$ rpki-client -vvf rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft File: y3TVYT1zQs-5t_ed7wyfrYhceCI.mft (raw, json) Hash identifier: Nl6l0CWTXL/dA0Js1b1xUfNisu9H0LS+x6P1cXUjVP0= Subject key identifier: 61:AB:62:28:FF:9F:01:B3:33:E9:C1:93:79:D4:3C:9E:22:F7:B0:1D Authority key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22 Certificate issuer: /CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft Manifest number: 0100 Signing time: Sat 23 Nov 2024 03:15:29 +0000 Manifest this update: Sat 23 Nov 2024 03:15:28 +0000 Manifest next update: Sat 30 Nov 2024 03:15:28 +0000 Files and hashes: 1: y3TVYT1zQs-5t_ed7wyfrYhceCI.crl (hash: ryY+QNCVke2EN3Ti6u7ipRfQQyCn/bBVK0mva7bui6I=) 2: D5981734217611EE9EBE2F70C4F9AE02.roa (hash: mEyirxNNF/HUjbME+0mygxI2/51XwzfUXk7qYYI6cLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822 Validity Not Before: Nov 23 03:15:28 2024 GMT Not After : Nov 30 03:15:28 2024 GMT Subject: CN=674148d1-49c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:86:b6:2e:9f:3e:e3:33:52:f6:56:f4:b1:2d: dc:c3:41:e1:48:0f:15:66:78:ad:d3:f9:35:14:c1: a0:64:aa:d7:90:70:c5:fa:af:cf:c6:2c:ec:3d:8c: 88:e9:42:e5:85:ac:63:52:8a:97:a5:49:0d:19:f3: 85:08:05:de:23:4e:8d:d1:d7:ee:b1:c0:b2:a0:c1: da:1d:2b:c7:53:07:62:cf:49:30:ea:a4:59:1d:7d: 6f:1d:b5:93:6d:20:00:a7:99:f7:05:76:89:a3:69: 7a:bb:9a:cf:e8:fa:77:c5:13:45:9d:17:01:95:42: bc:d7:8b:8f:3f:30:dc:e4:3e:9b:86:23:05:44:34: 57:04:df:c4:51:e3:d0:2a:68:8d:e8:c6:39:9a:0c: 74:0a:66:60:4d:49:85:2a:fc:e4:92:32:73:65:76: 90:ae:66:98:64:f4:3d:86:91:3c:43:4c:8f:90:ed: 6a:23:ea:89:b7:f4:2e:82:2f:2f:a9:0b:18:c2:a8: 8d:8f:e6:32:7e:66:d5:bf:cc:90:f5:e5:39:b6:77: 55:83:b7:d3:0f:a6:b7:bb:bc:b4:b3:2f:de:52:e4: 1e:00:2f:0a:62:38:ff:81:91:20:fa:d0:35:a1:43: 8c:fd:85:31:91:ef:cd:3c:28:ae:1b:a5:05:66:6a: ae:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AB:62:28:FF:9F:01:B3:33:E9:C1:93:79:D4:3C:9E:22:F7:B0:1D X509v3 Authority Key Identifier: keyid:CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:69:7b:fc:e5:5c:d7:06:ff:ac:c1:33:30:3d:3f:07:7c:09: 4d:46:3f:9c:59:f2:85:e7:da:7f:ed:4b:56:83:8d:60:d1:72: 7d:4a:56:56:76:a7:69:0d:a3:f0:b1:29:52:47:ce:f2:da:b2: 4e:7f:46:a6:a8:95:84:f4:b8:d6:8b:be:f5:39:93:d2:ea:4e: 3e:2a:57:75:e9:9e:c9:a3:cc:8e:d6:3d:fd:a6:d9:7d:bf:41: ca:3b:f6:4b:73:ce:b9:9a:d1:e4:4a:87:a2:a9:ae:aa:25:7f: 4f:0e:15:a0:fa:bb:e3:39:a4:e6:98:b4:8f:cd:da:bf:51:83: 5d:18:b7:4e:31:0c:7d:5e:28:a8:f6:71:33:c9:e2:c9:cd:49: dd:69:f5:fd:14:53:81:4c:1b:8f:3c:c1:66:5d:7f:78:85:b5: 2a:7d:06:87:34:e5:41:95:d6:fb:4f:64:4a:8f:b7:b0:56:d1: 6e:34:51:f4:d5:eb:6e:42:75:3d:2a:f2:0c:3d:9a:39:6b:0a: 27:fc:ef:f0:83:3d:ad:a9:f4:bf:59:99:08:59:da:70:85:8d: 5c:88:f4:b5:30:68:35:d4:0c:d8:8a:b0:ac:e0:22:c6:85:bd: 70:11:78:22:f0:f0:9f:4e:c0:8a:28:97:4d:b7:f0:ad:1d:93: 60:ff:2e:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0NUIxMTAvBgNVBAUTKENCNzRENTYxM0Q3MzQyQ0ZCOUI3Rjc5REVGMEM5RkFE ODg1Qzc4MjIwHhcNMjQxMTIzMDMxNTI4WhcNMjQxMTMwMDMxNTI4WjAYMRYwFAYD VQQDEw02NzQxNDhkMS00OWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Ia2Lp8+4zNS9lb0sS3cw0HhSA8VZnit0/k1FMGgZKrXkHDF+q/PxizsPYyI 6ULlhaxjUoqXpUkNGfOFCAXeI06N0dfuscCyoMHaHSvHUwdiz0kw6qRZHX1vHbWT bSAAp5n3BXaJo2l6u5rP6Pp3xRNFnRcBlUK814uPPzDc5D6bhiMFRDRXBN/EUePQ KmiN6MY5mgx0CmZgTUmFKvzkkjJzZXaQrmaYZPQ9hpE8Q0yPkO1qI+qJt/Qugi8v qQsYwqiNj+YyfmbVv8yQ9eU5tndVg7fTD6a3u7y0sy/eUuQeAC8KYjj/gZEg+tA1 oUOM/YUxke/NPCiuG6UFZmqu2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGrYij/ nwGzM+nBk3nUPJ4i97AdMB8GA1UdIwQYMBaAFMt01WE9c0LPubf3ne8Mn62IXHgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQ1Qi85NzM2OUI0NjIx NzYxMUVFQjRGM0FENkZDNEY5QUUwMi95M1RWWVQxelFzLTV0X2VkN3d5ZnJZaGNl Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzVFZZVDF6UXMtNXRfZWQ3d3lmclloY2VDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQ1Qi85NzM2OUI0NjIxNzYxMUVFQjRGM0FENkZDNEY5QUUwMi95M1RWWVQxelFz LTV0X2VkN3d5ZnJZaGNlQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcaXv85VzXBv+swTMwPT8HfAlNRj+cWfKF59p/7UtWg41g0XJ9SlZW dqdpDaPwsSlSR87y2rJOf0amqJWE9LjWi771OZPS6k4+Kld16Z7Jo8yO1j39ptl9 v0HKO/ZLc865mtHkSoeiqa6qJX9PDhWg+rvjOaTmmLSPzdq/UYNdGLdOMQx9Xiio 9nEzyeLJzUndafX9FFOBTBuPPMFmXX94hbUqfQaHNOVBldb7T2RKj7ewVtFuNFH0 1etuQnU9KvIMPZo5awon/O/wgz2tqfS/WZkIWdpwhY1ciPS1MGg11AzYirCs4CLG hb1wEXgi8PCfTsCKKJdNt/CtHZNg/y5V -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:09 2024 by rpki-client on console-ams.rpki-client.org