$ rpki-client -vvf rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft File: kyv2OTHDR-dryQidQb4k9jcPJYI.mft (raw, json) Hash identifier: Mv/OXIB90VXSaDNF7WvMu9VjPqXP4sonbne/ij6mMe4= Subject key identifier: 4F:9D:FF:E6:21:EE:21:1C:EC:7A:CF:EC:29:AD:10:97:AE:96:BA:AB Authority key identifier: 93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82 Certificate issuer: /CN=A919879C/serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft Manifest number: 0229 Signing time: Sat 23 Nov 2024 01:26:35 +0000 Manifest this update: Sat 23 Nov 2024 01:26:34 +0000 Manifest next update: Sat 30 Nov 2024 01:26:34 +0000 Files and hashes: 1: kyv2OTHDR-dryQidQb4k9jcPJYI.crl (hash: rEsYciKscSdFomwmgVQb7V7u9s437OhxIQPsfMkOMp0=) 2: E7C34456073711ED8BA93630C4F9AE02.roa (hash: kldDMFdCdKUVHMXGUfTfraYPzp89poxoo5pvwA3fx9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919879C/serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582 Validity Not Before: Nov 23 01:26:34 2024 GMT Not After : Nov 30 01:26:34 2024 GMT Subject: CN=67412f4a-28ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:af:b0:6f:48:cd:6c:2f:ee:b6:26:68:2f: eb:d1:69:ee:56:88:7c:e9:15:ac:81:cf:10:57:86: 46:23:3e:e9:97:1a:f7:98:85:2b:ae:4b:55:52:46: 57:40:9e:41:e7:b0:d3:7e:1d:8e:43:3f:23:da:ae: 1e:61:29:fb:9e:de:07:91:d5:f0:fa:63:bc:ee:e6: b5:53:bc:fd:04:b1:65:4f:0c:cc:50:1a:99:d0:81: 26:29:51:52:fc:79:76:8b:56:aa:0c:97:b3:8c:6f: 7f:6a:3b:a4:b3:bf:57:cf:0e:10:3e:c8:28:c8:99: fc:23:0f:39:be:d0:60:c2:64:85:13:8e:6f:75:79: 60:10:ed:98:47:7b:d8:5e:0f:cd:67:11:0d:5e:fd: 78:fd:ef:ae:97:08:ef:b0:00:5b:ec:8e:3e:d3:22: 18:34:21:84:4c:c8:f1:98:c9:44:fb:32:a8:f2:fa: 31:c5:93:15:c3:27:f1:01:6a:6f:d2:f8:5f:83:f0: a9:a0:f0:83:a7:96:4c:69:b2:43:88:dc:73:d9:81: 15:46:6c:55:61:a0:f3:17:49:f1:47:e2:44:a0:a4: ed:e5:0d:47:a5:d5:0e:77:0d:e8:0a:cd:2c:ef:95: b5:d0:bb:ae:fd:46:ae:bc:6c:b1:33:c8:b1:99:ae: 7d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9D:FF:E6:21:EE:21:1C:EC:7A:CF:EC:29:AD:10:97:AE:96:BA:AB X509v3 Authority Key Identifier: keyid:93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:24:95:94:d5:29:40:9d:ca:41:78:57:e0:90:84:b1:b6:f9: ff:26:30:02:a0:66:75:7c:d8:e3:12:7f:32:29:fe:8a:89:bc: f6:ea:e6:22:3d:dd:aa:93:70:8f:a1:57:40:b7:cb:d7:21:67: 7e:41:b7:9e:d9:75:19:4e:4d:9e:34:07:4b:15:8d:d5:05:f7: 59:88:02:e8:01:c6:cc:98:bf:b0:3f:11:61:2b:61:25:6f:01: 3d:e0:8a:14:2e:29:d7:a4:2a:11:5e:ae:b2:5b:d2:3a:37:64: bb:59:b0:7f:36:68:c1:f2:84:63:76:db:69:07:22:c2:81:b1: 07:50:ce:11:47:b4:ac:e8:24:c9:ef:5e:c2:62:7d:67:8f:31: da:d5:06:c7:70:d3:b0:d7:25:38:46:5b:03:96:b5:d9:3f:74: 5f:58:0e:b6:fc:ef:25:12:c2:2a:78:f3:93:d7:ec:ab:2c:d1: a8:55:54:11:f7:87:16:18:00:cf:9e:92:63:d7:99:72:d7:a7: 64:04:b2:16:26:b5:a9:d2:eb:24:27:dd:03:cd:c6:55:c5:31: e4:2b:54:9c:34:14:34:33:64:b2:28:4d:64:46:d1:43:cc:78: 1c:55:95:31:43:2d:85:0f:29:09:18:e4:27:61:d0:20:f8:e0: bc:77:a7:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3OUMxMTAvBgNVBAUTKDkzMkJGNjM5MzFDMzQ3RTc2QkM5MDg5RDQxQkUyNEY2 MzcwRjI1ODIwHhcNMjQxMTIzMDEyNjM0WhcNMjQxMTMwMDEyNjM0WjAYMRYwFAYD VQQDEw02NzQxMmY0YS0yOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdevsG9IzWwv7rYmaC/r0WnuVoh86RWsgc8QV4ZGIz7plxr3mIUrrktVUkZX QJ5B57DTfh2OQz8j2q4eYSn7nt4HkdXw+mO87ua1U7z9BLFlTwzMUBqZ0IEmKVFS /Hl2i1aqDJezjG9/ajuks79Xzw4QPsgoyJn8Iw85vtBgwmSFE45vdXlgEO2YR3vY Xg/NZxENXv14/e+ulwjvsABb7I4+0yIYNCGETMjxmMlE+zKo8voxxZMVwyfxAWpv 0vhfg/CpoPCDp5ZMabJDiNxz2YEVRmxVYaDzF0nxR+JEoKTt5Q1HpdUOdw3oCs0s 75W10Luu/UauvGyxM8ixma59AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+d/+Yh 7iEc7HrP7CmtEJeulrqrMB8GA1UdIwQYMBaAFJMr9jkxw0fna8kInUG+JPY3DyWC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc5Qy9FMUQyMDI5MjA3 MzQxMUVEQjA0RDM3MkRDNEY5QUUwMi9reXYyT1RIRFItZHJ5UWlkUWI0azlqY1BK WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5djJPVEhEUi1kcnlRaWRRYjRrOWpjUEpZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODc5Qy9FMUQyMDI5MjA3MzQxMUVEQjA0RDM3MkRDNEY5QUUwMi9reXYyT1RIRFIt ZHJ5UWlkUWI0azlqY1BKWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAJJWU1SlAncpBeFfgkISxtvn/JjACoGZ1fNjjEn8yKf6Kibz26uYi Pd2qk3CPoVdAt8vXIWd+Qbee2XUZTk2eNAdLFY3VBfdZiALoAcbMmL+wPxFhK2El bwE94IoULinXpCoRXq6yW9I6N2S7WbB/NmjB8oRjdttpByLCgbEHUM4RR7Ss6CTJ 717CYn1njzHa1QbHcNOw1yU4RlsDlrXZP3RfWA62/O8lEsIqePOT1+yrLNGoVVQR 94cWGADPnpJj15ly16dkBLIWJrWp0uskJ90DzcZVxTHkK1ScNBQ0M2SyKE1kRtFD zHgcVZUxQy2FDykJGOQnYdAg+OC8d6eR -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:42 2024 by rpki-client on console-fra.rpki-client.org