$ rpki-client -vvf rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft File: YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft (raw, json) Hash identifier: yZTdMKYXCHHpQabAzZ+vcznApaBU59bmwPOLRAM4UHg= Subject key identifier: 11:8F:6D:A5:B9:F7:DA:33:27:60:CD:60:2E:9B:E7:EB:02:4C:57:12 Authority key identifier: 60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA Certificate issuer: /CN=A913A839/serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Certificate serial: 09D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft Manifest number: 09D2 Signing time: Fri 22 Nov 2024 19:42:53 +0000 Manifest this update: Fri 22 Nov 2024 19:42:53 +0000 Manifest next update: Fri 29 Nov 2024 19:42:53 +0000 Files and hashes: 1: YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl (hash: ObMJoWHVDtXN+oPRlhecghYZI6yOLWvEdFSq3kQ3f5k=) 2: 0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa (hash: Hp6K1tI8/RrDTW95E3dlGX3/hbhtzZBhD6rGFjZDwK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2520 (0x9d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A839/serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Validity Not Before: Nov 22 19:42:53 2024 GMT Not After : Nov 29 19:42:53 2024 GMT Subject: CN=6740debd-9c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9f:4f:75:87:6e:5f:ab:cf:53:99:29:b3:93: 98:92:51:38:e6:b5:21:fd:0e:0f:07:48:cb:8d:6b: 47:96:71:2b:e3:8c:41:18:41:ac:4a:54:7f:fc:60: 2e:1a:9e:a8:c2:86:3e:6e:4f:90:a3:a9:9c:94:af: d9:9a:13:a8:04:59:f2:d1:2d:30:fa:dc:8e:02:4c: 3f:50:2f:23:81:c3:20:90:b0:0d:d0:e5:00:40:dc: 61:33:4d:f0:69:28:11:81:38:3c:1d:e4:a1:17:f1: bb:9e:82:a5:a1:37:17:ef:77:cf:48:72:2c:ff:ec: dc:07:66:3e:c5:dc:04:ae:b6:cc:66:0b:c5:6b:f9: b2:fb:e2:ab:1a:12:2f:f8:5f:30:dd:92:25:6e:24: 47:f9:5b:a1:13:ce:00:a0:45:3b:3d:96:d3:b2:89: a7:cd:cb:91:12:7d:1f:4f:6a:9b:c8:d4:9a:58:3b: b4:cd:e9:92:7d:e5:46:a7:7c:66:2c:26:94:5c:c1: d1:9c:a7:a3:d4:72:30:c1:49:7c:1b:3b:f2:de:c0: e1:74:47:c4:84:65:f2:2e:0e:93:12:58:2d:a2:7a: 51:25:2d:ba:f2:33:4b:2d:58:4d:dc:de:df:6a:ae: 13:ac:4e:38:54:1c:b8:78:5b:ca:41:9d:a0:9b:16: a5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8F:6D:A5:B9:F7:DA:33:27:60:CD:60:2E:9B:E7:EB:02:4C:57:12 X509v3 Authority Key Identifier: keyid:60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:06:c9:eb:97:5b:cc:fe:cc:8e:c0:c5:8a:47:16:4b:73:13: 4b:54:74:39:a6:27:96:9e:2b:e4:53:b2:8f:c7:65:a0:04:24: 56:da:5d:f1:47:16:3a:69:78:fd:81:e0:73:ed:c4:2d:07:ad: 4a:6a:cd:43:21:ba:8a:59:19:5a:bc:76:bb:d2:3f:6a:df:cb: 90:63:ef:bc:0d:1c:db:59:ca:d9:8e:8c:50:79:99:7a:4c:73: b6:14:d4:12:1d:19:ba:0a:25:1e:ed:23:6a:e9:35:3d:a3:ac: 21:b2:98:95:1f:6c:ad:8f:26:ba:f7:a7:0f:38:b7:a9:29:1f: d9:be:7d:03:9b:f1:d3:4f:70:f5:97:02:9f:6e:64:70:b4:41: 59:fe:7f:3a:e2:c6:e2:99:15:67:f9:e4:d6:2e:d1:62:d0:16: bc:21:67:d1:36:2e:90:4a:1e:2d:31:cf:57:05:2f:62:11:a6: 64:e5:b8:63:42:40:60:18:df:3a:86:e1:b6:17:66:35:4f:3c: 8e:fb:32:36:65:08:bf:64:25:27:92:25:9c:b8:fc:02:3c:92: ca:2c:74:eb:bb:f1:f0:09:3c:a9:2a:09:a2:5e:05:b4:6a:5d: e7:4e:d4:f6:7f:34:d2:03:a0:8e:d4:d7:4b:e2:4c:a3:70:67: a9:2d:76:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4MzkxMTAvBgNVBAUTKDYwQUIzQ0ZGQUI4OEE1MTM0MkI4MTZGMDU5MDE5RjA3 M0U5NTAwQUEwHhcNMjQxMTIyMTk0MjUzWhcNMjQxMTI5MTk0MjUzWjAYMRYwFAYD VQQDEw02NzQwZGViZC05YzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZ9PdYduX6vPU5kps5OYklE45rUh/Q4PB0jLjWtHlnEr44xBGEGsSlR//GAu Gp6owoY+bk+Qo6mclK/ZmhOoBFny0S0w+tyOAkw/UC8jgcMgkLAN0OUAQNxhM03w aSgRgTg8HeShF/G7noKloTcX73fPSHIs/+zcB2Y+xdwErrbMZgvFa/my++KrGhIv +F8w3ZIlbiRH+VuhE84AoEU7PZbTsomnzcuREn0fT2qbyNSaWDu0zemSfeVGp3xm LCaUXMHRnKej1HIwwUl8Gzvy3sDhdEfEhGXyLg6TElgtonpRJS268jNLLVhN3N7f aq4TrE44VBy4eFvKQZ2gmxal5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGPbaW5 99ozJ2DNYC6b5+sCTFcSMB8GA1UdIwQYMBaAFGCrPP+riKUTQrgW8FkBnwc+lQCq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTgzOS9DMEUwM0NGNDZD MkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBSTkN1QmJ3V1FHZkJ6NlZB S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lLczhfNnVJcFJOQ3VCYndXUUdmQno2VkFLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTgzOS9DMEUwM0NGNDZDMkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBS TkN1QmJ3V1FHZkJ6NlZBS28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLBsnrl1vM/syOwMWKRxZLcxNLVHQ5pieWnivkU7KPx2WgBCRW2l3x RxY6aXj9geBz7cQtB61Kas1DIbqKWRlavHa70j9q38uQY++8DRzbWcrZjoxQeZl6 THO2FNQSHRm6CiUe7SNq6TU9o6whspiVH2ytjya696cPOLepKR/Zvn0Dm/HTT3D1 lwKfbmRwtEFZ/n864sbimRVn+eTWLtFi0Ba8IWfRNi6QSh4tMc9XBS9iEaZk5bhj QkBgGN86huG2F2Y1TzyO+zI2ZQi/ZCUnkiWcuPwCPJLKLHTru/HwCTypKgmiXgW0 al3nTtT2fzTSA6CO1NdL4kyjcGepLXYw -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:24 2024 by rpki-client on console-ams.rpki-client.org