$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json) Hash identifier: xL7IM4JDZ7t5UJXGyH4Y0dtCT0A+XfACTavRZYC2vFk= Subject key identifier: 9F:E2:70:DE:1E:A1:41:2A:27:18:1A:24:D4:7D:A5:8B:73:5A:E7:32 Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Certificate serial: 070A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft Manifest number: 06FA Signing time: Fri 22 Nov 2024 21:31:36 +0000 Manifest this update: Fri 22 Nov 2024 21:31:36 +0000 Manifest next update: Fri 29 Nov 2024 21:31:36 +0000 Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: 3Jw2IEe9oJSXjCsIa9S7YJSZRWcoe+3Kjkdu3H6CotY=) 2: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (hash: huZLPtDcXB/3dLJoA65hKvsPgxlLv1XalRW6nvjHrlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1802 (0x70a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Validity Not Before: Nov 22 21:31:36 2024 GMT Not After : Nov 29 21:31:36 2024 GMT Subject: CN=6740f838-bd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c0:23:12:4f:9a:74:d7:ba:cd:fa:0d:24:1e: f5:08:ef:ff:0e:6b:fe:c9:08:7d:ab:bf:51:f1:68: ea:4d:8f:0a:8b:d0:02:12:e8:3b:ac:a9:5c:7d:a8: ae:6c:20:43:56:85:2d:5d:23:f4:91:86:bb:72:f5: 0c:e5:50:8e:03:12:19:81:63:58:57:44:43:a2:e2: a7:1b:08:57:da:37:0f:4a:20:04:9f:2d:6c:8b:7f: 9f:21:29:04:ed:61:c4:40:91:bc:8e:28:8b:c3:65: ba:59:9b:d6:19:e2:13:7f:39:d8:74:ca:b8:c4:a2: df:fa:f3:07:e0:aa:9f:99:16:c3:e5:5d:5d:ff:40: cf:1a:f6:ee:e2:e6:00:21:5d:4a:03:30:1e:7c:c7: a5:95:7f:a4:07:d8:14:93:29:da:8d:7e:72:42:61: 89:ea:cf:93:c8:51:c2:f8:08:4f:53:d8:d6:8f:94: 43:1b:0f:94:44:47:ea:c9:28:10:3a:84:d2:91:97: 1e:37:c4:23:ae:97:63:9b:74:d4:00:8e:be:af:e4: 6a:30:ce:ce:7e:80:c0:7f:e3:df:b1:cb:26:17:fa: 4a:fd:e3:57:b2:83:ba:4d:d9:96:5b:1d:3a:f9:db: 7b:8e:0e:a4:a8:27:bb:85:77:f1:fc:b2:e6:d8:64: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E2:70:DE:1E:A1:41:2A:27:18:1A:24:D4:7D:A5:8B:73:5A:E7:32 X509v3 Authority Key Identifier: keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:66:e1:39:a4:bc:96:ac:f0:70:20:b8:de:47:9b:c7:73:7f: 5f:a3:32:d9:35:3c:1e:b7:c2:ab:ea:44:3c:82:4e:ce:88:62: 54:f7:0b:a3:ca:04:05:93:07:56:e9:40:f9:dc:aa:ac:bd:06: 16:ff:c6:0f:fb:0e:a7:18:c4:35:42:37:eb:39:6f:13:7f:83: 9f:91:5e:87:2e:92:fc:6b:1d:47:a9:81:c5:fb:4e:a6:61:98: 9d:c6:a9:25:e3:05:1b:a7:7f:23:4d:61:e4:18:25:af:cd:87: 78:c1:39:64:93:9b:b8:fd:3a:67:c2:06:7f:e5:cf:f9:96:b9: 73:48:9e:d6:1b:24:32:fb:d8:ea:64:12:d0:2d:fc:31:01:5a: ab:1d:20:be:8f:e6:20:b1:f0:4e:87:2b:3e:f2:fb:27:b2:52: 31:d7:9b:cf:9e:df:17:70:6f:a5:34:ff:d8:c9:28:31:80:32: 26:53:24:8f:92:3c:81:7b:4b:c4:ee:02:55:dd:60:42:88:11: d2:0f:d2:1a:3d:30:e3:a0:89:e3:58:17:8d:2d:e7:4c:a4:ae: 47:fa:3f:6c:e2:4a:db:63:01:8e:4f:72:33:ed:c7:49:37:c0: 75:c7:14:86:3e:4c:09:9c:25:ce:57:fd:6b:73:d1:f2:5f:ee: c6:64:59:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE Njk5QjRGNDcwHhcNMjQxMTIyMjEzMTM2WhcNMjQxMTI5MjEzMTM2WjAYMRYwFAYD VQQDEw02NzQwZjgzOC1iZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cAjEk+adNe6zfoNJB71CO//Dmv+yQh9q79R8WjqTY8Ki9ACEug7rKlcfaiu bCBDVoUtXSP0kYa7cvUM5VCOAxIZgWNYV0RDouKnGwhX2jcPSiAEny1si3+fISkE 7WHEQJG8jiiLw2W6WZvWGeITfznYdMq4xKLf+vMH4KqfmRbD5V1d/0DPGvbu4uYA IV1KAzAefMellX+kB9gUkynajX5yQmGJ6s+TyFHC+AhPU9jWj5RDGw+UREfqySgQ OoTSkZceN8Qjrpdjm3TUAI6+r+RqMM7OfoDAf+PfscsmF/pK/eNXsoO6TdmWWx06 +dt7jg6kqCe7hXfx/LLm2GS6TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/icN4e oUEqJxgaJNR9pYtzWucyMB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1 QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM4Ri9DNzU5MEJENjI1QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6 NkJYd25kLWhrWlBXbWJUMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcZuE5pLyWrPBwILjeR5vHc39fozLZNTwet8Kr6kQ8gk7OiGJU9wuj ygQFkwdW6UD53KqsvQYW/8YP+w6nGMQ1QjfrOW8Tf4OfkV6HLpL8ax1HqYHF+06m YZidxqkl4wUbp38jTWHkGCWvzYd4wTlkk5u4/TpnwgZ/5c/5lrlzSJ7WGyQy+9jq ZBLQLfwxAVqrHSC+j+YgsfBOhys+8vsnslIx15vPnt8XcG+lNP/YySgxgDImUySP kjyBe0vE7gJV3WBCiBHSD9IaPTDjoInjWBeNLedMpK5H+j9s4krbYwGOT3Iz7cdJ N8B1xxSGPkwJnCXOV/1rc9HyX+7GZFmw -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org