$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft File: yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft (raw, json) Hash identifier: en9/ZvLjp4crTZS696grtAHjDtXK2lpShUQbDOxAijY= Subject key identifier: 5E:D4:15:DE:E8:EF:4D:05:B4:6D:85:AE:02:BA:91:22:EC:D1:52:E8 Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft Manifest number: 010F Signing time: Thu 21 Nov 2024 03:11:19 +0000 Manifest this update: Thu 21 Nov 2024 03:11:19 +0000 Manifest next update: Thu 28 Nov 2024 03:11:19 +0000 Files and hashes: 1: yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl (hash: FGzqCdmg67oMtKSfOLFAexNewxs4OqUsCl8kHEhq348=) 2: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (hash: LAaO1vZcTPGfjnPzmYmWNC40SxBUckX2iI6WDTxLjTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: Nov 21 03:11:19 2024 GMT Not After : Nov 28 03:11:19 2024 GMT Subject: CN=673ea4d7-d001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3e:68:17:bf:92:3d:c6:c6:ab:39:06:99:b3: 35:42:50:1a:ca:55:32:b9:a5:1c:1a:d6:67:29:f0: 0c:79:dc:e3:4c:4b:27:7e:0f:3c:45:6a:7e:bd:e0: 6e:a8:1b:12:b5:83:3b:de:94:a8:62:27:8e:6d:5a: 0a:f4:08:21:2a:0e:7b:a4:71:5b:e4:f3:0a:1b:cd: 35:8b:f0:e5:e1:51:b4:f5:f9:7d:d3:7b:8d:cf:87: 9f:f9:77:3c:cf:70:5d:f7:25:5f:78:00:49:74:7a: b5:5e:b1:68:c0:bf:2f:4e:61:ed:e2:b4:b8:4e:50: b2:0d:e6:eb:1e:d0:90:65:7a:59:b6:78:8c:3a:f2: 22:5c:d8:47:ee:a2:e2:ad:f0:eb:dd:08:69:a1:4a: 8b:c8:c1:40:50:36:bb:95:1b:5e:49:7e:ba:ba:57: 9b:90:ad:58:0d:8d:f6:de:6b:18:43:1f:ee:24:8c: 28:1d:35:78:c1:64:fe:b1:39:a1:7d:73:15:5f:67: 55:18:73:6b:ff:bd:47:01:2e:43:ce:d5:ff:e4:d8: eb:c9:82:ab:a7:19:f6:d6:a8:87:27:f1:5c:10:c1: 55:65:61:69:1e:0c:fb:d2:4b:45:0f:12:64:cb:bc: b1:c0:1a:95:25:f9:b1:eb:da:b9:56:83:7c:4f:1a: 96:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D4:15:DE:E8:EF:4D:05:B4:6D:85:AE:02:BA:91:22:EC:D1:52:E8 X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:d7:8d:3a:38:22:a1:12:dc:49:c3:10:f7:65:89:e8:87:06: c7:61:09:44:d4:35:39:4b:2c:c1:d1:c2:65:9c:df:83:d4:91: 95:96:48:55:2e:bc:4a:02:f3:2f:31:9b:30:14:2a:d7:62:b1: b0:08:47:37:12:97:20:7c:f7:69:7f:97:f0:85:4d:90:b8:5a: 2e:28:23:1d:82:4a:28:2a:d9:86:27:86:14:b6:0b:f8:5a:f4: 68:63:e5:76:27:e0:ef:ec:c5:dc:43:36:50:a3:73:29:5e:d4: 37:d1:22:80:6b:8e:e7:42:83:83:04:29:86:84:1d:92:82:e7: 4d:dd:67:e2:b4:20:24:d2:bc:b4:0c:b2:d3:f8:f0:0f:0b:d9: 95:f2:9e:49:1d:91:90:cb:20:a6:09:59:dd:51:9f:4f:f1:21: fb:5c:a5:d9:ac:1d:9a:b3:87:c4:8e:e6:96:19:5b:87:df:9b: 30:98:b0:6d:fc:37:05:f5:b1:6c:b3:07:bd:96:64:09:8d:28: 2b:99:ac:95:95:c2:f0:34:4f:43:25:3b:45:8e:2f:68:74:e1: 07:32:23:48:b4:7b:89:19:21:5e:f0:f8:16:05:5c:ba:f7:de: 7d:70:1d:87:0f:88:52:93:a1:46:57:39:72:0b:8e:eb:bb:7b: 91:62:ae:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjQxMTIxMDMxMTE5WhcNMjQxMTI4MDMxMTE5WjAYMRYwFAYD VQQDEw02NzNlYTRkNy1kMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj5oF7+SPcbGqzkGmbM1QlAaylUyuaUcGtZnKfAMedzjTEsnfg88RWp+veBu qBsStYM73pSoYieObVoK9AghKg57pHFb5PMKG801i/Dl4VG09fl903uNz4ef+Xc8 z3Bd9yVfeABJdHq1XrFowL8vTmHt4rS4TlCyDebrHtCQZXpZtniMOvIiXNhH7qLi rfDr3QhpoUqLyMFAUDa7lRteSX66ulebkK1YDY323msYQx/uJIwoHTV4wWT+sTmh fXMVX2dVGHNr/71HAS5DztX/5NjryYKrpxn21qiHJ/FcEMFVZWFpHgz70ktFDxJk y7yxwBqVJfmx69q5VoN8TxqWqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7UFd7o 700FtG2FrgK6kSLs0VLoMB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZDRS9FOTBCRDY2ODBGODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0tx TEQ0cTF0OUF1TlRSNndOWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY1406OCKhEtxJwxD3ZYnohwbHYQlE1DU5SyzB0cJlnN+D1JGVlkhV LrxKAvMvMZswFCrXYrGwCEc3EpcgfPdpf5fwhU2QuFouKCMdgkooKtmGJ4YUtgv4 WvRoY+V2J+Dv7MXcQzZQo3MpXtQ30SKAa47nQoODBCmGhB2SgudN3WfitCAk0ry0 DLLT+PAPC9mV8p5JHZGQyyCmCVndUZ9P8SH7XKXZrB2as4fEjuaWGVuH35swmLBt /DcF9bFsswe9lmQJjSgrmayVlcLwNE9DJTtFji9odOEHMiNItHuJGSFe8PgWBVy6 9959cB2HD4hSk6FGVzlyC47ru3uRYq4/ -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:58 2024 by rpki-client on console-fra.rpki-client.org