$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft File: YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft (raw, json) Hash identifier: RtSoGgeI2irwr+2mstHCOHEcc1VbzmcpeJK70GBYUi4= Subject key identifier: FE:B3:3E:9C:66:D4:52:03:A7:C7:56:79:12:C3:98:27:E9:BC:44:A3 Authority key identifier: 61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A Certificate issuer: /CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft Manifest number: A3 Signing time: Sat 23 Nov 2024 04:15:11 +0000 Manifest this update: Sat 23 Nov 2024 04:15:11 +0000 Manifest next update: Sat 30 Nov 2024 04:15:11 +0000 Files and hashes: 1: YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl (hash: a8VjMAwPyHPiwF2NcqCz8DmVjGsMChEUrNUM8dH0CCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Validity Not Before: Nov 23 04:15:11 2024 GMT Not After : Nov 30 04:15:11 2024 GMT Subject: CN=674156cf-6255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:60:90:08:1b:fe:5c:02:e2:a1:ca:cc:48: c4:b7:03:b4:e7:3e:5b:bd:fb:2a:89:f6:9f:f4:9a: be:6a:b3:77:49:b4:22:5f:2d:be:7a:78:02:81:b6: ab:72:4f:33:1c:58:dd:7a:df:83:4d:10:85:89:61: c4:82:32:6a:88:35:54:b4:45:7a:85:00:ef:e8:56: e6:17:c0:8d:3e:24:83:f1:1b:8d:40:b8:eb:dd:df: 84:a8:46:33:be:68:b5:cc:0c:f7:a2:08:81:c4:2a: 57:6a:ce:02:e4:c1:02:fd:cb:e9:76:d0:32:3c:96: 14:88:a8:17:16:69:3b:a7:38:3e:ce:51:35:a8:5a: 8f:0f:07:af:54:a2:67:f9:d2:e1:34:09:22:57:7e: 71:1d:66:ee:cd:69:a5:b7:4b:c1:64:5b:6c:ae:23: be:34:5e:e9:23:4f:98:ef:18:83:d2:f3:2e:76:e1: 1a:2b:5e:f9:01:47:ec:4a:1b:8c:86:bb:4a:af:c8: d9:64:6b:7b:6d:55:e2:3a:31:ec:cf:17:5b:f0:3c: 1f:a4:26:75:1c:5f:2a:e9:a7:28:e1:51:c3:f2:78: ba:7e:41:a6:0f:a9:e3:fe:17:37:d1:95:09:27:6d: 34:27:d2:59:5b:3e:23:90:15:e4:b5:c7:96:c1:db: e4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B3:3E:9C:66:D4:52:03:A7:C7:56:79:12:C3:98:27:E9:BC:44:A3 X509v3 Authority Key Identifier: keyid:61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:4f:76:97:1e:59:98:35:6e:f4:7f:c7:f4:4f:20:a1:5d:12: 7d:34:59:70:d2:c1:8e:15:14:de:e1:bc:18:5d:9d:9f:a5:44: 04:5d:e1:c6:94:57:47:62:48:2f:8f:5e:87:46:8c:1e:7c:97: 6b:aa:b4:ab:ef:85:29:ab:d5:82:9a:81:4b:27:b2:e1:c7:fe: d6:27:ae:c5:c0:6b:85:bc:c9:c6:b8:50:17:0f:cc:15:5f:9b: 4b:a7:f4:a4:70:e5:9c:20:6c:8e:0f:06:94:c9:64:e3:eb:ba: 00:c8:97:4c:7c:5c:25:da:b5:d2:7f:70:19:15:1b:0d:3d:08: 6d:33:43:45:d9:51:62:b5:18:37:c0:5c:29:8f:9c:92:70:93: 42:7d:d5:bc:f8:35:c6:0c:d5:f0:a8:a1:fc:e1:50:ae:8f:d2: cf:98:00:74:25:f0:07:fb:42:d0:6d:5b:ff:3b:f0:f8:1e:0c: c4:97:25:eb:f8:31:46:9d:60:d8:8d:43:d6:28:0d:03:81:b7: 6f:4c:a9:df:fb:83:b6:1b:bc:98:6d:65:9f:7f:9f:30:11:60: 08:5f:f8:b5:42:53:12:31:20:93:78:81:b3:10:3c:c4:d4:f6: f2:00:e3:36:e4:2b:6d:9f:f0:64:50:4d:91:5f:1d:a9:74:b1: 4d:27:66:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEMTYxMTAvBgNVBAUTKDYxMzU0OUE4RDU5NjM3M0Q4NjVBMjIwRTJFQjFBODYw NEJENzUxOEEwHhcNMjQxMTIzMDQxNTExWhcNMjQxMTMwMDQxNTExWjAYMRYwFAYD VQQDEw02NzQxNTZjZi02MjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQ1gkAgb/lwC4qHKzEjEtwO05z5bvfsqifaf9Jq+arN3SbQiXy2+engCgbar ck8zHFjdet+DTRCFiWHEgjJqiDVUtEV6hQDv6FbmF8CNPiSD8RuNQLjr3d+EqEYz vmi1zAz3ogiBxCpXas4C5MEC/cvpdtAyPJYUiKgXFmk7pzg+zlE1qFqPDwevVKJn +dLhNAkiV35xHWbuzWmlt0vBZFtsriO+NF7pI0+Y7xiD0vMuduEaK175AUfsShuM hrtKr8jZZGt7bVXiOjHszxdb8DwfpCZ1HF8q6aco4VHD8ni6fkGmD6nj/hc30ZUJ J200J9JZWz4jkBXktceWwdvkVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6zPpxm 1FIDp8dWeRLDmCfpvESjMB8GA1UdIwQYMBaAFGE1SajVljc9hloiDi6xqGBL11GK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQxNi82RUEzMEIwMkFF OUMxMUVFOTExQUZCNjNDNEY5QUUwMi9ZVFZKcU5XV056MkdXaUlPTHJHb1lFdlhV WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lUVkpxTldXTnoyR1dpSU9MckdvWUV2WFVZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQxNi82RUEzMEIwMkFFOUMxMUVFOTExQUZCNjNDNEY5QUUwMi9ZVFZKcU5XV056 MkdXaUlPTHJHb1lFdlhVWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAT3aXHlmYNW70f8f0TyChXRJ9NFlw0sGOFRTe4bwYXZ2fpUQEXeHG lFdHYkgvj16HRowefJdrqrSr74Upq9WCmoFLJ7Lhx/7WJ67FwGuFvMnGuFAXD8wV X5tLp/SkcOWcIGyODwaUyWTj67oAyJdMfFwl2rXSf3AZFRsNPQhtM0NF2VFitRg3 wFwpj5yScJNCfdW8+DXGDNXwqKH84VCuj9LPmAB0JfAH+0LQbVv/O/D4HgzElyXr +DFGnWDYjUPWKA0DgbdvTKnf+4O2G7yYbWWff58wEWAIX/i1QlMSMSCTeIGzEDzE 1PbyAOM25Cttn/BkUE2RXx2pdLFNJ2aP -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org