$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft File: 1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json) Hash identifier: UhFqT21UX3/ogvrwVNTpL7fyxuB7P5s+MDtF+AwqPNI= Subject key identifier: A9:3F:11:A0:65:C6:C6:56:21:CF:79:CB:71:B4:14:4F:7E:36:F9:7B Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft Manifest number: E8 Signing time: Sat 23 Nov 2024 03:30:42 +0000 Manifest this update: Sat 23 Nov 2024 03:30:42 +0000 Manifest next update: Sat 30 Nov 2024 03:30:42 +0000 Files and hashes: 1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: wBGB0YRj/Z/TBPbtkReid+eutVyYe5dXQriFRB9K7ws=) 2: B78CCA4E4C5711EE9FE2EA35C4F9AE02.roa (hash: KhB6nDRjxiARxeV5hELlMRp9BJkBhRrn2BQg6Mw4jbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Validity Not Before: Nov 23 03:30:42 2024 GMT Not After : Nov 30 03:30:42 2024 GMT Subject: CN=67414c62-21f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:58:cd:7b:8e:17:e7:30:7e:64:bf:e7:1a: cf:77:a9:e1:3d:e5:b8:d9:94:f4:68:39:dd:3b:67: 90:21:06:b1:f1:7c:7a:f5:d9:76:00:b5:3d:0b:36: 2c:3d:c7:47:b0:f3:db:ec:32:51:3b:8f:14:fe:7a: ec:d5:0c:16:9f:1a:ff:91:4d:03:15:c5:4f:d4:dc: 12:7c:21:12:41:d3:a2:ca:43:19:0c:ba:2e:27:67: 75:76:68:fb:8b:0e:96:3f:1d:4f:c6:f7:ba:5b:ed: 3c:31:95:2e:91:78:b0:b7:93:10:0b:ee:16:6f:b9: f9:4d:20:85:52:02:2b:cc:dc:2b:fb:25:3f:0b:bf: 33:1b:6f:b7:e1:87:2b:2e:d6:63:80:13:bb:67:fe: 76:2a:8e:28:db:b0:cd:eb:a2:89:30:a1:80:dd:8a: 01:6e:63:8b:a2:25:4a:17:3b:1c:49:46:72:8d:ed: 89:0b:30:2b:01:bc:2d:26:0f:ec:56:30:d4:48:78: 16:6d:be:5b:df:fc:19:b7:63:98:51:b2:9b:bb:4b: b9:4a:fd:d2:d3:ba:0a:35:b9:7f:28:04:88:c1:db: a7:11:5f:4a:8e:4c:a7:35:de:12:4e:79:2f:c5:92: cc:c4:28:84:35:84:c3:b6:c5:d1:79:1a:6f:1b:50: 94:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3F:11:A0:65:C6:C6:56:21:CF:79:CB:71:B4:14:4F:7E:36:F9:7B X509v3 Authority Key Identifier: keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:bb:76:fa:5d:ab:c6:1f:8b:92:cc:85:f5:ff:19:5a:a4:a9: ab:8e:25:0f:e4:28:01:d9:d2:94:ce:0b:1b:07:83:8f:2f:ca: 4b:22:14:b2:99:99:4c:3a:32:10:84:d4:59:05:99:18:a1:f2: eb:09:f5:c3:d0:29:b2:f5:68:51:73:fd:36:b8:ed:e7:f8:e0: 6f:3e:85:d3:94:36:4e:29:a0:49:0d:a1:6a:29:91:25:36:36: 26:11:cc:30:ac:c3:18:f4:eb:27:f8:d2:97:a1:40:fe:e1:6c: 8f:c8:fe:02:86:09:e3:25:c1:4e:e6:26:35:93:fd:5e:0d:06: f8:2b:8b:ac:4b:69:14:c4:46:0c:ad:15:63:16:38:8e:0f:3a: 88:1e:c2:fd:e0:c7:f4:a7:3d:61:91:a5:b0:23:6a:f5:d8:75: 05:51:91:bc:c5:1e:77:2a:3f:09:aa:50:61:b4:2a:af:34:7f: 78:c8:47:50:14:b9:3c:ca:17:22:fc:d1:9e:82:7b:8a:fd:91: 7a:39:6f:78:c2:73:8d:54:ac:b2:39:f3:2a:2f:3b:6b:1c:cd: fb:5d:10:55:90:c9:83:ff:65:98:49:8e:3d:e4:bd:f8:8c:c1: ee:d4:80:e3:cd:9f:55:d6:63:6a:af:71:68:5e:24:b8:25:4c: ec:68:82:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDkxMTAvBgNVBAUTKEQ1ODcxRTlGQzZGQkRFN0RDNzFCN0U4OTVDOEEwNEMz RDAwMjFEODUwHhcNMjQxMTIzMDMzMDQyWhcNMjQxMTMwMDMzMDQyWjAYMRYwFAYD VQQDEw02NzQxNGM2Mi0yMWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCBYzXuOF+cwfmS/5xrPd6nhPeW42ZT0aDndO2eQIQax8Xx69dl2ALU9CzYs PcdHsPPb7DJRO48U/nrs1QwWnxr/kU0DFcVP1NwSfCESQdOiykMZDLouJ2d1dmj7 iw6WPx1Pxve6W+08MZUukXiwt5MQC+4Wb7n5TSCFUgIrzNwr+yU/C78zG2+34Ycr LtZjgBO7Z/52Ko4o27DN66KJMKGA3YoBbmOLoiVKFzscSUZyje2JCzArAbwtJg/s VjDUSHgWbb5b3/wZt2OYUbKbu0u5Sv3S07oKNbl/KASIwdunEV9KjkynNd4STnkv xZLMxCiENYTDtsXReRpvG1CUIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKk/EaBl xsZWIc95y3G0FE9+Nvl7MB8GA1UdIwQYMBaAFNWHHp/G+959xxt+iVyKBMPQAh2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0OS80N0QwNDQ2NDQ3 QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNuM0hHMzZKWElvRXc5QUNI WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFZY2VuOGI3M24zSEczNkpYSW9FdzlBQ0hZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0OS80N0QwNDQ2NDQ3QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNu M0hHMzZKWElvRXc5QUNIWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOu3b6XavGH4uSzIX1/xlapKmrjiUP5CgB2dKUzgsbB4OPL8pLIhSy mZlMOjIQhNRZBZkYofLrCfXD0Cmy9WhRc/02uO3n+OBvPoXTlDZOKaBJDaFqKZEl NjYmEcwwrMMY9Osn+NKXoUD+4WyPyP4ChgnjJcFO5iY1k/1eDQb4K4usS2kUxEYM rRVjFjiODzqIHsL94Mf0pz1hkaWwI2r12HUFUZG8xR53Kj8JqlBhtCqvNH94yEdQ FLk8yhci/NGegnuK/ZF6OW94wnONVKyyOfMqLztrHM37XRBVkMmD/2WYSY495L34 jMHu1IDjzZ9V1mNqr3FoXiS4JUzsaIKK -----END CERTIFICATE-----Generated at Sat Nov 23 05:03:01 2024 by rpki-client on console-fra.rpki-client.org