$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft File: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft (raw, json) Hash identifier: 1wycDPUjEoulifkwKpV/PFSHmh80MxDf0FD2zMFJ/Sw= Subject key identifier: E5:59:89:9E:82:A5:E8:E7:80:5F:BD:8D:B0:09:D6:57:D1:82:2B:62 Authority key identifier: 60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5 Certificate issuer: /CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5 Certificate serial: 05CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft Manifest number: 05C2 Signing time: Fri 22 Nov 2024 22:36:51 +0000 Manifest this update: Fri 22 Nov 2024 22:36:50 +0000 Manifest next update: Fri 29 Nov 2024 22:36:50 +0000 Files and hashes: 1: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl (hash: MwZ0eZJpbOw/8sYhHkAn2WD/0Ght952UcDj/lFBR3f4=) 2: 1348519E9C1211EBA38A7C4CC4F9AE02.roa (hash: 9XvMrp7slzkQaY4rZCJF42eHjZv8P4QCzn1sLdi6XGc=) 3: 354314309C0F11EBAEFB6225C4F9AE02.roa (hash: CosMJfW0j7STaofSkcaa5EBV8a+jVXJeWSFvGAhmxCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1486 (0x5ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5 Validity Not Before: Nov 22 22:36:50 2024 GMT Not After : Nov 29 22:36:50 2024 GMT Subject: CN=67410783-f59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:70:66:40:fe:a4:2a:c1:ec:12:ce:cb:8f:e4: 8a:25:47:d7:f5:51:7c:88:df:32:1f:59:e2:17:91: e5:1f:b5:4f:d8:3d:7f:bd:f8:18:57:ae:59:39:37: 25:27:ea:3e:6a:6e:2e:27:e8:7c:9d:39:1c:01:32: ff:67:85:32:5d:f2:83:20:c4:8b:dd:fa:64:ec:e1: 5c:69:f4:4e:42:12:11:25:83:3f:93:a5:46:15:33: af:ea:8f:ba:eb:67:e1:10:f0:c6:19:69:d5:a1:48: fd:51:cd:74:d0:23:b8:10:ca:e7:8f:be:44:54:28: bd:ff:77:26:14:f8:8b:98:91:12:66:ab:3b:08:b6: 8f:d4:f8:7a:10:f3:73:aa:01:18:f3:75:fd:16:bf: 66:35:a2:ef:2e:eb:8f:8b:22:13:19:e5:e7:26:c1: e7:fc:6b:44:5b:f0:b2:42:61:c5:22:bf:41:0a:9b: 70:89:1b:63:d2:d8:72:c3:66:21:03:4f:7a:35:f7: a3:28:4c:05:4f:e6:53:59:9c:47:2a:f6:97:83:25: 89:85:67:af:1d:13:e9:fc:b1:ec:ac:3e:58:d3:eb: 86:c0:e0:9c:1a:27:44:e1:8b:60:35:47:8b:56:52: b0:29:fc:54:ac:a3:82:fa:f6:7f:1f:ff:0a:99:72: 21:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:59:89:9E:82:A5:E8:E7:80:5F:BD:8D:B0:09:D6:57:D1:82:2B:62 X509v3 Authority Key Identifier: keyid:60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3d:3f:4f:ef:7d:db:d2:5e:4f:f7:20:35:93:2b:7d:41:90: 0f:70:5f:52:62:e2:95:98:1a:91:07:1d:6c:34:84:25:29:83: 6b:9a:e0:ca:2e:a5:01:bb:35:74:73:23:63:f5:3d:11:67:9f: a8:5d:c8:18:d0:57:ec:b1:8c:9b:c2:33:ce:bb:f4:49:08:d9: 81:a6:d1:b1:93:49:62:ff:f9:15:8a:e9:09:b1:6b:dd:78:2e: 34:81:18:b7:fc:e8:12:9b:a1:6e:a4:53:b9:d7:5e:97:a0:c7: 6a:a6:85:1e:8e:bd:06:0a:cd:01:fb:6c:0a:e4:a4:08:52:ca: 75:09:6f:e8:e8:2a:ad:f2:62:5b:a4:85:88:36:52:27:7f:f8: d5:9c:75:ec:2f:6b:94:b4:8d:b0:e7:29:d3:f6:90:f9:0a:a8: 80:3f:1f:6f:1d:1c:85:00:d6:b4:0d:32:ef:1c:5b:02:ee:ea: a5:9f:5b:4c:14:e0:2e:de:45:00:7a:dd:f2:2c:2a:31:04:b2: c4:a6:41:cd:e3:b6:71:3a:7f:df:ba:8e:60:98:27:33:c2:a7: a2:2f:11:9d:7f:29:f1:5b:ac:16:79:90:fd:a3:4a:fe:d6:a3: 45:53:37:3f:03:bd:a7:56:2c:98:5a:d6:44:88:66:2e:53:6f: 98:3c:35:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5REYxMTAvBgNVBAUTKDYwOUEzMTI2RTIzNjlBOTdENDdGRDY0NDk4RDgxNjVF MjFFNTI1QzUwHhcNMjQxMTIyMjIzNjUwWhcNMjQxMTI5MjIzNjUwWjAYMRYwFAYD VQQDEw02NzQxMDc4My1mNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XBmQP6kKsHsEs7Lj+SKJUfX9VF8iN8yH1niF5HlH7VP2D1/vfgYV65ZOTcl J+o+am4uJ+h8nTkcATL/Z4UyXfKDIMSL3fpk7OFcafROQhIRJYM/k6VGFTOv6o+6 62fhEPDGGWnVoUj9Uc100CO4EMrnj75EVCi9/3cmFPiLmJESZqs7CLaP1Ph6EPNz qgEY83X9Fr9mNaLvLuuPiyITGeXnJsHn/GtEW/CyQmHFIr9BCptwiRtj0thyw2Yh A096NfejKEwFT+ZTWZxHKvaXgyWJhWevHRPp/LHsrD5Y0+uGwOCcGidE4YtgNUeL VlKwKfxUrKOC+vZ/H/8KmXIhqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVZiZ6C pejngF+9jbAJ1lfRgitiMB8GA1UdIwQYMBaAFGCaMSbiNpqX1H/WRJjYFl4h5SXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlERi9CQjUyRjRBQzlD MEQxMUVCQUVEODRCMjRDNEY5QUUwMi9ZSm94SnVJMm1wZlVmOVpFbU5nV1hpSGxK Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKb3hKdUkybXBmVWY5WkVtTmdXWGlIbEpjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlERi9CQjUyRjRBQzlDMEQxMUVCQUVEODRCMjRDNEY5QUUwMi9ZSm94SnVJMm1w ZlVmOVpFbU5nV1hpSGxKY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBePT9P733b0l5P9yA1kyt9QZAPcF9SYuKVmBqRBx1sNIQlKYNrmuDK LqUBuzV0cyNj9T0RZ5+oXcgY0FfssYybwjPOu/RJCNmBptGxk0li//kViukJsWvd eC40gRi3/OgSm6FupFO5116XoMdqpoUejr0GCs0B+2wK5KQIUsp1CW/o6Cqt8mJb pIWINlInf/jVnHXsL2uUtI2w5ynT9pD5CqiAPx9vHRyFANa0DTLvHFsC7uqln1tM FOAu3kUAet3yLCoxBLLEpkHN47ZxOn/fuo5gmCczwqeiLxGdfynxW6wWeZD9o0r+ 1qNFUzc/A72nViyYWtZEiGYuU2+YPDWA -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:53 2024 by rpki-client on console-ams.rpki-client.org