$ rpki-client -vvf rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft File: pyf1mySxFKJR_fd_U7-g7GkeJaU.mft (raw, json) Hash identifier: elA/ZIK3njWUGTDg1acE/k6OGtCiZvMokDYr+Em+WZU= Subject key identifier: 7D:67:73:9F:CC:BD:9C:7F:55:F7:A4:80:A6:C7:38:4C:2D:A8:EE:B4 Authority key identifier: A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5 Certificate issuer: /CN=A918232F/serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5 Certificate serial: 142D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft Manifest number: 1422 Signing time: Fri 22 Nov 2024 16:55:29 +0000 Manifest this update: Fri 22 Nov 2024 16:55:28 +0000 Manifest next update: Fri 29 Nov 2024 16:55:28 +0000 Files and hashes: 1: pyf1mySxFKJR_fd_U7-g7GkeJaU.crl (hash: BsYb31kG3TxOMzi7eU+ENx0N4U1SVfBAhQeCGwCLjMk=) 2: 530FB34C664D11E89967A549C4F9AE02.roa (hash: c2VkZk/hkd5VMNsXVjPwdPvb5rT2P+YAQ+KRDvYsv9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5165 (0x142d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918232F/serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5 Validity Not Before: Nov 22 16:55:28 2024 GMT Not After : Nov 29 16:55:28 2024 GMT Subject: CN=6740b780-26e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3d:ed:2a:1a:fe:e7:e6:e7:43:37:5d:31:44: d0:fa:46:64:46:8c:d7:24:a7:bd:46:d2:1b:85:6f: 59:8f:ac:67:44:d9:8e:db:16:bd:24:c9:02:33:7e: c7:5f:25:a0:d3:4d:9f:de:f2:de:5a:29:e4:6d:e0: 0a:e0:c1:82:85:dd:9b:ee:25:5a:b5:8f:58:88:20: 8e:8a:9c:ca:45:49:9a:f8:21:c6:b8:4f:72:e4:ce: 0b:a4:20:d4:f7:06:1a:8f:e3:49:6f:d4:1d:05:22: f9:02:61:c8:14:56:d4:fa:f5:14:e9:8d:b0:66:21: 54:84:af:d9:bd:5e:62:85:bc:00:22:c3:19:6f:9e: 0e:ab:61:9c:2d:09:b9:a4:17:ea:d8:31:33:c3:49: d8:d9:e2:1f:40:01:09:58:95:65:b5:2c:31:db:1a: 39:ef:13:c0:0f:46:fc:d3:de:89:18:b1:4c:fd:26: 04:36:ee:5a:70:81:cf:2a:3e:b9:90:07:c6:7d:d7: 48:c6:1f:6e:2a:90:80:bc:30:94:51:10:71:03:d8: 13:75:c1:f7:d8:87:95:03:52:e4:3b:ad:91:23:9f: ef:d4:02:5b:7e:cf:67:36:92:04:6f:e2:62:c6:21: cb:0e:57:17:a3:b3:62:ef:0e:e3:90:21:70:68:94: 95:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:67:73:9F:CC:BD:9C:7F:55:F7:A4:80:A6:C7:38:4C:2D:A8:EE:B4 X509v3 Authority Key Identifier: keyid:A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e0:46:29:b4:d0:77:de:7f:99:f9:ab:24:c7:ac:bb:81:86: a9:73:0b:1a:90:b5:b1:a6:29:fd:60:b4:08:b3:63:5b:2f:6e: 0b:5a:9a:1c:0f:c4:da:90:64:66:f0:80:ae:f4:47:af:dc:38: 91:6d:14:a5:a5:0f:8c:82:f4:e6:30:8f:2b:7e:d0:14:52:c7: 74:5f:1e:bd:6b:e9:5c:a8:df:2b:17:df:d3:72:91:e5:aa:8c: 0c:76:65:6c:de:ec:9c:a1:98:d2:a9:0b:5b:5e:d0:a4:48:e3: 06:19:1b:5a:f4:e0:4e:b3:4c:55:b5:7f:af:d5:d5:ce:ea:fe: 3c:a3:14:e9:37:4a:e7:2f:74:69:ad:b7:9b:31:50:8c:59:b6: 93:e4:04:93:5c:9a:df:68:f0:73:b6:7f:79:2d:9b:35:43:53: 32:5e:31:70:84:65:67:28:d8:6b:bd:47:8a:b0:71:b2:1c:77: ff:ba:20:5c:89:c7:8a:32:d6:06:9f:b4:9d:8d:18:c6:e3:c4: 5b:01:23:63:c2:29:ce:b6:20:8e:eb:48:5f:3b:d6:c4:34:b5: ed:44:85:12:6f:0e:6b:06:d3:0f:65:35:81:fd:ea:92:49:20: a8:30:ac:61:6a:92:6c:70:2f:98:61:0d:62:56:23:39:fd:54: d1:77:79:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzMkYxMTAvBgNVBAUTKEE3MjdGNTlCMjRCMTE0QTI1MUZERjc3RjUzQkZBMEVD NjkxRTI1QTUwHhcNMjQxMTIyMTY1NTI4WhcNMjQxMTI5MTY1NTI4WjAYMRYwFAYD VQQDEw02NzQwYjc4MC0yNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj3tKhr+5+bnQzddMUTQ+kZkRozXJKe9RtIbhW9Zj6xnRNmO2xa9JMkCM37H XyWg002f3vLeWinkbeAK4MGChd2b7iVatY9YiCCOipzKRUma+CHGuE9y5M4LpCDU 9wYaj+NJb9QdBSL5AmHIFFbU+vUU6Y2wZiFUhK/ZvV5ihbwAIsMZb54Oq2GcLQm5 pBfq2DEzw0nY2eIfQAEJWJVltSwx2xo57xPAD0b8096JGLFM/SYENu5acIHPKj65 kAfGfddIxh9uKpCAvDCUURBxA9gTdcH32IeVA1LkO62RI5/v1AJbfs9nNpIEb+Ji xiHLDlcXo7Ni7w7jkCFwaJSVOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1nc5/M vZx/VfekgKbHOEwtqO60MB8GA1UdIwQYMBaAFKcn9ZsksRSiUf33f1O/oOxpHiWl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjMyRi8zMzQ1QzRDNjY2 NEMxMUU4QjcxQUZFNDZDNEY5QUUwMi9weWYxbXlTeEZLSlJfZmRfVTctZzdHa2VK YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B5ZjFteVN4RktKUl9mZF9VNy1nN0drZUphVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjMyRi8zMzQ1QzRDNjY2NEMxMUU4QjcxQUZFNDZDNEY5QUUwMi9weWYxbXlTeEZL SlJfZmRfVTctZzdHa2VKYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB4EYptNB33n+Z+askx6y7gYapcwsakLWxpin9YLQIs2NbL24LWpoc D8TakGRm8ICu9Eev3DiRbRSlpQ+MgvTmMI8rftAUUsd0Xx69a+lcqN8rF9/TcpHl qowMdmVs3uycoZjSqQtbXtCkSOMGGRta9OBOs0xVtX+v1dXO6v48oxTpN0rnL3Rp rbebMVCMWbaT5ASTXJrfaPBztn95LZs1Q1MyXjFwhGVnKNhrvUeKsHGyHHf/uiBc iceKMtYGn7SdjRjG48RbASNjwinOtiCO60hfO9bENLXtRIUSbw5rBtMPZTWB/eqS SSCoMKxhapJscC+YYQ1iViM5/VTRd3m/ -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org