$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft File: YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json) Hash identifier: yobH+UYETbwv/w9z/pQ+78Vjhc3Jj5Qr4Kg8FdIEylA= Subject key identifier: 2A:5B:3B:96:2C:A1:3C:B9:4B:1D:63:66:B6:FD:F2:75:78:3D:AF:F7 Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Certificate serial: 039E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft Manifest number: 0381 Signing time: Thu 21 Nov 2024 00:32:14 +0000 Manifest this update: Thu 21 Nov 2024 00:32:13 +0000 Manifest next update: Thu 28 Nov 2024 00:32:13 +0000 Files and hashes: 1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: kOWJiy3v7jqE3vnQUlsR7QwLdxS07cdWLUKXyl+jT5c=) 2: 7A5A3018369911EEA7B51070C4F9AE02.roa (hash: zSC/gjCR0EVJELBfh0dBGYdErFR0oMqid9q1RQYH1s0=) 3: ED1A0478799811EF8437F77EC4F9AE02.roa (hash: 4KCzf12m5fAdi6rZ7BIjlDcf4sO8cvFYO0DxyvvDdig=) 4: 844EFBDA766C11EF8CE33A86C4F9AE02.roa (hash: 3/3c8JBHEDit/ef+RH49x0K/QqTGfmGDTH1KKCGAiSA=) 5: 260D3330758A11EFAE7A8A39C4F9AE02.roa (hash: 8be0KD35jIvGdXDMYzDTqhbhRPMsZm5zv5unHRRc5ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 926 (0x39e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2 Validity Not Before: Nov 21 00:32:13 2024 GMT Not After : Nov 28 00:32:13 2024 GMT Subject: CN=673e7f8d-4d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7a:2c:17:1d:cd:64:10:00:7e:ad:af:fa:22: 3b:f1:4b:4f:57:82:46:6b:63:59:7d:81:21:de:10: ca:9e:3c:6b:24:19:35:00:b1:9b:a2:d7:16:35:cf: 26:6b:7e:59:8d:51:52:9f:a1:f4:7d:d4:32:07:53: e9:87:55:c6:e0:80:3e:d2:27:43:cd:12:28:e0:2b: 50:f1:9e:ed:22:a5:ad:70:46:6d:c8:f8:11:73:1f: 2e:73:ac:e4:ae:42:d7:eb:00:a5:5f:0c:d5:17:95: 1e:55:ee:11:1b:2b:de:67:fb:32:d9:aa:84:61:ca: 0a:1c:7e:6b:2c:3a:2e:3a:5e:48:ca:29:1c:16:77: 36:b7:84:9e:5a:49:60:d1:d9:1a:76:fc:df:4c:3b: ee:3f:e0:5f:eb:75:78:7b:d4:e4:7a:35:00:15:c1: 24:bd:93:a9:71:63:80:2f:df:c1:67:a7:5f:e2:16: ab:d5:2b:ac:ac:61:d6:a8:6d:32:90:be:f0:1e:2b: 59:77:97:02:2d:45:3b:d4:a2:fa:62:5e:4c:3a:73: 68:dc:c2:f4:4f:35:99:a8:19:8f:da:4e:0c:c9:db: 32:c1:93:b9:6a:3b:78:6c:77:bf:49:e1:7b:fc:19: e9:08:c7:e3:0b:e6:a3:67:dc:1c:68:b5:93:eb:66: b4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5B:3B:96:2C:A1:3C:B9:4B:1D:63:66:B6:FD:F2:75:78:3D:AF:F7 X509v3 Authority Key Identifier: keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:a5:db:70:f4:53:91:56:46:48:e1:2a:2b:38:70:c4:5b:98: b0:f4:a9:9a:a6:a7:a2:f8:7a:db:35:e0:94:83:eb:9d:a8:4d: 86:30:26:bf:a8:ad:df:4c:be:55:4d:23:07:79:ab:60:3b:ce: 09:3d:d0:e8:6b:80:b0:dd:01:99:dd:23:4f:20:1f:e8:c3:fc: e9:58:38:c3:cd:b6:fa:fc:8e:41:c5:20:8e:18:3e:59:51:3b: 66:40:69:53:5a:bd:35:49:95:e9:6d:78:ba:c0:96:e1:0f:fd: 01:eb:4b:9f:35:16:a2:0f:b5:02:8a:8f:79:b5:b7:ea:af:92: 77:98:02:97:7d:ab:39:92:ef:5c:00:a8:1f:df:a6:75:fd:96: fa:e8:ef:2f:34:70:a4:67:2a:18:a6:f9:72:97:6b:bf:d8:98: ed:73:24:1d:f2:bd:26:94:a3:5a:8d:83:71:77:0e:49:ae:bf: 9d:bb:5d:cf:fc:ab:d6:43:0d:90:bf:ad:18:86:0c:b8:68:57: 21:dd:86:1d:e5:f9:bf:f9:ea:4e:46:59:e8:f8:a1:8f:53:32: 47:95:b4:84:f3:b2:d4:d0:f0:b8:2c:e1:f2:a9:0c:0c:b0:e6: 05:41:dc:42:36:15:87:06:4c:df:10:ba:2b:50:0d:57:34:74: ab:14:20:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJFRTExMTAvBgNVBAUTKDYwNzZCRDBCQTREQjc5N0E3MkE2OEZFRkY5QkZCNTU4 QzQ0Mzk4QjIwHhcNMjQxMTIxMDAzMjEzWhcNMjQxMTI4MDAzMjEzWjAYMRYwFAYD VQQDEw02NzNlN2Y4ZC00ZDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl3osFx3NZBAAfq2v+iI78UtPV4JGa2NZfYEh3hDKnjxrJBk1ALGbotcWNc8m a35ZjVFSn6H0fdQyB1Pph1XG4IA+0idDzRIo4CtQ8Z7tIqWtcEZtyPgRcx8uc6zk rkLX6wClXwzVF5UeVe4RGyveZ/sy2aqEYcoKHH5rLDouOl5IyikcFnc2t4SeWklg 0dkadvzfTDvuP+Bf63V4e9TkejUAFcEkvZOpcWOAL9/BZ6df4har1SusrGHWqG0y kL7wHitZd5cCLUU71KL6Yl5MOnNo3ML0TzWZqBmP2k4MydsywZO5ajt4bHe/SeF7 /BnpCMfjC+ajZ9wcaLWT62a0OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpbO5Ys oTy5Sx1jZrb98nV4Pa/3MB8GA1UdIwQYMBaAFGB2vQuk23l6cqaP7/m/tVjEQ5iy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkVFMS83NTJENDJFODhG RDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVYcHlwb192LWItMVdNUkRt TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYTlDNlRiZVhweXBvX3YtYi0xV01SRG1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkVFMS83NTJENDJFODhGRDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVY cHlwb192LWItMVdNUkRtTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHpdtw9FORVkZI4SorOHDEW5iw9Kmapqei+HrbNeCUg+udqE2GMCa/ qK3fTL5VTSMHeatgO84JPdDoa4Cw3QGZ3SNPIB/ow/zpWDjDzbb6/I5BxSCOGD5Z UTtmQGlTWr01SZXpbXi6wJbhD/0B60ufNRaiD7UCio95tbfqr5J3mAKXfas5ku9c AKgf36Z1/Zb66O8vNHCkZyoYpvlyl2u/2JjtcyQd8r0mlKNajYNxdw5Jrr+du13P /KvWQw2Qv60Yhgy4aFch3YYd5fm/+epORlno+KGPUzJHlbSE87LU0PC4LOHyqQwM sOYFQdxCNhWHBkzfELorUA1XNHSrFCBc -----END CERTIFICATE-----Generated at Thu Nov 21 01:25:59 2024 by rpki-client on console-ams.rpki-client.org