$ rpki-client -vvf rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft File: D60b00YYTHGSfILGHT-m1-Ry7p4.mft (raw, json) Hash identifier: 5q8OCWI8X75xCJzOE15w0T9bzsagBJl2fnfRUzzxOZ4= Subject key identifier: 48:42:B5:2C:73:C6:2B:BC:8F:67:48:2A:23:C4:46:0A:68:AF:CC:A8 Authority key identifier: 0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E Certificate issuer: /CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft Manifest number: 086B Signing time: Fri 22 Nov 2024 20:23:41 +0000 Manifest this update: Fri 22 Nov 2024 20:23:40 +0000 Manifest next update: Fri 29 Nov 2024 20:23:40 +0000 Files and hashes: 1: D60b00YYTHGSfILGHT-m1-Ry7p4.crl (hash: Xsp2hLckRkiBggP1INUuzEqOByE5ddX9l0cZLIAUYeQ=) 2: BED97520B1D911EA912C632EC4F9AE02.roa (hash: RzLAz49uNYEbzjghLROSt26QTaPjJAMTg8PAlAw1ytU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E Validity Not Before: Nov 22 20:23:40 2024 GMT Not After : Nov 29 20:23:40 2024 GMT Subject: CN=6740e84c-9efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c4:8c:a8:29:3b:86:e1:6a:4c:c5:c7:b6:d3: 82:d4:b9:72:c5:0f:9e:fe:5d:76:57:2c:6b:df:3d: a0:9b:fc:a9:71:29:a1:0c:f2:a5:cd:2a:b3:b6:2b: 3d:38:a4:18:5c:57:2c:cf:d5:25:ad:59:f1:80:58: f6:68:6b:8f:76:ac:ee:4b:0b:b7:d6:f1:15:1e:8b: 60:38:dc:df:1e:3a:37:21:25:a8:3d:42:2d:8b:bb: 77:33:f2:d5:d9:76:5c:6e:9e:40:28:b9:c2:2d:63: 1c:8b:42:04:c4:8d:f2:fe:cb:ab:d5:12:f2:f3:a6: ca:a1:c6:0a:10:59:1e:72:e1:10:96:75:bb:d5:fe: 7f:4d:ae:81:09:54:80:22:a0:0c:28:33:66:0c:0d: bd:5b:29:76:f0:f2:e8:fd:05:d5:f2:51:50:ab:a0: 46:27:8d:f9:3a:c0:72:77:4d:5b:92:8b:6f:55:36: ae:24:f6:5e:1d:a6:7f:d5:ed:30:e3:c9:11:75:90: c3:f5:cf:f5:50:cd:7e:6c:0c:19:8b:58:3e:b1:d7: 8f:61:23:6b:76:45:e9:bb:89:e3:2f:7a:b6:ed:08: 22:63:cf:43:75:ad:06:75:60:06:fb:cf:a6:e0:14: ce:72:a7:47:4c:2d:d9:7e:29:6f:e0:bf:ff:d6:75: f7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:42:B5:2C:73:C6:2B:BC:8F:67:48:2A:23:C4:46:0A:68:AF:CC:A8 X509v3 Authority Key Identifier: keyid:0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:6f:0c:b6:54:db:24:a0:54:ea:24:a0:58:43:cb:b2:77:eb: 18:7b:86:06:86:cb:30:f4:c1:4e:be:0d:18:e5:5d:e2:e5:f2: 94:87:4b:aa:95:6a:c7:04:6e:9e:2d:eb:c5:e9:62:e0:b6:fe: 8f:f5:01:a9:43:f9:d9:7a:8b:fe:49:fa:23:cc:6d:fe:97:20: 00:67:a7:63:4b:1a:06:f8:52:7a:a4:16:a0:af:1b:30:bd:ca: 6e:b2:19:90:0d:46:60:79:4f:e2:ab:8b:e0:d3:a0:bb:30:d8: 16:68:bf:52:45:c9:b4:e8:9d:3c:78:68:2a:ca:bf:55:38:cd: 14:93:85:13:d7:33:bc:02:f4:23:f6:7a:c6:44:9a:79:0c:38: 4d:86:88:ed:2b:10:b6:67:d7:be:6f:1e:54:06:fb:83:ed:e5: 17:ea:2f:97:f5:35:dd:0e:98:f1:62:e1:88:f5:35:d1:2b:67: 54:40:5e:ee:92:91:7c:45:06:47:fc:f7:52:cc:92:7a:27:f4: 58:0d:0a:c4:3d:e0:40:3b:e6:48:b4:2b:c9:54:4f:de:3e:1e: b8:b1:c2:46:43:15:38:23:70:07:7a:4a:f0:80:c2:07:34:7d: fa:5c:ec:78:c7:61:c5:a8:82:4d:54:30:c5:a0:a3:42:ba:2d: 2f:9a:90:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0NTUxMTAvBgNVBAUTKDBGQUQxQkQzNDYxODRDNzE5MjdDODJDNjFEM0ZBNkQ3 RTQ3MkVFOUUwHhcNMjQxMTIyMjAyMzQwWhcNMjQxMTI5MjAyMzQwWjAYMRYwFAYD VQQDEw02NzQwZTg0Yy05ZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcSMqCk7huFqTMXHttOC1LlyxQ+e/l12Vyxr3z2gm/ypcSmhDPKlzSqztis9 OKQYXFcsz9UlrVnxgFj2aGuPdqzuSwu31vEVHotgONzfHjo3ISWoPUIti7t3M/LV 2XZcbp5AKLnCLWMci0IExI3y/sur1RLy86bKocYKEFkecuEQlnW71f5/Ta6BCVSA IqAMKDNmDA29Wyl28PLo/QXV8lFQq6BGJ435OsByd01bkotvVTauJPZeHaZ/1e0w 48kRdZDD9c/1UM1+bAwZi1g+sdePYSNrdkXpu4njL3q27QgiY89Dda0GdWAG+8+m 4BTOcqdHTC3Zfilv4L//1nX35QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhCtSxz xiu8j2dIKiPERgpor8yoMB8GA1UdIwQYMBaAFA+tG9NGGExxknyCxh0/ptfkcu6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTQ1NS84NDFDOEREQ0Ix RDQxMUVBOTJGNkFBMUJDNEY5QUUwMi9ENjBiMDBZWVRIR1NmSUxHSFQtbTEtUnk3 cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q2MGIwMFlZVEhHU2ZJTEdIVC1tMS1SeTdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTQ1NS84NDFDOEREQ0IxRDQxMUVBOTJGNkFBMUJDNEY5QUUwMi9ENjBiMDBZWVRI R1NmSUxHSFQtbTEtUnk3cDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfbwy2VNskoFTqJKBYQ8uyd+sYe4YGhssw9MFOvg0Y5V3i5fKUh0uq lWrHBG6eLevF6WLgtv6P9QGpQ/nZeov+SfojzG3+lyAAZ6djSxoG+FJ6pBagrxsw vcpushmQDUZgeU/iq4vg06C7MNgWaL9SRcm06J08eGgqyr9VOM0Uk4UT1zO8AvQj 9nrGRJp5DDhNhojtKxC2Z9e+bx5UBvuD7eUX6i+X9TXdDpjxYuGI9TXRK2dUQF7u kpF8RQZH/PdSzJJ6J/RYDQrEPeBAO+ZItCvJVE/ePh64scJGQxU4I3AHekrwgMIH NH36XOx4x2HFqIJNVDDFoKNCui0vmpAx -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org