$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json) Hash identifier: Q3MROlX4dFP6yx7zMHJ/UiZ9Piw43JB+V8nI/0q3RdY= Subject key identifier: FD:E6:84:DD:BE:4F:A3:8D:BC:C9:29:9E:C0:49:93:28:3A:0E:97:10 Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Certificate serial: 087C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft Manifest number: 0877 Signing time: Fri 22 Nov 2024 20:21:27 +0000 Manifest this update: Fri 22 Nov 2024 20:21:26 +0000 Manifest next update: Fri 29 Nov 2024 20:21:26 +0000 Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: +NnKIc8ByocnfcqdotleHlk6YkNDPVhqU8wEDbMygxE=) 2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: NtKeyULWQMsrxRlevOb1FWtm72F4mnEmkpXQ082SXfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2172 (0x87c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Validity Not Before: Nov 22 20:21:26 2024 GMT Not After : Nov 29 20:21:26 2024 GMT Subject: CN=6740e7c7-8467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:37:49:e1:f5:1b:81:00:66:ad:e9:79:96: 4a:2c:1a:64:46:cd:ed:ba:28:f6:18:3e:2a:66:d7: 49:fd:56:b8:69:11:54:ed:ca:a1:19:b7:17:8d:1d: 0b:d8:16:8a:76:8b:d2:7c:c2:9b:3d:3c:46:c5:11: 5c:6e:b1:08:d4:71:a4:c5:1a:c8:87:41:34:a8:1b: 2f:4f:24:e7:48:02:98:c5:e8:fe:ec:3c:3f:41:70: ea:86:e8:64:19:20:90:98:38:f4:b8:81:e3:b0:1d: 86:0b:fb:9c:30:c0:a3:d7:e6:5d:f7:0e:ec:6b:77: fc:d5:2b:dc:36:37:ed:33:5b:0b:61:16:40:dd:e1: 93:d2:b7:93:ea:fa:c7:34:31:37:ff:e9:da:ba:b9: 4b:8b:c8:ea:87:09:86:a5:cd:2e:56:4b:85:3c:0a: a1:44:e3:0d:47:ae:4e:9b:33:cc:5c:a8:d4:79:39: 1c:3e:e4:eb:30:cc:2d:00:4c:c1:3b:6b:8b:4b:0b: 97:c0:98:3f:b1:80:df:02:75:52:e4:07:4a:b7:5e: f8:d1:66:c0:12:b7:95:e0:9d:01:1b:6f:13:3a:5e: a0:eb:4a:aa:83:c4:98:fd:b0:67:af:70:35:9b:1d: d0:86:01:61:4b:59:1b:9b:b4:66:be:d3:0e:d6:62: 8a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E6:84:DD:BE:4F:A3:8D:BC:C9:29:9E:C0:49:93:28:3A:0E:97:10 X509v3 Authority Key Identifier: keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:09:48:da:cf:7a:37:d3:52:33:64:c1:b0:fd:81:2f:b3:2f: 0d:c6:1a:b7:c1:5f:f8:02:c8:04:d0:d0:dd:81:56:74:88:26: 89:4c:7c:51:bf:29:1c:4e:10:ba:84:33:47:e6:35:40:70:43: 5f:87:2f:0c:26:f1:bf:2a:5d:2c:f8:d5:93:f9:d3:c8:f8:d9: 6a:60:f0:13:80:4f:9c:fb:a5:04:8a:38:d5:d9:18:8d:c2:48: 16:a1:6b:69:56:d9:ac:ec:80:fc:b9:04:6a:5a:b7:3d:d7:05: 38:7f:fd:6a:a5:45:34:4c:fb:b4:73:77:9e:bb:78:1f:8c:a6: 9e:33:8f:64:6c:17:50:52:24:78:79:55:ba:5c:94:68:67:5a: fb:8c:38:49:c6:e4:98:10:6c:14:f4:cd:4a:58:fe:93:23:1e: 90:54:dd:0b:11:63:19:c6:37:01:0e:a0:50:4a:fe:76:3e:60: 54:a7:99:31:22:55:15:48:b5:f3:57:ca:91:b8:f9:20:5b:f0: be:b2:4e:c3:39:95:61:f4:52:19:c7:8b:f5:a2:38:1c:9a:ce: 35:52:34:82:88:37:de:17:c5:7f:d7:41:7d:d0:e7:41:56:95: ac:8f:d0:f4:53:ba:a6:1f:01:a9:0e:10:5b:3b:86:3e:ad:a6: 27:95:6d:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDRkQxMTAvBgNVBAUTKDYzN0U0MjcxOUNDQTA2NzY2NTNBMEE2QjM0QTA2RThF NTRBQzA1RUYwHhcNMjQxMTIyMjAyMTI2WhcNMjQxMTI5MjAyMTI2WjAYMRYwFAYD VQQDEw02NzQwZTdjNy04NDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5Q3SeH1G4EAZq3peZZKLBpkRs3tuij2GD4qZtdJ/Va4aRFU7cqhGbcXjR0L 2BaKdovSfMKbPTxGxRFcbrEI1HGkxRrIh0E0qBsvTyTnSAKYxej+7Dw/QXDqhuhk GSCQmDj0uIHjsB2GC/ucMMCj1+Zd9w7sa3f81SvcNjftM1sLYRZA3eGT0reT6vrH NDE3/+naurlLi8jqhwmGpc0uVkuFPAqhROMNR65OmzPMXKjUeTkcPuTrMMwtAEzB O2uLSwuXwJg/sYDfAnVS5AdKt1740WbAEreV4J0BG28TOl6g60qqg8SY/bBnr3A1 mx3QhgFhS1kbm7RmvtMO1mKKtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3mhN2+ T6ONvMkpnsBJkyg6DpcQMB8GA1UdIwQYMBaAFGN+QnGcygZ2ZToKazSgbo5UrAXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNGRC8zN0EwNDI2NEFG NzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0JuWmxPZ3ByTktCdWpsU3NC ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzNUNjWnpLQm5abE9ncHJOS0J1amxTc0JlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNGRC8zN0EwNDI2NEFGNzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0Ju WmxPZ3ByTktCdWpsU3NCZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCCUjaz3o301IzZMGw/YEvsy8Nxhq3wV/4AsgE0NDdgVZ0iCaJTHxR vykcThC6hDNH5jVAcENfhy8MJvG/Kl0s+NWT+dPI+NlqYPATgE+c+6UEijjV2RiN wkgWoWtpVtms7ID8uQRqWrc91wU4f/1qpUU0TPu0c3eeu3gfjKaeM49kbBdQUiR4 eVW6XJRoZ1r7jDhJxuSYEGwU9M1KWP6TIx6QVN0LEWMZxjcBDqBQSv52PmBUp5kx IlUVSLXzV8qRuPkgW/C+sk7DOZVh9FIZx4v1ojgcms41UjSCiDfeF8V/10F90OdB VpWsj9D0U7qmHwGpDhBbO4Y+raYnlW0D -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:35 2024 by rpki-client on console-fra.rpki-client.org