$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft File: yYWS4c0LLnYQyEsC5mHL8zb_r10.mft (raw, json) Hash identifier: CBHALAg+sSCwW86URGtZygdylo2E1hk+aZFwxg4OHVU= Subject key identifier: 9B:8F:93:05:22:40:0E:11:F0:F6:2A:37:B9:DA:FE:D0:D7:6C:1F:A1 Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D Certificate issuer: /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Certificate serial: 0782 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft Manifest number: 077D Signing time: Fri 22 Nov 2024 20:53:49 +0000 Manifest this update: Fri 22 Nov 2024 20:53:48 +0000 Manifest next update: Fri 29 Nov 2024 20:53:48 +0000 Files and hashes: 1: yYWS4c0LLnYQyEsC5mHL8zb_r10.crl (hash: 48knZF+0yRekO4s5FSJSYjt5Q+vXw1yFspO0f3Y4DJQ=) 2: 789C2BD0ECCA11EAAE025C70C4F9AE02.roa (hash: a2yAAw5TgVOmiE8atuw12IZTou56LGQZcdiOcAtiW0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1922 (0x782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Validity Not Before: Nov 22 20:53:48 2024 GMT Not After : Nov 29 20:53:48 2024 GMT Subject: CN=6740ef5c-29aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:b7:59:99:87:c6:48:5f:2c:c5:37:68:54: fb:76:d7:c7:4b:b0:c2:11:c4:b6:d5:d3:88:5d:ac: 22:60:d6:84:f0:ae:45:58:75:3c:1e:20:ea:aa:de: 66:49:a5:f4:02:1a:2c:2c:20:07:2f:ac:53:aa:de: a5:36:fb:c7:99:c7:bb:cb:d1:7a:34:1a:0f:78:ea: cf:e5:a8:f1:24:74:6b:25:e5:10:80:12:62:bc:a0: 78:60:b0:93:9e:3b:17:ae:8e:26:82:16:4f:9f:52: e8:bf:9b:61:64:5c:2e:27:ea:d7:33:a8:b8:09:70: 94:cc:a6:f7:3f:6e:ac:f6:c2:50:8d:42:c2:54:eb: 4a:05:6a:5b:56:42:a7:40:aa:1a:92:d6:b5:dd:bb: e4:82:0e:d3:30:9b:9d:5c:55:31:fc:21:a7:4f:10: 0a:d8:30:55:e5:8d:05:80:fc:61:cd:f0:38:86:1f: 74:eb:e4:0b:a2:37:44:80:10:58:39:d6:c9:a4:f1: ab:d4:ad:31:64:06:71:61:74:8e:89:96:3f:eb:b5: db:31:78:60:4b:23:7b:41:56:d1:89:07:09:57:da: 28:89:e8:4d:dd:ab:64:90:2f:23:a4:b2:c8:c2:27: 9a:b9:45:40:67:da:5d:bb:26:e8:ed:82:97:ff:76: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8F:93:05:22:40:0E:11:F0:F6:2A:37:B9:DA:FE:D0:D7:6C:1F:A1 X509v3 Authority Key Identifier: keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:8a:1b:18:57:ea:37:fd:eb:a9:da:d5:7c:36:f7:05:65:94: 15:f3:e2:c2:6c:a4:63:f7:86:32:59:32:86:28:d1:70:03:31: 3d:b1:2a:7f:0e:63:80:fb:d7:a8:a2:20:dd:1f:5e:9e:9b:d9: 6b:66:75:84:63:d0:1b:8d:80:f1:7d:07:3b:40:08:2d:dc:2e: 2e:00:c3:f9:9b:62:95:f9:78:d1:98:d0:a2:f7:93:3f:15:3d: 58:cc:ea:25:2a:0d:a7:1c:5b:81:37:e4:dc:8b:3e:52:16:85: 9f:2f:c1:19:b4:09:43:ab:e0:c8:22:af:b0:92:e3:cc:bd:26: 14:01:47:99:b8:e8:7d:e6:1a:d5:7b:b9:0e:39:d1:78:9c:4e: 5a:23:a3:19:ef:57:67:85:cd:66:64:01:90:d6:1e:c5:9f:3e: 5c:10:13:96:4a:ae:38:54:ea:76:49:b1:31:30:13:b8:7a:a2: c9:34:c7:c6:27:a7:5b:16:72:42:68:24:29:ec:f3:88:e3:24: 69:4e:1c:39:a9:cb:f0:07:63:2a:d6:81:13:36:52:61:74:56: 71:49:ba:ec:d4:d2:33:1e:43:be:ae:9a:95:35:d9:95:64:7b: 6b:2a:51:90:56:4d:f8:7f:cf:4c:d7:e8:29:6f:31:2c:87:49: c8:6e:f9:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhFOTgxMTAvBgNVBAUTKEM5ODU5MkUxQ0QwQjJFNzYxMEM4NEIwMkU2NjFDQkYz MzZGRkFGNUQwHhcNMjQxMTIyMjA1MzQ4WhcNMjQxMTI5MjA1MzQ4WjAYMRYwFAYD VQQDEw02NzQwZWY1Yy0yOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhK3WZmHxkhfLMU3aFT7dtfHS7DCEcS21dOIXawiYNaE8K5FWHU8HiDqqt5m SaX0AhosLCAHL6xTqt6lNvvHmce7y9F6NBoPeOrP5ajxJHRrJeUQgBJivKB4YLCT njsXro4mghZPn1Lov5thZFwuJ+rXM6i4CXCUzKb3P26s9sJQjULCVOtKBWpbVkKn QKoakta13bvkgg7TMJudXFUx/CGnTxAK2DBV5Y0FgPxhzfA4hh906+QLojdEgBBY OdbJpPGr1K0xZAZxYXSOiZY/67XbMXhgSyN7QVbRiQcJV9ooiehN3atkkC8jpLLI wieauUVAZ9pduybo7YKX/3avHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuPkwUi QA4R8PYqN7na/tDXbB+hMB8GA1UdIwQYMBaAFMmFkuHNCy52EMhLAuZhy/M2/69d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEU5OC8wRUIxMkI0MEVD QzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExuWVF5RXNDNW1ITDh6Yl9y MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZV1M0YzBMTG5ZUXlFc0M1bUhMOHpiX3IxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEU5OC8wRUIxMkI0MEVDQzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExu WVF5RXNDNW1ITDh6Yl9yMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVihsYV+o3/eup2tV8NvcFZZQV8+LCbKRj94YyWTKGKNFwAzE9sSp/ DmOA+9eooiDdH16em9lrZnWEY9AbjYDxfQc7QAgt3C4uAMP5m2KV+XjRmNCi95M/ FT1YzOolKg2nHFuBN+Tciz5SFoWfL8EZtAlDq+DIIq+wkuPMvSYUAUeZuOh95hrV e7kOOdF4nE5aI6MZ71dnhc1mZAGQ1h7Fnz5cEBOWSq44VOp2SbExMBO4eqLJNMfG J6dbFnJCaCQp7POI4yRpThw5qcvwB2Mq1oETNlJhdFZxSbrs1NIzHkO+rpqVNdmV ZHtrKlGQVk34f89M1+gpbzEsh0nIbvlv -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:09 2024 by rpki-client on console-fra.rpki-client.org