$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft File: Yb6mqjOAZskOtcsyQAxq52BciKQ.mft (raw, json) Hash identifier: UUxFRR6P7Wf+Dxgi3S8nt8KOz14orkLhVXDvr5VoTZc= Subject key identifier: 10:D0:DE:C4:A8:72:75:02:19:0C:71:8C:1C:45:84:BB:99:D6:2B:26 Authority key identifier: 61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 Certificate issuer: /CN=A91FA52B/serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Certificate serial: 0F3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft Manifest number: 0F39 Signing time: Fri 22 Nov 2024 17:34:32 +0000 Manifest this update: Fri 22 Nov 2024 17:34:31 +0000 Manifest next update: Fri 29 Nov 2024 17:34:31 +0000 Files and hashes: 1: Yb6mqjOAZskOtcsyQAxq52BciKQ.crl (hash: xt5y+o4GGbdEx3Jzr3c4uxteUoMKTkBkK6DXXhjrKa0=) 2: ECB38BAA5C3211E9816E7981C4F9AE02.roa (hash: X/citOv1Ggn8GInkQClxSFdoCzSDhLVJCA7AtRBk39U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3903 (0xf3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA52B/serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Validity Not Before: Nov 22 17:34:31 2024 GMT Not After : Nov 29 17:34:31 2024 GMT Subject: CN=6740c0a8-5974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:3b:31:d6:f6:8a:fc:e7:cf:46:d5:fe:f7: d0:08:df:f0:14:5c:60:4b:ac:c7:b0:9b:e3:b5:3a: 0e:38:2a:83:0d:5a:b3:ec:5c:96:e7:18:dc:94:18: 3c:5a:81:0b:8c:09:6b:39:b5:ef:0c:1f:6d:05:84: e9:94:db:66:03:67:52:6d:52:a3:53:3c:57:62:08: d6:ad:88:ba:47:3f:3a:c0:41:29:60:96:cb:4c:90: b4:3d:a7:7a:a4:7a:ec:a9:f6:3b:cc:45:59:e0:1f: f1:74:32:47:25:f3:63:07:61:b4:48:fc:31:70:82: 32:b4:5c:15:08:78:1a:54:c6:ce:2e:0b:5a:1e:23: 79:94:5d:07:95:07:34:ef:da:aa:07:70:57:7f:43: e3:4f:1d:9f:c3:9c:33:4f:60:29:e8:d7:d7:c3:ff: cc:21:e4:70:53:cf:36:e6:16:c0:42:0c:51:32:a8: ec:ce:4c:b6:e6:b8:8e:92:cf:51:43:9d:cc:75:7a: 95:02:a6:7b:87:7d:49:c3:7a:94:37:4d:91:d7:ef: dd:30:dc:0f:84:00:c1:84:de:5a:c3:0f:13:84:78: e0:27:43:16:8f:38:f3:1a:b5:c0:99:92:d9:9a:38: 78:f2:9d:d3:6f:66:e0:d3:c7:d5:c3:76:c5:19:be: 32:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D0:DE:C4:A8:72:75:02:19:0C:71:8C:1C:45:84:BB:99:D6:2B:26 X509v3 Authority Key Identifier: keyid:61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:fa:c3:b0:23:7c:f0:06:b2:cb:80:30:3a:8a:53:c8:24:cb: c3:8c:14:c5:e2:09:f8:21:ee:2d:51:5f:1c:0b:7a:33:aa:be: 76:20:2e:7b:dc:26:64:e2:c1:4e:9b:a6:d4:81:a6:e9:95:d2: c3:f6:b3:31:b1:49:50:84:db:ed:a8:38:c3:d9:3f:6b:c9:6a: 8a:0b:49:fe:31:c1:22:4b:58:1d:9f:29:d6:b4:63:b5:b0:ce: ce:6f:d9:71:2c:41:6f:f9:a5:10:26:1e:7e:88:b4:67:26:68: 88:09:f8:7c:d9:b9:13:b9:86:4a:c5:b5:d4:ca:2e:0b:78:ce: 2c:ed:10:43:b4:94:3f:a4:6f:d3:a3:be:41:69:f3:24:39:d5: 5e:8f:e4:5c:27:75:ff:e3:3d:4c:eb:34:9e:95:ca:c0:ed:72: bf:83:b5:ad:42:b4:75:20:b0:be:35:b9:94:12:46:6c:08:3d: b9:a0:e8:25:b2:02:5a:8f:89:b5:31:aa:ad:11:db:dd:d8:ca: 39:e4:df:a4:2b:57:4a:5c:09:9e:92:d8:99:19:bb:0c:4a:5c: d8:92:64:fe:10:66:8e:73:51:1d:66:6b:c7:ef:e3:c5:07:57: 68:00:a2:56:1d:b6:fb:4c:a0:9a:65:62:ac:dd:c3:87:b0:8e: d4:4a:aa:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1MkIxMTAvBgNVBAUTKDYxQkVBNkFBMzM4MDY2QzkwRUI1Q0IzMjQwMEM2QUU3 NjA1Qzg4QTQwHhcNMjQxMTIyMTczNDMxWhcNMjQxMTI5MTczNDMxWjAYMRYwFAYD VQQDEw02NzQwYzBhOC01OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/87Mdb2ivznz0bV/vfQCN/wFFxgS6zHsJvjtToOOCqDDVqz7FyW5xjclBg8 WoELjAlrObXvDB9tBYTplNtmA2dSbVKjUzxXYgjWrYi6Rz86wEEpYJbLTJC0Pad6 pHrsqfY7zEVZ4B/xdDJHJfNjB2G0SPwxcIIytFwVCHgaVMbOLgtaHiN5lF0HlQc0 79qqB3BXf0PjTx2fw5wzT2Ap6NfXw//MIeRwU8825hbAQgxRMqjszky25riOks9R Q53MdXqVAqZ7h31Jw3qUN02R1+/dMNwPhADBhN5aww8ThHjgJ0MWjzjzGrXAmZLZ mjh48p3Tb2bg08fVw3bFGb4yVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDQ3sSo cnUCGQxxjBxFhLuZ1ismMB8GA1UdIwQYMBaAFGG+pqozgGbJDrXLMkAMaudgXIik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTUyQi8yOENCRkIxNDVD MzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpza090Y3N5UUF4cTUyQmNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liNm1xak9BWnNrT3Rjc3lRQXhxNTJCY2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTUyQi8yOENCRkIxNDVDMzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpz a090Y3N5UUF4cTUyQmNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ+sOwI3zwBrLLgDA6ilPIJMvDjBTF4gn4Ie4tUV8cC3ozqr52IC57 3CZk4sFOm6bUgabpldLD9rMxsUlQhNvtqDjD2T9ryWqKC0n+McEiS1gdnynWtGO1 sM7Ob9lxLEFv+aUQJh5+iLRnJmiICfh82bkTuYZKxbXUyi4LeM4s7RBDtJQ/pG/T o75BafMkOdVej+RcJ3X/4z1M6zSelcrA7XK/g7WtQrR1ILC+NbmUEkZsCD25oOgl sgJaj4m1MaqtEdvd2Mo55N+kK1dKXAmektiZGbsMSlzYkmT+EGaOc1EdZmvH7+PF B1doAKJWHbb7TKCaZWKs3cOHsI7USqpL -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:23 2024 by rpki-client on console-ams.rpki-client.org