$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft File: vY9TgeGI5FgPskcsJxoFQp4tXCI.mft (raw, json) Hash identifier: iIKSYDR42pSpgIEPVJ71vTC5Ec4KkE0q20rGh8I/SzY= Subject key identifier: F4:51:5C:B0:C2:D5:01:E1:BF:08:F0:71:64:25:2E:97:7E:22:BF:84 Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 Certificate issuer: /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Certificate serial: 1A9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft Manifest number: 1A91 Signing time: Fri 22 Nov 2024 16:20:07 +0000 Manifest this update: Fri 22 Nov 2024 16:20:06 +0000 Manifest next update: Fri 29 Nov 2024 16:20:06 +0000 Files and hashes: 1: vY9TgeGI5FgPskcsJxoFQp4tXCI.crl (hash: DqsBvdydsHySPKgwX/zmHhr1PpI7jkflZwL5oEhu198=) 2: 59029A32233A11E78D48837AC4F9AE02.roa (hash: fZ4rzQw+k1I7EBhPTcblakdeeuKhaVvBsWtldnvXI0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6811 (0x1a9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Validity Not Before: Nov 22 16:20:06 2024 GMT Not After : Nov 29 16:20:06 2024 GMT Subject: CN=6740af36-502e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:21:13:64:1f:c6:8f:d7:1a:58:e4:2a:12:af: 42:05:3c:f5:5b:42:dc:2e:77:56:5f:16:5d:a3:33: e2:92:44:9f:76:21:ea:fd:5a:19:2f:98:af:8b:a1: b3:cf:6c:55:40:01:b4:9a:0b:f6:de:62:e8:91:19: ac:f3:aa:90:cc:24:e1:a0:21:5f:9f:5d:e0:39:a7: fa:e5:9b:8c:22:d4:44:df:b3:5d:30:a8:67:ec:87: f5:98:ea:c6:ff:5c:0d:e3:f7:6d:4d:73:03:8e:0c: 5b:f3:03:ba:fe:25:46:1d:41:27:15:3c:c2:cd:a4: 16:59:de:59:06:9e:29:8a:ea:b1:5a:30:6c:9f:d5: 78:39:81:88:70:ec:70:ca:91:f8:61:0b:c9:11:c8: 50:d1:c8:29:11:08:12:b1:cc:6c:5e:0b:ad:60:de: a3:22:ef:33:a3:49:d2:d9:02:9e:4c:10:56:8a:67: c2:41:b9:ec:f7:20:bf:e3:85:2f:ce:27:d9:66:54: 3b:ee:90:89:99:f2:6d:9f:a1:c7:99:cf:0e:c2:80: 78:e3:cc:9b:a5:e6:26:c3:74:4f:99:54:22:ff:6f: 5a:5a:98:96:17:de:2b:46:c2:7a:56:0a:1b:dc:4b: bf:cb:3a:40:d4:dc:1a:23:ff:99:53:e9:00:12:8b: ee:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:51:5C:B0:C2:D5:01:E1:BF:08:F0:71:64:25:2E:97:7E:22:BF:84 X509v3 Authority Key Identifier: keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:1e:50:f3:ee:97:fe:50:d2:7f:19:71:c3:bd:2e:72:de:a2: 59:78:03:af:9b:1d:7e:81:6c:34:b6:e2:36:18:5e:82:8d:59: 30:a1:28:f2:7d:e4:ad:45:61:d7:2b:c2:09:5b:90:e1:b3:be: ff:f4:d7:bc:2c:0b:42:4c:7d:c4:00:8e:cb:f2:3b:6f:5f:50: 4a:ed:2f:1c:4c:da:8b:ba:32:53:cc:19:82:b8:fe:09:fc:ab: d1:d4:1f:da:31:f0:7d:ed:9f:cf:b2:b6:23:bb:8d:36:84:a4: 22:73:8d:13:9e:da:8c:16:35:2e:7f:6f:f0:5b:dc:37:81:36: 2f:f5:58:4f:64:ac:cc:ee:bc:99:11:ef:41:12:6e:21:ce:17: 86:cc:f1:64:80:37:55:21:ce:32:8d:1d:ca:d3:33:40:f5:2d: 8c:14:f4:82:52:c1:ec:94:dd:c9:b0:92:d5:78:d6:18:18:e0: 17:18:68:5b:a1:af:78:47:94:30:77:dd:67:4a:37:24:ad:af: 3a:ab:b3:40:53:32:1c:1f:8b:a6:0e:cd:f8:06:08:67:b7:84: 1f:57:5b:3d:e7:2e:d1:38:2b:26:e4:23:6c:86:03:c5:21:39: b7:f8:40:fe:93:b6:af:70:85:c6:4b:08:20:3d:83:f9:2c:d2: 59:e3:89:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NkQxMTAvBgNVBAUTKEJEOEY1MzgxRTE4OEU0NTgwRkIyNDcyQzI3MUEwNTQy OUUyRDVDMjIwHhcNMjQxMTIyMTYyMDA2WhcNMjQxMTI5MTYyMDA2WjAYMRYwFAYD VQQDEw02NzQwYWYzNi01MDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyETZB/Gj9caWOQqEq9CBTz1W0LcLndWXxZdozPikkSfdiHq/VoZL5ivi6Gz z2xVQAG0mgv23mLokRms86qQzCThoCFfn13gOaf65ZuMItRE37NdMKhn7If1mOrG /1wN4/dtTXMDjgxb8wO6/iVGHUEnFTzCzaQWWd5ZBp4piuqxWjBsn9V4OYGIcOxw ypH4YQvJEchQ0cgpEQgSscxsXgutYN6jIu8zo0nS2QKeTBBWimfCQbns9yC/44Uv zifZZlQ77pCJmfJtn6HHmc8OwoB448ybpeYmw3RPmVQi/29aWpiWF94rRsJ6Vgob 3Eu/yzpA1NwaI/+ZU+kAEovuzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRRXLDC 1QHhvwjwcWQlLpd+Ir+EMB8GA1UdIwQYMBaAFL2PU4HhiORYD7JHLCcaBUKeLVwi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY2RC8xRUIwOTI1NDIz MzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVGZ1Bza2NzSnhvRlFwNHRY Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZOVRnZUdJNUZnUHNrY3NKeG9GUXA0dFhDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY2RC8xRUIwOTI1NDIzMzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVG Z1Bza2NzSnhvRlFwNHRYQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFHlDz7pf+UNJ/GXHDvS5y3qJZeAOvmx1+gWw0tuI2GF6CjVkwoSjy feStRWHXK8IJW5Dhs77/9Ne8LAtCTH3EAI7L8jtvX1BK7S8cTNqLujJTzBmCuP4J /KvR1B/aMfB97Z/PsrYju402hKQic40TntqMFjUuf2/wW9w3gTYv9VhPZKzM7ryZ Ee9BEm4hzheGzPFkgDdVIc4yjR3K0zNA9S2MFPSCUsHslN3JsJLVeNYYGOAXGGhb oa94R5Qwd91nSjckra86q7NAUzIcH4umDs34Bghnt4QfV1s95y7ROCsm5CNshgPF ITm3+ED+k7avcIXGSwggPYP5LNJZ44nX -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:47 2024 by rpki-client on console-fra.rpki-client.org