$ rpki-client -vvf rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft File: lYpO2dfWT6yHvRbsijZXHhovUIo.mft (raw, json) Hash identifier: YzyoSotZ8eqn4pOSN28+DteEElDXMS3vYm/0ykZ9Ulw= Subject key identifier: 49:EF:D3:5C:E0:A6:84:D5:F0:8D:EC:09:24:F8:1F:EF:AB:95:A9:B6 Authority key identifier: 95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A Certificate issuer: /CN=A9160EEF/serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A Certificate serial: 0C4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft Manifest number: 0C35 Signing time: Fri 22 Nov 2024 18:15:24 +0000 Manifest this update: Fri 22 Nov 2024 18:15:23 +0000 Manifest next update: Fri 29 Nov 2024 18:15:23 +0000 Files and hashes: 1: lYpO2dfWT6yHvRbsijZXHhovUIo.crl (hash: XnZdQrsjNq6vWaVVjoYOUA9kuDBGwVBaYYT4fhApABg=) 2: 6385C93829BF11EEBB384B81C4F9AE02.roa (hash: 26n1t8jhpb4x50KXfNX17XYOsoU6AbrXOKXJB+8j6Vw=) 3: D060A788062711ED98FC531BC4F9AE02.roa (hash: q59NmHJMCVC3dpOE6B51oUif6kX0C+mT6Y8FTTLEHHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3147 (0xc4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160EEF/serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A Validity Not Before: Nov 22 18:15:23 2024 GMT Not After : Nov 29 18:15:23 2024 GMT Subject: CN=6740ca3c-a0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:da:99:a8:29:4d:68:11:da:8a:18:5d:3d:37: 37:c3:d9:a8:1d:5c:80:c0:a8:1b:79:3b:63:15:eb: 62:30:80:b7:0c:1b:b3:ab:1e:6d:d7:bb:f4:61:3e: 11:94:62:5f:ad:78:29:5f:25:19:9c:52:96:b8:ba: ce:1f:93:b0:14:00:4b:b0:79:17:2a:4b:47:e0:99: f1:4b:78:aa:8a:01:16:f5:39:90:56:e9:65:86:3a: b3:ac:64:5f:84:67:cb:3f:ec:60:ff:5c:04:1c:b5: 9b:30:71:da:63:fb:7f:00:68:18:a2:18:32:37:8e: 56:8a:a8:0e:4f:d7:fc:72:05:ec:d3:a2:ee:7f:2a: af:fd:50:d5:00:6c:09:28:be:a7:9b:32:60:4b:2a: a6:a5:a7:77:7c:ff:e7:ec:e5:70:c0:d5:96:78:7f: b1:3a:76:fa:d7:a9:15:84:75:2a:e7:ee:fb:d2:d0: 3a:7e:21:0a:36:e8:8f:61:68:bc:1f:16:58:37:8d: 9b:9f:a0:e8:d3:d6:fe:0b:86:f4:77:68:be:fa:1f: e4:50:a4:e6:f0:2e:24:c2:e6:09:03:98:d9:15:10: 62:68:f7:a6:1a:e0:07:56:ac:e4:a7:ac:51:d8:2c: c3:3d:3e:f6:e6:17:3a:4e:cb:a6:31:3c:b2:12:c2: 5e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EF:D3:5C:E0:A6:84:D5:F0:8D:EC:09:24:F8:1F:EF:AB:95:A9:B6 X509v3 Authority Key Identifier: keyid:95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:15:ab:9a:a1:43:ba:f6:05:3f:3f:05:f5:5d:80:f6:bf:f4: 66:04:c8:98:11:ef:ca:d3:06:bb:f4:ce:03:b5:b6:3b:c7:46: 3d:d1:be:5e:cf:f7:45:d0:0c:6e:de:e6:f7:9f:91:21:94:65: 25:84:cc:b6:bf:b9:9a:0b:f3:18:5b:8d:8b:ef:03:b2:58:de: b3:47:a9:f8:76:77:b0:c3:2b:05:3d:60:ed:cf:f6:04:13:7c: e5:dc:1a:85:20:bd:da:cf:3b:75:82:e1:7d:26:89:5a:1f:1c: 86:0e:a4:eb:45:58:56:a7:1a:2b:6d:15:59:55:ba:6c:f7:43: 6a:d1:bd:eb:f1:75:37:94:41:0d:47:1c:ff:64:c0:2a:34:62: 37:8d:57:26:17:ba:b8:ac:c9:18:f8:9c:52:2d:86:2a:3a:27: ff:3c:bd:46:6d:8a:6d:1e:af:bb:68:80:3e:39:58:df:f8:cf: 86:53:9a:4d:02:db:e5:95:cc:a4:0c:ee:0c:41:38:75:9c:64: 4e:3c:35:ee:f8:dc:ed:40:c5:94:5b:02:5d:b7:17:54:3f:20: 3c:04:97:93:d9:30:c0:5f:62:f7:d5:4f:50:fb:9d:b4:79:d5: 79:ac:56:8a:44:92:67:6d:b5:b9:66:22:07:01:ce:b4:3a:63: b9:e4:1f:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBFRUYxMTAvBgNVBAUTKDk1OEE0RUQ5RDdENjRGQUM4N0JEMTZFQzhBMzY1NzFF MUEyRjUwOEEwHhcNMjQxMTIyMTgxNTIzWhcNMjQxMTI5MTgxNTIzWjAYMRYwFAYD VQQDEw02NzQwY2EzYy1hMGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdqZqClNaBHaihhdPTc3w9moHVyAwKgbeTtjFetiMIC3DBuzqx5t17v0YT4R lGJfrXgpXyUZnFKWuLrOH5OwFABLsHkXKktH4JnxS3iqigEW9TmQVullhjqzrGRf hGfLP+xg/1wEHLWbMHHaY/t/AGgYohgyN45WiqgOT9f8cgXs06Lufyqv/VDVAGwJ KL6nmzJgSyqmpad3fP/n7OVwwNWWeH+xOnb616kVhHUq5+770tA6fiEKNuiPYWi8 HxZYN42bn6Do09b+C4b0d2i++h/kUKTm8C4kwuYJA5jZFRBiaPemGuAHVqzkp6xR 2CzDPT725hc6TsumMTyyEsJevwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnv01zg poTV8I3sCST4H++rlam2MB8GA1UdIwQYMBaAFJWKTtnX1k+sh70W7Io2Vx4aL1CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEVFRi82QzRDRDY5MEY4 ODgxMUU5OEZBMDBBN0NDNEY5QUUwMi9sWXBPMmRmV1Q2eUh2UmJzaWpaWEhob3ZV SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZcE8yZGZXVDZ5SHZSYnNpalpYSGhvdlVJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEVFRi82QzRDRDY5MEY4ODgxMUU5OEZBMDBBN0NDNEY5QUUwMi9sWXBPMmRmV1Q2 eUh2UmJzaWpaWEhob3ZVSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMFauaoUO69gU/PwX1XYD2v/RmBMiYEe/K0wa79M4DtbY7x0Y90b5e z/dF0Axu3ub3n5EhlGUlhMy2v7maC/MYW42L7wOyWN6zR6n4dnewwysFPWDtz/YE E3zl3BqFIL3azzt1guF9JolaHxyGDqTrRVhWpxorbRVZVbps90Nq0b3r8XU3lEEN Rxz/ZMAqNGI3jVcmF7q4rMkY+JxSLYYqOif/PL1GbYptHq+7aIA+OVjf+M+GU5pN AtvllcykDO4MQTh1nGROPDXu+NztQMWUWwJdtxdUPyA8BJeT2TDAX2L31U9Q+520 edV5rFaKRJJnbbW5ZiIHAc60OmO55B/e -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:04 2024 by rpki-client on console-ams.rpki-client.org