$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json) Hash identifier: x7vpQAYoD7CNsnJNMV5Y9iuhx95da6nqh2vJYu97v+4= Subject key identifier: C5:99:EB:FF:15:0E:C5:CA:A4:A2:0D:95:13:A2:15:12:3C:7A:3A:7A Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft Manifest number: 70 Signing time: Thu 21 Nov 2024 04:56:57 +0000 Manifest this update: Thu 21 Nov 2024 04:56:57 +0000 Manifest next update: Thu 28 Nov 2024 04:56:57 +0000 Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: narBPXnVqtQkX0YFNw3MwuU5og89Q9ymN3AEOLT4LHk=) 2: 0A2301B2FCEB11EEBA59DC2BC4F9AE02.roa (hash: /AyQMqWZ57bgXPGZC6xfQU7bxlqUkG6/f7HGBOIGwIM=) 3: B65959F8FC7411EE841CC07AC4F9AE02.roa (hash: uHLbpnlfbFwZRtw8r9GbeL/ZYB4FyowNXtoVbmMIJOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Validity Not Before: Nov 21 04:56:57 2024 GMT Not After : Nov 28 04:56:57 2024 GMT Subject: CN=673ebd99-becf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b6:85:80:df:93:42:67:b2:83:a2:2f:c9:37: b2:9b:88:52:18:fe:93:42:52:26:f7:cc:0a:aa:76: 1c:41:c3:0a:03:61:14:da:59:bc:b8:dd:9f:48:c6: e3:6e:aa:41:dc:e4:48:e1:3b:90:2f:a6:54:41:51: 3d:35:62:5b:e6:43:98:0b:ff:cd:25:16:07:34:63: 63:ea:45:79:33:d3:e7:f6:d7:1a:65:76:1c:83:5d: ac:90:57:4a:9d:be:ce:01:59:b5:ac:46:72:28:fd: 68:eb:3d:71:a2:d3:6b:1d:11:43:ca:ca:22:92:da: c2:ba:aa:b7:5c:a3:54:a9:e1:60:44:1e:87:bd:87: 18:64:a0:67:b6:5c:9e:3b:c7:1a:14:d0:7a:2b:98: 35:95:98:42:de:59:4c:30:1c:c8:64:1e:95:05:e4: 67:35:5b:32:07:87:84:3f:c1:fe:98:e7:9b:82:56: 50:0e:ba:95:ab:ca:3a:c6:04:4a:65:c9:b3:b5:32: 05:b9:12:23:c3:3b:84:d1:c4:b4:ae:06:b2:a0:2e: 90:65:e5:e6:5a:75:82:c5:f8:32:ac:e8:a2:e3:51: 97:0c:0e:9b:93:85:b4:e4:f6:f3:60:13:91:0a:96: c3:a1:bb:44:ac:69:51:35:0d:4f:3c:04:af:44:3e: 27:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:99:EB:FF:15:0E:C5:CA:A4:A2:0D:95:13:A2:15:12:3C:7A:3A:7A X509v3 Authority Key Identifier: keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:7f:aa:83:2f:28:00:da:27:18:69:fb:fe:b5:50:10:28:5e: ec:35:98:b0:f0:5b:2b:a5:13:10:0f:07:1a:cd:b6:74:4a:d2: a9:75:9e:52:5e:5e:cf:8d:3e:3a:a2:01:fb:12:20:42:67:d2: 00:cd:5d:01:cb:9d:5b:a6:55:be:4f:c5:15:9c:21:d1:eb:b9: 57:d1:c7:4c:0c:22:df:ed:cc:ea:61:2d:a9:9b:bc:c8:7b:e4: 93:04:51:8f:5b:2c:0b:17:e5:c1:8c:f0:a0:a0:79:1f:9d:f6: 1b:98:2c:a8:3a:38:0e:77:4a:2d:b7:6d:c2:eb:90:ba:95:0c: 40:a5:e9:90:0b:b1:b4:2c:ba:85:48:01:36:03:d2:bf:38:65: 2b:3b:a9:f9:3a:84:57:1c:b0:34:a1:75:68:99:56:f1:df:fd: 71:ee:e7:40:e1:9b:4e:e4:6e:cb:ca:e7:ce:8e:79:58:32:f2: 27:d7:94:03:de:1b:08:64:d4:84:9a:41:b0:7c:bd:ab:eb:72: 8b:8d:d0:41:18:ea:e7:c6:a8:59:85:c3:ea:dc:76:90:9f:c6: 35:ee:b0:0a:9f:1f:ec:61:2e:48:21:97:71:c6:fc:13:0f:a9: e4:52:36:bf:7f:7d:ed:60:39:65:43:b0:b0:a4:de:b8:1e:8d: 0e:f8:5b:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTA5ODExMC8GA1UEBRMoNjAzMkY2M0ZEMjYxNjgxQTQwRjczMEI5Nzg3MjUxRTYz MzI4Q0Q2RTAeFw0yNDExMjEwNDU2NTdaFw0yNDExMjgwNDU2NTdaMBgxFjAUBgNV BAMTDTY3M2ViZDk5LWJlY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYtoWA35NCZ7KDoi/JN7KbiFIY/pNCUib3zAqqdhxBwwoDYRTaWby43Z9IxuNu qkHc5EjhO5AvplRBUT01YlvmQ5gL/80lFgc0Y2PqRXkz0+f21xpldhyDXayQV0qd vs4BWbWsRnIo/WjrPXGi02sdEUPKyiKS2sK6qrdco1Sp4WBEHoe9hxhkoGe2XJ47 xxoU0HormDWVmELeWUwwHMhkHpUF5Gc1WzIHh4Q/wf6Y55uCVlAOupWryjrGBEpl ybO1MgW5EiPDO4TRxLSuBrKgLpBl5eZadYLF+DKs6KLjUZcMDpuThbTk9vNgE5EK lsOhu0SsaVE1DU88BK9EPidFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxZnr/xUO xcqkog2VE6IVEjx6OnowHwYDVR0jBBgwFoAUYDL2P9JhaBpA9zC5eHJR5jMozW4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1MDk4L0IyQjFBMkI4RkM3 MTExRUVCRENDNEI1M0M0RjlBRTAyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pX NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWURMMlA5SmhhQnBBOXpDNWVISlI1ak1velc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 MDk4L0IyQjFBMkI4RkM3MTExRUVCRENDNEI1M0M0RjlBRTAyL1lETDJQOUpoYUJw QTl6QzVlSEpSNWpNb3pXNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALp/qoMvKADaJxhp+/61UBAoXuw1mLDwWyulExAPBxrNtnRK0ql1nlJe Xs+NPjqiAfsSIEJn0gDNXQHLnVumVb5PxRWcIdHruVfRx0wMIt/tzOphLambvMh7 5JMEUY9bLAsX5cGM8KCgeR+d9huYLKg6OA53Si23bcLrkLqVDECl6ZALsbQsuoVI ATYD0r84ZSs7qfk6hFccsDShdWiZVvHf/XHu50Dhm07kbsvK586OeVgy8ifXlAPe Gwhk1ISaQbB8vavrcouN0EEY6ufGqFmFw+rcdpCfxjXusAqfH+xhLkghl3HG/BMP qeRSNr9/fe1gOWVDsLCk3rgejQ74W1k= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org