$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft File: ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft (raw, json) Hash identifier: M/UU6acAiPtFJQGXXgg+WPc9Cxjo7tF4OZ/xWvk6ieo= Subject key identifier: 16:FC:03:F3:C9:8D:B8:06:CF:C7:6F:B0:91:B8:08:35:BD:43:83:83 Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8 Certificate issuer: /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8 Certificate serial: 086C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft Manifest number: 0859 Signing time: Fri 22 Nov 2024 20:26:36 +0000 Manifest this update: Fri 22 Nov 2024 20:26:35 +0000 Manifest next update: Fri 29 Nov 2024 20:26:35 +0000 Files and hashes: 1: ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl (hash: aTrNgh4s9jJbrpPSd1URVMFBVquA6IdPKxUzVcd/BhE=) 2: E43CFABEB67611ECACB17C42C4F9AE02.roa (hash: ejgjifoiJDZJ+gWsoAobC1JoVa6W0Im+MVj8NKJ7EYw=) 3: A778E94E598911EBA7B14777C4F9AE02.roa (hash: 5yaZ6S1Dp8sDk+BVEX55LZpSEffc1QPyVJT4ZIYCENM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2156 (0x86c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8 Validity Not Before: Nov 22 20:26:35 2024 GMT Not After : Nov 29 20:26:35 2024 GMT Subject: CN=6740e8fb-0dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4b:45:8c:ed:76:c9:da:25:27:61:74:a3:1a: e0:9c:e9:da:40:9c:6e:2b:6d:aa:ad:90:1f:f3:10: 1d:d4:d7:bb:47:1d:59:58:1f:29:08:6b:72:95:fd: 10:ba:0f:ea:b7:ac:02:95:5e:5d:fa:a2:bd:8f:88: 0d:08:9f:1c:0f:af:2d:51:58:46:ff:50:48:f9:91: 0d:d7:d8:78:b8:7c:69:4a:09:1c:a8:74:1b:88:c9: a4:15:6c:07:04:28:e7:c6:1e:5c:a6:61:47:9d:5b: 77:de:f4:4c:07:19:38:62:54:de:b9:c1:fb:aa:71: 35:b0:cd:0b:9a:8c:30:75:d7:3e:d5:c7:1f:75:0d: 7d:a2:c9:63:5a:65:37:7c:4e:a9:03:b4:82:07:4f: 35:d8:e3:6d:1c:9e:2b:cc:65:f3:7b:d1:23:62:3a: 8d:a5:5a:07:86:1c:bc:ad:f3:e1:10:90:65:f1:f7: 86:53:c6:29:60:d1:8a:d6:eb:1b:30:61:52:37:37: 85:7c:8d:59:7d:84:62:64:3f:82:9f:97:62:c8:f5: f4:fe:68:f9:f7:ef:30:5b:a1:77:33:44:4a:b2:73: 77:ec:70:c0:7d:af:e9:77:ff:31:f4:65:74:3e:bd: 69:c5:e7:d0:38:6b:80:a2:14:09:d8:b0:f3:73:bc: 22:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FC:03:F3:C9:8D:B8:06:CF:C7:6F:B0:91:B8:08:35:BD:43:83:83 X509v3 Authority Key Identifier: keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:29:d0:5a:f8:04:32:85:b1:d0:cf:68:d7:da:e6:00:59:fe: 35:88:54:cd:d2:c6:e4:83:a3:35:80:e9:a1:88:b1:9b:7e:49: 5c:0c:56:56:73:d2:90:a1:5c:b2:c5:66:d7:59:11:a4:84:6d: 10:22:3c:bd:f1:2d:7b:5b:49:6c:42:41:44:80:f8:63:43:ad: 66:80:e0:0b:0b:a0:e9:d2:6f:53:54:c3:ca:de:f1:25:ff:8f: 41:ad:9d:86:16:06:48:75:cf:a6:72:08:7d:e0:d8:a1:42:6a: 6d:fc:a1:e4:ff:df:64:82:86:61:8a:52:24:f9:0d:7a:d0:0d: e5:ab:f7:8f:49:a5:56:41:b6:7d:d5:4a:73:6c:6f:06:0a:d5: c6:b0:e7:6d:a3:f1:31:4d:66:50:8e:bf:3f:25:2a:91:8b:a3: 51:24:e5:e9:ac:d4:5f:40:6a:f5:5f:45:1d:3e:61:97:b9:58: d0:a9:9c:6c:aa:16:5d:15:b6:7b:38:43:52:68:2e:df:26:14: aa:e8:d4:91:7a:9e:aa:cf:c9:85:7c:eb:ab:e5:5c:e8:b6:e6: 92:af:17:f4:ee:d1:86:2f:ae:4f:4f:b2:51:32:fd:2f:6f:8f: 4e:39:65:30:0e:c4:eb:00:85:b2:96:1a:e8:d8:16:b0:fc:d0: fa:a0:b5:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2ODMxMTAvBgNVBAUTKENBN0M4NkJFMDBEQjQxNDUwM0VENUVFNkMwQUY5MjhG MzRDNUM3RDgwHhcNMjQxMTIyMjAyNjM1WhcNMjQxMTI5MjAyNjM1WjAYMRYwFAYD VQQDEw02NzQwZThmYi0wZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArktFjO12ydolJ2F0oxrgnOnaQJxuK22qrZAf8xAd1Ne7Rx1ZWB8pCGtylf0Q ug/qt6wClV5d+qK9j4gNCJ8cD68tUVhG/1BI+ZEN19h4uHxpSgkcqHQbiMmkFWwH BCjnxh5cpmFHnVt33vRMBxk4YlTeucH7qnE1sM0Lmowwddc+1ccfdQ19osljWmU3 fE6pA7SCB0812ONtHJ4rzGXze9EjYjqNpVoHhhy8rfPhEJBl8feGU8YpYNGK1usb MGFSNzeFfI1ZfYRiZD+Cn5diyPX0/mj59+8wW6F3M0RKsnN37HDAfa/pd/8x9GV0 Pr1pxefQOGuAohQJ2LDzc7wi2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBb8A/PJ jbgGz8dvsJG4CDW9Q4ODMB8GA1UdIwQYMBaAFMp8hr4A20FFA+1e5sCvko80xcfY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY4My8zRjBCMzU2MkI3 OTMxMUVBQTRDNTRCMTRDNEY5QUUwMi95bnlHdmdEYlFVVUQ3Vjdtd0stU2p6VEZ4 OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lueUd2Z0RiUVVVRDdWN213Sy1TanpURng5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzY4My8zRjBCMzU2MkI3OTMxMUVBQTRDNTRCMTRDNEY5QUUwMi95bnlHdmdEYlFV VUQ3Vjdtd0stU2p6VEZ4OWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByKdBa+AQyhbHQz2jX2uYAWf41iFTN0sbkg6M1gOmhiLGbfklcDFZW c9KQoVyyxWbXWRGkhG0QIjy98S17W0lsQkFEgPhjQ61mgOALC6Dp0m9TVMPK3vEl /49BrZ2GFgZIdc+mcgh94NihQmpt/KHk/99kgoZhilIk+Q160A3lq/ePSaVWQbZ9 1UpzbG8GCtXGsOdto/ExTWZQjr8/JSqRi6NRJOXprNRfQGr1X0UdPmGXuVjQqZxs qhZdFbZ7OENSaC7fJhSq6NSRep6qz8mFfOur5VzotuaSrxf07tGGL65PT7JRMv0v b49OOWUwDsTrAIWylhro2Baw/ND6oLWr -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:21 2024 by rpki-client on console-ams.rpki-client.org