$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft File: yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json) Hash identifier: VIHgvm5z/1uDxokz6DAM4kmXphyidqKaR0IkMTwgl6A= Subject key identifier: 55:6C:84:B9:09:32:85:5B:F4:31:87:4C:D7:BE:A5:ED:B7:5E:5C:09 Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6 Certificate issuer: /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6 Certificate serial: 073B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft Manifest number: 0734 Signing time: Wed 20 Nov 2024 21:12:26 +0000 Manifest this update: Wed 20 Nov 2024 21:12:25 +0000 Manifest next update: Wed 27 Nov 2024 21:12:25 +0000 Files and hashes: 1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: ds+f/uCXKIuOC35GIv3QIkgMTQ4052Q49mYNiaDPrUw=) 2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: 1KOLf59ICzEoI7M2NmFAlaU/cZ0TLw7hfRN8QYgYxBQ=) 3: E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa (hash: d0Xj6/bStnSttx8OgCvX9d1wnUe1SmuLIlk6o50qzOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1851 (0x73b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6 Validity Not Before: Nov 20 21:12:25 2024 GMT Not After : Nov 27 21:12:25 2024 GMT Subject: CN=673e50b9-fe79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f7:c5:85:23:8f:a3:8c:dd:bc:36:77:6a:db: 16:75:cf:cc:c4:17:ad:bd:a7:5d:0b:0c:3d:77:14: 70:f7:0a:76:8f:53:8b:68:47:e7:19:eb:35:65:c0: 68:7f:1f:ad:11:d4:e8:66:cf:02:dc:f2:d1:08:b2: 44:57:b4:27:c6:b1:06:17:37:95:b6:10:47:e1:5f: dd:c0:37:5b:56:26:12:f5:33:04:79:3a:ab:b2:0b: 20:d0:91:a1:10:e5:8c:e4:ca:3b:bf:6f:26:56:02: e3:59:9c:c9:6f:dd:1b:d8:bb:5f:ec:a7:45:0d:7f: cc:12:2d:40:66:7f:e8:9f:a9:d2:83:8f:5f:70:44: c1:1a:3f:a1:13:3a:81:18:72:fc:19:1c:35:73:07: d6:d5:e4:77:a9:02:de:08:00:78:ed:d2:79:8c:d0: 93:0a:69:a0:8d:78:9f:b8:da:7a:d9:5f:f3:d1:ab: f5:38:0e:ee:c9:77:eb:2c:4c:3d:ea:45:92:36:9d: 75:c7:41:78:5c:f9:8f:99:94:b9:77:75:34:60:b4: ec:ff:b3:e7:f9:5c:a9:f6:ce:a8:09:d9:4a:c3:33: ee:59:83:8e:84:5a:4d:05:46:01:b1:bb:af:6d:9e: 65:82:c2:1d:d4:4b:78:14:5d:33:fb:1a:ca:74:c4: 94:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6C:84:B9:09:32:85:5B:F4:31:87:4C:D7:BE:A5:ED:B7:5E:5C:09 X509v3 Authority Key Identifier: keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:c1:42:25:3b:42:29:1d:3d:42:1b:92:f7:66:c3:16:c6:92: 2e:2c:5c:85:e6:9a:95:b8:c0:f5:ed:77:34:42:a1:58:86:50: 27:d6:5b:5a:2c:d6:aa:0d:9f:3e:ea:2b:5a:26:d8:70:5c:ef: a8:59:9d:67:6e:d2:d5:9c:e8:1b:85:28:60:93:f2:7f:30:b3: ae:9b:f1:3e:c2:6e:cf:ff:0a:45:a0:04:6e:c9:46:26:1b:b1: 31:f0:01:17:89:74:44:be:d7:c2:ed:4e:fc:a2:78:77:49:bd: b4:c7:be:bf:63:d4:35:a4:b8:a4:e7:09:4d:03:38:97:13:9e: 99:28:e8:60:a0:70:f7:c9:27:65:c0:65:2b:60:82:91:3a:20: db:f4:c4:74:7e:c1:e2:9b:f4:05:b2:bc:24:6c:2f:ff:0f:99: 44:00:e9:ba:c6:64:22:cc:c5:f5:9e:c0:19:9c:8b:e1:14:26: cf:78:17:97:a1:4d:3e:90:fb:58:d0:d5:8e:b0:d0:66:ae:ce: 8e:1d:fe:5d:04:2e:a0:a7:db:ff:97:12:d2:4a:95:60:97:b1: fe:9f:ca:0e:20:d7:36:3b:b7:93:a0:41:44:2b:31:23:e5:ed: a2:19:90:80:c0:3a:2c:83:bd:6b:10:26:10:46:bb:d1:64:76: 55:54:cf:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCNzYxMTAvBgNVBAUTKENBMTVDNTkwOEQwNzJERDgyMTcxNEVDNjdFMTE3NUUz QUE5MTEyRTYwHhcNMjQxMTIwMjExMjI1WhcNMjQxMTI3MjExMjI1WjAYMRYwFAYD VQQDEw02NzNlNTBiOS1mZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/fFhSOPo4zdvDZ3atsWdc/MxBetvaddCww9dxRw9wp2j1OLaEfnGes1ZcBo fx+tEdToZs8C3PLRCLJEV7QnxrEGFzeVthBH4V/dwDdbViYS9TMEeTqrsgsg0JGh EOWM5Mo7v28mVgLjWZzJb90b2Ltf7KdFDX/MEi1AZn/on6nSg49fcETBGj+hEzqB GHL8GRw1cwfW1eR3qQLeCAB47dJ5jNCTCmmgjXifuNp62V/z0av1OA7uyXfrLEw9 6kWSNp11x0F4XPmPmZS5d3U0YLTs/7Pn+Vyp9s6oCdlKwzPuWYOOhFpNBUYBsbuv bZ5lgsId1Et4FF0z+xrKdMSU3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVshLkJ MoVb9DGHTNe+pe23XlwJMB8GA1UdIwQYMBaAFMoVxZCNBy3YIXFOxn4RdeOqkRLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3Ni82Q0EzMzY5QzA5 RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExkZ2hjVTdHZmhGMTQ2cVJF dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3loWEZrSTBITGRnaGNVN0dmaEYxNDZxUkV1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkI3Ni82Q0EzMzY5QzA5RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExk Z2hjVTdHZmhGMTQ2cVJFdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiwUIlO0IpHT1CG5L3ZsMWxpIuLFyF5pqVuMD17Xc0QqFYhlAn1lta LNaqDZ8+6itaJthwXO+oWZ1nbtLVnOgbhShgk/J/MLOum/E+wm7P/wpFoARuyUYm G7Ex8AEXiXREvtfC7U78onh3Sb20x76/Y9Q1pLik5wlNAziXE56ZKOhgoHD3ySdl wGUrYIKROiDb9MR0fsHim/QFsrwkbC//D5lEAOm6xmQizMX1nsAZnIvhFCbPeBeX oU0+kPtY0NWOsNBmrs6OHf5dBC6gp9v/lxLSSpVgl7H+n8oOINc2O7eToEFEKzEj 5e2iGZCAwDosg71rECYQRrvRZHZVVM9o -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:39 2024 by rpki-client on console-ams.rpki-client.org