$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft File: Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json) Hash identifier: YJPmi8ZIIfxCyDLdtk765X41m/L9uiN9ipBQhSrEZ4E= Subject key identifier: 23:20:BB:68:5E:B9:13:94:4D:FF:59:55:3D:12:D9:B9:AC:98:3B:09 Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 Certificate issuer: /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Certificate serial: 0371 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft Manifest number: 036D Signing time: Sat 23 Nov 2024 00:28:10 +0000 Manifest this update: Sat 23 Nov 2024 00:28:09 +0000 Manifest next update: Sat 30 Nov 2024 00:28:09 +0000 Files and hashes: 1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: AwI00fUH/HTvz/49jKdO2lGoTLmOLQatFVm6J9JSRgo=) 2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: DMjc7YHOd4HbtoNtunrW+QIJNydNWPoTGiKSwQ+/yhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Validity Not Before: Nov 23 00:28:09 2024 GMT Not After : Nov 30 00:28:09 2024 GMT Subject: CN=67412199-e68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1c:4a:45:f1:34:b7:ff:98:dd:80:d0:32:d7: d3:24:40:e9:0b:6a:49:8e:08:12:b1:8b:ce:92:34: 61:58:c9:2b:31:b9:c9:62:ba:d7:0f:6d:a7:30:a6: a4:e9:9a:33:63:b9:ea:8e:01:78:99:f3:66:9f:0a: b7:ef:bb:94:9d:78:e5:5b:3e:0e:1b:1b:59:d3:b3: fb:e9:65:0f:40:a0:46:27:ca:a2:f0:02:65:c5:45: ec:23:38:d1:56:f5:81:fc:50:1c:fb:dd:72:22:6e: 4b:f4:f5:24:b9:fe:8f:33:4a:74:2c:8c:98:3b:8d: 4d:43:46:ab:a8:1d:ee:10:45:52:41:21:28:7c:1d: fa:68:d5:b6:93:e5:1a:37:a2:95:b2:ac:1d:c7:c6: 72:59:2d:3b:37:32:ef:04:61:1d:39:58:f1:8e:b5: fd:26:4f:73:5a:f5:5f:00:b7:c6:19:f9:0b:f5:36: 57:ac:58:69:a5:00:08:b2:61:71:4f:cd:8d:43:55: 3a:9c:c9:a4:2d:bb:7c:c6:9d:79:d6:dc:48:f3:2d: 0b:ff:bb:a8:66:bd:eb:4e:f5:54:c0:d9:ca:c6:3a: 17:01:86:7c:a9:39:a4:2a:be:6e:ef:cd:d2:26:9b: 61:53:2a:99:38:50:4c:dd:a1:94:94:39:ab:62:66: a5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:20:BB:68:5E:B9:13:94:4D:FF:59:55:3D:12:D9:B9:AC:98:3B:09 X509v3 Authority Key Identifier: keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b1:7a:3c:06:70:28:b0:38:8c:b2:4e:ef:1c:e4:83:1d:dd: 6c:6e:3d:fc:46:2a:61:da:a4:60:4b:33:72:62:8e:7d:5f:87: 97:1d:c3:c8:c5:cf:d3:c3:e3:15:68:12:4e:14:60:21:05:19: 91:fb:9c:59:ac:09:79:45:5d:24:d7:ae:3f:38:8b:52:b7:aa: 62:fb:53:3c:be:e9:1e:66:32:fc:fd:46:10:16:de:a6:c8:0b: 89:b3:cf:5d:df:78:ac:f3:e4:f6:bf:ba:75:df:32:4f:ff:96: 79:8f:14:d5:02:ed:a0:6b:ba:19:26:83:95:a7:f1:af:be:28: dc:9e:73:0c:77:08:32:ae:aa:9b:50:a7:37:c4:03:59:6d:32: d4:d5:7f:d1:b7:bc:47:d4:26:b5:cb:b8:07:6d:4b:df:8f:d7: 2d:27:5f:87:a1:a2:b9:8b:d2:40:b8:c1:a6:72:27:91:fe:90: f7:34:7c:ff:16:de:e9:d7:63:dc:c5:06:7c:75:f8:9e:da:78: ff:66:3a:7f:73:07:0d:63:3a:0a:91:cc:75:14:63:30:70:55: 74:64:1e:bb:5f:3e:8d:11:bb:ae:60:1e:fb:61:e4:2d:5f:39: 33:05:ca:83:95:fb:35:6f:03:85:83:6d:8c:94:93:e0:cd:89: 37:25:77:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NTUxMTAvBgNVBAUTKDYyMzZCNkM5NTcwNTQ0MjZBOTRDRTZBNjk0MzIzOEU2 RkU2RDFGNTYwHhcNMjQxMTIzMDAyODA5WhcNMjQxMTMwMDAyODA5WjAYMRYwFAYD VQQDEw02NzQxMjE5OS1lNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hxKRfE0t/+Y3YDQMtfTJEDpC2pJjggSsYvOkjRhWMkrMbnJYrrXD22nMKak 6ZozY7nqjgF4mfNmnwq377uUnXjlWz4OGxtZ07P76WUPQKBGJ8qi8AJlxUXsIzjR VvWB/FAc+91yIm5L9PUkuf6PM0p0LIyYO41NQ0arqB3uEEVSQSEofB36aNW2k+Ua N6KVsqwdx8ZyWS07NzLvBGEdOVjxjrX9Jk9zWvVfALfGGfkL9TZXrFhppQAIsmFx T82NQ1U6nMmkLbt8xp151txI8y0L/7uoZr3rTvVUwNnKxjoXAYZ8qTmkKr5u783S JpthUyqZOFBM3aGUlDmrYmalhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMgu2he uROUTf9ZVT0S2bmsmDsJMB8GA1UdIwQYMBaAFGI2tslXBUQmqUzmppQyOOb+bR9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY1NS9FN0JBQTBCRTg3 QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJDYXBUT2FtbERJNDV2NXRI MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lqYTJ5VmNGUkNhcFRPYW1sREk0NXY1dEgxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY1NS9FN0JBQTBCRTg3QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJD YXBUT2FtbERJNDV2NXRIMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7sXo8BnAosDiMsk7vHOSDHd1sbj38Riph2qRgSzNyYo59X4eXHcPI xc/Tw+MVaBJOFGAhBRmR+5xZrAl5RV0k164/OItSt6pi+1M8vukeZjL8/UYQFt6m yAuJs89d33is8+T2v7p13zJP/5Z5jxTVAu2ga7oZJoOVp/GvvijcnnMMdwgyrqqb UKc3xANZbTLU1X/Rt7xH1Ca1y7gHbUvfj9ctJ1+HoaK5i9JAuMGmcieR/pD3NHz/ Ft7p12PcxQZ8dfie2nj/Zjp/cwcNYzoKkcx1FGMwcFV0ZB67Xz6NEbuuYB77YeQt XzkzBcqDlfs1bwOFg22MlJPgzYk3JXfW -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:37 2024 by rpki-client on console-fra.rpki-client.org