$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAB0/6361C982163F11EDB7D8AA85C4F9AE02/YH-sTcO8pMwR43L3ZrJYqdrstwc.mft File: YH-sTcO8pMwR43L3ZrJYqdrstwc.mft (raw, json) Hash identifier: 8aQJxvAHRwRxdpGWFY107cOQp+Ai0RDvlNy3zEvuU8A= Subject key identifier: 9C:24:E2:CA:F5:4A:E5:BD:07:81:58:02:E0:63:CB:7D:B7:67:D1:24 Authority key identifier: 60:7F:AC:4D:C3:BC:A4:CC:11:E3:72:F7:66:B2:58:A9:DA:EC:B7:07 Certificate issuer: /CN=A914BAB0/serialNumber=607FAC4DC3BCA4CC11E372F766B258A9DAECB707 Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YH-sTcO8pMwR43L3ZrJYqdrstwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BAB0/6361C982163F11EDB7D8AA85C4F9AE02/YH-sTcO8pMwR43L3ZrJYqdrstwc.mft Manifest number: 0201 Signing time: Sat 23 Nov 2024 01:36:00 +0000 Manifest this update: Sat 23 Nov 2024 01:35:59 +0000 Manifest next update: Sat 30 Nov 2024 01:35:59 +0000 Files and hashes: 1: YH-sTcO8pMwR43L3ZrJYqdrstwc.crl (hash: 6D22Ju5UrdOLUl8KgoZoldGPRc6Xwa5Hsc1E6pPAm+Q=) 2: FD9E5086164111ED9F008D0BC4F9AE02.roa (hash: adkorAO4aIFvUQlvQ2cyTTFe5JkH3bSIDnz7gwSTOhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BAB0/6361C982163F11EDB7D8AA85C4F9AE02/YH-sTcO8pMwR43L3ZrJYqdrstwc.crl rsync://rpki.apnic.net/member_repository/A914BAB0/6361C982163F11EDB7D8AA85C4F9AE02/YH-sTcO8pMwR43L3ZrJYqdrstwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YH-sTcO8pMwR43L3ZrJYqdrstwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BAB0/serialNumber=607FAC4DC3BCA4CC11E372F766B258A9DAECB707 Validity Not Before: Nov 23 01:35:59 2024 GMT Not After : Nov 30 01:35:59 2024 GMT Subject: CN=6741317f-81f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:f0:51:fa:c9:75:b2:e5:49:85:23:fa:64: 3a:f9:f9:da:3e:c0:60:2e:9b:73:ad:9a:6d:96:08: d3:cf:85:68:28:b1:98:53:57:e1:ef:8a:f2:a6:4d: c7:1c:31:1d:75:48:b1:97:f6:a6:3e:d8:83:82:64: 53:68:00:0b:14:0d:aa:2c:12:17:f0:92:6d:1b:20: 69:0a:b1:cc:da:f7:41:c3:8b:13:1c:4d:48:ba:eb: 10:0f:39:ce:ad:99:6c:18:5e:f4:d6:99:fd:75:bd: 4a:cc:51:7f:33:da:88:bd:a0:ad:b2:8b:bc:80:d0: 43:ef:d8:6a:6d:b5:d6:5d:99:77:cd:bf:0b:80:f9: c0:cc:a7:82:f9:d1:d7:4f:52:2e:99:63:16:bc:b9: 14:8c:62:9d:a7:40:62:a7:d6:da:67:28:f5:15:10: 22:ba:e6:ae:eb:e9:09:94:2b:d0:b2:79:0e:52:d8: 89:42:99:b0:31:07:74:76:a6:d4:e9:1c:c3:75:aa: ea:48:c8:0b:7b:7e:7f:78:58:09:49:2a:60:49:66: b8:11:0a:8e:94:f1:fc:38:74:0d:ae:35:4e:e9:8a: 8e:a0:4c:7b:87:9b:90:45:46:69:59:f9:94:da:4b: 74:ac:ae:5d:c2:03:f9:39:b3:d7:9c:8e:02:54:ec: 3d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:24:E2:CA:F5:4A:E5:BD:07:81:58:02:E0:63:CB:7D:B7:67:D1:24 X509v3 Authority Key Identifier: keyid:60:7F:AC:4D:C3:BC:A4:CC:11:E3:72:F7:66:B2:58:A9:DA:EC:B7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BAB0/6361C982163F11EDB7D8AA85C4F9AE02/YH-sTcO8pMwR43L3ZrJYqdrstwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YH-sTcO8pMwR43L3ZrJYqdrstwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAB0/6361C982163F11EDB7D8AA85C4F9AE02/YH-sTcO8pMwR43L3ZrJYqdrstwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:6f:fe:51:fb:ab:77:2f:b0:22:39:06:e4:5e:dc:97:2a:ac: 02:53:b7:56:22:36:2d:f4:0b:88:f2:e3:6e:f6:f4:01:35:28: a8:bb:21:c7:96:05:5c:ca:94:63:74:26:08:db:f1:41:7c:3a: 99:67:f7:db:f5:ce:95:34:9a:52:19:9a:9f:93:fb:56:79:7b: e7:ff:c4:0d:fc:be:34:3f:e3:db:33:f6:2c:a1:df:d9:73:94: 5c:bd:9d:36:24:08:87:75:dc:79:7e:d8:ba:56:88:68:b6:25: 47:96:b6:39:32:7a:e2:d9:cf:23:4c:c4:09:54:bd:3d:be:b6: c0:78:38:f8:d8:4a:83:69:f5:a9:67:d2:ae:ca:8c:1a:3b:71: b6:82:0b:d2:b7:32:0c:ba:5f:6e:ac:af:ea:cd:21:1a:44:bb: c9:31:2e:5f:db:af:50:f6:0b:c4:81:18:3b:fe:c9:6a:1d:34: 7e:ad:a9:e1:f0:69:14:58:9a:c6:8b:a2:49:ae:d9:6f:46:65: 88:8f:07:15:a4:bb:d0:63:83:36:89:76:37:21:ba:ee:d4:ba: 44:e2:76:c1:65:9d:e7:a3:d7:13:78:fc:83:83:7a:31:4e:aa: af:97:3a:f1:36:4b:5f:5a:1b:c5:89:a7:e3:91:41:61:28:39: d5:b4:bf:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJBQjAxMTAvBgNVBAUTKDYwN0ZBQzREQzNCQ0E0Q0MxMUUzNzJGNzY2QjI1OEE5 REFFQ0I3MDcwHhcNMjQxMTIzMDEzNTU5WhcNMjQxMTMwMDEzNTU5WjAYMRYwFAYD VQQDEw02NzQxMzE3Zi04MWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwurwUfrJdbLlSYUj+mQ6+fnaPsBgLptzrZptlgjTz4VoKLGYU1fh74rypk3H HDEddUixl/amPtiDgmRTaAALFA2qLBIX8JJtGyBpCrHM2vdBw4sTHE1IuusQDznO rZlsGF701pn9db1KzFF/M9qIvaCtsou8gNBD79hqbbXWXZl3zb8LgPnAzKeC+dHX T1IumWMWvLkUjGKdp0Bip9baZyj1FRAiuuau6+kJlCvQsnkOUtiJQpmwMQd0dqbU 6RzDdarqSMgLe35/eFgJSSpgSWa4EQqOlPH8OHQNrjVO6YqOoEx7h5uQRUZpWfmU 2kt0rK5dwgP5ObPXnI4CVOw9xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwk4sr1 SuW9B4FYAuBjy323Z9EkMB8GA1UdIwQYMBaAFGB/rE3DvKTMEeNy92ayWKna7LcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkFCMC82MzYxQzk4MjE2 M0YxMUVEQjdEOEFBODVDNEY5QUUwMi9ZSC1zVGNPOHBNd1I0M0wzWnJKWXFkcnN0 d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lILXNUY084cE13UjQzTDNackpZcWRyc3R3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkFCMC82MzYxQzk4MjE2M0YxMUVEQjdEOEFBODVDNEY5QUUwMi9ZSC1zVGNPOHBN d1I0M0wzWnJKWXFkcnN0d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5b/5R+6t3L7AiOQbkXtyXKqwCU7dWIjYt9AuI8uNu9vQBNSiouyHH lgVcypRjdCYI2/FBfDqZZ/fb9c6VNJpSGZqfk/tWeXvn/8QN/L40P+PbM/Ysod/Z c5RcvZ02JAiHddx5fti6VohotiVHlrY5Mnri2c8jTMQJVL09vrbAeDj42EqDafWp Z9KuyowaO3G2ggvStzIMul9urK/qzSEaRLvJMS5f269Q9gvEgRg7/slqHTR+ranh 8GkUWJrGi6JJrtlvRmWIjwcVpLvQY4M2iXY3Ibru1LpE4nbBZZ3no9cTePyDg3ox TqqvlzrxNktfWhvFiafjkUFhKDnVtL/o -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:38 2024 by rpki-client on console-ams.rpki-client.org