$ rpki-client -vvf rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft File: yH_T4kCIpNnfHF0CaFII6Qph7_c.mft (raw, json) Hash identifier: ejp/51RLF5dAQZ+Hj269BOilgzldgAiUizPNXSKZVKs= Subject key identifier: E8:91:94:8C:1B:87:97:32:C8:2F:9F:D3:BE:8D:72:ED:16:35:32:BD Authority key identifier: C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7 Certificate issuer: /CN=A9161065/serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft Manifest number: 012A Signing time: Thu 21 Nov 2024 02:54:26 +0000 Manifest this update: Thu 21 Nov 2024 02:54:25 +0000 Manifest next update: Thu 28 Nov 2024 02:54:25 +0000 Files and hashes: 1: yH_T4kCIpNnfHF0CaFII6Qph7_c.crl (hash: wmGzq2lXXHvpTbYXEs8vPhkteoBmDj9KIdwQulJTuFE=) 2: CDE70CB2E52011EDB505E014C4F9AE02.roa (hash: W0hL1B4Pu9Y3eTRJdGcmU+N0LKwGZJeiFs+2ym6914M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161065/serialNumber=C87FD3E24088A4D9DF1C5D02685208E90A61EFF7 Validity Not Before: Nov 21 02:54:25 2024 GMT Not After : Nov 28 02:54:25 2024 GMT Subject: CN=673ea0e1-12f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:19:f5:c1:a9:27:05:1c:16:ac:96:6e:f0: b7:da:9e:7c:71:1a:ab:f5:e7:d8:b8:da:c9:0b:2f: b0:9b:4c:30:c8:b1:20:38:36:0a:91:ad:47:ff:66: 6d:14:fb:21:65:66:6a:e9:5c:f4:56:ea:3d:4d:b0: d0:c2:e5:16:cb:be:de:16:e6:2f:77:37:ea:9c:63: 89:a5:24:41:99:42:bd:cb:7e:5e:81:c4:f3:c1:da: c7:8e:a4:ab:6f:89:21:bf:38:18:b3:cc:43:b0:8a: fb:76:7e:1b:5d:7e:8b:8e:e4:c9:bf:50:1c:72:66: 51:82:73:81:9a:ab:1b:e9:00:ad:28:a2:b7:13:34: 23:ce:69:74:80:d7:ee:a3:3d:de:5c:4f:15:b9:2f: 71:61:1c:1a:a3:d3:2b:2a:f8:50:71:b4:e7:f8:49: c9:b9:80:8a:6c:a0:43:ff:7e:1b:f4:f7:3f:76:5e: c3:9d:46:a7:47:5e:5a:6b:b0:b7:c3:de:e7:b4:7b: c8:89:26:10:49:6c:d2:37:65:c4:01:dc:cd:6b:48: 6b:2d:68:0a:14:b1:a9:25:bd:ab:e2:19:fe:a3:ef: 13:d0:c9:8f:38:fb:4f:25:46:5a:ae:c3:df:b1:27: 09:d2:f9:f3:36:fa:49:14:f3:bf:a2:53:4e:ac:c5: e3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:91:94:8C:1B:87:97:32:C8:2F:9F:D3:BE:8D:72:ED:16:35:32:BD X509v3 Authority Key Identifier: keyid:C8:7F:D3:E2:40:88:A4:D9:DF:1C:5D:02:68:52:08:E9:0A:61:EF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_T4kCIpNnfHF0CaFII6Qph7_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161065/1A25D274E51D11ED8538B246C4F9AE02/yH_T4kCIpNnfHF0CaFII6Qph7_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:fa:22:3b:12:9a:f6:27:3f:4d:43:56:ff:fd:3c:2f:1a:60: 55:86:1a:08:d7:f5:cc:d5:79:18:12:91:08:74:13:67:b2:9b: b0:2f:b9:65:08:2c:7e:dc:ee:ff:a2:fa:60:db:c9:04:8b:bf: 82:b6:3f:10:77:c9:11:83:2c:23:b3:f3:ee:55:b3:66:f4:db: b8:6e:c9:6e:19:7c:bf:27:ea:8b:de:c5:8a:de:ac:1f:37:80: 8c:61:14:9a:92:44:5d:31:75:01:c8:8c:49:b7:94:af:57:b4: 86:5c:cd:0c:ec:c4:68:01:f9:db:04:66:43:f2:cd:28:af:35: 5b:11:cf:5d:e7:8b:b7:17:af:b6:92:85:db:ac:39:58:ab:a4: cd:81:5a:63:00:77:48:8a:62:a7:35:3f:76:dc:76:5b:75:03: c2:52:bc:a2:b5:0a:2d:30:7e:8c:e1:d3:91:f9:e7:34:8e:8b: f7:f9:9c:43:05:8b:12:3a:d8:09:d0:1a:58:b7:78:95:f3:22: db:9f:2d:06:de:ec:e7:ed:48:21:49:6c:00:c0:49:fe:30:83: bc:fe:a2:eb:23:f1:d2:40:e9:9e:f8:88:18:cd:c8:af:27:c3: e0:f5:83:7a:ff:5c:76:90:6d:a4:f2:b0:5a:d7:15:9d:d4:cf: f7:e6:23:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwNjUxMTAvBgNVBAUTKEM4N0ZEM0UyNDA4OEE0RDlERjFDNUQwMjY4NTIwOEU5 MEE2MUVGRjcwHhcNMjQxMTIxMDI1NDI1WhcNMjQxMTI4MDI1NDI1WjAYMRYwFAYD VQQDEw02NzNlYTBlMS0xMmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbYZ9cGpJwUcFqyWbvC32p58cRqr9efYuNrJCy+wm0wwyLEgODYKka1H/2Zt FPshZWZq6Vz0Vuo9TbDQwuUWy77eFuYvdzfqnGOJpSRBmUK9y35egcTzwdrHjqSr b4khvzgYs8xDsIr7dn4bXX6LjuTJv1AccmZRgnOBmqsb6QCtKKK3EzQjzml0gNfu oz3eXE8VuS9xYRwao9MrKvhQcbTn+EnJuYCKbKBD/34b9Pc/dl7DnUanR15aa7C3 w97ntHvIiSYQSWzSN2XEAdzNa0hrLWgKFLGpJb2r4hn+o+8T0MmPOPtPJUZarsPf sScJ0vnzNvpJFPO/olNOrMXjwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiRlIwb h5cyyC+f076Ncu0WNTK9MB8GA1UdIwQYMBaAFMh/0+JAiKTZ3xxdAmhSCOkKYe/3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTA2NS8xQTI1RDI3NEU1 MUQxMUVEODUzOEIyNDZDNEY5QUUwMi95SF9UNGtDSXBObmZIRjBDYUZJSTZRcGg3 X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIX1Q0a0NJcE5uZkhGMENhRklJNlFwaDdfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTA2NS8xQTI1RDI3NEU1MUQxMUVEODUzOEIyNDZDNEY5QUUwMi95SF9UNGtDSXBO bmZIRjBDYUZJSTZRcGg3X2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM+iI7Epr2Jz9NQ1b//TwvGmBVhhoI1/XM1XkYEpEIdBNnspuwL7ll CCx+3O7/ovpg28kEi7+Ctj8Qd8kRgywjs/PuVbNm9Nu4bsluGXy/J+qL3sWK3qwf N4CMYRSakkRdMXUByIxJt5SvV7SGXM0M7MRoAfnbBGZD8s0orzVbEc9d54u3F6+2 koXbrDlYq6TNgVpjAHdIimKnNT923HZbdQPCUryitQotMH6M4dOR+ec0jov3+ZxD BYsSOtgJ0BpYt3iV8yLbny0G3uzn7UghSWwAwEn+MIO8/qLrI/HSQOme+IgYzciv J8Pg9YN6/1x2kG2k8rBa1xWd1M/35iPr -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:57 2024 by rpki-client on console-fra.rpki-client.org