$ rpki-client -vvf rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft File: YeQBev9HdnE8_cggXML7IXhGK6E.mft (raw, json) Hash identifier: x67ZIFufssiuna4KyXpW/oo2OmkKol2nzp3YWoHT2Dc= Subject key identifier: 34:06:68:9E:8D:BB:8B:70:20:80:7B:CF:AB:9B:8A:79:FC:D2:D3:13 Authority key identifier: 61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1 Certificate issuer: /CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1 Certificate serial: 09D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft Manifest number: 09CB Signing time: Fri 22 Nov 2024 19:44:14 +0000 Manifest this update: Fri 22 Nov 2024 19:44:13 +0000 Manifest next update: Fri 29 Nov 2024 19:44:13 +0000 Files and hashes: 1: YeQBev9HdnE8_cggXML7IXhGK6E.crl (hash: tfo2c+wKxmXAce0102jB42UrvUBVhfDDbDIxbVzJaXw=) 2: E3DD6362787A11ED89732760C4F9AE02.roa (hash: UivYPIeEF4bNwEIll2XyDrhcbZqGNmj3hiIA72aeZpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2519 (0x9d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1 Validity Not Before: Nov 22 19:44:13 2024 GMT Not After : Nov 29 19:44:13 2024 GMT Subject: CN=6740df0d-a114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b1:08:ec:52:84:fa:09:d3:0e:03:03:6f:08: 97:16:15:00:e5:18:74:d8:5a:5d:5e:b4:35:68:82: b7:ca:b3:d4:2f:21:97:70:cf:8e:4a:b6:31:89:3b: 74:0a:61:0f:bc:79:d7:4a:33:97:ee:fb:f7:45:52: 1c:9b:7b:0b:e4:1b:1d:d1:e5:0e:f3:b1:04:17:4e: 33:5b:ff:ed:de:c1:4f:3a:92:b4:50:da:f4:4c:8d: 3e:d0:c8:3c:10:48:12:0d:fd:d2:99:10:41:e5:41: a8:9e:33:92:dc:a9:2d:6a:41:a9:47:da:8c:f5:53: 94:e7:66:b9:ae:0a:ae:72:dc:c0:35:f9:a6:a4:8b: 73:d1:37:25:20:dc:61:a9:37:06:f3:ae:31:15:b6: dc:8d:5b:a6:4f:ba:e4:47:52:65:56:7f:5c:43:97: 31:f2:32:11:d1:54:4e:b2:b2:62:d2:04:69:89:87: 55:de:64:fa:41:ba:eb:a5:e2:59:22:08:6f:80:66: 61:15:0a:33:6c:8b:97:b2:6b:68:9d:69:8f:c2:b2: ee:3d:1d:c8:06:fb:6a:b3:6e:5c:28:88:84:b4:83: 62:99:7d:dd:0e:8a:ba:15:08:c9:94:4d:09:df:0a: 80:95:13:f1:d6:f2:3c:cc:cf:ae:65:89:01:67:e3: 4c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:06:68:9E:8D:BB:8B:70:20:80:7B:CF:AB:9B:8A:79:FC:D2:D3:13 X509v3 Authority Key Identifier: keyid:61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:8f:27:34:9c:6e:67:20:a5:af:42:62:a6:79:50:09:2c:11: fb:97:62:90:40:b1:a7:2f:ab:c0:d2:3e:c7:e8:c8:e2:a8:90: bc:89:ad:80:c9:79:ef:10:7f:92:ee:4e:78:d6:ee:8e:bb:08: ca:c9:d0:00:c7:c5:88:75:e8:d2:f6:f4:18:e1:43:2f:92:13: 9e:8e:8d:7a:76:29:d6:19:22:75:60:9a:b0:6c:6c:ea:d1:fc: 3b:d3:e5:9e:a6:31:cb:20:b3:87:8a:7b:00:64:59:36:84:22: c5:93:af:b8:c7:90:75:67:aa:f5:9b:51:8a:70:88:14:0c:f5: 53:9b:1e:51:16:20:62:b4:88:f2:5b:18:b3:f7:0a:85:c1:f4: ee:6a:e1:c2:ed:85:4e:62:40:eb:73:e5:2d:34:ff:9c:be:84: d7:53:6a:4a:4e:b0:d7:1b:16:58:5f:02:4a:df:58:49:d2:fe: 7c:e2:56:46:ba:a7:be:7e:b5:bc:0c:e1:bb:52:06:22:df:c0: fa:79:eb:7c:46:7d:f1:ca:1d:45:da:55:72:d4:a1:5a:76:76: a4:d2:b8:78:1e:fc:63:2a:5a:eb:09:d0:3e:51:d5:6d:f1:f1: 8c:a9:fe:41:9a:10:2c:b1:04:1e:a2:b7:fe:36:7e:33:c7:fd: cc:eb:b9:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE4MjQxMTAvBgNVBAUTKDYxRTQwMTdBRkY0Nzc2NzEzQ0ZEQzgyMDVDQzJGQjIx Nzg0NjJCQTEwHhcNMjQxMTIyMTk0NDEzWhcNMjQxMTI5MTk0NDEzWjAYMRYwFAYD VQQDEw02NzQwZGYwZC1hMTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLEI7FKE+gnTDgMDbwiXFhUA5Rh02FpdXrQ1aIK3yrPULyGXcM+OSrYxiTt0 CmEPvHnXSjOX7vv3RVIcm3sL5Bsd0eUO87EEF04zW//t3sFPOpK0UNr0TI0+0Mg8 EEgSDf3SmRBB5UGonjOS3KktakGpR9qM9VOU52a5rgquctzANfmmpItz0TclINxh qTcG864xFbbcjVumT7rkR1JlVn9cQ5cx8jIR0VROsrJi0gRpiYdV3mT6QbrrpeJZ IghvgGZhFQozbIuXsmtonWmPwrLuPR3IBvtqs25cKIiEtINimX3dDoq6FQjJlE0J 3wqAlRPx1vI8zM+uZYkBZ+NMfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQGaJ6N u4twIIB7z6ubinn80tMTMB8GA1UdIwQYMBaAFGHkAXr/R3ZxPP3IIFzC+yF4Riuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTgyNC84QkZGM0JCNDZF N0YxMUVBOTVFRjE4NjFDNEY5QUUwMi9ZZVFCZXY5SGRuRThfY2dnWE1MN0lYaEdL NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1llUUJldjlIZG5FOF9jZ2dYTUw3SVhoR0s2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTgyNC84QkZGM0JCNDZFN0YxMUVBOTVFRjE4NjFDNEY5QUUwMi9ZZVFCZXY5SGRu RThfY2dnWE1MN0lYaEdLNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/jyc0nG5nIKWvQmKmeVAJLBH7l2KQQLGnL6vA0j7H6MjiqJC8ia2A yXnvEH+S7k541u6OuwjKydAAx8WIdejS9vQY4UMvkhOejo16dinWGSJ1YJqwbGzq 0fw70+WepjHLILOHinsAZFk2hCLFk6+4x5B1Z6r1m1GKcIgUDPVTmx5RFiBitIjy Wxiz9wqFwfTuauHC7YVOYkDrc+UtNP+cvoTXU2pKTrDXGxZYXwJK31hJ0v584lZG uqe+frW8DOG7UgYi38D6eet8Rn3xyh1F2lVy1KFadnak0rh4HvxjKlrrCdA+UdVt 8fGMqf5BmhAssQQeorf+Nn4zx/3M67lf -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:36 2024 by rpki-client on console-ams.rpki-client.org