$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft File: yJEt9MR_ima8SJ7IQnJICiEbBoI.mft (raw, json) Hash identifier: bs90CFJOW7YEVDCyfHQBmsz/2+/yGgHwzmWgTltx25s= Subject key identifier: E1:A6:AE:0B:10:0B:C4:4B:1B:02:AE:4D:6B:B4:80:78:98:39:20:E6 Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Certificate serial: 0B82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft Manifest number: 0B6B Signing time: Fri 22 Nov 2024 18:54:26 +0000 Manifest this update: Fri 22 Nov 2024 18:54:25 +0000 Manifest next update: Fri 29 Nov 2024 18:54:25 +0000 Files and hashes: 1: yJEt9MR_ima8SJ7IQnJICiEbBoI.crl (hash: fz7kALdBMM6jd/KcOSVnCpKY/xYutQM8dmKbvpJD/8s=) 2: 4F0E3CBCD22411ED99FF3546C4F9AE02.roa (hash: 6hGRoFYLuqxbuAAlLDWuQCUMm7hrsrq5mOgxjk9mNq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2946 (0xb82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Validity Not Before: Nov 22 18:54:25 2024 GMT Not After : Nov 29 18:54:25 2024 GMT Subject: CN=6740d361-e0cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3a:dd:19:c7:d3:ca:19:79:ee:d8:1a:24:ea: 88:5b:b8:19:d8:f0:a5:c5:d5:9d:5d:f7:43:be:29: ff:eb:9b:5a:42:ea:dd:f9:ab:10:60:c7:55:53:cb: b7:b5:dc:04:5b:91:4e:58:aa:0d:86:e5:e9:b1:aa: 2d:c1:b2:c8:0e:9b:e5:23:15:2b:f6:ca:72:90:6e: 35:a3:a4:6d:6e:23:40:42:bb:97:3e:03:b8:1e:96: 4b:13:a1:db:db:50:1e:6d:73:d5:7a:4b:e1:54:7c: cd:7c:d5:56:8f:7f:13:c4:d8:30:b1:43:bf:7e:6f: 50:d0:f7:5d:f6:3f:2b:ff:c4:80:d9:bb:61:45:68: 95:ae:f2:ce:d0:ca:d0:ba:99:95:2f:53:ec:3a:db: fd:25:b5:7b:3a:a0:46:d3:81:a7:2e:67:37:a3:43: 2c:7d:95:17:f2:21:d4:aa:15:5c:a7:3f:c2:bf:e5: 44:3d:a9:b2:8c:f9:f2:37:cd:2a:1c:b2:3b:e8:a1: b6:39:f8:dc:7b:82:ea:cf:e6:fe:b2:14:58:f8:27: 14:47:e7:ce:c5:0b:6a:9c:61:14:45:93:5d:55:7e: 70:05:f5:8b:7e:f7:58:91:5f:03:43:57:6f:42:0e: f3:67:b9:fb:9c:ba:43:17:36:2e:be:29:56:78:4f: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A6:AE:0B:10:0B:C4:4B:1B:02:AE:4D:6B:B4:80:78:98:39:20:E6 X509v3 Authority Key Identifier: keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:78:fd:b4:17:c6:40:ab:e6:4a:fc:1a:01:ee:51:40:5c:ab: e7:54:b4:a2:b2:91:57:28:53:fc:04:fd:dc:b7:aa:54:18:90: a2:26:e2:76:72:a8:c4:e5:58:27:54:6d:dc:c3:65:ae:f6:52: c8:4d:4d:bb:2e:55:6f:32:8a:5a:a7:ac:97:cc:ff:86:4c:cc: 4c:3c:bb:71:b5:be:64:e9:b1:61:20:33:95:26:47:0a:09:a1: 7a:e9:ba:a9:07:e8:d6:fe:cc:c7:53:77:2f:5e:16:7d:39:a3: 54:13:f2:41:b4:a6:8c:1d:0b:f6:e0:d7:c0:9f:26:d2:a4:14: 73:22:e9:70:eb:86:de:73:65:1c:91:37:79:b7:f4:d3:69:86: dc:5a:be:b6:7a:55:a5:7b:0b:ea:96:08:c0:f2:b4:af:4b:c3: ed:3a:ff:b5:d9:fc:fb:92:3f:b6:37:2d:e3:02:26:71:fb:22: e6:ea:84:a0:80:d9:4c:9d:86:a2:41:8d:e9:dd:9a:1a:3e:ed: 8b:3a:fa:ca:74:4d:ee:00:8a:e9:9e:f9:e6:8d:32:04:f1:01: fc:ba:dc:9b:45:ff:28:5f:4d:45:7b:6f:aa:3b:e6:37:0a:33: b7:bd:b2:80:38:9e:4f:95:03:33:30:f1:a6:63:4d:2b:0f:08: c5:92:1f:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyODYxMTAvBgNVBAUTKEM4OTEyREY0QzQ3RjhBNjZCQzQ4OUVDODQyNzI0ODBB MjExQjA2ODIwHhcNMjQxMTIyMTg1NDI1WhcNMjQxMTI5MTg1NDI1WjAYMRYwFAYD VQQDEw02NzQwZDM2MS1lMGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzrdGcfTyhl57tgaJOqIW7gZ2PClxdWdXfdDvin/65taQurd+asQYMdVU8u3 tdwEW5FOWKoNhuXpsaotwbLIDpvlIxUr9spykG41o6RtbiNAQruXPgO4HpZLE6Hb 21AebXPVekvhVHzNfNVWj38TxNgwsUO/fm9Q0Pdd9j8r/8SA2bthRWiVrvLO0MrQ upmVL1PsOtv9JbV7OqBG04GnLmc3o0MsfZUX8iHUqhVcpz/Cv+VEPamyjPnyN80q HLI76KG2Ofjce4Lqz+b+shRY+CcUR+fOxQtqnGEURZNdVX5wBfWLfvdYkV8DQ1dv Qg7zZ7n7nLpDFzYuvilWeE+WEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGmrgsQ C8RLGwKuTWu0gHiYOSDmMB8GA1UdIwQYMBaAFMiRLfTEf4pmvEieyEJySAohGwaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4Ni9DQTk2MUMwMjIw OEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2ltYThTSjdJUW5KSUNpRWJC b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKRXQ5TVJfaW1hOFNKN0lRbkpJQ2lFYkJvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTI4Ni9DQTk2MUMwMjIwOEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2lt YThTSjdJUW5KSUNpRWJCb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0eP20F8ZAq+ZK/BoB7lFAXKvnVLSispFXKFP8BP3ct6pUGJCiJuJ2 cqjE5VgnVG3cw2Wu9lLITU27LlVvMopap6yXzP+GTMxMPLtxtb5k6bFhIDOVJkcK CaF66bqpB+jW/szHU3cvXhZ9OaNUE/JBtKaMHQv24NfAnybSpBRzIulw64bec2Uc kTd5t/TTaYbcWr62elWlewvqlgjA8rSvS8PtOv+12fz7kj+2Ny3jAiZx+yLm6oSg gNlMnYaiQY3p3ZoaPu2LOvrKdE3uAIrpnvnmjTIE8QH8utybRf8oX01Fe2+qO+Y3 CjO3vbKAOJ5PlQMzMPGmY00rDwjFkh9C -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org