$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft File: yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft (raw, json) Hash identifier: teBuUgxtHgE3iYCKjhbmDVM9wl1jwA2acfNpAxU/3+M= Subject key identifier: 41:DA:F4:7E:77:C7:FC:CA:E2:B6:05:17:0A:0A:84:71:30:3C:FC:EF Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B Certificate issuer: /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Certificate serial: 0897 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft Manifest number: 0892 Signing time: Fri 22 Nov 2024 20:17:41 +0000 Manifest this update: Fri 22 Nov 2024 20:17:41 +0000 Manifest next update: Fri 29 Nov 2024 20:17:41 +0000 Files and hashes: 1: yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl (hash: a58Lq5984gi+RhBVPUXu549xCvZZ4OmpjKm3bD2BOmQ=) 2: 90798692AA0A11EA89D5161EC4F9AE02.roa (hash: O0cw5ZT/oguDck4eH6oUOUC8bbwGHUHdEmg/5/+1nls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2199 (0x897) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Validity Not Before: Nov 22 20:17:41 2024 GMT Not After : Nov 29 20:17:41 2024 GMT Subject: CN=6740e6e5-61d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3a:87:6a:d7:45:56:b6:89:8d:37:5b:f6:df: 01:58:0f:d6:ae:1d:85:8f:6f:87:54:39:05:86:ab: 98:a6:4e:fd:5f:43:88:00:36:ef:13:d6:59:67:1a: 86:0e:37:31:df:71:07:0e:a2:0a:2a:79:43:ec:66: 40:50:48:a2:71:31:bb:87:3c:c2:d5:f3:32:26:73: c8:fe:6e:24:bd:41:ca:03:80:dc:52:72:01:5d:d0: ec:b5:c8:0e:6b:65:7b:61:a7:a0:f8:4d:bd:a2:c0: ed:51:88:f0:8f:f8:34:78:66:4a:7d:2b:a1:1d:83: 5f:da:e9:34:bb:a3:aa:a8:52:6f:20:5a:3f:08:d1: 66:c3:3a:0d:7b:73:71:ef:25:63:d2:d8:13:30:9c: be:79:31:04:39:0a:ca:27:95:c0:04:9c:c0:b4:a5: 30:f9:f9:5c:94:de:b0:c8:ff:a4:dc:7f:c8:2d:fb: cd:a4:30:c0:a1:88:cd:96:ea:73:36:89:50:1f:f1: 21:d7:e8:85:a5:94:6f:a0:d8:5f:a7:67:5e:cf:31: bf:47:f1:fb:30:27:8c:f7:07:ae:50:eb:2e:01:8b: ad:c8:b6:ac:2b:76:60:a0:1e:f9:07:71:6a:bf:56: 64:d2:d4:86:cd:f1:4c:b1:80:5a:ab:1f:8f:7d:34: 65:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DA:F4:7E:77:C7:FC:CA:E2:B6:05:17:0A:0A:84:71:30:3C:FC:EF X509v3 Authority Key Identifier: keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:1c:3f:90:9d:29:dc:a1:79:1a:c7:64:36:67:61:da:7d:58: dd:a7:56:6a:fe:75:66:a3:ab:0c:8e:b7:f2:39:58:dd:40:76: 62:49:96:06:94:9f:45:7d:ad:34:4d:0f:25:ad:6b:7e:1d:f0: 5b:f1:c7:c6:4c:98:59:21:78:71:7e:1a:30:83:f7:6b:d9:85: 6d:1b:a0:b6:d3:7f:cd:6b:a7:02:75:b0:a7:4e:a2:da:77:5f: d1:f8:21:04:94:6b:83:9a:d9:15:93:21:8e:4b:c2:f3:81:08: 8f:72:3b:e5:e3:23:85:eb:9d:85:1f:46:3d:ac:b6:bd:da:f2: c0:f2:e2:ad:2b:51:04:1c:d3:ed:96:3e:5b:84:1f:0c:d5:76: 6d:c5:29:a9:92:0e:ac:b9:0e:9b:8c:48:55:63:45:93:3a:c9: 54:5a:b7:f5:94:9b:d2:85:e2:12:a7:85:52:b5:fd:94:e2:a3: d0:50:67:c0:9f:4d:c6:7e:14:fd:d8:1e:91:48:2b:3f:64:18: 56:91:4d:a3:2c:65:40:ec:96:b7:bd:6a:a5:05:ad:fa:2f:73: 97:32:a4:f6:92:47:66:51:45:df:b8:f9:0e:d2:90:ea:b7:db: b7:8f:50:1f:71:b3:fd:d3:2a:a6:44:77:51:d3:06:90:9b:88: 37:2f:2a:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QjcxMTAvBgNVBAUTKENBQTk2OUZGMzc3NEJDRDlFRDYwMjc3M0QyOUQ4NzhC QzRFMjY1NkIwHhcNMjQxMTIyMjAxNzQxWhcNMjQxMTI5MjAxNzQxWjAYMRYwFAYD VQQDEw02NzQwZTZlNS02MWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDqHatdFVraJjTdb9t8BWA/Wrh2Fj2+HVDkFhquYpk79X0OIADbvE9ZZZxqG Djcx33EHDqIKKnlD7GZAUEiicTG7hzzC1fMyJnPI/m4kvUHKA4DcUnIBXdDstcgO a2V7Yaeg+E29osDtUYjwj/g0eGZKfSuhHYNf2uk0u6OqqFJvIFo/CNFmwzoNe3Nx 7yVj0tgTMJy+eTEEOQrKJ5XABJzAtKUw+flclN6wyP+k3H/ILfvNpDDAoYjNlupz NolQH/Eh1+iFpZRvoNhfp2dezzG/R/H7MCeM9weuUOsuAYutyLasK3ZgoB75B3Fq v1Zk0tSGzfFMsYBaqx+PfTRlCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHa9H53 x/zK4rYFFwoKhHEwPPzvMB8GA1UdIwQYMBaAFMqpaf83dLzZ7WAnc9Kdh4vE4mVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRCNy8wOTcyQzc0MEFB MDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZObnRZQ2R6MHAySGk4VGla V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxbHBfemQwdk5udFlDZHowcDJIaThUaVpXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRCNy8wOTcyQzc0MEFBMDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZO bnRZQ2R6MHAySGk4VGlaV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9HD+QnSncoXkax2Q2Z2HafVjdp1Zq/nVmo6sMjrfyOVjdQHZiSZYG lJ9Ffa00TQ8lrWt+HfBb8cfGTJhZIXhxfhowg/dr2YVtG6C203/Na6cCdbCnTqLa d1/R+CEElGuDmtkVkyGOS8LzgQiPcjvl4yOF652FH0Y9rLa92vLA8uKtK1EEHNPt lj5bhB8M1XZtxSmpkg6suQ6bjEhVY0WTOslUWrf1lJvSheISp4VStf2U4qPQUGfA n03GfhT92B6RSCs/ZBhWkU2jLGVA7Ja3vWqlBa36L3OXMqT2kkdmUUXfuPkO0pDq t9u3j1AfcbP90yqmRHdR0waQm4g3Lypr -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:29 2024 by rpki-client on console-fra.rpki-client.org