$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft File: yUpKujMViTObRlHAW5L_4BvLNMk.mft (raw, json) Hash identifier: TWCY/1RM0G/M1RU2J1p5P8wWGPcNGW8nm7wEv5wUcWs= Subject key identifier: B2:5A:AF:6E:B7:83:40:99:A9:9D:A5:40:FF:6C:D8:A5:F7:7C:D7:C4 Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 Certificate issuer: /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft Manifest number: C5 Signing time: Sat 23 Nov 2024 03:54:47 +0000 Manifest this update: Sat 23 Nov 2024 03:54:46 +0000 Manifest next update: Sat 30 Nov 2024 03:54:46 +0000 Files and hashes: 1: yUpKujMViTObRlHAW5L_4BvLNMk.crl (hash: 18wzDDZxPlhRBm5fJUZqGo9NMNMA0cuC0Wsw5ujZTrk=) 2: 3863960C7E0311EE8BCA7D33C4F9AE02.roa (hash: DePAWeNaPf050wbH02MB/3/H4o3AawPKYgaEsO6gzSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Validity Not Before: Nov 23 03:54:46 2024 GMT Not After : Nov 30 03:54:46 2024 GMT Subject: CN=67415207-494a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:aa:38:cf:e7:3f:d6:86:d3:d7:8e:d7:e9:08: 3e:31:9e:99:4a:e3:22:06:70:89:c8:f9:66:cd:42: e5:d4:a5:6b:c2:58:ea:06:55:15:df:03:20:61:a3: df:53:90:28:54:47:09:62:49:c7:bb:a9:19:7c:02: 94:40:33:e4:57:b3:a9:d7:2f:8b:89:26:4a:66:67: 51:85:77:e7:ee:30:09:3f:24:b1:9c:97:06:7a:52: 70:fd:88:e9:7c:2e:97:86:42:52:b0:0c:9d:d5:97: 2f:ac:5a:a3:01:30:48:a9:56:15:90:b9:1c:c8:42: 37:33:eb:ea:96:96:36:e5:e2:5e:cd:ad:0e:dc:db: c3:28:15:20:d7:45:56:3b:80:9d:c5:c9:9c:b8:65: 47:0b:f1:6c:0f:4c:3b:00:61:b5:e1:7a:16:a1:5f: 53:59:52:fe:5e:95:c0:c1:9e:ab:cb:d2:d7:e8:5e: cb:f6:c6:83:5c:06:82:d6:4d:b1:f1:2d:27:fa:a4: a6:bb:2d:cd:ad:e2:c6:31:19:1c:37:cf:aa:ad:63: 76:8c:5a:47:3c:a2:08:20:8b:0f:97:51:0f:eb:b6: 2a:41:ed:7c:0c:a4:32:90:23:7a:92:d0:f6:f3:c6: 29:e3:37:ee:bb:0e:75:bc:18:4c:ab:fe:37:29:98: aa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5A:AF:6E:B7:83:40:99:A9:9D:A5:40:FF:6C:D8:A5:F7:7C:D7:C4 X509v3 Authority Key Identifier: keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:22:50:0b:86:8a:3f:e8:17:df:bf:4a:47:87:37:a4:85:61: 67:59:9f:6e:28:f0:2d:d7:e6:20:45:98:05:68:48:82:80:d2: 52:5e:77:21:cc:35:5a:14:cc:18:17:da:e8:ab:1d:ca:c0:e7: aa:33:a6:18:16:df:94:bf:a6:31:f3:3d:5b:67:d3:10:b8:c9: 5e:05:c6:65:b5:b0:1b:f3:78:10:bc:48:c7:e4:87:29:06:23: 10:42:79:1d:36:12:3a:ec:94:86:03:f0:b4:69:de:0e:1d:f2: 6e:af:f9:91:87:df:96:73:57:9a:95:dd:59:00:9a:f6:5d:e6: b2:74:c7:52:fb:12:c2:e2:43:e3:c3:e8:6e:c3:9b:ef:93:21: ba:1e:1d:6a:f5:41:1f:be:43:29:dc:25:4b:d4:e8:91:f4:3a: 73:fb:e3:cf:45:96:91:e1:cf:84:0e:77:98:c7:e3:e0:14:56: 58:e0:e3:8d:8e:ce:2f:d5:4a:32:ae:4c:25:00:65:57:be:52: 6d:15:ae:74:0f:aa:ed:d0:85:08:d2:7a:f4:f1:38:8e:eb:03: 2b:35:cd:32:d7:e7:22:74:09:b0:30:19:1e:01:7e:4f:df:04: 7b:0b:49:35:06:a0:60:4e:e2:c1:9c:1b:86:8b:00:dd:88:bd: 2e:1c:1c:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFMjMxMTAvBgNVBAUTKEM5NEE0QUJBMzMxNTg5MzM5QjQ2NTFDMDVCOTJGRkUw MUJDQjM0QzkwHhcNMjQxMTIzMDM1NDQ2WhcNMjQxMTMwMDM1NDQ2WjAYMRYwFAYD VQQDEw02NzQxNTIwNy00OTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6o4z+c/1obT147X6Qg+MZ6ZSuMiBnCJyPlmzULl1KVrwljqBlUV3wMgYaPf U5AoVEcJYknHu6kZfAKUQDPkV7Op1y+LiSZKZmdRhXfn7jAJPySxnJcGelJw/Yjp fC6XhkJSsAyd1ZcvrFqjATBIqVYVkLkcyEI3M+vqlpY25eJeza0O3NvDKBUg10VW O4CdxcmcuGVHC/FsD0w7AGG14XoWoV9TWVL+XpXAwZ6ry9LX6F7L9saDXAaC1k2x 8S0n+qSmuy3NreLGMRkcN8+qrWN2jFpHPKIIIIsPl1EP67YqQe18DKQykCN6ktD2 88Yp4zfuuw51vBhMq/43KZiqQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJar263 g0CZqZ2lQP9s2KX3fNfEMB8GA1UdIwQYMBaAFMlKSrozFYkzm0ZRwFuS/+AbyzTJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0UyMy9CRTk3QjBBNjdE NjcxMUVFQjA2QTQzMTJDNEY5QUUwMi95VXBLdWpNVmlUT2JSbEhBVzVMXzRCdkxO TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVcEt1ak1WaVRPYlJsSEFXNUxfNEJ2TE5Nay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0UyMy9CRTk3QjBBNjdENjcxMUVFQjA2QTQzMTJDNEY5QUUwMi95VXBLdWpNVmlU T2JSbEhBVzVMXzRCdkxOTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMIlALhoo/6Bffv0pHhzekhWFnWZ9uKPAt1+YgRZgFaEiCgNJSXnch zDVaFMwYF9roqx3KwOeqM6YYFt+Uv6Yx8z1bZ9MQuMleBcZltbAb83gQvEjH5Icp BiMQQnkdNhI67JSGA/C0ad4OHfJur/mRh9+Wc1eald1ZAJr2XeaydMdS+xLC4kPj w+huw5vvkyG6Hh1q9UEfvkMp3CVL1OiR9Dpz++PPRZaR4c+EDneYx+PgFFZY4OON js4v1UoyrkwlAGVXvlJtFa50D6rt0IUI0nr08TiO6wMrNc0y1+cidAmwMBkeAX5P 3wR7C0k1BqBgTuLBnBuGiwDdiL0uHBzT -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org