$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: 1D7q+XOA8O241/oN0VSsSDs5VVhj2Y0GVkNAwsOZfIg= Subject key identifier: 67:67:0F:90:47:C2:AC:8D:CF:C9:08:39:E2:C8:E6:29:C5:40:1E:77 Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: CD Signing time: Sat 23 Nov 2024 03:48:23 +0000 Manifest this update: Sat 23 Nov 2024 03:48:23 +0000 Manifest next update: Sat 30 Nov 2024 03:48:23 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: F2nOouVZOBb8JjYxpMIGbEcQKRKXl/Ou2jBkezeUQ1k=) 2: 045A4C2A6E4A11EEBADBDC4AC4F9AE02.roa (hash: PLXaIBOcZ24YSeDJPCzr1c3N1N83r0ddKj6UPv7Uijk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: Nov 23 03:48:23 2024 GMT Not After : Nov 30 03:48:23 2024 GMT Subject: CN=67415087-5b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:87:1a:44:f0:bd:41:a9:c1:2a:09:30:4c: 3d:89:4a:f6:25:2d:25:9e:d3:53:3b:16:c8:09:89: 8f:1b:2f:27:8a:73:9a:f8:19:5a:e3:e4:1a:6e:78: ac:d0:9f:1e:eb:da:9c:81:ba:66:e4:68:75:6c:10: dc:00:90:5a:45:01:e5:18:cb:39:8f:87:c3:96:d2: fa:6c:b3:ff:ef:c3:07:8f:d5:5b:68:a9:76:79:ca: 34:a5:e1:fc:60:15:53:19:0e:49:02:5b:9e:ea:f6: 40:12:85:db:8c:a6:88:a9:0a:00:d6:eb:0d:15:0e: 82:38:80:2b:92:6d:a2:02:93:a2:1a:f6:32:76:cc: 12:ac:2b:b0:c0:f5:50:7c:a3:e4:4f:2f:20:bf:ea: 01:f6:73:c9:8f:f0:e7:c9:ce:a5:3d:54:3d:9c:10: 36:af:d7:87:6c:4f:a8:d1:55:2d:a7:04:c5:11:a1: 44:69:6e:59:0d:9b:83:a6:1e:83:16:72:27:34:37: 46:e6:a5:47:c2:8e:85:42:9b:31:b0:bf:81:4d:ed: 7f:1a:fe:36:2e:b6:88:ef:11:b2:3d:e4:6b:a5:7d: ea:a8:b7:d1:65:43:ea:18:3f:a3:0e:aa:b6:33:d7: 08:4d:49:86:f5:c4:73:32:14:a0:d8:43:ce:a6:aa: 19:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:67:0F:90:47:C2:AC:8D:CF:C9:08:39:E2:C8:E6:29:C5:40:1E:77 X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:c6:da:e4:67:f7:5f:d4:1b:e2:ab:eb:98:5b:db:0b:3b:ad: 43:e0:7d:50:8a:b1:0b:c5:95:cf:1c:96:59:a5:31:99:0c:aa: 2e:e0:8a:ab:01:3d:34:cc:8d:ec:2f:fd:93:76:7c:da:26:74: 51:e6:60:1e:13:7c:17:0c:7b:24:29:80:c8:c8:81:ad:b4:c6: 76:ff:9b:dc:93:ad:22:26:be:61:6f:fc:ee:a3:d0:3a:f6:20: 69:81:fc:8e:e6:9b:14:4d:eb:28:9b:a8:a4:38:f5:aa:a7:f8: 4e:c0:bb:c3:70:aa:b2:e7:ca:84:99:eb:c8:c2:eb:2f:1c:50: ed:a4:fd:ce:17:4e:08:c0:81:c9:08:35:ed:32:d4:db:83:de: 6a:3b:26:17:65:9c:2e:69:ab:ae:2f:38:44:80:ab:ff:68:97: c0:6a:1e:be:da:fc:b2:1f:1d:19:29:17:86:9f:71:49:10:4e: 4b:69:c3:b0:a2:95:5f:35:9c:67:76:21:1b:51:99:88:fe:62: b6:46:aa:89:65:b7:c4:e1:21:80:5a:eb:b6:fe:18:0a:43:1a: 7f:7a:02:ca:c3:c7:2b:18:21:b8:10:01:a5:09:bf:46:1b:2a: e6:33:da:8f:b9:cf:c6:bd:ab:3f:a9:9d:1b:ad:7f:58:71:65: b7:73:99:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjQxMTIzMDM0ODIzWhcNMjQxMTMwMDM0ODIzWjAYMRYwFAYD VQQDEw02NzQxNTA4Ny01YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4iHGkTwvUGpwSoJMEw9iUr2JS0lntNTOxbICYmPGy8ninOa+Bla4+Qabnis 0J8e69qcgbpm5Gh1bBDcAJBaRQHlGMs5j4fDltL6bLP/78MHj9VbaKl2eco0peH8 YBVTGQ5JAlue6vZAEoXbjKaIqQoA1usNFQ6COIArkm2iApOiGvYydswSrCuwwPVQ fKPkTy8gv+oB9nPJj/Dnyc6lPVQ9nBA2r9eHbE+o0VUtpwTFEaFEaW5ZDZuDph6D FnInNDdG5qVHwo6FQpsxsL+BTe1/Gv42LraI7xGyPeRrpX3qqLfRZUPqGD+jDqq2 M9cITUmG9cRzMhSg2EPOpqoZqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdnD5BH wqyNz8kIOeLI5inFQB53MB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwxtrkZ/df1Bviq+uYW9sLO61D4H1QirELxZXPHJZZpTGZDKou4Iqr AT00zI3sL/2TdnzaJnRR5mAeE3wXDHskKYDIyIGttMZ2/5vck60iJr5hb/zuo9A6 9iBpgfyO5psUTesom6ikOPWqp/hOwLvDcKqy58qEmevIwusvHFDtpP3OF04IwIHJ CDXtMtTbg95qOyYXZZwuaauuLzhEgKv/aJfAah6+2vyyHx0ZKReGn3FJEE5LacOw opVfNZxndiEbUZmI/mK2RqqJZbfE4SGAWuu2/hgKQxp/egLKw8crGCG4EAGlCb9G GyrmM9qPuc/Gvas/qZ0brX9YcWW3c5ng -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org