$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft File: YWOpVUwzBnn36hZnixCNlk7ByAI.mft (raw, json) Hash identifier: ZjWrupAG8QuZTqjeym5PYtGgH26VVaXxxQfSjtNDEos= Subject key identifier: 36:2A:0E:C3:63:A6:D8:10:FE:4D:7F:F5:13:32:42:79:9E:2C:E9:A3 Authority key identifier: 61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 Certificate issuer: /CN=A91364F5/serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft Manifest number: 86 Signing time: Thu 21 Nov 2024 04:42:15 +0000 Manifest this update: Thu 21 Nov 2024 04:42:15 +0000 Manifest next update: Thu 28 Nov 2024 04:42:15 +0000 Files and hashes: 1: YWOpVUwzBnn36hZnixCNlk7ByAI.crl (hash: 9BNIP45I1h+jNv/ZEOOizqHdH24jLkQ4Ay0f7isALiw=) 2: 0F8D82DCD9FD11EEA4312983C4F9AE02.roa (hash: o70V3rgTm8yRRylFlCudRELCYk4ehTX4M2+Mtzto8oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5/serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Validity Not Before: Nov 21 04:42:15 2024 GMT Not After : Nov 28 04:42:15 2024 GMT Subject: CN=673eba27-4274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:fd:9c:7f:cd:b7:22:7e:f0:32:50:9f:b3: d5:27:fe:54:dd:b4:ea:45:6c:c0:1e:53:3f:34:b0: 40:ba:ad:03:fa:9f:6e:a0:65:a4:99:01:f7:42:b8: 65:2b:f5:f3:b6:39:07:6b:95:e2:d4:23:7b:da:87: 2a:03:37:f8:04:c2:5b:cb:80:c1:06:fe:17:33:05: ee:a7:3a:84:fd:85:98:8e:e6:2b:3e:06:e0:81:fe: 59:7d:c6:19:7f:8c:a5:29:df:7e:4c:95:f8:5e:05: ea:7d:3d:34:84:cd:b0:b1:f4:b6:b3:89:dc:b7:9d: bc:55:5a:06:ae:41:4e:3c:50:fd:cb:31:0b:c9:14: 8c:ee:da:3e:b2:bc:03:e9:a3:97:7e:a4:c5:f0:69: 61:94:65:79:f5:22:b8:de:49:57:2e:64:de:56:35: 31:24:1b:fe:8d:13:c1:92:c0:8f:ab:40:e5:93:62: b7:05:67:8e:0f:e5:9c:35:6c:6a:0e:35:61:e3:8a: 28:6b:be:cf:f0:0c:ae:ce:99:02:ef:38:35:6a:d0: 1a:00:5e:ce:ec:b1:a9:d6:40:2a:4f:5d:2a:2f:46: 81:e4:7b:3a:75:34:4d:9d:a0:45:7c:55:f5:8c:90: 49:28:92:bd:93:5c:cd:a7:91:3e:13:ef:b6:d1:32: 07:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2A:0E:C3:63:A6:D8:10:FE:4D:7F:F5:13:32:42:79:9E:2C:E9:A3 X509v3 Authority Key Identifier: keyid:61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:b6:4f:82:fd:48:36:24:ae:91:5c:b7:7d:3b:6a:38:5c:0a: ad:db:ad:73:2f:0f:dc:9e:04:fb:30:f7:8f:d5:81:de:22:ff: 8d:81:95:04:56:72:1b:0c:e8:ea:b3:e9:19:c2:18:7c:f4:b0: c6:71:39:80:b9:b6:6f:a1:8a:a4:9a:a4:54:53:5a:44:f7:9f: 9f:57:24:e4:bf:29:01:3d:b7:de:88:55:8b:f6:86:ef:63:8c: d4:40:75:b1:e5:81:5d:38:b9:ed:16:35:24:32:0f:99:58:7e: 94:cd:55:4f:15:a1:7f:2f:78:1f:2e:bd:8c:33:47:ef:0c:f4: 3f:d1:1e:b6:54:69:de:9a:5f:a5:35:a1:fe:99:cc:97:5e:cc: 87:3c:2b:ae:07:bf:33:85:e7:83:2f:4b:7c:3d:5e:a9:f8:03: f5:70:65:5f:4c:7e:52:85:3d:3e:c0:e6:98:6b:a5:45:8c:0d: ec:73:6d:0b:6d:7c:48:06:6a:af:be:fb:2e:4f:17:a2:7b:b9: 40:2e:75:6e:bb:09:37:7c:89:86:27:c7:fe:24:d6:96:09:d2: aa:8b:eb:9e:c9:87:f5:b7:54:f6:1d:a9:44:47:a5:15:12:34: 71:98:fc:f3:9e:44:ea:16:6f:f7:bb:2b:eb:fc:15:bc:e3:f6: 29:fa:29:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKDYxNjNBOTU1NEMzMzA2NzlGN0VBMTY2NzhCMTA4RDk2 NEVDMUM4MDIwHhcNMjQxMTIxMDQ0MjE1WhcNMjQxMTI4MDQ0MjE1WjAYMRYwFAYD VQQDEw02NzNlYmEyNy00Mjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYn9nH/NtyJ+8DJQn7PVJ/5U3bTqRWzAHlM/NLBAuq0D+p9uoGWkmQH3Qrhl K/XztjkHa5Xi1CN72ocqAzf4BMJby4DBBv4XMwXupzqE/YWYjuYrPgbggf5ZfcYZ f4ylKd9+TJX4XgXqfT00hM2wsfS2s4nct528VVoGrkFOPFD9yzELyRSM7to+srwD 6aOXfqTF8GlhlGV59SK43klXLmTeVjUxJBv+jRPBksCPq0Dlk2K3BWeOD+WcNWxq DjVh44ooa77P8AyuzpkC7zg1atAaAF7O7LGp1kAqT10qL0aB5Hs6dTRNnaBFfFX1 jJBJKJK9k1zNp5E+E++20TIHTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYqDsNj ptgQ/k1/9RMyQnmeLOmjMB8GA1UdIwQYMBaAFGFjqVVMMwZ59+oWZ4sQjZZOwcgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS81QjVCOTNFQ0Q5 RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJubjM2aFpuaXhDTmxrN0J5 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lXT3BWVXd6Qm5uMzZoWm5peENObGs3QnlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS81QjVCOTNFQ0Q5RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJu bjM2aFpuaXhDTmxrN0J5QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBtk+C/Ug2JK6RXLd9O2o4XAqt261zLw/cngT7MPeP1YHeIv+NgZUE VnIbDOjqs+kZwhh89LDGcTmAubZvoYqkmqRUU1pE95+fVyTkvykBPbfeiFWL9obv Y4zUQHWx5YFdOLntFjUkMg+ZWH6UzVVPFaF/L3gfLr2MM0fvDPQ/0R62VGneml+l NaH+mcyXXsyHPCuuB78zheeDL0t8PV6p+AP1cGVfTH5ShT0+wOaYa6VFjA3sc20L bXxIBmqvvvsuTxeie7lALnVuuwk3fImGJ8f+JNaWCdKqi+ueyYf1t1T2HalER6UV EjRxmPzznkTqFm/3uyvr/BW84/Yp+ikJ -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:14 2024 by rpki-client on console-fra.rpki-client.org