$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft File: 7yfjyfFbWDsVypzMPJBdIpzi8NA.mft (raw, json) Hash identifier: BOQhsP+MaWQQvW50dCkT4z9zZZQj5mN86g9iIrqM0/Y= Subject key identifier: E1:F4:7D:AF:35:9E:FE:8B:35:40:1B:47:29:0F:39:A0:09:95:C0:BA Authority key identifier: EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0 Certificate issuer: /CN=A91C1814/serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0 Certificate serial: 0578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft Manifest number: 0574 Signing time: Fri 22 Nov 2024 22:51:54 +0000 Manifest this update: Fri 22 Nov 2024 22:51:53 +0000 Manifest next update: Fri 29 Nov 2024 22:51:53 +0000 Files and hashes: 1: 7yfjyfFbWDsVypzMPJBdIpzi8NA.crl (hash: fsRyk/3Qw+cslJYrNaRO32wfZzwENzgwEdPQEl8WBQU=) 2: 38378A3EBA3411EBB94A527CC4F9AE02.roa (hash: Qq4r6tfxWlCBFxRmTUBo8YQTZX8r+LS9wYAcWz832T4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1400 (0x578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1814/serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0 Validity Not Before: Nov 22 22:51:53 2024 GMT Not After : Nov 29 22:51:53 2024 GMT Subject: CN=67410b0a-a85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:50:10:6b:2f:e3:2b:2e:87:7d:ed:bd:7d: f2:31:2a:db:5b:ce:eb:95:39:cf:2b:28:cd:5b:f9: 33:d9:45:80:79:74:fc:1f:19:49:90:11:29:90:f1: 20:0f:84:e3:a2:96:62:a5:79:4c:d5:5f:7b:04:4d: 73:3b:70:5a:9d:a3:07:68:21:4a:a4:64:9c:4e:4c: 10:54:c7:85:7a:39:d6:60:5b:c1:f5:b1:eb:58:0e: af:31:be:ae:71:39:4c:7a:2c:1d:6e:7f:28:d4:e0: 1b:bf:5f:8b:b6:8e:a3:36:72:b9:78:44:9d:23:55: 85:a8:11:dd:5f:61:25:2b:d5:40:76:f0:ae:d5:c8: 52:2c:15:91:fd:17:80:a4:a1:02:51:4e:81:da:3f: a9:86:bb:8d:aa:ce:76:fe:8c:ed:df:05:ea:ce:2b: e2:19:9d:06:de:1d:32:32:9b:a9:b3:3f:4f:35:37: 44:d5:d8:42:9a:2e:a5:59:a1:90:ca:09:39:36:ab: e5:44:bb:c4:73:68:8c:68:b2:e8:d8:57:b3:f0:f7: a2:32:d7:7f:77:fe:92:a6:d9:ef:17:3c:bd:62:8b: 27:08:c0:18:ef:44:85:1c:0d:01:33:74:08:6d:ec: 78:e6:9c:c7:83:c7:72:9d:b8:8d:2d:ff:57:f9:df: 05:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F4:7D:AF:35:9E:FE:8B:35:40:1B:47:29:0F:39:A0:09:95:C0:BA X509v3 Authority Key Identifier: keyid:EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b8:3b:fb:83:31:b8:d3:d3:8a:16:70:51:e4:86:7a:57:90: 68:81:f0:d7:58:c9:46:c4:99:c1:7f:99:44:a4:80:a6:21:1d: e6:8b:9d:30:6b:ec:45:bd:d5:df:58:a2:ef:a5:be:63:e7:a0: e4:c3:0e:ef:b6:be:dc:ea:1d:f7:4a:2e:9e:dc:66:cd:c7:c6: ae:0e:e3:2c:4b:5b:b4:67:f8:36:0d:7d:0f:59:51:9f:85:01: dd:6f:15:b4:5e:51:02:92:da:67:73:c6:5b:76:b2:6b:12:5e: 80:35:57:7e:11:23:2c:df:23:1a:70:1b:72:69:cf:0a:6b:e0: d9:bf:36:b7:d5:44:e4:73:d0:b9:ab:8d:a9:24:5d:ca:84:0b: 02:0d:1c:65:38:f0:d0:88:b3:3c:fb:d5:81:cc:3f:fa:08:bd: 7e:c5:67:7d:bd:09:9e:eb:1d:5b:c6:74:de:e2:da:0c:f2:a8: 0c:aa:0f:e3:fb:9e:30:5e:af:04:bc:a9:5e:0c:8e:b5:29:03: c0:08:bf:ad:12:60:0e:1f:27:b0:99:c1:a8:2a:5a:cf:f3:1d: be:8d:11:a1:5a:ae:23:27:29:a0:a7:31:4c:b7:71:e6:97:a2: 79:46:6f:2d:b9:d3:99:45:c4:05:e8:8d:93:ac:d2:07:42:4f: 83:ba:d7:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE4MTQxMTAvBgNVBAUTKEVGMjdFM0M5RjE1QjU4M0IxNUNBOUNDQzNDOTA1RDIy OUNFMkYwRDAwHhcNMjQxMTIyMjI1MTUzWhcNMjQxMTI5MjI1MTUzWjAYMRYwFAYD VQQDEw02NzQxMGIwYS1hODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLdQEGsv4ysuh33tvX3yMSrbW87rlTnPKyjNW/kz2UWAeXT8HxlJkBEpkPEg D4TjopZipXlM1V97BE1zO3BanaMHaCFKpGScTkwQVMeFejnWYFvB9bHrWA6vMb6u cTlMeiwdbn8o1OAbv1+Lto6jNnK5eESdI1WFqBHdX2ElK9VAdvCu1chSLBWR/ReA pKECUU6B2j+phruNqs52/ozt3wXqziviGZ0G3h0yMpupsz9PNTdE1dhCmi6lWaGQ ygk5NqvlRLvEc2iMaLLo2Fez8PeiMtd/d/6SptnvFzy9YosnCMAY70SFHA0BM3QI bex45pzHg8dynbiNLf9X+d8FawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOH0fa81 nv6LNUAbRykPOaAJlcC6MB8GA1UdIwQYMBaAFO8n48nxW1g7FcqczDyQXSKc4vDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTgxNC9GM0M4NTM5RUJB MzExMUVCOUM2OUMxNzhDNEY5QUUwMi83eWZqeWZGYldEc1Z5cHpNUEpCZElwemk4 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd5Zmp5ZkZiV0RzVnlwek1QSkJkSXB6aThOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTgxNC9GM0M4NTM5RUJBMzExMUVCOUM2OUMxNzhDNEY5QUUwMi83eWZqeWZGYldE c1Z5cHpNUEpCZElwemk4TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzuDv7gzG409OKFnBR5IZ6V5BogfDXWMlGxJnBf5lEpICmIR3mi50w a+xFvdXfWKLvpb5j56Dkww7vtr7c6h33Si6e3GbNx8auDuMsS1u0Z/g2DX0PWVGf hQHdbxW0XlECktpnc8ZbdrJrEl6ANVd+ESMs3yMacBtyac8Ka+DZvza31UTkc9C5 q42pJF3KhAsCDRxlOPDQiLM8+9WBzD/6CL1+xWd9vQme6x1bxnTe4toM8qgMqg/j +54wXq8EvKleDI61KQPACL+tEmAOHyewmcGoKlrP8x2+jRGhWq4jJymgpzFMt3Hm l6J5Rm8tudOZRcQF6I2TrNIHQk+DutcN -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:49 2024 by rpki-client on console-ams.rpki-client.org