$ rpki-client -vvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft File: yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft (raw, json) Hash identifier: bXVagkiDG4Yssvz9G622mi2zRPbtleEgFkrHC6z4enk= Subject key identifier: FC:40:01:53:00:1F:12:B4:6C:EE:00:C7:F3:CA:72:05:8F:69:72:63 Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF Certificate issuer: /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft Manifest number: 67 Signing time: Sat 23 Nov 2024 04:56:49 +0000 Manifest this update: Sat 23 Nov 2024 04:56:49 +0000 Manifest next update: Sat 30 Nov 2024 04:56:49 +0000 Files and hashes: 1: yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl (hash: 0jjOiU/EprrElHgivSsUVDvHloQtiQEZ2ekS2lnv4cs=) 2: F8636CC60F9D11EFA1E14343C4F9AE02.roa (hash: 4Oh915WthhJlwOOKgV/sOS+biKgr/hNx4EVmX21QhO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF Validity Not Before: Nov 23 04:56:49 2024 GMT Not After : Nov 30 04:56:49 2024 GMT Subject: CN=67416091-055d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2a:38:90:e2:2c:88:ae:bf:c4:0c:42:0e:6c: 2b:ff:fe:c5:47:8f:6c:7d:01:79:89:1a:a0:6e:f7: 11:aa:92:c9:1a:88:4a:9a:70:5e:98:bc:d6:59:f6: fa:b1:3c:a1:a4:fa:ce:bb:2e:0a:d4:1e:ea:c9:09: ce:6f:33:d7:78:f5:a6:69:96:74:40:c6:55:16:7c: 62:cf:c7:38:8c:d1:59:99:4f:5e:cb:d8:b8:b2:1a: be:33:5e:36:02:a7:3f:52:fc:8a:e8:e3:80:14:f4: 0e:d6:32:50:c3:4b:00:5e:ec:1f:e8:79:d7:89:fe: 53:06:e7:2d:b0:22:f5:1c:5b:91:6f:8f:b8:62:16: 47:bb:86:b9:88:eb:48:fe:d0:a4:0a:3a:99:e0:f3: b7:be:a2:6e:ad:af:27:d1:c5:99:77:70:3d:38:f1: b9:cc:b5:79:e3:72:2f:22:45:da:73:19:ad:1c:64: db:57:36:1f:57:de:e1:4e:2f:03:1e:01:e2:fb:78: 94:93:28:6b:0f:9e:39:df:9f:9e:8e:44:9f:d9:f8: 7b:6f:d6:3b:a0:4d:ae:83:65:ed:4f:eb:04:f1:f7: 76:e7:97:67:7a:75:4f:9a:00:50:25:5c:df:74:bc: 80:d6:57:6e:d3:a6:39:c7:92:6c:01:70:11:bb:11: 46:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:40:01:53:00:1F:12:B4:6C:EE:00:C7:F3:CA:72:05:8F:69:72:63 X509v3 Authority Key Identifier: keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9f:fe:65:9a:73:c7:da:b1:13:70:8a:79:b1:24:13:0a:0c: 49:79:6c:36:d7:ce:33:24:a2:be:17:50:a0:e4:dd:5c:be:17: 58:0e:fe:96:07:29:0f:cd:e7:29:fa:0f:00:72:18:81:a3:f5: 9f:5e:b4:ae:c5:9a:d5:51:d7:f9:78:3e:2b:94:2c:12:7e:40: 29:83:45:12:56:3a:e9:33:38:64:9d:82:b9:f0:d4:a5:76:5d: 27:13:62:d3:2e:0c:82:d2:e3:38:06:0e:42:0a:7c:1a:4e:dd: 94:85:08:5c:d6:e6:d7:59:d1:88:b2:26:90:53:6f:dd:99:9e: 9f:ee:29:ca:ff:3c:0f:2e:36:ab:d9:ed:d1:c4:81:42:12:0f: ce:70:41:5c:6d:9f:5e:2d:a4:27:6d:01:86:be:f0:32:c3:43: a6:28:bf:48:13:25:68:21:d7:f6:dd:c0:c4:1b:0a:7f:5f:98: f2:0d:c9:94:43:97:e3:a8:a4:3f:14:78:ae:e5:42:5b:2e:b4: aa:cd:9b:a6:fc:03:a8:a3:43:99:e9:26:0e:17:91:16:87:c4: a0:21:2f:d0:4e:fd:38:e2:59:e9:ee:59:6c:f7:1d:49:cf:74: f6:53:b1:61:56:29:a7:e8:1c:3b:09:a7:e7:b5:70:5b:c1:d5: 16:70:a5:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzY3NTExMC8GA1UEBRMoQ0EyNDU4MzEwNkZCNTQ5ODRDNzgxNTg5NUUzRTE5RURG NzlDOThCRjAeFw0yNDExMjMwNDU2NDlaFw0yNDExMzAwNDU2NDlaMBgxFjAUBgNV BAMTDTY3NDE2MDkxLTA1NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTKjiQ4iyIrr/EDEIObCv//sVHj2x9AXmJGqBu9xGqkskaiEqacF6YvNZZ9vqx PKGk+s67LgrUHurJCc5vM9d49aZplnRAxlUWfGLPxziM0VmZT17L2LiyGr4zXjYC pz9S/Iro44AU9A7WMlDDSwBe7B/oedeJ/lMG5y2wIvUcW5Fvj7hiFke7hrmI60j+ 0KQKOpng87e+om6tryfRxZl3cD048bnMtXnjci8iRdpzGa0cZNtXNh9X3uFOLwMe AeL7eJSTKGsPnjnfn56ORJ/Z+Htv1jugTa6DZe1P6wTx93bnl2d6dU+aAFAlXN90 vIDWV27TpjnHkmwBcBG7EUY9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/EABUwAf ErRs7gDH88pyBY9pcmMwHwYDVR0jBBgwFoAUyiRYMQb7VJhMeBWJXj4Z7fecmL8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNjc1LzkxNUEyODY2MEVC MzExRUY4OUNBRDEyQ0M0RjlBRTAyL3lpUllNUWI3VkpoTWVCV0pYajRaN2ZlY21M OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWlSWU1RYjdWSmhNZUJXSlhqNFo3ZmVjbUw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz Njc1LzkxNUEyODY2MEVCMzExRUY4OUNBRDEyQ0M0RjlBRTAyL3lpUllNUWI3Vkpo TWVCV0pYajRaN2ZlY21MOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB+f/mWac8fasRNwinmxJBMKDEl5bDbXzjMkor4XUKDk3Vy+F1gO/pYH KQ/N5yn6DwByGIGj9Z9etK7FmtVR1/l4PiuULBJ+QCmDRRJWOukzOGSdgrnw1KV2 XScTYtMuDILS4zgGDkIKfBpO3ZSFCFzW5tdZ0YiyJpBTb92Znp/uKcr/PA8uNqvZ 7dHEgUISD85wQVxtn14tpCdtAYa+8DLDQ6Yov0gTJWgh1/bdwMQbCn9fmPINyZRD l+OopD8UeK7lQlsutKrNm6b8A6ijQ5npJg4XkRaHxKAhL9BO/TjiWenuWWz3HUnP dPZTsWFWKafoHDsJp+e1cFvB1RZwpZ8= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:07 2024 by rpki-client on console-ams.rpki-client.org