$ rpki-client -vvf rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft File: Yt792dXXaz4eaPmBKVcVDcD1PF0.mft (raw, json) Hash identifier: JqPzXi0uOvDo8f+Q2m1wW1FSfQuyfBqe1IbpwxFLsqc= Subject key identifier: 6C:33:90:33:06:90:F2:40:56:E3:7D:CF:01:33:94:2E:A8:2C:40:ED Authority key identifier: 62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D Certificate issuer: /CN=A9195456/serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D Certificate serial: 0395 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft Manifest number: 0391 Signing time: Wed 27 Nov 2024 00:21:20 +0000 Manifest this update: Wed 27 Nov 2024 00:21:20 +0000 Manifest next update: Wed 04 Dec 2024 00:21:20 +0000 Files and hashes: 1: Yt792dXXaz4eaPmBKVcVDcD1PF0.crl (hash: 05GX+CX+bk5O8FKK3dT4Z68MNH5qHkJY++93tVWyY/I=) 2: 766B426A7A9011ECA266DE36C4F9AE02.roa (hash: 42rM/YXw/GYdbNXckygMx1iVCDC/xjgnKGAPtnBzAdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Dec 2024 00:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195456/serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D Validity Not Before: Nov 27 00:21:20 2024 GMT Not After : Dec 4 00:21:20 2024 GMT Subject: CN=67466600-92bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:d5:95:84:30:c3:83:61:f1:d6:b6:1b:69: 29:ad:4b:4f:4d:a5:57:bd:69:a7:5f:bb:f0:b0:cd: a1:0c:31:2c:8e:8a:d3:1c:e0:98:62:34:44:70:38: 7e:ee:80:ea:af:73:f0:75:e8:28:87:72:7c:b9:0e: 4a:57:64:b8:cd:e6:53:f9:67:08:92:e8:2a:38:88: 1d:02:09:88:cb:22:db:44:76:3f:dd:f7:81:d5:bf: 3c:8f:c4:73:d2:df:5d:17:a7:8f:81:e2:8a:f6:4a: 35:72:0b:9f:20:00:9e:ce:c4:89:4d:ff:9a:90:f3: b0:52:12:46:e5:a7:9a:07:09:0e:9f:d1:06:a9:7c: 1c:7c:55:87:fa:2b:cb:58:c8:b5:cf:75:00:c9:76: c0:bf:eb:66:56:28:13:57:8a:e4:19:db:76:63:06: 27:b9:91:92:ff:df:d9:1b:2b:33:32:34:54:1b:26: 1f:54:6e:26:9a:03:e6:0f:b0:ed:e5:75:b8:c9:69: 38:16:a2:2c:39:e8:dd:b8:f3:80:df:54:f0:ca:fd: 3b:f4:ba:09:dc:55:b8:9b:77:45:c9:ce:af:f0:d8: 1c:ec:94:66:95:dd:0d:c1:19:de:5c:e4:24:24:79: b4:c4:ec:8c:e4:63:70:00:2c:4c:d8:61:27:fc:eb: 54:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:33:90:33:06:90:F2:40:56:E3:7D:CF:01:33:94:2E:A8:2C:40:ED X509v3 Authority Key Identifier: keyid:62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ab:fe:f1:af:1e:ba:5d:20:ea:44:07:a4:1b:be:0a:05:56: f9:6b:7a:3d:c7:7e:e6:c4:ad:0e:2a:6d:66:76:b3:b5:65:3c: 29:51:b3:7c:f1:24:e0:c8:46:19:cf:e2:57:68:ca:09:ff:49: 16:a5:f5:42:79:0b:bb:7e:af:bd:dc:e4:6f:38:43:ba:4b:85: 5f:31:a2:18:51:e5:88:b7:03:0f:57:8c:19:ae:da:bb:da:df: bc:e5:c3:35:df:3c:cf:67:de:f4:12:cf:3f:40:69:7b:7e:fd: 04:e3:c2:b4:d4:72:43:60:e7:c2:66:81:93:b1:a5:6f:9e:1e: 94:09:48:dc:2e:d1:68:94:9f:8f:b1:2f:26:b0:0e:7a:a3:58: ab:de:0f:97:80:59:c4:e7:01:b4:e4:2c:5f:d8:d2:ae:67:07: a3:e4:e8:af:c7:e9:1d:47:a6:90:b7:c4:50:c8:fc:37:88:4d: 0a:10:28:f5:43:a4:31:12:99:ad:7f:de:1c:29:e4:90:84:f6: ad:7d:b4:ec:ec:e6:b2:7d:3b:c7:d6:55:73:3a:2f:7d:ca:c3: 39:c9:e1:bb:06:b3:2d:64:e3:bb:de:4e:97:55:41:ca:8f:70: e6:35:49:0a:49:4d:e5:1c:c2:6d:47:df:6c:c0:1e:70:e4:34: b2:03:b0:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0NTYxMTAvBgNVBAUTKDYyREVGREQ5RDVENzZCM0UxRTY4Rjk4MTI5NTcxNTBE QzBGNTNDNUQwHhcNMjQxMTI3MDAyMTIwWhcNMjQxMjA0MDAyMTIwWjAYMRYwFAYD VQQDEw02NzQ2NjYwMC05MmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMDVlYQww4Nh8da2G2kprUtPTaVXvWmnX7vwsM2hDDEsjorTHOCYYjREcDh+ 7oDqr3Pwdegoh3J8uQ5KV2S4zeZT+WcIkugqOIgdAgmIyyLbRHY/3feB1b88j8Rz 0t9dF6ePgeKK9ko1cgufIACezsSJTf+akPOwUhJG5aeaBwkOn9EGqXwcfFWH+ivL WMi1z3UAyXbAv+tmVigTV4rkGdt2YwYnuZGS/9/ZGyszMjRUGyYfVG4mmgPmD7Dt 5XW4yWk4FqIsOejduPOA31Twyv079LoJ3FW4m3dFyc6v8Ngc7JRmld0NwRneXOQk JHm0xOyM5GNwACxM2GEn/OtUEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwzkDMG kPJAVuN9zwEzlC6oLEDtMB8GA1UdIwQYMBaAFGLe/dnV12s+Hmj5gSlXFQ3A9Txd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTQ1Ni85QzQ1QjlCNDdB OEQxMUVDODRCOTA1MzRDNEY5QUUwMi9ZdDc5MmRYWGF6NGVhUG1CS1ZjVkRjRDFQ RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l0NzkyZFhYYXo0ZWFQbUJLVmNWRGNEMVBGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTQ1Ni85QzQ1QjlCNDdBOEQxMUVDODRCOTA1MzRDNEY5QUUwMi9ZdDc5MmRYWGF6 NGVhUG1CS1ZjVkRjRDFQRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArq/7xrx66XSDqRAekG74KBVb5a3o9x37mxK0OKm1mdrO1ZTwpUbN8 8STgyEYZz+JXaMoJ/0kWpfVCeQu7fq+93ORvOEO6S4VfMaIYUeWItwMPV4wZrtq7 2t+85cM13zzPZ970Es8/QGl7fv0E48K01HJDYOfCZoGTsaVvnh6UCUjcLtFolJ+P sS8msA56o1ir3g+XgFnE5wG05Cxf2NKuZwej5Oivx+kdR6aQt8RQyPw3iE0KECj1 Q6QxEpmtf94cKeSQhPatfbTs7OayfTvH1lVzOi99ysM5yeG7BrMtZOO73k6XVUHK j3DmNUkKSU3lHMJtR99swB5w5DSyA7DG -----END CERTIFICATE-----Generated at Wed Nov 27 02:21:08 2024 by rpki-client on console-fra.rpki-client.org