$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json) Hash identifier: y7pm17AIsap6UxZX+cWZ7Fi1qLBUlLN3pCWkHbG9RX4= Subject key identifier: EF:61:13:CF:A1:7C:85:98:77:90:8A:43:28:C5:50:87:8D:6F:F8:54 Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft Manifest number: A0 Signing time: Sat 23 Nov 2024 04:20:53 +0000 Manifest this update: Sat 23 Nov 2024 04:20:52 +0000 Manifest next update: Sat 30 Nov 2024 04:20:52 +0000 Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: neB52Pvep3HnnenCHvDQCdepAM5LgNzwRBqUM89ytPo=) 2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: 6LySKLbDyC3EGr7TEOMIGFF8VOVVZ0g8dTsYdzeenFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Validity Not Before: Nov 23 04:20:52 2024 GMT Not After : Nov 30 04:20:52 2024 GMT Subject: CN=67415825-d928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:89:b5:35:98:16:ea:83:6d:fa:45:a2:4a: 2f:27:f1:2b:b8:27:ea:4b:56:f5:5b:1b:ed:bd:d1: be:57:1e:c8:93:9c:ff:82:09:7e:df:1e:44:4b:75: 58:4d:58:98:b5:1b:1d:46:81:2c:f4:c5:90:ba:0b: e6:5b:b7:b4:89:4b:4d:3f:4a:73:21:83:19:72:d0: 41:f8:14:1d:31:37:d1:2b:49:0f:83:85:17:dd:72: 31:d2:94:45:07:10:79:b1:67:d0:8a:60:c3:1c:7b: 9c:b5:05:cb:74:78:82:9b:c9:fd:44:dc:42:c8:03: 83:fd:d5:6e:a0:be:1c:12:50:92:57:d0:31:ae:f6: 4a:73:91:01:f1:72:35:54:d9:70:42:bf:d2:f9:7b: 79:d2:38:ca:53:1c:36:7d:be:1c:2c:db:52:fc:89: 5e:ed:7e:b6:e9:49:43:67:69:01:ee:f7:90:6d:0b: 58:6d:f5:65:11:b3:bf:bc:3f:45:e9:cc:73:4f:b3: b5:7c:2a:69:9a:f1:a8:89:ce:a5:70:8b:1a:95:5c: 22:41:b6:95:c6:35:98:7d:a5:c2:d1:d4:de:65:b8: e5:18:dc:22:46:51:e4:97:50:d4:64:2a:1e:60:f9: f5:31:a1:0c:ed:a4:38:78:9e:5d:c6:c0:6a:2a:6e: b0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:61:13:CF:A1:7C:85:98:77:90:8A:43:28:C5:50:87:8D:6F:F8:54 X509v3 Authority Key Identifier: keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:28:4b:8a:4e:0d:26:84:8e:28:0e:6a:64:cb:c5:ea:44:8b: 48:af:04:55:83:c9:f8:cf:33:39:19:3e:8f:59:06:9b:52:68: d4:e4:93:d2:d2:ce:75:ae:b7:5b:a1:74:8a:e5:3c:66:ce:91: 7b:b5:31:2e:3f:a1:8d:ac:ec:bf:38:e3:54:77:63:8c:37:a5: 0f:2b:3b:bb:dc:ac:e8:4a:3b:f5:18:4e:43:e6:52:56:71:60: a7:b4:f0:bc:2e:aa:c4:e3:96:f3:f5:af:fc:d5:f0:7c:29:20: aa:d7:2b:0a:ee:3c:f2:8b:32:d3:00:c8:9c:b9:50:cc:0d:d9: b6:cd:a4:5e:05:05:6e:f2:ce:7a:81:43:2e:b4:70:54:54:fc: 91:35:77:1d:f6:74:fc:a8:4f:9d:cb:9b:bd:90:9e:51:b1:01: 9e:43:49:a1:26:38:20:60:b4:c8:3c:83:c3:0d:85:76:5e:08: 56:dd:e2:93:74:ca:e4:86:9d:0d:e3:39:c6:29:c0:f0:4d:d8: b7:00:7d:fb:7a:db:25:dc:89:7a:be:b7:d9:09:17:53:95:04: e4:e5:cc:56:74:58:45:6b:2d:98:6c:e9:fb:5d:5f:44:66:66: d9:ed:60:13:da:59:5b:23:e7:ca:bb:51:bb:9d:f6:91:0c:29: 59:8d:4d:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDYxQkJDQjZEQjhEQzEzMzdDMUI4Mjk4RjcwQzFGRjJB NTAxNkVENkUwHhcNMjQxMTIzMDQyMDUyWhcNMjQxMTMwMDQyMDUyWjAYMRYwFAYD VQQDEw02NzQxNTgyNS1kOTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcaJtTWYFuqDbfpFokovJ/EruCfqS1b1WxvtvdG+Vx7Ik5z/ggl+3x5ES3VY TViYtRsdRoEs9MWQugvmW7e0iUtNP0pzIYMZctBB+BQdMTfRK0kPg4UX3XIx0pRF BxB5sWfQimDDHHuctQXLdHiCm8n9RNxCyAOD/dVuoL4cElCSV9AxrvZKc5EB8XI1 VNlwQr/S+Xt50jjKUxw2fb4cLNtS/Ile7X626UlDZ2kB7veQbQtYbfVlEbO/vD9F 6cxzT7O1fCppmvGoic6lcIsalVwiQbaVxjWYfaXC0dTeZbjlGNwiRlHkl1DUZCoe YPn1MaEM7aQ4eJ5dxsBqKm6wyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9hE8+h fIWYd5CKQyjFUIeNb/hUMB8GA1UdIwQYMBaAFGG7y2243BM3wbgpj3DB/ypQFu1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC81NUUzOTJGQ0I4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6ZkJ1Q21QY01IX0tsQVc3 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lidkxiYmpjRXpmQnVDbVBjTUhfS2xBVzdXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC81NUUzOTJGQ0I4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6 ZkJ1Q21QY01IX0tsQVc3VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWKEuKTg0mhI4oDmpky8XqRItIrwRVg8n4zzM5GT6PWQabUmjU5JPS 0s51rrdboXSK5TxmzpF7tTEuP6GNrOy/OONUd2OMN6UPKzu73KzoSjv1GE5D5lJW cWCntPC8LqrE45bz9a/81fB8KSCq1ysK7jzyizLTAMicuVDMDdm2zaReBQVu8s56 gUMutHBUVPyRNXcd9nT8qE+dy5u9kJ5RsQGeQ0mhJjggYLTIPIPDDYV2XghW3eKT dMrkhp0N4znGKcDwTdi3AH37etsl3Il6vrfZCRdTlQTk5cxWdFhFay2YbOn7XV9E ZmbZ7WAT2llbI+fKu1G7nfaRDClZjU1r -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:05 2024 by rpki-client on console-ams.rpki-client.org