$ rpki-client -vvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft File: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft (raw, json) Hash identifier: TBnM2w7nmiUJEIxIhuh+O3f5G6YsEuhJbraXzhhCR1c= Subject key identifier: 9E:7D:3A:02:37:85:4C:A9:86:F2:D6:30:1F:8C:9C:96:2C:66:7D:93 Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82 Certificate issuer: /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82 Certificate serial: 0F17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft Manifest number: 0F03 Signing time: Fri 22 Nov 2024 17:37:11 +0000 Manifest this update: Fri 22 Nov 2024 17:37:11 +0000 Manifest next update: Fri 29 Nov 2024 17:37:11 +0000 Files and hashes: 1: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl (hash: 8VGLtUjunZgcu5C/9fPOpzWtfJTovSKr298rLhO46ow=) 2: 05449490E17B11EC93AB7473C4F9AE02.roa (hash: PcZWjC6UVwgJAg7JfBerYqiOjHVIHel2AtVeK/QvypU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3863 (0xf17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82 Validity Not Before: Nov 22 17:37:11 2024 GMT Not After : Nov 29 17:37:11 2024 GMT Subject: CN=6740c147-51e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:7e:b2:80:3f:fc:4c:88:b1:56:8b:d9:79: 01:88:cb:85:d6:11:ca:83:c9:70:6d:87:ed:bb:77: 33:02:9a:ff:d8:cc:f9:b0:b2:e6:fb:d4:8b:40:56: 13:4e:98:36:08:12:1f:e7:be:18:16:d6:09:f1:f0: f1:cb:82:1d:20:3b:c5:72:19:4f:4b:9a:48:58:a4: a2:c4:88:11:d2:04:20:43:83:54:cb:fa:b5:ae:fc: 0c:70:1f:fb:06:f6:e1:8e:bb:2a:88:90:a1:79:b7: db:29:c2:bc:c9:74:ad:85:b9:dc:e4:ac:44:63:b7: 7d:c5:98:39:a5:34:7f:cc:ec:48:73:bb:b8:c0:98: 57:2e:83:90:c3:f5:bb:07:57:72:4e:ee:2a:49:3e: 95:ad:db:63:31:75:86:0f:19:7f:42:45:88:22:c9: 07:d4:1b:77:29:78:14:45:ac:9a:7d:50:74:02:ac: 77:db:bd:31:ba:69:41:44:b5:b9:c5:ac:8d:11:eb: 38:d3:09:b8:30:7b:57:d2:fe:cf:6e:30:85:87:d1: b4:75:fa:fd:47:2d:c5:5f:3b:67:93:61:b0:94:c0: ff:6a:a4:61:12:69:73:3b:2d:29:ca:ea:d0:44:db: 5b:b3:7b:02:ab:72:33:57:fb:a3:34:84:f8:a3:8b: a1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7D:3A:02:37:85:4C:A9:86:F2:D6:30:1F:8C:9C:96:2C:66:7D:93 X509v3 Authority Key Identifier: keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:97:89:95:f7:24:ff:e9:f2:3c:92:a6:39:81:f7:b2:9f:98: 76:9a:dc:a5:55:fd:e3:7e:5f:b1:db:21:60:8a:12:35:0e:f1: 64:93:de:64:15:f6:73:39:e9:e7:8f:fa:25:17:60:93:4f:48: 11:c5:6f:c7:7e:07:79:9e:b0:50:37:b2:67:d2:11:ea:1e:69: 96:64:56:eb:33:63:bb:34:59:5b:f0:71:c3:1a:28:1a:95:5c: 55:04:48:e9:6d:98:26:f3:94:d5:af:81:97:7a:98:c8:b1:a3: 9b:af:7b:3c:b5:8f:70:f4:c5:b4:b9:00:0e:a8:f7:ce:14:5e: b5:70:e8:0e:cd:65:8e:df:46:a0:50:35:a0:66:69:5c:aa:b3: 98:05:66:5e:5c:1e:34:56:a3:95:f8:68:86:04:8a:8e:1b:2d: 2c:5d:6e:ae:8d:f4:1f:a7:39:bf:6a:29:87:7c:6f:15:d3:eb: 6c:14:e1:28:ea:14:94:dc:9b:cd:7b:7c:ea:1b:64:c9:50:0c: d6:3e:53:76:a3:14:c1:f9:ea:1b:40:c3:32:3d:53:c8:e7:c8: 9c:94:b7:ca:10:65:b7:4e:c4:32:7d:87:62:9e:f0:4c:46:4b: 24:7a:ea:b2:7c:d6:14:6c:06:5c:ed:d8:d3:7f:9b:55:5a:41: f3:2b:07:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIyRUUxMTAvBgNVBAUTKEM4MjQzNDc0MjVCQUM4QUY1OUI0RTE5NjZCQzEwREJG QThCREFCODIwHhcNMjQxMTIyMTczNzExWhcNMjQxMTI5MTczNzExWjAYMRYwFAYD VQQDEw02NzQwYzE0Ny01MWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY9+soA//EyIsVaL2XkBiMuF1hHKg8lwbYftu3czApr/2Mz5sLLm+9SLQFYT Tpg2CBIf574YFtYJ8fDxy4IdIDvFchlPS5pIWKSixIgR0gQgQ4NUy/q1rvwMcB/7 BvbhjrsqiJChebfbKcK8yXSthbnc5KxEY7d9xZg5pTR/zOxIc7u4wJhXLoOQw/W7 B1dyTu4qST6VrdtjMXWGDxl/QkWIIskH1Bt3KXgURayafVB0Aqx3270xumlBRLW5 xayNEes40wm4MHtX0v7PbjCFh9G0dfr9Ry3FXztnk2GwlMD/aqRhEmlzOy0pyurQ RNtbs3sCq3IzV/ujNIT4o4uhuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ59OgI3 hUyphvLWMB+MnJYsZn2TMB8GA1UdIwQYMBaAFMgkNHQlusivWbThlmvBDb+ovauC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjJFRS8xRjQxMUY1ODZD MjExMUU5Qjc2RkE5MDlDNEY5QUUwMi95Q1EwZENXNnlLOVp0T0dXYThFTnY2aTlx NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lDUTBkQ1c2eUs5WnRPR1dhOEVOdjZpOXE0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjJFRS8xRjQxMUY1ODZDMjExMUU5Qjc2RkE5MDlDNEY5QUUwMi95Q1EwZENXNnlL OVp0T0dXYThFTnY2aTlxNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzl4mV9yT/6fI8kqY5gfeyn5h2mtylVf3jfl+x2yFgihI1DvFkk95k FfZzOennj/olF2CTT0gRxW/Hfgd5nrBQN7Jn0hHqHmmWZFbrM2O7NFlb8HHDGiga lVxVBEjpbZgm85TVr4GXepjIsaObr3s8tY9w9MW0uQAOqPfOFF61cOgOzWWO30ag UDWgZmlcqrOYBWZeXB40VqOV+GiGBIqOGy0sXW6ujfQfpzm/aimHfG8V0+tsFOEo 6hSU3JvNe3zqG2TJUAzWPlN2oxTB+eobQMMyPVPI58iclLfKEGW3TsQyfYdinvBM RkskeuqyfNYUbAZc7djTf5tVWkHzKwfB -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org