$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json) Hash identifier: H3z07FHuuyhz0w5KPfd/yfBBhD3incMbo4GYNdBCM8o= Subject key identifier: 51:60:B7:E2:8E:30:A8:36:B6:BD:A2:68:3F:C7:23:4C:91:D1:CD:22 Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft Manifest number: 0245 Signing time: Sat 23 Nov 2024 01:20:35 +0000 Manifest this update: Sat 23 Nov 2024 01:20:34 +0000 Manifest next update: Sat 30 Nov 2024 01:20:34 +0000 Files and hashes: 1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: MyhoZ+NLGJAi9RUpvfLw+AONIBa9tU+ETD2nBxla/5A=) 2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: 9MRdrfgCzJPWi60WfDAHGFIjA+2Au5PPZv6A0PmrENc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Validity Not Before: Nov 23 01:20:34 2024 GMT Not After : Nov 30 01:20:34 2024 GMT Subject: CN=67412de2-835c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9c:f2:cf:82:43:0b:2d:5e:fa:b2:3c:74:b7: 2f:c0:1c:c6:98:a4:a5:62:20:2d:53:9b:13:f5:f1: 2e:ea:1e:84:5e:d5:7f:5b:3d:9a:38:e5:d4:6b:33: e9:32:76:f6:0f:0d:27:06:a8:29:bb:8a:87:55:13: e7:c0:6d:42:ea:ad:98:89:5f:cc:9c:05:c0:49:5e: d4:b3:ab:0c:ce:0b:3c:9c:f1:a3:1b:e9:cd:9e:e4: a3:60:59:35:9f:39:05:5e:70:ab:03:f5:af:ca:02: 3f:5f:a1:1f:e5:79:be:2f:44:cd:23:97:de:34:11: 35:38:c6:2e:2d:fc:01:86:e6:3c:f3:d2:aa:bf:29: b4:96:bf:50:b1:01:b9:83:28:7b:97:92:5f:dd:96: 16:e9:5f:c8:3e:a4:88:db:d1:45:46:74:6f:02:fe: 52:ab:18:cc:bd:ab:49:07:df:46:f9:70:ca:a0:e0: 7f:11:04:17:96:a0:c9:39:14:92:75:f8:84:07:71: 14:34:89:8b:4c:68:b9:a5:c3:e2:52:67:a3:27:88: 31:90:f5:c7:e4:4f:53:48:15:66:3c:3a:4b:4f:a9: 6d:12:dd:0f:d1:51:e3:f1:c9:f6:1c:c4:27:81:7b: 36:64:95:aa:9f:d9:28:dd:8a:ef:e3:b1:58:ab:80: 60:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:60:B7:E2:8E:30:A8:36:B6:BD:A2:68:3F:C7:23:4C:91:D1:CD:22 X509v3 Authority Key Identifier: keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:da:ae:c6:68:f9:29:64:32:28:20:c8:4e:ef:2c:8a:82:ea: d6:d4:88:8a:a2:8d:30:d7:06:ce:69:08:67:e1:06:ca:d1:99: dd:69:17:b0:93:2b:eb:1f:f5:68:b2:35:32:5a:de:8a:4f:3d: 25:0a:d9:4a:91:9c:77:3e:10:58:d8:a7:67:ee:be:44:f4:3c: 9e:db:dd:ce:6c:77:6b:75:36:71:db:b8:fd:de:e0:ce:7f:ba: 61:74:18:4e:34:bd:6f:86:a3:e9:b2:03:e9:58:d4:22:df:d0: fd:a1:4a:b5:c7:97:d2:1f:7e:27:79:5f:0b:b1:d4:c4:21:11: 40:50:94:7a:5d:ca:84:0e:58:08:70:45:e6:90:c2:5a:e8:2d: 4e:97:ad:35:4c:90:ba:2d:25:cf:e6:e1:32:58:7b:b7:b6:96: fe:4d:58:24:6b:94:72:92:52:1d:eb:5f:2e:07:6e:ca:7a:0a: 26:ce:3e:79:a4:55:38:f5:58:72:d6:87:40:dd:da:52:83:b0: 0c:0e:c8:35:6e:00:ea:b6:ac:72:50:9d:8d:61:f7:d0:9e:33: ba:ee:66:d1:aa:0d:09:c7:c0:53:0d:6d:b6:6c:8e:1c:8a:25: 92:d0:4b:7e:1a:06:0b:c4:27:27:ef:99:2f:a5:ff:ba:4d:3c: a4:61:e6:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg2QkExMTAvBgNVBAUTKENCMjEwNzMyMEVEQjM5MkMzQjRENkIwNjZENzk5NjZF NzM1NTNERTQwHhcNMjQxMTIzMDEyMDM0WhcNMjQxMTMwMDEyMDM0WjAYMRYwFAYD VQQDEw02NzQxMmRlMi04MzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZzyz4JDCy1e+rI8dLcvwBzGmKSlYiAtU5sT9fEu6h6EXtV/Wz2aOOXUazPp Mnb2Dw0nBqgpu4qHVRPnwG1C6q2YiV/MnAXASV7Us6sMzgs8nPGjG+nNnuSjYFk1 nzkFXnCrA/WvygI/X6Ef5Xm+L0TNI5feNBE1OMYuLfwBhuY889Kqvym0lr9QsQG5 gyh7l5Jf3ZYW6V/IPqSI29FFRnRvAv5SqxjMvatJB99G+XDKoOB/EQQXlqDJORSS dfiEB3EUNImLTGi5pcPiUmejJ4gxkPXH5E9TSBVmPDpLT6ltEt0P0VHj8cn2HMQn gXs2ZJWqn9ko3Yrv47FYq4BgzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFgt+KO MKg2tr2iaD/HI0yR0c0iMB8GA1UdIwQYMBaAFMshBzIO2zksO01rBm15lm5zVT3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODZCQS9BNTc2MDRDOEZE MjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9TdzdUV3NHYlhtV2JuTlZQ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5RUhNZzdiT1N3N1RXc0diWG1XYm5OVlBlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODZCQS9BNTc2MDRDOEZEMjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9T dzdUV3NHYlhtV2JuTlZQZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl2q7GaPkpZDIoIMhO7yyKgurW1IiKoo0w1wbOaQhn4QbK0ZndaRew kyvrH/VosjUyWt6KTz0lCtlKkZx3PhBY2Kdn7r5E9Dye293ObHdrdTZx27j93uDO f7phdBhONL1vhqPpsgPpWNQi39D9oUq1x5fSH34neV8LsdTEIRFAUJR6XcqEDlgI cEXmkMJa6C1Ol601TJC6LSXP5uEyWHu3tpb+TVgka5RyklId618uB27Kegomzj55 pFU49Vhy1odA3dpSg7AMDsg1bgDqtqxyUJ2NYffQnjO67mbRqg0Jx8BTDW22bI4c iiWS0Et+GgYLxCcn75kvpf+6TTykYeYF -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:53 2024 by rpki-client on console-ams.rpki-client.org