$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft File: -Y3cNC9-J7aMoI09R8emmyaVXqE.mft (raw, json) Hash identifier: ptqky5BHYB4eUHm9XA3gnDrWGLSU9lnNI41Exh63/BQ= Subject key identifier: 0D:4F:EC:79:5E:B1:D8:9D:3C:2A:0C:AA:07:A0:01:4B:A7:5F:E5:30 Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1 Certificate issuer: /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft Manifest number: D7 Signing time: Sat 23 Nov 2024 03:43:07 +0000 Manifest this update: Sat 23 Nov 2024 03:43:07 +0000 Manifest next update: Sat 30 Nov 2024 03:43:07 +0000 Files and hashes: 1: -Y3cNC9-J7aMoI09R8emmyaVXqE.crl (hash: YALpSY2xLxFf1tB9Uaj6wgP7rRVw2yAZUKZL8Y5qS7E=) 2: 98647190660511EE9F741151C4F9AE02.roa (hash: AAPEJMgAJus01VLRJtLyrVsB2r7i4M9FcgcgLyO3Mi4=) 3: B0EBC1C862D111EEB797E270C4F9AE02.roa (hash: PdRWkiCr30aIGYAqGrvOZmOQw/vBKYcVPivksU8cuZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1 Validity Not Before: Nov 23 03:43:07 2024 GMT Not After : Nov 30 03:43:07 2024 GMT Subject: CN=67414f4b-7218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:0c:74:b9:b1:db:d2:39:c7:8a:7d:30:21: c2:c9:99:45:cb:84:b2:78:5d:1e:bf:aa:b8:54:76: 40:5a:13:12:42:6d:34:12:56:6f:03:24:ea:52:da: 9a:2d:12:42:53:c5:1d:13:17:bf:4a:87:ba:d5:01: 4a:78:36:75:17:2b:40:d7:46:ed:18:7e:2b:ad:0e: 5a:f2:e9:c6:95:ac:71:f7:3f:07:ce:53:ed:35:32: 71:48:8a:ab:12:81:c7:d2:98:4f:33:78:19:44:29: fb:0d:8f:48:99:ec:03:62:cf:f6:4b:aa:6e:66:9f: 43:0b:fd:b9:9d:dc:4b:67:80:b8:b8:2e:85:c8:5b: 7f:74:8c:b5:e3:fc:e4:78:91:c3:f4:ab:dd:63:d8: 5e:60:9f:8f:39:03:0d:74:2a:1c:0f:de:51:a5:c0: d2:3a:53:d4:71:b5:6c:1e:98:0d:ad:39:df:26:30: 9b:40:00:ce:4f:3d:a0:77:ba:2a:25:5d:61:57:9c: f5:2a:5a:7c:fa:ff:07:ee:aa:c8:59:8c:c6:c1:cf: 8c:81:58:3c:c5:45:00:6f:7e:e3:04:d8:e1:77:4c: 47:98:1f:c9:6d:7d:47:35:cf:30:ce:b6:08:0e:bf: 8b:2f:61:e4:cd:f9:a5:de:7b:d6:e7:c4:ab:a6:94: 8f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4F:EC:79:5E:B1:D8:9D:3C:2A:0C:AA:07:A0:01:4B:A7:5F:E5:30 X509v3 Authority Key Identifier: keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d8:da:53:86:1f:8f:45:ea:ed:2f:43:af:e2:95:56:59:27: a5:9b:fc:23:0e:e5:e5:0e:d1:e9:b8:1a:15:69:cd:e4:89:c6: 1b:60:84:f6:b0:a4:1d:25:29:18:f5:35:01:f4:81:0f:3a:61: c7:b7:0b:f6:af:23:4c:34:40:ec:b0:84:e2:94:f5:9f:6f:9b: 15:6d:eb:f6:9e:56:8e:d5:34:eb:3a:ff:dd:f5:97:ad:71:5a: 30:36:d7:af:04:9f:81:ba:8e:a5:c3:b2:5d:f9:2d:fd:35:45: c3:24:f7:ba:d5:d7:24:9e:79:e4:9a:2f:af:4e:c1:10:88:f7: 6a:91:83:24:9f:03:dd:11:de:5a:c5:9e:d6:b7:34:de:b9:9c: 51:4b:db:41:37:5d:70:de:2a:bd:8e:41:69:b9:72:53:af:d5: 4b:e5:9b:04:a9:8a:5a:f6:15:f0:bb:fa:47:77:57:29:c2:5a: 38:e8:be:d2:6f:5a:e0:28:cc:98:b0:ea:72:a5:d2:ae:4a:7b: 0e:99:ce:cc:bf:ab:57:6d:34:50:20:45:f4:eb:e2:3c:24:30: 02:55:7c:af:40:f4:97:10:11:7f:7e:80:f0:aa:ba:7a:65:ed: d3:65:0b:6f:41:7e:61:8e:62:13:49:26:7f:10:bd:ea:46:17: 22:13:7d:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M2OEIxMTAvBgNVBAUTKEY5OEREQzM0MkY3RTI3QjY4Q0EwOEQzRDQ3QzdBNjlC MjY5NTVFQTEwHhcNMjQxMTIzMDM0MzA3WhcNMjQxMTMwMDM0MzA3WjAYMRYwFAYD VQQDEw02NzQxNGY0Yi03MjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAursMdLmx29I5x4p9MCHCyZlFy4SyeF0ev6q4VHZAWhMSQm00ElZvAyTqUtqa LRJCU8UdExe/Soe61QFKeDZ1FytA10btGH4rrQ5a8unGlaxx9z8HzlPtNTJxSIqr EoHH0phPM3gZRCn7DY9ImewDYs/2S6puZp9DC/25ndxLZ4C4uC6FyFt/dIy14/zk eJHD9KvdY9heYJ+POQMNdCocD95RpcDSOlPUcbVsHpgNrTnfJjCbQADOTz2gd7oq JV1hV5z1Klp8+v8H7qrIWYzGwc+MgVg8xUUAb37jBNjhd0xHmB/JbX1HNc8wzrYI Dr+LL2Hkzfml3nvW58SrppSP4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1P7Hle sdidPCoMqgegAUunX+UwMB8GA1UdIwQYMBaAFPmN3DQvfie2jKCNPUfHppsmlV6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzY4Qi80RTlDMUY5MDYy RDExMUVFQUExQzg2NERDNEY5QUUwMi8tWTNjTkM5LUo3YU1vSTA5UjhlbW15YVZY cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ZM2NOQzktSjdhTW9JMDlSOGVtbXlhVlhxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzY4Qi80RTlDMUY5MDYyRDExMUVFQUExQzg2NERDNEY5QUUwMi8tWTNjTkM5LUo3 YU1vSTA5UjhlbW15YVZYcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb2NpThh+PRertL0Ov4pVWWSelm/wjDuXlDtHpuBoVac3kicYbYIT2 sKQdJSkY9TUB9IEPOmHHtwv2ryNMNEDssITilPWfb5sVbev2nlaO1TTrOv/d9Zet cVowNtevBJ+Buo6lw7Jd+S39NUXDJPe61dcknnnkmi+vTsEQiPdqkYMknwPdEd5a xZ7WtzTeuZxRS9tBN11w3iq9jkFpuXJTr9VL5ZsEqYpa9hXwu/pHd1cpwlo46L7S b1rgKMyYsOpypdKuSnsOmc7Mv6tXbTRQIEX06+I8JDACVXyvQPSXEBF/foDwqrp6 Ze3TZQtvQX5hjmITSSZ/EL3qRhciE30N -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org