$ rpki-client -vvf rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft File: yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft (raw, json) Hash identifier: vCTyXqQLJPAI8P7NoROxNd65HHDxLDdqNya7UwPJrkI= Subject key identifier: DC:64:66:E4:A2:14:26:63:90:44:DE:18:3C:EA:34:14:1C:BE:95:56 Authority key identifier: C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A Certificate issuer: /CN=A915B1BE/serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft Manifest number: 89 Signing time: Sat 23 Nov 2024 04:37:55 +0000 Manifest this update: Sat 23 Nov 2024 04:37:55 +0000 Manifest next update: Sat 30 Nov 2024 04:37:55 +0000 Files and hashes: 1: yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl (hash: l0T8M3NnmAE+HzwVW72ezlqZB9vNG5UfdU65Rw+8NWU=) 2: F16DD2B0E0FB11EE8552F941C4F9AE02.roa (hash: 37wbWCnWXU/ELyPlkoOPoh4JCAJyFhcsdRvKDXlbhrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B1BE/serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A Validity Not Before: Nov 23 04:37:55 2024 GMT Not After : Nov 30 04:37:55 2024 GMT Subject: CN=67415c23-6855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:50:fc:05:04:f7:6d:70:28:56:f0:ac:0a: ea:5a:9e:bb:1b:2a:d6:d0:28:ae:47:d3:f9:1b:f4: b8:d1:e0:92:d3:39:e8:fc:52:3d:13:67:14:cf:fa: 34:fd:89:52:50:8a:db:46:ff:56:8a:99:c6:44:c7: 17:84:15:ae:4a:e9:97:ac:7d:94:a0:fe:eb:2e:40: ca:3c:80:58:28:05:e9:16:c8:4e:0f:2f:d4:e7:dd: 31:0b:f3:98:69:7a:cc:c0:1c:9c:c7:cb:df:21:27: 9b:6f:53:3d:cb:96:33:d0:29:a6:39:f2:fc:5d:0a: 25:76:15:a9:29:6e:3c:25:e2:b6:15:69:a8:7a:2d: 53:f7:be:54:cf:93:cf:2e:03:0b:1c:d6:ad:ec:c9: b5:31:d9:f1:71:0d:11:56:d8:49:aa:b8:e8:08:78: 92:6b:a0:1f:00:72:68:fb:3d:cd:10:53:8a:ef:a6: 36:2f:e2:e7:9b:28:3c:f3:d7:f3:df:da:17:65:b4: f6:b7:01:09:c1:34:ad:5c:98:71:e8:52:f8:73:e9: 4a:98:e8:28:34:9e:43:e2:30:cd:c9:de:08:37:a2: 95:4a:cb:35:b0:f7:0d:75:ee:ac:9c:a2:a2:45:89: cf:c8:4e:86:e1:b7:45:46:2d:8b:8f:08:02:47:f9: 6d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:64:66:E4:A2:14:26:63:90:44:DE:18:3C:EA:34:14:1C:BE:95:56 X509v3 Authority Key Identifier: keyid:C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:43:0a:ee:75:54:91:37:6a:51:a8:5e:45:32:9e:f1:31:98: 39:66:e9:3f:36:48:f0:3b:4a:2e:97:9c:6e:13:e3:02:6f:4f: 7d:0e:36:e4:e9:46:ce:ab:b5:4b:00:2d:8d:34:db:a4:1d:5c: 84:b5:d8:a3:94:93:08:36:85:79:ae:60:a9:c4:26:6b:09:3f: 84:36:ba:83:7c:ad:96:c7:97:7a:68:2f:2f:2d:c0:d9:37:66: 91:14:c0:e5:b8:af:01:0d:ea:30:01:0b:a3:38:f7:b6:84:47: 44:89:18:4c:82:e7:1d:e7:e1:b9:af:29:4a:57:35:40:18:1f: d5:68:28:bd:92:b8:0e:27:55:2d:dc:83:d5:b4:d4:d6:72:fd: cf:8e:aa:34:d4:2a:73:53:d9:3c:7a:82:11:fc:df:e0:5f:f3: 4e:92:d9:bd:10:7b:38:84:7b:c5:37:d2:42:33:26:67:87:b6: 8b:39:cb:a4:94:69:a1:0f:c7:5d:a0:b4:0d:47:42:a2:38:6c: ec:bf:4e:7f:a0:8a:a8:c8:73:c9:81:d9:a9:fa:9a:af:f6:0a: 6d:a9:23:b8:c4:ab:ba:f1:6f:c6:9a:fa:66:5c:37:43:46:fc: 77:b8:8c:d6:39:65:73:bf:8c:6b:ff:fb:83:6f:a6:73:ec:3c: e9:eb:0c:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIxQkUxMTAvBgNVBAUTKEM5NThGRDJBQkY4REExRjQ4OTE1MkNFNjUxQTQwODk0 NTdDRDE3NkEwHhcNMjQxMTIzMDQzNzU1WhcNMjQxMTMwMDQzNzU1WjAYMRYwFAYD VQQDEw02NzQxNWMyMy02ODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVJQ/AUE921wKFbwrArqWp67GyrW0CiuR9P5G/S40eCS0zno/FI9E2cUz/o0 /YlSUIrbRv9WipnGRMcXhBWuSumXrH2UoP7rLkDKPIBYKAXpFshODy/U590xC/OY aXrMwBycx8vfISebb1M9y5Yz0CmmOfL8XQoldhWpKW48JeK2FWmoei1T975Uz5PP LgMLHNat7Mm1MdnxcQ0RVthJqrjoCHiSa6AfAHJo+z3NEFOK76Y2L+Lnmyg889fz 39oXZbT2twEJwTStXJhx6FL4c+lKmOgoNJ5D4jDNyd4IN6KVSss1sPcNde6snKKi RYnPyE6G4bdFRi2LjwgCR/ltSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxkZuSi FCZjkETeGDzqNBQcvpVWMB8GA1UdIwQYMBaAFMlY/Sq/jaH0iRUs5lGkCJRXzRdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjFCRS8zOTk5NTM0NEUw RkIxMUVFODc4RjBENDBDNEY5QUUwMi95Vmo5S3ItTm9mU0pGU3ptVWFRSWxGZk5G Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWajlLci1Ob2ZTSkZTem1VYVFJbEZmTkYyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjFCRS8zOTk5NTM0NEUwRkIxMUVFODc4RjBENDBDNEY5QUUwMi95Vmo5S3ItTm9m U0pGU3ptVWFRSWxGZk5GMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjQwrudVSRN2pRqF5FMp7xMZg5Zuk/NkjwO0oul5xuE+MCb099Djbk 6UbOq7VLAC2NNNukHVyEtdijlJMINoV5rmCpxCZrCT+ENrqDfK2Wx5d6aC8vLcDZ N2aRFMDluK8BDeowAQujOPe2hEdEiRhMgucd5+G5rylKVzVAGB/VaCi9krgOJ1Ut 3IPVtNTWcv3Pjqo01CpzU9k8eoIR/N/gX/NOktm9EHs4hHvFN9JCMyZnh7aLOcuk lGmhD8ddoLQNR0KiOGzsv05/oIqoyHPJgdmp+pqv9gptqSO4xKu68W/GmvpmXDdD Rvx3uIzWOWVzv4xr//uDb6Zz7Dzp6wx+ -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:07 2024 by rpki-client on console-ams.rpki-client.org