$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft File: yKkupf322jjqQIWq7lWnJIzTTzo.mft (raw, json) Hash identifier: Cad3AGpsX7Vz4dgV3lUikgW19e0A2swtWSUHw68ZK4k= Subject key identifier: AC:C1:74:8E:91:01:94:1A:E6:7A:BD:9B:C4:7D:15:D5:87:7F:7D:DE Authority key identifier: C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A Certificate issuer: /CN=A91B3E17/serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft Manifest number: 0287 Signing time: Sat 23 Nov 2024 01:09:40 +0000 Manifest this update: Sat 23 Nov 2024 01:09:40 +0000 Manifest next update: Sat 30 Nov 2024 01:09:40 +0000 Files and hashes: 1: yKkupf322jjqQIWq7lWnJIzTTzo.crl (hash: K6oAOnnlKX0QOJUL9hADxyk2jaeftjwP4cffX0PMzpU=) 2: 3166C07AE16C11ECB2629D1AC4F9AE02.roa (hash: 5HeQjUddVlUYpXJizX31EU4mHLeHBhXjUJazCJXsOvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3E17/serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Validity Not Before: Nov 23 01:09:40 2024 GMT Not After : Nov 30 01:09:40 2024 GMT Subject: CN=67412b54-8709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:44:60:67:8a:ed:d4:25:e8:f4:bf:83:5c: 3d:d7:8d:05:48:fd:3a:1c:e4:86:c4:2c:a9:6b:73: 43:fd:de:c7:23:1a:56:e6:9b:98:33:5d:ea:80:70: 86:fb:ff:6e:6c:24:47:27:ab:04:44:5b:3d:0d:05: 90:ba:ed:70:51:49:5d:c5:f0:5f:9b:6e:b7:3a:df: c7:51:ff:e4:0c:0a:7b:84:66:ce:ab:50:56:40:d2: a3:b8:26:9f:fc:bd:65:cc:03:c9:2f:f7:0e:0b:07: eb:b4:ec:03:a5:0e:40:ed:d3:ae:2d:66:82:0c:39: 50:0b:eb:13:27:bb:a5:43:d9:de:74:6e:fc:2c:af: f6:65:4c:2d:8d:20:0a:34:a5:9f:53:c2:ff:86:86: 94:dc:f6:6d:4a:c1:20:c7:61:5f:fa:ea:c5:69:2d: 2b:e2:07:12:79:72:72:80:80:b3:18:a8:9c:ec:b2: 26:d7:ad:f7:88:83:c9:0b:1f:ac:93:17:d1:18:cb: 2f:e2:c5:6a:9d:16:c5:37:04:d2:3a:0c:f6:2d:23: 7d:c0:16:94:7d:63:f0:c7:81:9d:e7:a6:ef:5c:9c: b1:19:aa:4e:f3:6c:0d:44:82:d7:fc:7c:fc:f6:bc: 5f:eb:d5:85:9a:21:dd:d0:ba:fc:d8:4a:f7:df:2c: 1a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C1:74:8E:91:01:94:1A:E6:7A:BD:9B:C4:7D:15:D5:87:7F:7D:DE X509v3 Authority Key Identifier: keyid:C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:67:f1:fe:ca:b5:6c:68:06:2c:44:71:7d:6f:86:5f:9e:08: c8:20:f3:9c:21:38:2e:00:fa:5b:2b:b7:82:2d:52:95:10:91: 6f:63:fc:53:03:ec:82:e5:74:19:f9:44:d3:9f:94:db:c6:60: cc:c3:3c:ec:33:20:2e:9d:92:c5:37:70:8e:59:7a:e8:36:dd: 1b:4f:51:99:58:02:8b:2c:9f:33:b4:ad:be:b1:bd:51:ed:10: 9a:97:db:4e:1b:ac:de:01:6c:ab:02:e5:db:a9:bf:51:ca:4b: db:72:bc:b9:f0:90:4e:08:50:70:cb:76:1c:78:aa:6a:ae:89: d8:73:4a:c6:ad:1e:17:6b:6b:ed:30:89:c5:2f:cc:90:33:63: a6:c1:57:27:54:fd:1e:0e:03:9b:84:36:6f:f9:ca:85:06:19: e7:f8:3f:ec:a8:aa:c1:a7:a2:ad:58:1b:e1:c8:35:e8:bb:f4: 60:28:d8:c8:01:41:a2:8f:3d:99:ac:9c:35:26:9e:03:04:ee: 67:97:9f:41:c5:b2:d1:e8:f2:77:4c:79:99:a4:2a:c3:49:15: 05:9b:86:db:56:58:d7:97:22:70:00:72:bc:c0:c9:6a:0b:31: e6:2e:79:71:5d:2d:40:24:56:1d:9e:4f:65:75:6a:d1:3e:9d: 37:af:f7:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNFMTcxMTAvBgNVBAUTKEM4QTkyRUE1RkRGNkRBMzhFQTQwODVBQUVFNTVBNzI0 OENEMzRGM0EwHhcNMjQxMTIzMDEwOTQwWhcNMjQxMTMwMDEwOTQwWjAYMRYwFAYD VQQDEw02NzQxMmI1NC04NzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZNEYGeK7dQl6PS/g1w9140FSP06HOSGxCypa3ND/d7HIxpW5puYM13qgHCG +/9ubCRHJ6sERFs9DQWQuu1wUUldxfBfm263Ot/HUf/kDAp7hGbOq1BWQNKjuCaf /L1lzAPJL/cOCwfrtOwDpQ5A7dOuLWaCDDlQC+sTJ7ulQ9nedG78LK/2ZUwtjSAK NKWfU8L/hoaU3PZtSsEgx2Ff+urFaS0r4gcSeXJygICzGKic7LIm1633iIPJCx+s kxfRGMsv4sVqnRbFNwTSOgz2LSN9wBaUfWPwx4Gd56bvXJyxGapO82wNRILX/Hz8 9rxf69WFmiHd0Lr82Er33ywa3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzBdI6R AZQa5nq9m8R9FdWHf33eMB8GA1UdIwQYMBaAFMipLqX99to46kCFqu5VpySM0086 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0UxNy85MjBDNUVDQUUx NjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJqanFRSVdxN2xXbkpJelRU em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lLa3VwZjMyMmpqcVFJV3E3bFduSkl6VFR6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0UxNy85MjBDNUVDQUUxNjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJq anFRSVdxN2xXbkpJelRUem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkZ/H+yrVsaAYsRHF9b4ZfngjIIPOcITguAPpbK7eCLVKVEJFvY/xT A+yC5XQZ+UTTn5TbxmDMwzzsMyAunZLFN3COWXroNt0bT1GZWAKLLJ8ztK2+sb1R 7RCal9tOG6zeAWyrAuXbqb9Rykvbcry58JBOCFBwy3YceKpqronYc0rGrR4Xa2vt MInFL8yQM2OmwVcnVP0eDgObhDZv+cqFBhnn+D/sqKrBp6KtWBvhyDXou/RgKNjI AUGijz2ZrJw1Jp4DBO5nl59BxbLR6PJ3THmZpCrDSRUFm4bbVljXlyJwAHK8wMlq CzHmLnlxXS1AJFYdnk9ldWrRPp03r/e1 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:44 2024 by rpki-client on console-fra.rpki-client.org