$ rpki-client -vvf rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft File: YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft (raw, json) Hash identifier: XxZKO+Xm7woEC5PYVSRFz0lAhmkiBK0RPjX/S/dZeNs= Subject key identifier: 67:E6:FA:49:18:FA:2C:CD:58:95:11:35:A2:9F:BC:00:FD:95:B2:DB Authority key identifier: 62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C Certificate issuer: /CN=A915179D/serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C Certificate serial: 3423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft Manifest number: 3423 Signing time: Fri 22 Nov 2024 14:43:31 +0000 Manifest this update: Fri 22 Nov 2024 14:43:30 +0000 Manifest next update: Fri 29 Nov 2024 14:43:30 +0000 Files and hashes: 1: YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl (hash: t13ndEPg3O3EerkLyCZJb9krRUGDjGtPOdYI5e0MMEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13347 (0x3423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915179D/serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C Validity Not Before: Nov 22 14:43:30 2024 GMT Not After : Nov 29 14:43:30 2024 GMT Subject: CN=67409893-a1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:89:97:28:52:90:1c:8a:e3:5e:97:29:81:be: 26:e4:16:22:56:ee:79:fc:e1:66:57:1c:6d:ef:94: 72:ca:0b:e9:2a:23:00:2c:e6:05:dd:61:60:ab:57: 33:d1:01:0e:3c:0a:cf:61:eb:39:2f:9c:a8:82:c3: f3:73:8e:50:6f:ef:af:26:eb:e1:e7:59:19:0d:65: e8:29:a5:0f:cd:6d:96:f0:6a:6c:c2:e5:20:ae:88: 1c:b1:a9:80:61:2c:d9:07:23:ba:48:5e:b2:3b:b2: 03:fe:d5:f5:7e:19:a8:da:a7:e1:a3:e5:1f:6f:52: d9:e1:5b:f4:b2:d2:0e:18:23:ce:e1:e9:3f:8e:fd: 20:dc:95:9b:b8:84:c4:da:b2:bf:d7:38:44:37:d7: 34:82:f2:cb:87:e9:ca:2a:63:d0:e3:eb:c9:57:01: 1d:7f:36:86:eb:f2:65:6b:37:ba:af:b0:75:a8:33: 21:91:62:a7:ed:03:bf:5a:fa:64:79:94:26:1b:33: a5:c3:dd:4c:8f:43:ae:70:17:2f:fd:a0:d7:c4:3f: e3:f6:d8:57:0d:af:d1:7f:22:2c:2e:f9:e9:05:b8: 27:24:eb:c5:14:cd:b5:67:30:4b:b5:e8:05:31:df: 61:1d:c1:72:81:be:4a:e7:0c:73:b5:fc:fa:f6:95: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E6:FA:49:18:FA:2C:CD:58:95:11:35:A2:9F:BC:00:FD:95:B2:DB X509v3 Authority Key Identifier: keyid:62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:f0:34:58:ef:4c:aa:a5:71:e7:f1:8a:e1:9c:6e:00:b6:e0: 44:03:d0:d0:40:bb:84:f6:59:50:c8:9a:c3:dc:d4:42:e3:46: 42:24:26:d9:9f:8e:e0:14:c2:a6:2c:a0:9d:bd:5c:f1:35:05: 26:9f:f9:25:10:31:64:12:d6:4a:b2:9c:db:38:36:d4:e5:22: e9:dd:ef:32:8c:47:15:c6:fa:4d:24:85:32:88:72:99:19:ef: 4b:a7:87:d7:5f:17:c6:be:9d:6f:2b:8b:72:a5:2b:45:f2:6d: 22:22:2e:b4:9d:69:c2:e0:a2:6d:e6:85:90:95:c8:02:6c:c4: c9:3f:97:cd:7e:c7:20:a3:dc:87:2a:b5:b8:e2:02:70:97:48: 1e:0c:6c:e1:13:87:db:10:c3:b0:33:5f:c2:aa:26:e3:4e:f3: ba:be:38:e9:61:9e:c6:51:d7:0e:48:29:97:c6:c1:c1:24:f8: 59:d7:d1:1c:52:b9:c7:9a:69:a6:d9:e0:19:a5:50:ba:64:03: c6:9e:50:ed:e6:2a:df:5b:21:db:e4:87:23:52:da:1c:d8:3f: bb:a2:86:25:17:71:9c:14:72:09:bd:32:c6:64:c6:0e:bd:1e: dd:62:db:cd:ac:40:01:75:58:6d:12:22:33:f4:0e:78:c8:01: 88:0f:4f:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE3OUQxMTAvBgNVBAUTKDYyQTZENUVEQzU4RDUzRUY5ODA4MDhCRUNFRDUxOUU4 MDVCMUU0MEMwHhcNMjQxMTIyMTQ0MzMwWhcNMjQxMTI5MTQ0MzMwWjAYMRYwFAYD VQQDEw02NzQwOTg5My1hMWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24mXKFKQHIrjXpcpgb4m5BYiVu55/OFmVxxt75RyygvpKiMALOYF3WFgq1cz 0QEOPArPYes5L5yogsPzc45Qb++vJuvh51kZDWXoKaUPzW2W8GpswuUgrogcsamA YSzZByO6SF6yO7ID/tX1fhmo2qfho+Ufb1LZ4Vv0stIOGCPO4ek/jv0g3JWbuITE 2rK/1zhEN9c0gvLLh+nKKmPQ4+vJVwEdfzaG6/Jlaze6r7B1qDMhkWKn7QO/Wvpk eZQmGzOlw91Mj0OucBcv/aDXxD/j9thXDa/RfyIsLvnpBbgnJOvFFM21ZzBLtegF Md9hHcFygb5K5wxztfz69pWBIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfm+kkY +izNWJURNaKfvAD9lbLbMB8GA1UdIwQYMBaAFGKm1e3FjVPvmAgIvs7VGegFseQM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTc5RC9BQzZBMTY4QzFE OTAxMUUyQTM5MTk1RjAwOEIwMkNEMi9ZcWJWN2NXTlUtLVlDQWktenRVWjZBV3g1 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lxYlY3Y1dOVS0tWUNBaS16dFVaNkFXeDVBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTc5RC9BQzZBMTY4QzFEOTAxMUUyQTM5MTk1RjAwOEIwMkNEMi9ZcWJWN2NXTlUt LVlDQWktenRVWjZBV3g1QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp8DRY70yqpXHn8YrhnG4AtuBEA9DQQLuE9llQyJrD3NRC40ZCJCbZ n47gFMKmLKCdvVzxNQUmn/klEDFkEtZKspzbODbU5SLp3e8yjEcVxvpNJIUyiHKZ Ge9Lp4fXXxfGvp1vK4typStF8m0iIi60nWnC4KJt5oWQlcgCbMTJP5fNfscgo9yH KrW44gJwl0geDGzhE4fbEMOwM1/CqibjTvO6vjjpYZ7GUdcOSCmXxsHBJPhZ19Ec UrnHmmmm2eAZpVC6ZAPGnlDt5irfWyHb5IcjUtoc2D+7ooYlF3GcFHIJvTLGZMYO vR7dYtvNrEABdVhtEiIz9A54yAGID0/Y -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:19 2024 by rpki-client on console-ams.rpki-client.org