$ rpki-client -vvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft File: yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft (raw, json) Hash identifier: V/l7WcfD8+Mf/UrX4EnBYksNj6DMsY+ijEpYg/s3ukM= Subject key identifier: 92:EC:A8:5F:27:69:65:BC:FB:AA:40:B6:54:0E:73:6C:00:75:55:65 Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF Certificate issuer: /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft Manifest number: 44 Signing time: Sun 15 Sep 2024 09:47:10 +0000 Manifest this update: Sun 15 Sep 2024 09:47:09 +0000 Manifest next update: Sun 22 Sep 2024 09:47:09 +0000 Files and hashes: 1: yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl (hash: hlpcI+Ix/DhitlxFF/x6j/dRWe1Nv/ukuzg28qD7f/U=) 2: F8636CC60F9D11EFA1E14343C4F9AE02.roa (hash: 4Oh915WthhJlwOOKgV/sOS+biKgr/hNx4EVmX21QhO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF Validity Not Before: Sep 15 09:47:09 2024 GMT Not After : Sep 22 09:47:09 2024 GMT Subject: CN=66e6ad1e-697b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c4:1d:95:cd:19:83:db:fc:07:9c:d7:01:d8: 28:4b:8d:11:8a:2c:c9:2b:e8:86:db:c8:da:82:1a: b5:9f:c5:0e:63:18:0c:b7:94:23:da:d8:bc:75:7e: df:57:31:74:da:b0:dc:8c:84:d9:14:7c:66:16:c0: fb:55:84:03:c7:19:35:45:98:b9:a7:e8:0c:80:8c: e5:c8:8e:82:03:57:ca:5a:68:a7:2e:d0:40:de:7c: 5b:1f:71:f6:60:8d:96:3a:07:15:f5:79:66:b7:76: b3:07:c0:79:1a:46:5b:3f:ba:18:10:d4:a2:45:ad: a6:15:79:0b:50:53:77:ca:85:d1:e6:6f:c4:5e:71: ac:05:3f:06:6d:60:b8:28:e0:2e:06:4e:60:70:9f: 18:dc:31:40:84:60:a2:01:ac:32:d3:0f:bc:91:3b: 99:7b:4b:05:b3:c2:ad:be:42:8d:4d:3a:5e:c9:38: 69:ff:ed:80:84:b5:3a:77:99:08:84:9b:20:28:d4: 25:41:4a:75:99:e0:8b:03:86:4f:78:df:b1:77:ae: 6f:46:b0:6d:c8:7e:f4:1f:85:d4:d9:5e:72:b9:d6: c1:8b:09:90:d9:b5:df:02:86:ec:a7:6b:0a:70:13: cb:c2:1a:c3:5d:f9:81:59:6e:67:93:db:33:6b:e6: d6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EC:A8:5F:27:69:65:BC:FB:AA:40:B6:54:0E:73:6C:00:75:55:65 X509v3 Authority Key Identifier: keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1d:2e:f9:cf:7d:a9:34:93:71:ff:6d:07:66:b1:01:3d:58: aa:f5:5c:02:cd:27:4c:f1:73:cc:02:3e:26:4e:ab:d9:c3:69: ff:a0:f1:78:81:b8:1e:18:b8:bc:05:01:9e:f5:f3:c4:93:18: e1:94:c6:1d:2e:ac:16:dd:ad:37:fc:f1:fd:8f:1f:f2:ba:d5: 73:5b:a3:46:92:23:ff:4e:7e:6c:2d:8e:ab:36:5b:8a:7c:ed: a2:64:a3:e4:17:62:87:ad:eb:20:16:65:96:61:6b:e4:f5:7c: d5:b7:55:2a:26:a2:54:e5:39:89:2f:b0:23:00:e6:c1:b6:d0: c6:e0:21:8a:85:77:37:15:7c:77:cd:96:6f:21:f4:15:e0:74: 42:7e:2c:3e:f2:9b:28:ff:d3:3d:6a:e0:7f:b7:2f:ed:58:3c: a1:f2:a7:86:66:8b:74:a3:e1:f4:48:c4:e0:49:fb:f6:cd:40: d9:43:bc:fb:89:2a:5d:b7:9a:2b:9f:ad:8d:43:41:4f:df:de: b5:2b:03:2b:39:be:2c:6d:56:40:cb:de:81:94:43:e5:ca:8b: 43:76:af:93:50:a1:6e:b8:e7:50:bf:43:d8:5f:fb:da:db:1f: d9:ec:9d:f0:af:fc:07:a3:43:27:89:64:92:47:df:79:6f:0c: 8a:aa:ab:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzY3NTExMC8GA1UEBRMoQ0EyNDU4MzEwNkZCNTQ5ODRDNzgxNTg5NUUzRTE5RURG NzlDOThCRjAeFw0yNDA5MTUwOTQ3MDlaFw0yNDA5MjIwOTQ3MDlaMBgxFjAUBgNV BAMTDTY2ZTZhZDFlLTY5N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4xB2VzRmD2/wHnNcB2ChLjRGKLMkr6IbbyNqCGrWfxQ5jGAy3lCPa2Lx1ft9X MXTasNyMhNkUfGYWwPtVhAPHGTVFmLmn6AyAjOXIjoIDV8paaKcu0EDefFsfcfZg jZY6BxX1eWa3drMHwHkaRls/uhgQ1KJFraYVeQtQU3fKhdHmb8RecawFPwZtYLgo 4C4GTmBwnxjcMUCEYKIBrDLTD7yRO5l7SwWzwq2+Qo1NOl7JOGn/7YCEtTp3mQiE myAo1CVBSnWZ4IsDhk9437F3rm9GsG3IfvQfhdTZXnK51sGLCZDZtd8Chuynawpw E8vCGsNd+YFZbmeT2zNr5tZXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkuyoXydp Zbz7qkC2VA5zbAB1VWUwHwYDVR0jBBgwFoAUyiRYMQb7VJhMeBWJXj4Z7fecmL8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNjc1LzkxNUEyODY2MEVC MzExRUY4OUNBRDEyQ0M0RjlBRTAyL3lpUllNUWI3VkpoTWVCV0pYajRaN2ZlY21M OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWlSWU1RYjdWSmhNZUJXSlhqNFo3ZmVjbUw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz Njc1LzkxNUEyODY2MEVCMzExRUY4OUNBRDEyQ0M0RjlBRTAyL3lpUllNUWI3Vkpo TWVCV0pYajRaN2ZlY21MOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD8dLvnPfak0k3H/bQdmsQE9WKr1XALNJ0zxc8wCPiZOq9nDaf+g8XiB uB4YuLwFAZ7188STGOGUxh0urBbdrTf88f2PH/K61XNbo0aSI/9Ofmwtjqs2W4p8 7aJko+QXYoet6yAWZZZha+T1fNW3VSomolTlOYkvsCMA5sG20MbgIYqFdzcVfHfN lm8h9BXgdEJ+LD7ymyj/0z1q4H+3L+1YPKHyp4Zmi3Sj4fRIxOBJ+/bNQNlDvPuJ Kl23miufrY1DQU/f3rUrAys5vixtVkDL3oGUQ+XKi0N2r5NQoW6451C/Q9hf+9rb H9nsnfCv/AejQyeJZJJH33lvDIqqq5c= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:18 2024 by rpki-client on console-ams.rpki-client.org