpQsBsmtTuuNSMf/YwXzj7s0k19/EzG4YK/VGVr+Tpc2Gp1DtiNuFATBBWHe0cF ELnIHPbwrQi2XoT3sc7sQ3EBWlJYcyW/YjR2OchmwGtoU3kxCem2qR0ehbpWcTwA S4fFNwvY5batNvsNNmO6RGYtq0QcQFO1Oaz6kshA7ypcpoDwy55pFkpTlpxrILKB W1AMZyNGszYp5Gwzzjz/QpZDeekESWTX -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:14 2024 by rpki-client on console-ams.rpki-client.org