$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json) Hash identifier: vWL9WhyeScuvCujPvbzLIow0OmwyUSIOAqrRXYxiu4g= Subject key identifier: 07:5A:76:E2:AD:93:DD:E7:05:65:9F:0F:B9:25:76:5B:21:26:BE:01 Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Certificate serial: 0C4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft Manifest number: 0C3D Signing time: Fri 22 Nov 2024 18:13:25 +0000 Manifest this update: Fri 22 Nov 2024 18:13:25 +0000 Manifest next update: Fri 29 Nov 2024 18:13:25 +0000 Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: s8nXFFZA8CFtVMvaEwrjZNft3Gv5rG8azX80yRQ2xFA=) 2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: rw/6Yklw4cGXV0mWiatxLdQBYPtW24oE7vNbKVTifmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Validity Not Before: Nov 22 18:13:25 2024 GMT Not After : Nov 29 18:13:25 2024 GMT Subject: CN=6740c9c5-25a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ca:7f:9b:04:54:4a:55:af:ad:43:67:19:99: f6:86:79:c6:29:89:a9:db:0c:52:c8:3c:3f:6e:22: d0:f9:bf:c4:11:ac:ad:40:db:48:78:60:15:46:72: dd:24:eb:d7:a8:1b:c2:11:24:d4:53:5a:82:a2:94: e6:c1:82:22:5e:11:18:71:67:f7:81:9e:d2:e1:5b: d7:25:fb:e1:fa:91:07:ce:2b:1c:5c:45:95:5f:76: 49:27:79:97:13:e6:39:cb:04:fd:10:1f:83:e9:e0: e1:86:b7:87:ba:1d:34:45:4e:62:73:7d:c5:3c:af: 03:f4:4d:b0:8c:09:2e:68:50:ad:c3:5c:ac:9b:d4: 17:24:9f:58:a2:2c:7d:35:0f:62:80:07:82:98:93: 6d:97:75:71:5c:35:3b:2a:83:51:36:da:1c:de:20: 07:53:21:69:94:ab:1c:03:0d:42:5e:09:2e:47:69: c4:e5:06:9e:b3:b7:eb:25:91:89:11:48:d4:4d:2a: e7:dc:99:63:18:32:67:a9:79:a2:cb:dc:6a:9e:7a: db:6d:39:5b:a1:20:33:d2:c5:62:b3:71:81:2f:06: 06:8c:08:b3:cc:8f:96:3f:23:02:32:f7:b0:88:6c: 85:59:94:89:db:0b:eb:06:59:f6:48:a2:71:a8:4b: d0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5A:76:E2:AD:93:DD:E7:05:65:9F:0F:B9:25:76:5B:21:26:BE:01 X509v3 Authority Key Identifier: keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:07:83:05:84:81:b8:95:16:7a:e0:26:2e:f1:de:31:6b:1f: 65:bc:c1:03:e3:95:73:64:2d:2e:b1:e1:83:28:44:21:2f:64: e2:45:ee:bf:12:23:21:1d:9b:0c:27:73:fc:6a:99:3b:7d:86: 74:64:a3:17:e2:23:7e:3d:a0:e4:81:f7:31:1a:74:69:53:d7: 73:2e:ca:c1:07:73:31:d0:52:92:01:37:fc:3b:e9:15:26:3f: 82:5c:44:90:96:96:a9:a4:22:be:94:9c:28:0d:c1:34:d3:d3: 0e:e0:a2:33:31:a2:32:52:0b:be:b5:e5:be:ac:07:56:c9:6d: 33:69:5e:1f:f4:61:32:86:d4:b5:28:4c:80:82:9d:da:37:54: 39:ff:b6:80:7b:ee:b7:d6:e9:3f:79:19:a3:34:cd:58:0a:60: 4f:6c:ed:a0:a1:01:8a:37:e1:61:6f:cd:c1:ba:e4:c3:44:9c: 09:09:c3:ea:0b:64:75:f7:6b:b3:ee:7b:e6:54:10:79:0b:26: ec:8a:34:76:78:cb:3b:e0:24:95:f8:af:d5:35:83:6f:6f:af: b9:86:15:a6:0b:67:8e:37:66:e1:0e:78:5a:2a:01:f9:98:26: c5:11:5e:00:51:45:eb:a1:36:d6:14:5a:5a:c1:0f:d1:f9:70: 1c:e0:a5:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx NjE2QjU0QjQwHhcNMjQxMTIyMTgxMzI1WhcNMjQxMTI5MTgxMzI1WjAYMRYwFAYD VQQDEw02NzQwYzljNS0yNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcp/mwRUSlWvrUNnGZn2hnnGKYmp2wxSyDw/biLQ+b/EEaytQNtIeGAVRnLd JOvXqBvCESTUU1qCopTmwYIiXhEYcWf3gZ7S4VvXJfvh+pEHziscXEWVX3ZJJ3mX E+Y5ywT9EB+D6eDhhreHuh00RU5ic33FPK8D9E2wjAkuaFCtw1ysm9QXJJ9Yoix9 NQ9igAeCmJNtl3VxXDU7KoNRNtoc3iAHUyFplKscAw1CXgkuR2nE5Qaes7frJZGJ EUjUTSrn3JljGDJnqXmiy9xqnnrbbTlboSAz0sVis3GBLwYGjAizzI+WPyMCMvew iGyFWZSJ2wvrBln2SKJxqEvQ6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdaduKt k93nBWWfD7kldlshJr4BMB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1 NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEZENC84MDlDMjREMkY1NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBo VHp5MFA2dXpHX2dXRnJWTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8B4MFhIG4lRZ64CYu8d4xax9lvMED45VzZC0useGDKEQhL2TiRe6/ EiMhHZsMJ3P8apk7fYZ0ZKMX4iN+PaDkgfcxGnRpU9dzLsrBB3Mx0FKSATf8O+kV Jj+CXESQlpappCK+lJwoDcE009MO4KIzMaIyUgu+teW+rAdWyW0zaV4f9GEyhtS1 KEyAgp3aN1Q5/7aAe+631uk/eRmjNM1YCmBPbO2goQGKN+Fhb83BuuTDRJwJCcPq C2R192uz7nvmVBB5CybsijR2eMs74CSV+K/VNYNvb6+5hhWmC2eON2bhDnhaKgH5 mCbFEV4AUUXroTbWFFpawQ/R+XAc4KWH -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org