$ rpki-client -vvf rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.mft File: X2BRhzuBUG4leKxYsyaPAd_ybsw.mft (raw, json) Hash identifier: lrk2YQi+IFSw7/e4FGav9G8fHcrO4LLjYH4nGuwMDJE= Subject key identifier: AC:FD:43:B9:A2:39:9F:32:92:FC:80:28:90:7B:BA:1E:0D:53:18:ED Authority key identifier: 5F:60:51:87:3B:81:50:6E:25:78:AC:58:B3:26:8F:01:DF:F2:6E:CC Certificate issuer: /CN=A91693D7/serialNumber=5F6051873B81506E2578AC58B3268F01DFF26ECC Certificate serial: 067B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2BRhzuBUG4leKxYsyaPAd_ybsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.mft Manifest number: 0675 Signing time: Fri 22 Nov 2024 21:52:41 +0000 Manifest this update: Fri 22 Nov 2024 21:52:41 +0000 Manifest next update: Fri 29 Nov 2024 21:52:41 +0000 Files and hashes: 1: X2BRhzuBUG4leKxYsyaPAd_ybsw.crl (hash: XnSLmvZLbCMQt6o96TMJ2Cro5bq8mJ7qiV5XDJ2V/ng=) 2: 0F28A28037CA11EDB8E79257C4F9AE02.roa (hash: KlCucW2FiDPV58tEeR0AcW5El3RO9eFYo5EmLciz/tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.crl rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2BRhzuBUG4leKxYsyaPAd_ybsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1659 (0x67b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91693D7/serialNumber=5F6051873B81506E2578AC58B3268F01DFF26ECC Validity Not Before: Nov 22 21:52:41 2024 GMT Not After : Nov 29 21:52:41 2024 GMT Subject: CN=6740fd29-d71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7c:c7:fd:72:16:a9:37:89:1d:4e:4d:4e:d8: 74:39:e7:9f:78:51:73:b4:55:d0:d3:bf:e4:bb:e2: 3f:88:85:3f:3c:1f:8a:8f:5e:a7:7f:a6:17:20:39: 1f:53:87:ea:5d:b6:cc:4a:28:69:85:ed:c6:2a:64: cb:53:e6:4b:98:61:f7:8c:f5:9d:ad:4d:66:2f:68: 58:03:94:59:f5:86:be:d6:9a:d6:f6:bb:a1:5c:b9: 89:13:05:00:09:86:96:02:e8:34:75:4b:1b:2e:b7: a5:a5:23:01:28:81:c6:73:cc:ae:99:ca:6d:66:32: 70:8b:0d:59:ec:1b:39:3b:d8:58:b2:0a:ff:73:55: 6c:28:3a:1e:e3:ce:2d:64:54:f1:3f:7c:eb:bc:19: 88:d0:71:0a:65:99:e4:26:45:f1:6f:6b:27:5c:23: b2:13:22:5c:15:de:d6:d5:45:65:ad:7c:63:d5:00: a6:92:1a:89:12:dc:70:57:b7:0f:70:8b:56:34:5d: 9f:d2:1f:c3:d7:4b:a4:92:e7:3c:bb:6c:0a:b6:16: 97:a4:71:80:ec:bf:e4:f6:ef:8e:c5:d7:0a:68:56: 4c:23:43:0b:2e:63:94:35:37:66:a5:71:78:16:2b: 07:2f:2a:73:02:80:35:34:23:af:74:da:0e:1b:bc: da:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FD:43:B9:A2:39:9F:32:92:FC:80:28:90:7B:BA:1E:0D:53:18:ED X509v3 Authority Key Identifier: keyid:5F:60:51:87:3B:81:50:6E:25:78:AC:58:B3:26:8F:01:DF:F2:6E:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2BRhzuBUG4leKxYsyaPAd_ybsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:fd:77:45:8e:f3:eb:7d:2a:4c:46:71:97:4e:a7:79:a8:37: 95:83:f1:55:0e:95:b6:9d:01:79:46:14:ed:11:2d:5a:da:c7: 26:70:e6:bd:47:2e:a6:d0:3a:56:59:e4:0a:a8:b1:40:88:25: 8f:ad:3a:f3:d0:0b:20:cc:1a:71:04:ee:41:e6:78:23:90:f6: 78:3a:3d:3f:a3:55:e9:44:a9:8e:b9:33:44:81:db:4c:c9:24: 8c:09:2c:a6:01:80:76:17:e3:f7:c3:97:2e:5e:92:10:5e:d3: a9:a7:8c:79:5e:67:9e:62:e8:bf:dc:9b:40:e4:aa:f2:30:08: 74:de:21:1b:b6:d3:3b:59:5b:7d:43:eb:82:10:ae:bc:e2:36: bb:d2:33:1b:2c:93:9a:55:8a:48:50:29:ce:64:2c:f9:60:80: 59:33:4c:70:2a:4c:1f:80:fa:87:c9:27:41:fa:6a:3f:1a:ea: 47:79:18:f0:45:a4:75:a7:da:ae:f1:5f:75:78:05:36:4d:35: f6:0e:79:f6:84:8c:dc:3f:43:9e:80:c6:b9:84:1c:69:6e:4b: a5:b9:96:a2:23:6e:06:ab:d4:37:8e:33:c5:0f:0f:84:f3:69: 50:4e:0a:76:e4:99:86:d7:ac:a1:22:57:bd:be:75:d8:2b:de: 19:41:a4:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzRDcxMTAvBgNVBAUTKDVGNjA1MTg3M0I4MTUwNkUyNTc4QUM1OEIzMjY4RjAx REZGMjZFQ0MwHhcNMjQxMTIyMjE1MjQxWhcNMjQxMTI5MjE1MjQxWjAYMRYwFAYD VQQDEw02NzQwZmQyOS1kNzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmXzH/XIWqTeJHU5NTth0OeefeFFztFXQ07/ku+I/iIU/PB+Kj16nf6YXIDkf U4fqXbbMSihphe3GKmTLU+ZLmGH3jPWdrU1mL2hYA5RZ9Ya+1prW9ruhXLmJEwUA CYaWAug0dUsbLrelpSMBKIHGc8yumcptZjJwiw1Z7Bs5O9hYsgr/c1VsKDoe484t ZFTxP3zrvBmI0HEKZZnkJkXxb2snXCOyEyJcFd7W1UVlrXxj1QCmkhqJEtxwV7cP cItWNF2f0h/D10ukkuc8u2wKthaXpHGA7L/k9u+OxdcKaFZMI0MLLmOUNTdmpXF4 FisHLypzAoA1NCOvdNoOG7zaOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKz9Q7mi OZ8ykvyAKJB7uh4NUxjtMB8GA1UdIwQYMBaAFF9gUYc7gVBuJXisWLMmjwHf8m7M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTNENy8xODc4RUUwQzU1 M0MxMUVCOUJDQURDNzBDNEY5QUUwMi9YMkJSaHp1QlVHNGxlS3hZc3lhUEFkX3li c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gyQlJoenVCVUc0bGVLeFlzeWFQQWRfeWJzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTNENy8xODc4RUUwQzU1M0MxMUVCOUJDQURDNzBDNEY5QUUwMi9YMkJSaHp1QlVH NGxlS3hZc3lhUEFkX3lic3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX/XdFjvPrfSpMRnGXTqd5qDeVg/FVDpW2nQF5RhTtES1a2scmcOa9 Ry6m0DpWWeQKqLFAiCWPrTrz0AsgzBpxBO5B5ngjkPZ4Oj0/o1XpRKmOuTNEgdtM ySSMCSymAYB2F+P3w5cuXpIQXtOpp4x5XmeeYui/3JtA5KryMAh03iEbttM7WVt9 Q+uCEK684ja70jMbLJOaVYpIUCnOZCz5YIBZM0xwKkwfgPqHySdB+mo/GupHeRjw RaR1p9qu8V91eAU2TTX2Dnn2hIzcP0OegMa5hBxpbkuluZaiI24Gq9Q3jjPFDw+E 82lQTgp25JmG16yhIle9vnXYK94ZQaTi -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:27 2024 by rpki-client on console-fra.rpki-client.org