$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft File: Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json) Hash identifier: IFAAjqMUdHy9hC2YZQ2GfJvMLKVC4GH5o93Nmtf2XIw= Subject key identifier: 7A:25:2B:75:DE:DB:E0:03:12:6C:0F:A3:F2:F7:ED:DF:44:91:28:FA Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft Manifest number: C4 Signing time: Mon 25 Nov 2024 03:52:57 +0000 Manifest this update: Mon 25 Nov 2024 03:52:57 +0000 Manifest next update: Mon 02 Dec 2024 03:52:57 +0000 Files and hashes: 1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: WUOte33S0dMfLh/ws534k2C8OXwIVazBojoXtp0v/pk=) 2: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: SFK4LkswKgJKpjLsUlOU6N9BFaXKfbDMklrr+fOsUEY=) 3: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: DDDWCUvLLUaDHYW+Z+jfGD9hV7RB8mJKRDsZIAW3tkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 03:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Validity Not Before: Nov 25 03:52:57 2024 GMT Not After : Dec 2 03:52:57 2024 GMT Subject: CN=6743f499-81f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:15:01:3a:ef:f3:98:d7:00:bb:16:68:ce:da: ff:4b:89:2a:13:5d:cc:39:f9:39:1d:da:50:fa:db: 61:eb:44:cf:16:ff:72:d9:5c:3a:51:a6:b1:87:0c: 53:36:02:42:44:79:a9:ee:d6:49:f9:a5:0c:f1:8c: 40:4f:92:b3:29:a0:6a:4a:89:00:56:f7:55:40:6c: 10:f2:74:2a:77:1e:76:89:62:18:03:4e:01:cc:c4: fd:e2:ed:d9:b6:67:91:d8:ac:e0:5b:0c:50:e4:e7: 98:fd:9c:70:26:69:c5:4f:50:7e:0b:f3:e1:8f:c2: 28:dc:2b:31:e0:24:4a:ae:24:96:a5:f0:13:eb:5d: 5a:76:9c:cc:ba:4a:e1:75:0c:25:99:0d:f5:f7:ea: 51:ba:1e:4e:fa:bc:50:12:ea:94:48:30:1d:d7:90: 24:ac:b6:d6:0a:66:ca:90:ff:e7:15:93:57:d2:b5: 2e:43:54:27:b4:1c:69:d0:db:98:89:e0:6d:6f:8a: 9e:fc:f4:e7:40:28:3b:43:c5:e3:a9:62:3a:38:b5: 2c:7c:f7:56:e8:c4:26:62:46:6a:a3:bd:a5:46:7f: 76:46:df:e6:3e:dd:f5:31:21:d8:92:72:1f:28:61: 49:b2:a7:a2:4e:0a:e6:7a:70:8c:89:46:f7:ee:94: 46:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:25:2B:75:DE:DB:E0:03:12:6C:0F:A3:F2:F7:ED:DF:44:91:28:FA X509v3 Authority Key Identifier: keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:db:11:a6:11:8e:ed:f2:ff:81:68:fb:36:87:8b:d5:72:60: 13:e6:92:40:5d:8c:47:86:49:d9:96:fe:24:b1:83:9e:07:f9: e2:50:04:73:d0:33:9d:50:47:0f:8d:27:a8:1d:4d:15:eb:c5: 8f:00:07:bb:b3:13:a5:c9:b9:4e:2c:e0:dd:f7:39:7d:1d:46: a5:0f:04:53:39:8a:e2:63:bb:c4:09:1a:6f:f7:18:61:1a:49: fa:84:42:86:57:7e:d0:26:9f:46:d9:db:69:d9:bb:0e:ba:e3: b8:55:42:61:e6:b1:56:ff:f5:c1:be:f7:8c:54:81:17:fb:af: 24:14:f7:e7:c1:61:af:1d:68:ae:af:ca:77:8f:0a:7c:b1:ab: 5a:51:11:a5:dc:52:aa:31:b4:6b:9a:39:ae:a9:dc:60:e3:b9: 8e:21:b4:76:ca:7b:6a:f1:70:04:c7:c1:3c:b0:5c:a7:8b:c1: 75:38:73:bd:4e:7b:fb:d7:ba:fa:2e:23:6c:53:b5:f0:39:b0: 14:e7:09:7d:d1:b3:59:27:3d:c0:d4:3c:73:71:89:44:6f:fc: ae:26:7f:e2:c9:6f:f1:f1:6a:70:82:91:1f:c7:94:14:a3:67: 3e:0f:92:a0:e4:ec:8c:b1:c0:63:3d:d3:02:9e:29:df:66:5c: a2:4a:83:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI1MEMxMTAvBgNVBAUTKDYzREU2RjcxRjE4RDlBOTM1QTlCRTFDQ0JBRjVCRkVF QzBBODc2RjgwHhcNMjQxMTI1MDM1MjU3WhcNMjQxMjAyMDM1MjU3WjAYMRYwFAYD VQQDEw02NzQzZjQ5OS04MWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xUBOu/zmNcAuxZoztr/S4kqE13MOfk5HdpQ+tth60TPFv9y2Vw6UaaxhwxT NgJCRHmp7tZJ+aUM8YxAT5KzKaBqSokAVvdVQGwQ8nQqdx52iWIYA04BzMT94u3Z tmeR2KzgWwxQ5OeY/ZxwJmnFT1B+C/Phj8Io3Csx4CRKriSWpfAT611adpzMukrh dQwlmQ319+pRuh5O+rxQEuqUSDAd15AkrLbWCmbKkP/nFZNX0rUuQ1QntBxp0NuY ieBtb4qe/PTnQCg7Q8XjqWI6OLUsfPdW6MQmYkZqo72lRn92Rt/mPt31MSHYknIf KGFJsqeiTgrmenCMiUb37pRGowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHolK3Xe 2+ADEmwPo/L37d9EkSj6MB8GA1UdIwQYMBaAFGPeb3HxjZqTWpvhzLr1v+7AqHb4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjUwQy84M0VFQ0M0QTgz N0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1wTmFtLUhNdXZXXzdzQ29k dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k5NXZjZkdObXBOYW0tSE11dldfN3NDb2R2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjUwQy84M0VFQ0M0QTgzN0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1w TmFtLUhNdXZXXzdzQ29kdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl2xGmEY7t8v+BaPs2h4vVcmAT5pJAXYxHhknZlv4ksYOeB/niUARz 0DOdUEcPjSeoHU0V68WPAAe7sxOlyblOLODd9zl9HUalDwRTOYriY7vECRpv9xhh Gkn6hEKGV37QJp9G2dtp2bsOuuO4VUJh5rFW//XBvveMVIEX+68kFPfnwWGvHWiu r8p3jwp8sataURGl3FKqMbRrmjmuqdxg47mOIbR2yntq8XAEx8E8sFyni8F1OHO9 Tnv717r6LiNsU7XwObAU5wl90bNZJz3A1DxzcYlEb/yuJn/iyW/x8WpwgpEfx5QU o2c+D5Kg5OyMscBjPdMCninfZlyiSoNv -----END CERTIFICATE-----Generated at Mon Nov 25 04:54:29 2024 by rpki-client on console-fra.rpki-client.org