$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft File: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft (raw, json) Hash identifier: H2HTfgbvNesdj28zdiHqu+VLy/Sxe2E/WGUBVJ7JWyU= Subject key identifier: 90:5B:9D:2A:E1:1D:C1:97:0C:7E:5B:B5:19:D7:91:CF:A8:9E:C0:E0 Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F Certificate issuer: /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F Certificate serial: 072A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft Manifest number: 071E Signing time: Wed 20 Nov 2024 21:20:55 +0000 Manifest this update: Wed 20 Nov 2024 21:20:55 +0000 Manifest next update: Wed 27 Nov 2024 21:20:55 +0000 Files and hashes: 1: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl (hash: NaJYuAqxK6J70VX0f5NhgDMI1vWIl4rUD1hkPBvtSBo=) 2: 8D0DD6C2690811EFAC6DE109C4F9AE02.roa (hash: xN0yNaxvlpy2+KQ9qQxtfIWfCyAMMfjKaJ5DUH0Cm+A=) 3: 211D4B50690811EF9C1CC987C4F9AE02.roa (hash: hVt9unqz7ttzpMlD1ny61zF/p4LOS8Y/je8reujvVvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1834 (0x72a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F Validity Not Before: Nov 20 21:20:55 2024 GMT Not After : Nov 27 21:20:55 2024 GMT Subject: CN=673e52b7-104e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:b9:fc:69:0c:cd:ea:ea:26:98:a5:6d:68: f3:9f:99:9c:85:aa:7f:7a:4a:76:d9:b5:aa:57:e3: 7f:3a:f9:8f:4e:1c:b8:be:08:3a:2a:e9:69:a0:4f: 64:4e:11:44:12:9a:56:42:ab:2d:dc:94:08:d8:4e: ab:4c:f0:88:6a:ca:94:5d:02:c2:a7:9c:23:09:0f: f4:f3:dc:64:af:45:66:f3:77:07:25:59:c8:f2:ff: 67:57:66:2e:cf:0c:df:4f:bd:33:98:29:e4:30:61: c7:a0:13:bd:4c:18:83:35:1d:91:32:5d:f7:a8:9d: 99:dc:49:3a:54:25:fd:16:28:39:e6:c1:dc:59:f7: 87:84:1f:5e:6c:17:92:8a:90:d6:19:9a:5a:26:d0: c3:07:41:59:e4:68:ca:4d:81:0d:ed:ab:3b:59:2f: da:fa:0f:d6:1c:07:7e:a7:cb:f8:fa:e5:bc:d8:2e: 1f:c0:08:68:94:d3:31:89:54:78:50:67:b0:a5:96: 5e:cd:e4:a6:0d:9d:61:dc:94:92:d1:79:56:69:07: 84:73:75:d1:ac:24:9f:21:c2:51:7e:97:a2:e3:1c: 60:c5:6c:d8:79:62:c9:d5:cf:41:27:1a:cf:b6:a0: f6:39:2b:50:88:7f:a2:1b:c9:23:da:56:38:a3:fd: 18:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5B:9D:2A:E1:1D:C1:97:0C:7E:5B:B5:19:D7:91:CF:A8:9E:C0:E0 X509v3 Authority Key Identifier: keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0d:b1:f4:ca:34:43:5b:e7:d1:2b:c1:85:7f:31:5d:82:ab: 5d:ae:33:0d:c9:1a:a3:48:7b:13:b1:72:7d:aa:1a:df:71:09: 69:06:42:61:a8:74:5d:0d:42:44:0d:52:ff:17:69:1a:b0:60: b4:f5:b9:b1:58:02:a5:47:c8:68:8e:8a:79:56:2f:fa:24:10: f9:b3:ab:8e:8a:72:7a:91:d3:2b:b4:08:c4:7e:9a:c1:81:db: 67:f3:6e:59:f3:66:7a:59:39:a0:2c:f1:7b:e5:de:ca:5b:fd: e8:22:7f:d6:e6:96:14:8e:8c:23:e1:19:65:01:df:19:77:f4: fc:84:93:12:4c:15:24:42:d0:cc:00:62:b6:19:57:08:6c:7d: de:cf:86:b6:93:f6:74:7c:9d:66:ea:e0:7d:b0:be:04:c2:78: df:08:2c:ad:9a:19:e5:58:13:89:8e:1e:cb:36:d6:4b:a7:15: 93:58:2d:a1:93:b7:f0:42:b5:32:c8:19:ee:34:c7:f3:e3:8a: dc:54:74:10:e7:88:f3:51:c2:0b:11:28:8b:0c:4a:1c:3f:2c: fa:9a:49:fd:f9:ee:89:14:26:a9:88:59:74:fb:69:47:e6:f4: 50:02:b5:8d:e0:81:a0:62:e5:8e:ce:2f:08:2c:18:a7:e5:71: 23:9a:8a:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAzOTUxMTAvBgNVBAUTKDYyQ0Q2RTY1MEQyMDlFNTBFRUZENjZDMzUyODhCNjA2 RjM2MkU4MEYwHhcNMjQxMTIwMjEyMDU1WhcNMjQxMTI3MjEyMDU1WjAYMRYwFAYD VQQDEw02NzNlNTJiNy0xMDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rO5/GkMzerqJpilbWjzn5mchap/ekp22bWqV+N/OvmPThy4vgg6KulpoE9k ThFEEppWQqst3JQI2E6rTPCIasqUXQLCp5wjCQ/089xkr0Vm83cHJVnI8v9nV2Yu zwzfT70zmCnkMGHHoBO9TBiDNR2RMl33qJ2Z3Ek6VCX9Fig55sHcWfeHhB9ebBeS ipDWGZpaJtDDB0FZ5GjKTYEN7as7WS/a+g/WHAd+p8v4+uW82C4fwAholNMxiVR4 UGewpZZezeSmDZ1h3JSS0XlWaQeEc3XRrCSfIcJRfpei4xxgxWzYeWLJ1c9BJxrP tqD2OStQiH+iG8kj2lY4o/0Y1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBbnSrh HcGXDH5btRnXkc+onsDgMB8GA1UdIwQYMBaAFGLNbmUNIJ5Q7v1mw1KItgbzYugP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDM5NS9FQjY3MjI2NDE0 Q0ExMUVCODE2NDNCMEZDNEY5QUUwMi9ZczF1WlEwZ25sRHVfV2JEVW9pMkJ2Tmk2 QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzMXVaUTBnbmxEdV9XYkRVb2kyQnZOaTZBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDM5NS9FQjY3MjI2NDE0Q0ExMUVCODE2NDNCMEZDNEY5QUUwMi9ZczF1WlEwZ25s RHVfV2JEVW9pMkJ2Tmk2QTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcDbH0yjRDW+fRK8GFfzFdgqtdrjMNyRqjSHsTsXJ9qhrfcQlpBkJh qHRdDUJEDVL/F2kasGC09bmxWAKlR8hojop5Vi/6JBD5s6uOinJ6kdMrtAjEfprB gdtn825Z82Z6WTmgLPF75d7KW/3oIn/W5pYUjowj4RllAd8Zd/T8hJMSTBUkQtDM AGK2GVcIbH3ez4a2k/Z0fJ1m6uB9sL4EwnjfCCytmhnlWBOJjh7LNtZLpxWTWC2h k7fwQrUyyBnuNMfz44rcVHQQ54jzUcILESiLDEocPyz6mkn9+e6JFCapiFl0+2lH 5vRQArWN4IGgYuWOzi8ILBin5XEjmorz -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:37 2024 by rpki-client on console-ams.rpki-client.org