$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json) Hash identifier: zZugLUxQb8Wldd9s2HTDih4fGBKSkRXa4Y2JF88M9+g= Subject key identifier: B6:43:47:43:9D:10:03:80:9F:83:FD:ED:80:3E:CA:F7:1A:88:49:FB Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Certificate serial: 1B04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft Manifest number: 1AFB Signing time: Fri 22 Nov 2024 16:18:18 +0000 Manifest this update: Fri 22 Nov 2024 16:18:17 +0000 Manifest next update: Fri 29 Nov 2024 16:18:17 +0000 Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: qqCnMGTgoUs6maym7mZ+IMD3ZsoWYF0xjI/LCeMhcUM=) 2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: vUCWQOdb7qjvOhdcg4SHMXTM8oTjFBVRvGp114pmqGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6916 (0x1b04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Validity Not Before: Nov 22 16:18:17 2024 GMT Not After : Nov 29 16:18:17 2024 GMT Subject: CN=6740aec9-b3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ed:f0:5a:6d:34:0d:48:f3:e8:72:3a:fe:bb: 19:9b:1a:92:81:50:3e:fc:54:c3:f5:0a:2f:0a:00: d5:4c:73:06:c6:44:e5:78:b6:42:51:e8:26:88:43: df:00:3f:06:74:c9:85:e1:f4:e4:9b:8a:5e:33:36: 98:fd:da:42:ca:c9:fb:a3:38:00:4d:aa:42:6d:f2: e8:1b:1e:c0:bf:15:9f:22:4f:50:b5:d9:87:a3:a2: 48:53:c4:49:d8:9d:c0:ee:de:22:a9:d8:06:8b:cd: c3:d3:9c:3a:19:f0:fe:0b:03:14:8a:e1:78:96:8e: 57:64:b5:26:fe:13:bf:ed:a9:3e:5a:0d:91:b3:c1: 24:3b:bc:d9:4b:4d:d9:4e:a1:2b:a8:3a:7e:5e:ba: 54:e6:67:1d:69:31:f5:8a:f5:d2:0a:97:cf:73:cb: 40:47:18:da:69:a5:53:93:d6:83:fd:ed:e9:33:ec: 4d:bc:51:18:a0:3b:6f:21:26:c4:bf:42:4c:e7:6b: ae:01:45:70:32:ac:5f:66:53:fb:a4:54:9d:69:8b: ca:e7:fa:9e:e1:70:70:e6:4c:46:e3:c0:3b:58:41: 8c:6b:0f:71:d7:e1:97:7f:ae:a9:af:0d:75:9f:e0: b9:e1:ee:ac:96:75:60:52:71:12:32:ea:04:e3:4f: af:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:43:47:43:9D:10:03:80:9F:83:FD:ED:80:3E:CA:F7:1A:88:49:FB X509v3 Authority Key Identifier: keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:e8:92:db:1c:a1:8c:22:f3:51:d7:05:46:5e:f9:38:31:3a: c1:a0:26:46:cb:ba:a5:f9:96:70:a3:d9:61:1b:db:e2:8c:04: 6a:f2:1b:51:f4:c6:a8:a4:5e:ca:37:c8:36:58:27:66:39:6a: ef:95:9a:d6:85:65:59:52:13:f8:b7:22:ad:53:2f:f5:7b:f1: 09:44:16:11:ec:6b:cb:e0:98:74:58:8a:be:53:6b:f9:d0:9a: bc:7d:bc:67:96:63:ac:b4:04:31:7d:2d:0a:39:6e:d5:76:f0: 24:f7:ee:87:dd:eb:9b:f9:56:d5:37:15:02:dc:86:00:c0:a8: 1f:5e:a1:31:87:e6:68:96:28:e7:36:dc:7a:e3:49:ea:b2:04: 2a:fa:09:d8:b0:61:f0:23:f7:d8:7e:6f:23:84:9b:c7:38:49: 54:df:49:77:91:70:4d:44:f5:8a:9f:3a:5a:9e:db:e8:90:82: 1b:3b:5a:7c:7d:8c:ea:5b:76:06:69:ac:52:6c:09:34:39:d2: 5b:8b:1d:9f:73:fe:22:f0:5e:0c:bd:67:10:16:0f:1c:4a:46: 2f:bf:2f:79:97:d7:88:3b:bb:b5:fb:16:14:4d:e6:4e:44:bc: 70:fc:77:2d:98:c2:79:86:2f:37:cb:39:0d:cf:b2:3d:38:35: 7f:b9:a9:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD M0Y1MzAyQTgwHhcNMjQxMTIyMTYxODE3WhcNMjQxMTI5MTYxODE3WjAYMRYwFAYD VQQDEw02NzQwYWVjOS1iM2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAme3wWm00DUjz6HI6/rsZmxqSgVA+/FTD9QovCgDVTHMGxkTleLZCUegmiEPf AD8GdMmF4fTkm4peMzaY/dpCysn7ozgATapCbfLoGx7AvxWfIk9QtdmHo6JIU8RJ 2J3A7t4iqdgGi83D05w6GfD+CwMUiuF4lo5XZLUm/hO/7ak+Wg2Rs8EkO7zZS03Z TqErqDp+XrpU5mcdaTH1ivXSCpfPc8tARxjaaaVTk9aD/e3pM+xNvFEYoDtvISbE v0JM52uuAUVwMqxfZlP7pFSdaYvK5/qe4XBw5kxG48A7WEGMaw9x1+GXf66prw11 n+C54e6slnVgUnESMuoE40+vYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZDR0Od EAOAn4P97YA+yvcaiEn7MB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn LVloUHBPOE55bWJEOVRBcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx6JLbHKGMIvNR1wVGXvk4MTrBoCZGy7ql+ZZwo9lhG9vijARq8htR 9MaopF7KN8g2WCdmOWrvlZrWhWVZUhP4tyKtUy/1e/EJRBYR7GvL4Jh0WIq+U2v5 0Jq8fbxnlmOstAQxfS0KOW7VdvAk9+6H3eub+VbVNxUC3IYAwKgfXqExh+Zolijn Ntx640nqsgQq+gnYsGHwI/fYfm8jhJvHOElU30l3kXBNRPWKnzpantvokIIbO1p8 fYzqW3YGaaxSbAk0OdJbix2fc/4i8F4MvWcQFg8cSkYvvy95l9eIO7u1+xYUTeZO RLxw/HctmMJ5hi83yzkNz7I9ODV/ualV -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:46 2024 by rpki-client on console-fra.rpki-client.org