$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft File: dBBmhNVnVypTS-yentek_D2x4sY.mft (raw, json) Hash identifier: Cj6O1iCXs59/XBTATe3vu0QAS9ZrLcx7ALP0i5tU5rg= Subject key identifier: 1C:07:D0:6F:DF:62:6B:33:6F:B3:39:D6:87:CC:7B:F4:4E:06:8B:A5 Authority key identifier: 74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6 Certificate issuer: /CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6 Certificate serial: 03B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft Manifest number: 03B1 Signing time: Sat 23 Nov 2024 00:17:39 +0000 Manifest this update: Sat 23 Nov 2024 00:17:39 +0000 Manifest next update: Sat 30 Nov 2024 00:17:39 +0000 Files and hashes: 1: dBBmhNVnVypTS-yentek_D2x4sY.crl (hash: ZwcFvY/HJsS+V0HWsqIUCWlpIFFnZdC5nn6E5DU3xtU=) 2: 8C891848A8C511EC8F560C42C4F9AE02.roa (hash: 3VG3cE0RBMf0XORCqHNYJBh9WQlsnyh1LMk7PYJ+aS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6 Validity Not Before: Nov 23 00:17:39 2024 GMT Not After : Nov 30 00:17:39 2024 GMT Subject: CN=67411f23-b2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:78:9b:d7:e5:bf:9b:84:43:97:e7:a0:8b:57: 2e:a4:8c:cb:a0:ed:a5:b3:75:61:b7:b3:b2:e4:9d: e0:cc:01:0f:a3:f2:d8:d5:ab:ed:e0:c9:98:d0:b5: 92:aa:fa:fb:c7:0a:93:86:27:32:1b:88:fc:be:64: 21:53:42:bd:49:36:18:07:15:eb:e0:58:38:5e:37: fd:f1:28:69:55:b9:e6:98:60:ae:b9:26:34:0a:b1: a0:d0:fc:ec:2a:4d:15:79:e2:01:26:f6:f0:ff:e5: 8e:3d:5b:53:28:a1:34:f2:aa:62:43:bd:a6:6f:a6: 40:bc:7a:72:71:5f:13:21:1a:3d:b2:ba:53:e3:55: 85:72:1b:dc:2f:86:81:e0:50:9d:1b:31:f7:48:af: 12:7a:f2:1f:4a:27:1a:1f:02:3b:0a:77:89:47:b0: 15:9b:fd:da:b0:24:9b:18:cf:f3:e4:5e:97:86:a4: 7a:0a:a5:43:1d:18:f2:2f:90:9a:82:da:6e:2d:c9: 17:10:c7:0d:c9:63:56:cb:d2:7c:02:1b:75:eb:c6: ce:e5:d7:04:20:89:e5:52:18:a4:7c:4d:17:f5:f0: 75:ef:18:b8:8b:e7:b6:6c:ea:26:4a:57:57:5c:69: 4d:e9:34:04:05:35:c3:b4:d3:fd:83:cb:e9:e0:ba: a1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:07:D0:6F:DF:62:6B:33:6F:B3:39:D6:87:CC:7B:F4:4E:06:8B:A5 X509v3 Authority Key Identifier: keyid:74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:04:76:9b:be:e4:06:7c:7e:7e:bf:3d:9a:71:8f:95:ae:67: 23:15:18:5d:bf:90:d3:17:2c:41:62:dd:a9:84:55:ae:bb:bc: 48:cf:a3:28:18:92:73:e3:7b:56:28:4c:90:cf:30:f6:0f:76: 89:47:ac:38:d5:42:a0:1b:1f:4f:27:6b:64:ac:76:61:d1:93: 9b:53:5d:8c:10:55:69:b6:91:51:53:6b:13:ad:81:5d:ec:c8: ca:92:8d:05:f8:72:c6:fc:b2:c1:73:ce:e7:fb:5a:0c:77:16: a4:96:3a:dc:ea:75:8f:ac:a3:42:ad:62:ed:80:4f:58:cb:95: a0:6a:f0:78:f3:e0:ea:57:14:36:d0:4c:67:ec:b6:b6:c9:b8: dd:70:4a:27:0e:a8:17:b5:7e:b2:57:2e:33:a2:b0:e9:44:0b: 4a:59:ad:39:73:84:31:bd:44:d8:46:7a:bc:7c:c7:d0:bd:34: d9:99:ee:05:84:45:a5:7f:d0:7a:66:20:3e:40:80:c6:3c:ce: 64:27:20:dd:0b:c0:6e:13:8b:5b:2f:46:42:69:0e:99:d7:f2: ef:89:c8:fa:ae:4d:34:fc:1c:0a:02:26:31:05:fb:26:44:3a: 2f:4c:e7:be:f8:06:08:7b:6f:d2:3c:3a:08:73:9d:80:48:47: 9c:2c:f9:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQjkxMTAvBgNVBAUTKDc0MTA2Njg0RDU2NzU3MkE1MzRCRUM5RTlFRDdBNEZD M0RCMUUyQzYwHhcNMjQxMTIzMDAxNzM5WhcNMjQxMTMwMDAxNzM5WjAYMRYwFAYD VQQDEw02NzQxMWYyMy1iMmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Hib1+W/m4RDl+egi1cupIzLoO2ls3Vht7Oy5J3gzAEPo/LY1avt4MmY0LWS qvr7xwqThicyG4j8vmQhU0K9STYYBxXr4Fg4Xjf98ShpVbnmmGCuuSY0CrGg0Pzs Kk0VeeIBJvbw/+WOPVtTKKE08qpiQ72mb6ZAvHpycV8TIRo9srpT41WFchvcL4aB 4FCdGzH3SK8SevIfSicaHwI7CneJR7AVm/3asCSbGM/z5F6XhqR6CqVDHRjyL5Ca gtpuLckXEMcNyWNWy9J8Aht168bO5dcEIInlUhikfE0X9fB17xi4i+e2bOomSldX XGlN6TQEBTXDtNP9g8vp4LqhwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwH0G/f Ymszb7M51ofMe/ROBoulMB8GA1UdIwQYMBaAFHQQZoTVZ1cqU0vsnp7XpPw9seLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBCOS8yRTA2RDZERTZG QjgxMUVDQTU2NzdDNzhDNEY5QUUwMi9kQkJtaE5WblZ5cFRTLXllbnRla19EMng0 c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RCQm1oTlZuVnlwVFMteWVudGVrX0QyeDRzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBCOS8yRTA2RDZERTZGQjgxMUVDQTU2NzdDNzhDNEY5QUUwMi9kQkJtaE5WblZ5 cFRTLXllbnRla19EMng0c1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFBHabvuQGfH5+vz2acY+VrmcjFRhdv5DTFyxBYt2phFWuu7xIz6Mo GJJz43tWKEyQzzD2D3aJR6w41UKgGx9PJ2tkrHZh0ZObU12MEFVptpFRU2sTrYFd 7MjKko0F+HLG/LLBc87n+1oMdxakljrc6nWPrKNCrWLtgE9Yy5WgavB48+DqVxQ2 0Exn7La2ybjdcEonDqgXtX6yVy4zorDpRAtKWa05c4QxvUTYRnq8fMfQvTTZme4F hEWlf9B6ZiA+QIDGPM5kJyDdC8BuE4tbL0ZCaQ6Z1/Lvicj6rk00/BwKAiYxBfsm RDovTOe++AYIe2/SPDoIc52ASEecLPnt -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:18 2024 by rpki-client on console-ams.rpki-client.org