$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft File: Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json) Hash identifier: +fiqaCWeIzxmwcW8ldFx6tm79EmlVmT15OEhqch+k1U= Subject key identifier: A9:EC:D6:82:81:BA:10:CD:3B:07:D5:AD:FA:91:5B:FE:F5:DA:AE:D1 Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft Manifest number: 0208 Signing time: Sat 23 Nov 2024 01:34:16 +0000 Manifest this update: Sat 23 Nov 2024 01:34:15 +0000 Manifest next update: Sat 30 Nov 2024 01:34:15 +0000 Files and hashes: 1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: QGrt4QfUpppQJC2d7xbWxtM3GWi0KoK4uFE1avKE060=) 2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: I/KyU3geIWwBo8ZaiWc/F+HF/TbeVrVlUgdVYuSp+mY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Validity Not Before: Nov 23 01:34:15 2024 GMT Not After : Nov 30 01:34:15 2024 GMT Subject: CN=67413118-6299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:07:65:d9:f9:16:b7:b1:61:33:c6:3a:c9:01: 56:da:48:7b:d0:db:aa:3f:65:cb:83:a8:1b:0d:b7: 39:77:75:61:02:1a:e6:ac:01:f1:15:16:f5:44:01: ec:8f:98:4a:18:36:86:d1:4c:f2:70:c1:42:83:48: 25:4e:63:71:be:94:be:53:2e:3b:58:50:65:35:9f: 3a:c6:65:17:32:dd:22:1f:ec:cc:77:f1:78:52:e6: c6:d3:81:38:42:d2:6e:27:83:fc:1b:f5:c3:5f:d7: c0:68:1b:10:cc:5b:5a:74:60:72:bc:eb:a8:20:43: 79:1b:b9:31:f4:d1:8d:62:44:a9:ea:2f:69:56:f9: 66:6a:b2:07:ad:fd:ca:5f:85:f7:56:40:00:c3:1a: 1f:70:2f:b8:77:b9:ab:8c:37:71:07:32:8c:0e:a4: 89:d7:d9:40:45:04:98:85:72:6c:d2:94:9d:74:25: f1:14:af:af:fd:a2:03:c5:83:68:9d:bc:a1:8b:db: 58:c7:e1:5d:d5:6d:7e:90:6e:c5:7a:41:d3:e7:4c: 18:7e:86:6d:b0:d4:3b:a6:29:0d:f8:fb:53:58:df: ea:65:ca:96:1f:0c:f1:de:31:9d:6e:46:0b:d6:2e: 19:03:33:79:df:ac:b1:c4:84:dd:4c:4f:75:80:c6: 73:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EC:D6:82:81:BA:10:CD:3B:07:D5:AD:FA:91:5B:FE:F5:DA:AE:D1 X509v3 Authority Key Identifier: keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:01:19:1e:6b:e7:c0:f4:df:7c:7b:3d:3d:91:a5:8c:cc:06: 48:da:f5:34:fd:50:cd:33:7d:74:6e:d8:e6:6e:08:ba:19:59: b9:bf:0f:b3:d4:97:a4:0b:87:38:a3:9c:9c:2c:ee:71:82:5e: 4f:76:21:29:31:d6:0e:f1:30:76:e6:fa:f8:47:5a:00:8d:5a: a1:11:b1:84:b2:66:a0:42:e6:50:29:85:c9:59:da:9b:c2:64: e9:13:d7:38:0c:61:a1:f7:d1:b3:fb:0e:10:0f:b2:73:68:75: f7:59:08:45:d7:3b:eb:f6:60:39:9a:3e:c1:86:52:e1:d2:6a: ce:27:54:c9:81:dc:be:d0:4c:5d:09:65:11:6a:a4:6b:fd:03: 48:ad:9e:e0:7f:55:be:0a:d8:b4:71:5e:0e:d2:fe:47:e9:00: 0e:2d:c2:57:1d:6f:fe:89:fa:b1:88:b2:af:81:8e:16:8f:5f: de:49:ce:8c:77:36:c0:e4:3b:2b:12:60:8a:01:35:34:d0:f1: 9c:14:eb:ca:85:13:b9:c4:00:36:ea:46:33:95:df:c0:cd:3e: 3b:2f:46:70:e8:c9:33:21:69:d8:24:f1:fa:25:fe:b9:9b:c9: 8e:87:a0:d5:99:3b:83:5e:d7:a8:b9:4d:a5:8a:5a:7c:a5:46: 2d:50:68:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VFNDYxMTAvBgNVBAUTKDYzNTE1QjM2NDExMzg0OEZBNTU0RDI4NDJGNTg0MTg3 N0NGNkFGMDAwHhcNMjQxMTIzMDEzNDE1WhcNMjQxMTMwMDEzNDE1WjAYMRYwFAYD VQQDEw02NzQxMzExOC02Mjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gdl2fkWt7FhM8Y6yQFW2kh70NuqP2XLg6gbDbc5d3VhAhrmrAHxFRb1RAHs j5hKGDaG0UzycMFCg0glTmNxvpS+Uy47WFBlNZ86xmUXMt0iH+zMd/F4UubG04E4 QtJuJ4P8G/XDX9fAaBsQzFtadGByvOuoIEN5G7kx9NGNYkSp6i9pVvlmarIHrf3K X4X3VkAAwxofcC+4d7mrjDdxBzKMDqSJ19lARQSYhXJs0pSddCXxFK+v/aIDxYNo nbyhi9tYx+Fd1W1+kG7FekHT50wYfoZtsNQ7pikN+PtTWN/qZcqWHwzx3jGdbkYL 1i4ZAzN536yxxITdTE91gMZzJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKns1oKB uhDNOwfVrfqRW/712q7RMB8GA1UdIwQYMBaAFGNRWzZBE4SPpVTShC9YQYd89q8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU0Ni9BRTgyRTEyNjEy RUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJLWxWTktFTDFoQmgzejJy d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxRmJOa0VUaEktbFZOS0VMMWhCaDN6MnJ3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUU0Ni9BRTgyRTEyNjEyRUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJ LWxWTktFTDFoQmgzejJyd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ARkea+fA9N98ez09kaWMzAZI2vU0/VDNM310btjmbgi6GVm5vw+z 1JekC4c4o5ycLO5xgl5PdiEpMdYO8TB25vr4R1oAjVqhEbGEsmagQuZQKYXJWdqb wmTpE9c4DGGh99Gz+w4QD7JzaHX3WQhF1zvr9mA5mj7BhlLh0mrOJ1TJgdy+0Exd CWURaqRr/QNIrZ7gf1W+Cti0cV4O0v5H6QAOLcJXHW/+ifqxiLKvgY4Wj1/eSc6M dzbA5DsrEmCKATU00PGcFOvKhRO5xAA26kYzld/AzT47L0Zw6MkzIWnYJPH6Jf65 m8mOh6DVmTuDXteouU2lilp8pUYtUGi2 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:38 2024 by rpki-client on console-ams.rpki-client.org