$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft File: ylWUEuKiOAIalO8nGO2wAe-W6oU.mft (raw, json) Hash identifier: rA/AKnR+t/RFZ+y3ZgOXLJBUvwIYUhlpcbIJTu15S5g= Subject key identifier: 46:D9:42:7D:38:D0:51:82:B8:C8:2B:83:41:7A:7D:6F:BF:6E:FF:85 Authority key identifier: CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 Certificate issuer: /CN=A9142BA8/serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Certificate serial: 03A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft Manifest number: 03A4 Signing time: Sat 23 Nov 2024 00:18:04 +0000 Manifest this update: Sat 23 Nov 2024 00:18:02 +0000 Manifest next update: Sat 30 Nov 2024 00:18:02 +0000 Files and hashes: 1: ylWUEuKiOAIalO8nGO2wAe-W6oU.crl (hash: +X1wWniN8xb4y1pi3CocslrvAewUVoe2A+iFv25YSY0=) 2: 4A9AA792720D11EC90C07770C4F9AE02.roa (hash: dFDSZakkdJDUIpcwLdntG9c3BeJfWUEXXOwcrxghAfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 935 (0x3a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BA8/serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Validity Not Before: Nov 23 00:18:02 2024 GMT Not After : Nov 30 00:18:02 2024 GMT Subject: CN=67411f3b-89ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:af:f1:c6:cf:14:0a:51:ad:7f:1e:01:ab:14: 2c:8f:c2:9e:80:b0:56:64:a4:a4:31:31:ec:d0:31: 07:94:c0:db:1a:f8:fe:c7:70:33:27:d2:86:81:b0: c6:7d:2f:a2:f4:ab:4d:7a:8c:08:ce:ec:81:67:9e: ee:6d:9c:8d:10:47:8c:2e:60:f8:e2:df:73:03:a1: 23:45:56:8e:4a:92:0c:bc:d7:2a:b0:69:da:28:f0: 70:c0:9c:88:26:d0:b1:dc:5d:82:ba:6f:9d:2f:0c: ae:ac:2f:ed:20:42:76:d5:ab:cd:86:ee:bf:6f:26: c3:93:b7:2a:35:68:51:40:08:9e:42:3f:e1:88:f7: 03:bf:28:37:98:24:4c:d4:d3:bb:4f:82:de:51:ff: 01:f1:7d:9f:d4:5b:88:fc:39:cc:c9:c4:7b:ec:0f: 23:89:0e:7f:0f:5c:94:09:55:29:06:f4:46:c4:d0: d2:65:7c:d0:34:11:17:ba:fe:8a:a3:dd:3e:bf:5f: 2d:d0:ee:f0:98:a9:06:5a:25:e5:c1:53:e6:77:c0: 27:25:19:30:32:bd:82:36:f4:9c:04:c7:d5:8e:50: b2:e6:d3:d7:01:9c:7b:10:ac:a6:75:ff:04:83:7e: 65:07:81:ec:c6:f9:7d:ef:10:88:d4:10:4a:43:83: 5d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D9:42:7D:38:D0:51:82:B8:C8:2B:83:41:7A:7D:6F:BF:6E:FF:85 X509v3 Authority Key Identifier: keyid:CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:01:7f:ea:31:90:36:c1:31:a0:5d:75:1c:27:84:08:68:c6: 4b:5c:46:aa:d1:75:58:b3:b8:45:a4:c7:86:dd:7d:0c:38:de: 93:b1:b8:f5:f0:1e:fd:52:5c:c7:df:fb:d6:9e:90:0b:25:66: d0:7d:d6:64:69:cc:8a:98:03:e2:c7:ca:92:46:8a:5e:e0:71: 9b:75:af:b9:92:4b:f9:c1:f2:e6:25:a1:de:7d:d9:25:b7:2f: 25:02:55:12:82:31:33:f0:bc:95:c1:8e:d0:05:d8:40:cd:9f: 50:dc:7a:b2:9d:10:5e:98:3b:91:89:ab:2f:48:52:ff:f3:9e: dd:a5:53:6c:5c:7b:4a:61:59:5c:6e:93:91:1a:1a:51:cd:84: d9:e8:5b:1c:c7:af:48:51:be:f9:08:eb:67:31:97:76:04:6e: a5:af:7c:7a:82:b4:ed:89:33:ef:e4:f9:84:e8:31:8d:87:11: 1e:72:d8:27:8d:ca:0e:14:ed:8e:62:24:2f:7a:29:75:1a:52: 2d:43:68:ef:f3:41:c5:83:48:30:4c:7a:77:78:2b:e8:9e:36: e8:1d:2d:c2:b0:f6:4b:fc:0e:46:62:74:1c:b4:ca:76:4a:d4: 59:b2:d7:90:19:9b:c2:5b:31:6b:35:7f:a8:79:fb:c7:17:9f: ae:1d:f7:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQTgxMTAvBgNVBAUTKENBNTU5NDEyRTJBMjM4MDIxQTk0RUYyNzE4RURCMDAx RUY5NkVBODUwHhcNMjQxMTIzMDAxODAyWhcNMjQxMTMwMDAxODAyWjAYMRYwFAYD VQQDEw02NzQxMWYzYi04OWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0q/xxs8UClGtfx4BqxQsj8KegLBWZKSkMTHs0DEHlMDbGvj+x3AzJ9KGgbDG fS+i9KtNeowIzuyBZ57ubZyNEEeMLmD44t9zA6EjRVaOSpIMvNcqsGnaKPBwwJyI JtCx3F2Cum+dLwyurC/tIEJ21avNhu6/bybDk7cqNWhRQAieQj/hiPcDvyg3mCRM 1NO7T4LeUf8B8X2f1FuI/DnMycR77A8jiQ5/D1yUCVUpBvRGxNDSZXzQNBEXuv6K o90+v18t0O7wmKkGWiXlwVPmd8AnJRkwMr2CNvScBMfVjlCy5tPXAZx7EKymdf8E g35lB4Hsxvl97xCI1BBKQ4Nd2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbZQn04 0FGCuMgrg0F6fW+/bv+FMB8GA1UdIwQYMBaAFMpVlBLiojgCGpTvJxjtsAHvluqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJBOC9ERTc4RDU4Qzcy MDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9BSWFsTzhuR08yd0FlLVc2 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lsV1VFdUtpT0FJYWxPOG5HTzJ3QWUtVzZvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJBOC9ERTc4RDU4QzcyMDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9B SWFsTzhuR08yd0FlLVc2b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrAX/qMZA2wTGgXXUcJ4QIaMZLXEaq0XVYs7hFpMeG3X0MON6Tsbj1 8B79UlzH3/vWnpALJWbQfdZkacyKmAPix8qSRope4HGbda+5kkv5wfLmJaHefdkl ty8lAlUSgjEz8LyVwY7QBdhAzZ9Q3HqynRBemDuRiasvSFL/857dpVNsXHtKYVlc bpORGhpRzYTZ6Fscx69IUb75COtnMZd2BG6lr3x6grTtiTPv5PmE6DGNhxEectgn jcoOFO2OYiQveil1GlItQ2jv80HFg0gwTHp3eCvonjboHS3CsPZL/A5GYnQctMp2 StRZsteQGZvCWzFrNX+oefvHF5+uHfeW -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:35 2024 by rpki-client on console-fra.rpki-client.org