$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft File: yIwqqUquXvn01JfoOHo53RvOk50.mft (raw, json) Hash identifier: DTNiJ4DDeuDn/pv35Rl1y+VZgDiTCZ3skfLsutG1ir4= Subject key identifier: FF:7F:52:B9:E5:EF:44:69:6F:B5:7A:15:9D:85:7F:A6:F1:B8:78:17 Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D Certificate issuer: /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft Manifest number: CB Signing time: Sat 23 Nov 2024 03:50:44 +0000 Manifest this update: Sat 23 Nov 2024 03:50:43 +0000 Manifest next update: Sat 30 Nov 2024 03:50:43 +0000 Files and hashes: 1: yIwqqUquXvn01JfoOHo53RvOk50.crl (hash: M/X+GAbTJPwziTXuo0WdwyRDyr5AGy11yFyIqrrWHcc=) 2: EF98E11472E211EEB93A4F72C4F9AE02.roa (hash: irBKz5hDdDQSuzPo8HTBKaH+G3tFJbjs2+W0RwVXyv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D Validity Not Before: Nov 23 03:50:43 2024 GMT Not After : Nov 30 03:50:43 2024 GMT Subject: CN=67415114-00f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:70:b8:8a:fb:5b:24:4a:ae:42:b7:2a:6e:76: 98:b2:fd:bb:c4:41:55:db:8a:47:20:fb:93:86:1b: a9:1a:8a:a7:d7:2e:f4:44:0f:86:c5:43:b6:8c:45: 61:5c:4e:78:4e:10:b7:98:7a:a1:89:f4:e1:2d:83: de:10:ba:b6:a7:c7:59:dc:bd:ee:36:5d:82:e3:2a: b4:7e:b9:75:1f:f8:a0:ba:26:23:b0:98:e7:7a:e7: 11:ec:1a:e8:d3:d0:d6:3c:79:6f:ea:9d:1e:8d:d3: 76:89:92:c0:cd:b8:78:77:c3:34:30:6f:27:9c:69: e5:cf:d2:d6:84:ca:d5:7d:56:39:a5:44:74:a7:32: 84:bc:c2:19:5f:de:fe:c1:45:9d:c6:a3:50:72:be: ab:e4:ef:71:43:e7:ea:18:74:11:ed:58:f2:2e:36: 2c:03:56:be:f0:b4:08:47:30:32:88:a4:9d:2d:af: 05:48:39:dc:53:2f:db:78:ca:f7:25:bd:1a:4b:d4: 0c:a9:2c:d5:f8:b3:f8:c8:91:6a:7f:03:ca:2c:14: e4:27:57:6c:05:d3:bd:c6:ff:87:51:31:25:72:9c: 99:ae:90:ca:b4:54:d7:2d:79:39:e8:b3:bb:03:e8: 2e:c1:f9:97:e6:27:ae:f5:55:c4:6e:9f:71:94:68: 29:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7F:52:B9:E5:EF:44:69:6F:B5:7A:15:9D:85:7F:A6:F1:B8:78:17 X509v3 Authority Key Identifier: keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:27:e3:a9:b4:b7:b2:44:03:b4:0a:50:ea:72:ca:1f:17:f7: f6:e0:02:00:64:01:c7:89:8b:00:91:36:ea:fe:0c:d7:cb:24: 3e:72:73:42:5f:91:b6:07:f8:4a:d9:0f:75:d3:19:38:0e:c8: 5c:ae:f1:9a:67:b0:e1:e4:15:40:2c:b3:a2:db:27:26:88:b1: 41:b7:7d:97:c1:52:11:4f:bb:bc:98:0f:eb:41:57:4a:00:19: 0e:6b:4e:72:d4:de:43:2c:bd:c2:03:26:43:b1:07:fe:c3:3e: 34:8f:39:9f:24:71:6b:b6:e0:32:5b:94:76:e5:85:87:e9:86: 2e:44:e1:57:dc:67:a1:1b:72:64:32:ff:8f:ac:67:ef:e1:5b: 34:e9:f8:c3:b7:3c:90:c6:6e:bb:12:44:83:b9:5a:d6:de:aa: 2c:dd:16:04:1e:55:9f:1f:e0:a9:58:eb:7e:b6:d6:75:ad:de: d8:93:ba:39:59:a6:b1:8b:f2:3a:6b:9b:9e:59:ea:22:c4:b7: a7:4f:56:60:5e:56:b2:8f:c0:db:8f:cf:40:76:c0:e6:51:88: 49:af:8c:43:33:d9:93:c9:00:ae:23:a7:8d:91:5c:16:ee:58: c3:b8:9e:6a:26:ea:1d:75:12:dd:7b:23:a3:4d:2d:51:5d:85: a7:10:bb:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4RTIxMTAvBgNVBAUTKEM4OEMyQUE5NEFBRTVFRjlGNEQ0OTdFODM4N0EzOURE MUJDRTkzOUQwHhcNMjQxMTIzMDM1MDQzWhcNMjQxMTMwMDM1MDQzWjAYMRYwFAYD VQQDEw02NzQxNTExNC0wMGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33C4ivtbJEquQrcqbnaYsv27xEFV24pHIPuThhupGoqn1y70RA+GxUO2jEVh XE54ThC3mHqhifThLYPeELq2p8dZ3L3uNl2C4yq0frl1H/iguiYjsJjneucR7Bro 09DWPHlv6p0ejdN2iZLAzbh4d8M0MG8nnGnlz9LWhMrVfVY5pUR0pzKEvMIZX97+ wUWdxqNQcr6r5O9xQ+fqGHQR7VjyLjYsA1a+8LQIRzAyiKSdLa8FSDncUy/beMr3 Jb0aS9QMqSzV+LP4yJFqfwPKLBTkJ1dsBdO9xv+HUTElcpyZrpDKtFTXLXk56LO7 A+guwfmX5ieu9VXEbp9xlGgpCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9/Urnl 70Rpb7V6FZ2Ff6bxuHgXMB8GA1UdIwQYMBaAFMiMKqlKrl759NSX6Dh6Od0bzpOd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhFMi9DRTU0MDZGNjcy RTExMUVFQjA3ODE2MTlDNEY5QUUwMi95SXdxcVVxdVh2bjAxSmZvT0hvNTNSdk9r NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJd3FxVXF1WHZuMDFKZm9PSG81M1J2T2s1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhFMi9DRTU0MDZGNjcyRTExMUVFQjA3ODE2MTlDNEY5QUUwMi95SXdxcVVxdVh2 bjAxSmZvT0hvNTNSdk9rNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOJ+OptLeyRAO0ClDqcsofF/f24AIAZAHHiYsAkTbq/gzXyyQ+cnNC X5G2B/hK2Q910xk4DshcrvGaZ7Dh5BVALLOi2ycmiLFBt32XwVIRT7u8mA/rQVdK ABkOa05y1N5DLL3CAyZDsQf+wz40jzmfJHFrtuAyW5R25YWH6YYuROFX3GehG3Jk Mv+PrGfv4Vs06fjDtzyQxm67EkSDuVrW3qos3RYEHlWfH+CpWOt+ttZ1rd7Yk7o5 Waaxi/I6a5ueWeoixLenT1ZgXlayj8Dbj89AdsDmUYhJr4xDM9mTyQCuI6eNkVwW 7ljDuJ5qJuoddRLdeyOjTS1RXYWnELu6 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:44 2024 by rpki-client on console-fra.rpki-client.org