$ rpki-client -vvf rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft File: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft (raw, json) Hash identifier: AqyRKYZdfDgTqYzp1lB8ofBmaSouTlTqxyABDFSzF3M= Subject key identifier: F3:E9:6E:8B:C2:71:72:FA:EC:B6:26:1B:90:7F:91:ED:0D:B3:07:5E Authority key identifier: CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14 Certificate issuer: /CN=A915C645/serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft Manifest number: 22 Signing time: Sat 23 Nov 2024 05:49:07 +0000 Manifest this update: Sat 23 Nov 2024 05:49:07 +0000 Manifest next update: Sat 30 Nov 2024 05:49:07 +0000 Files and hashes: 1: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl (hash: L7QEC8OKm2t64bH55ebw/gEeHd638JleUGNKOXm7Xgc=) 2: 86998830806F11EF91F9E57CC4F9AE02.roa (hash: Zz54eu1g+teN0SG9WdSOFE2h52pNF1dRY2pmZ9i/J4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C645/serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814 Validity Not Before: Nov 23 05:49:07 2024 GMT Not After : Nov 30 05:49:07 2024 GMT Subject: CN=67416cd3-09ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:93:58:f8:dc:76:4b:df:55:a7:36:41:0b:9e: cb:f6:4e:c7:ec:22:f9:fe:2d:45:06:7e:aa:ab:cf: 23:2b:14:ba:8e:17:e4:03:0c:11:4d:41:a4:b3:63: 62:69:d6:d9:d2:ee:0f:49:74:ee:27:8e:6b:ba:28: 68:5c:9e:3c:b0:04:aa:28:15:1b:45:14:94:19:7a: e8:29:11:06:bd:fd:03:50:64:0d:48:ef:e7:24:5b: 73:31:88:a4:32:0f:8a:79:98:5d:a1:c9:d5:f6:2b: 4b:85:7e:f9:5f:03:95:02:28:52:fa:2d:74:12:8e: a4:92:77:93:83:a1:d7:03:e5:26:0a:5d:a2:d3:54: 42:7b:2e:76:96:a4:b5:a4:e6:aa:ef:99:bd:b0:34: f7:66:1d:3a:b1:a9:f2:70:18:77:4d:e2:7a:b1:c9: b7:a1:6d:f7:f2:5f:eb:83:72:e9:71:1a:6d:29:c9: 20:64:3b:ce:84:47:07:68:f2:78:17:ac:2b:6a:70: 0d:fd:ea:ee:cd:2a:5e:b0:89:8e:22:d8:af:09:5a: 00:36:cb:0f:29:6f:01:5b:6f:35:26:46:60:61:b1: dd:50:e1:4b:1d:98:fd:ab:6b:ce:ee:d7:36:4c:47: 72:c6:78:61:0a:b4:7d:19:04:e2:22:a6:49:cc:73: 85:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E9:6E:8B:C2:71:72:FA:EC:B6:26:1B:90:7F:91:ED:0D:B3:07:5E X509v3 Authority Key Identifier: keyid:CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:d8:f7:fd:10:59:c8:f2:b6:97:9e:8b:e6:d3:17:30:29:28: db:fb:ef:15:a1:e6:44:e2:d4:f0:9e:80:d0:c2:fe:55:5b:c9: 8a:d4:03:83:76:c5:86:02:f9:a3:9e:68:02:3a:ff:d3:7f:10: 4c:d7:e1:a0:12:af:7a:ec:64:70:90:f6:dc:c5:b7:cc:eb:97: 4e:e6:64:ef:de:18:5c:1e:c4:6d:1f:52:e8:72:25:fc:9d:f8: 9b:17:39:20:83:9f:ba:f5:29:a1:d6:1d:3d:0b:31:c1:ce:d3: e3:00:45:21:9e:d3:e0:4e:26:a4:51:aa:11:e4:35:42:62:f4: 9b:fc:25:2f:40:ea:45:d1:7b:b5:5c:ad:ef:6b:3d:9d:08:7a: 07:16:31:b8:c2:6c:b1:f0:f9:f5:56:72:ba:dc:39:da:b9:3f: 66:5e:75:26:67:e1:2c:7e:f4:b4:58:f5:28:41:e6:33:c3:c9: fe:66:33:77:d8:f4:43:e9:23:3e:0e:43:b6:5f:83:f5:0e:3f: 83:ae:c0:db:bf:ba:0a:22:26:b4:03:ab:96:94:ca:45:02:15: 12:41:19:ff:c9:7f:ef:8d:72:f8:97:a8:4a:39:a8:ea:26:5b: d4:42:e2:76:fc:43:2b:f6:ec:ca:65:09:23:0c:a4:4e:88:42: 52:9f:ec:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QzY0NTExMC8GA1UEBRMoQ0IwQzMzMEUzODM3OTQ4RkU1RERGQTYwNDczMjc3NUQ0 QjBDRjgxNDAeFw0yNDExMjMwNTQ5MDdaFw0yNDExMzAwNTQ5MDdaMBgxFjAUBgNV BAMTDTY3NDE2Y2QzLTA5ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjk1j43HZL31WnNkELnsv2TsfsIvn+LUUGfqqrzyMrFLqOF+QDDBFNQaSzY2Jp 1tnS7g9JdO4njmu6KGhcnjywBKooFRtFFJQZeugpEQa9/QNQZA1I7+ckW3MxiKQy D4p5mF2hydX2K0uFfvlfA5UCKFL6LXQSjqSSd5ODodcD5SYKXaLTVEJ7LnaWpLWk 5qrvmb2wNPdmHTqxqfJwGHdN4nqxybehbffyX+uDculxGm0pySBkO86ERwdo8ngX rCtqcA396u7NKl6wiY4i2K8JWgA2yw8pbwFbbzUmRmBhsd1Q4UsdmP2ra87u1zZM R3LGeGEKtH0ZBOIipknMc4VDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8+lui8Jx cvrstiYbkH+R7Q2zB14wHwYDVR0jBBgwFoAUywwzDjg3lI/l3fpgRzJ3XUsM+BQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDNjQ1LzFFRUVCRDIyODA2 RjExRUY4QjQ1RDc3OUM0RjlBRTAyL3l3d3pEamczbElfbDNmcGdSekozWFVzTS1C US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveXd3ekRqZzNsSV9sM2ZwZ1J6SjNYVXNNLUJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD NjQ1LzFFRUVCRDIyODA2RjExRUY4QjQ1RDc3OUM0RjlBRTAyL3l3d3pEamczbElf bDNmcGdSekozWFVzTS1CUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL7Y9/0QWcjytpeei+bTFzApKNv77xWh5kTi1PCegNDC/lVbyYrUA4N2 xYYC+aOeaAI6/9N/EEzX4aASr3rsZHCQ9tzFt8zrl07mZO/eGFwexG0fUuhyJfyd +JsXOSCDn7r1KaHWHT0LMcHO0+MARSGe0+BOJqRRqhHkNUJi9Jv8JS9A6kXRe7Vc re9rPZ0IegcWMbjCbLHw+fVWcrrcOdq5P2ZedSZn4Sx+9LRY9ShB5jPDyf5mM3fY 9EPpIz4OQ7Zfg/UOP4OuwNu/ugoiJrQDq5aUykUCFRJBGf/Jf++NcviXqEo5qOom W9RC4nb8Qyv27MplCSMMpE6IQlKf7GY= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org