$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: sDCgwqnf4vUz0J896eiFmz0mpwILMH4ENX8BHlAhNsw= Subject key identifier: 66:D1:AA:EF:F7:40:87:85:B8:C0:6D:27:73:B9:AD:F9:76:E8:F8:ED Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 0449 Signing time: Wed 20 Nov 2024 23:49:19 +0000 Manifest this update: Wed 20 Nov 2024 23:49:19 +0000 Manifest next update: Wed 27 Nov 2024 23:49:19 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: bLno/Oxpn0WtnQ2bD8d2kRPzPLXhnduJtTyDH4cCFe0=) 2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: PsyWk0XPgRaOQsmrSYL0NlL2ThTXodxGb7oDgi7tCj0=) 3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: GndyM43PgpaPnu9iSrwHwn38QkgPwRW5nu9u4/QEkNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: Nov 20 23:49:19 2024 GMT Not After : Nov 27 23:49:19 2024 GMT Subject: CN=673e757f-2e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:42:92:0b:76:fe:ac:71:99:88:c5:0e:1e:ae: 06:21:c3:e0:ca:4d:7a:b5:8e:ad:97:ab:50:a9:c7: 17:69:6e:a9:df:37:23:92:ce:bc:68:ee:e9:68:65: b3:08:14:14:9a:20:c6:24:5d:d2:f2:c8:3d:06:6a: 9b:5f:02:73:98:03:c1:1c:f4:ae:f3:d1:39:d7:88: 6c:a6:27:da:98:33:f4:4c:09:f3:72:8f:03:9d:c5: 58:a2:f2:a1:d3:32:c9:36:a3:cb:41:8c:ce:20:9b: dc:23:fa:9a:35:c8:1d:a8:90:53:0b:a0:50:b3:5e: b7:9a:a5:b2:65:9b:70:0d:72:3f:c7:a7:ed:ed:94: 52:4a:c5:5d:00:84:52:bb:38:21:35:cd:2c:84:fa: 15:d9:ed:35:67:22:0e:7b:53:86:4d:83:e8:3d:8c: 3b:93:1b:66:2a:44:55:25:f7:1d:d0:7b:cb:6e:7a: ae:98:31:81:34:0a:b4:53:5b:bc:b2:f2:f6:4c:9a: f2:fa:88:b7:40:3a:af:ba:72:50:3b:7c:2a:01:21: d8:e4:2e:10:bd:18:b8:cb:c1:b2:85:2c:85:ca:cf: 73:56:6e:04:05:98:5e:57:f4:3a:ae:b9:92:76:fb: 1a:b1:8b:a1:50:a4:a0:e3:b3:7e:a4:b5:ce:3b:48: 8c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D1:AA:EF:F7:40:87:85:B8:C0:6D:27:73:B9:AD:F9:76:E8:F8:ED X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f1:dd:c0:df:9b:11:97:a4:c3:2c:25:a2:c9:67:fe:26:47: ad:7c:43:b9:96:de:7f:aa:df:46:80:c7:1c:04:6f:0f:70:e5: 65:ad:98:68:8d:af:e1:c9:7e:57:6d:a5:c5:eb:30:8f:89:3c: fe:1d:e9:75:d5:46:75:e4:4b:ce:42:79:ab:64:86:91:3a:0f: d4:d0:22:1a:8e:dd:da:84:69:3c:5a:c1:43:9a:fb:04:de:6a: 85:2c:ed:6a:65:92:a3:76:43:82:61:89:1a:0f:22:48:ae:94: d6:20:1f:a3:c7:36:82:4c:63:ac:ca:0f:ca:97:66:e7:ca:95: 0d:7d:c8:fd:fe:5c:6f:40:39:f5:a9:6f:74:ef:94:79:ea:2f: bb:3a:47:04:0b:db:fc:66:14:e6:af:04:31:6b:3b:a8:f2:78: da:49:17:4a:e1:85:db:5e:3e:d4:61:1d:3a:4b:5b:76:df:f4: 99:5a:7b:f1:66:98:c2:fa:b9:a3:ea:b1:4d:62:74:f3:5b:39: a8:ca:34:97:61:dc:31:9e:7f:ec:81:4d:a7:6c:49:e0:60:6d: d8:90:cf:03:c0:8a:6b:e3:b2:d0:d5:db:d6:e8:a3:ce:1e:e5: 8f:7c:d9:66:10:85:5e:91:16:7f:5c:f9:f7:61:c1:1f:4d:2d: ea:8a:1a:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjQxMTIwMjM0OTE5WhcNMjQxMTI3MjM0OTE5WjAYMRYwFAYD VQQDEw02NzNlNzU3Zi0yZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0KSC3b+rHGZiMUOHq4GIcPgyk16tY6tl6tQqccXaW6p3zcjks68aO7paGWz CBQUmiDGJF3S8sg9BmqbXwJzmAPBHPSu89E514hspifamDP0TAnzco8DncVYovKh 0zLJNqPLQYzOIJvcI/qaNcgdqJBTC6BQs163mqWyZZtwDXI/x6ft7ZRSSsVdAIRS uzghNc0shPoV2e01ZyIOe1OGTYPoPYw7kxtmKkRVJfcd0HvLbnqumDGBNAq0U1u8 svL2TJry+oi3QDqvunJQO3wqASHY5C4QvRi4y8GyhSyFys9zVm4EBZheV/Q6rrmS dvsasYuhUKSg47N+pLXOO0iMXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbRqu/3 QIeFuMBtJ3O5rfl26PjtMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA98d3A35sRl6TDLCWiyWf+JketfEO5lt5/qt9GgMccBG8PcOVlrZho ja/hyX5XbaXF6zCPiTz+Hel11UZ15EvOQnmrZIaROg/U0CIajt3ahGk8WsFDmvsE 3mqFLO1qZZKjdkOCYYkaDyJIrpTWIB+jxzaCTGOsyg/Kl2bnypUNfcj9/lxvQDn1 qW9075R56i+7OkcEC9v8ZhTmrwQxazuo8njaSRdK4YXbXj7UYR06S1t23/SZWnvx ZpjC+rmj6rFNYnTzWzmoyjSXYdwxnn/sgU2nbEngYG3YkM8DwIpr47LQ1dvW6KPO HuWPfNlmEIVekRZ/XPn3YcEfTS3qihpf -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:54 2024 by rpki-client on console-fra.rpki-client.org