$ rpki-client -vvf rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft File: RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft (raw, json) Hash identifier: 2lQm2CKVHg+Z9/oBO94U6aV2MNmfkTpecJdaV1oAW6Q= Subject key identifier: 9D:DA:22:04:4D:A0:44:AA:A7:FB:15:D7:CB:82:14:08:BE:E6:51:5B Authority key identifier: 45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 Certificate issuer: /CN=A9174589/serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft Manifest number: E9 Signing time: Sat 23 Nov 2024 03:42:08 +0000 Manifest this update: Sat 23 Nov 2024 03:42:07 +0000 Manifest next update: Sat 30 Nov 2024 03:42:07 +0000 Files and hashes: 1: RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl (hash: sNrImy+jhN5sa2zBSkDbRYQdj2zOPDDA+uZ2qQ2ccVU=) 2: 5D4FB6AA9AB711EE86E1D058C4F9AE02.roa (hash: /lY6MRoQmBol07GaZSzAkv2Tfx/7fsrdKUpKLuZMxDs=) 3: AEDDF3C45DF811EFB3B36B3CC4F9AE02.roa (hash: ghYYdpH6aSDJ1crLSps3LxltxjGl3+yLyW2ydKFjnnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174589/serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Validity Not Before: Nov 23 03:42:07 2024 GMT Not After : Nov 30 03:42:07 2024 GMT Subject: CN=67414f0f-72ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:8f:ba:d6:c0:81:7d:f3:6d:66:a7:de:51: b3:6b:81:50:a3:e8:9f:e5:bd:48:90:fb:f8:ab:5d: b2:f3:03:6f:9a:cf:ee:5d:c3:88:c9:fc:a2:d0:1b: 49:96:8c:16:c7:19:92:35:45:53:90:a2:4a:d5:9b: 0d:38:2c:c2:b2:f7:a9:c5:db:9c:93:e7:d5:e6:e8: 00:95:cc:3f:3d:c3:a3:ac:04:04:cc:dc:0a:40:e1: 19:9d:c9:3c:82:d6:40:8d:f5:87:48:bc:33:cf:0c: be:73:c2:98:c6:6b:18:e8:04:b2:67:3c:6d:84:36: 6d:be:62:7b:b4:1f:1f:e5:b7:64:e9:c6:20:ae:c6: 5e:ee:c5:05:30:04:47:2b:16:2c:51:25:55:27:c1: c8:ac:e4:ee:43:41:0e:e6:71:49:f8:bc:cd:4f:c9: 59:1a:1e:c8:a2:db:b7:a0:f9:a8:df:b7:64:99:c0: e9:00:ff:8e:b6:ba:09:55:e2:45:f9:ff:e0:86:d8: e5:1e:8d:96:f7:ad:d9:f3:c0:bc:9e:75:40:9f:f5: f7:dd:21:e9:8f:c7:62:1b:a1:04:cb:39:fa:33:4b: 03:77:ba:7b:da:e6:de:ed:8b:2e:72:87:10:a4:7f: 7f:4e:79:7a:ed:c8:7e:58:da:9a:a3:a2:13:00:b6: 5a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DA:22:04:4D:A0:44:AA:A7:FB:15:D7:CB:82:14:08:BE:E6:51:5B X509v3 Authority Key Identifier: keyid:45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:90:ce:6d:b1:17:99:7a:16:4a:c7:a2:38:92:a1:ba:84:24: 5d:e2:76:72:9e:59:5c:29:f0:9b:07:8b:b0:88:2e:27:bf:e5: d2:e1:f5:28:ed:0f:67:1b:6b:72:4f:a5:0f:2e:26:61:fd:f4: 24:75:fa:79:5b:5c:b4:a2:7c:06:9f:bc:59:f1:e3:b7:52:71: bf:fb:d5:92:fa:f9:27:52:b6:53:ca:f6:33:10:4a:9a:60:6e: ab:d4:71:87:f6:07:51:1a:12:f6:05:8a:86:23:ea:27:cf:a4: d9:26:77:7a:b7:cb:f1:49:3e:a9:f7:99:8d:0c:c3:b7:a1:51: 01:7c:7d:8e:f8:de:74:5c:b4:d1:4f:c5:47:05:f4:a7:59:78: 3a:1c:99:be:e5:76:ea:02:9b:c9:74:e8:29:9a:0c:2f:2e:96: 44:6a:fa:74:2c:99:f4:cf:81:ed:eb:05:d5:fc:56:e1:66:a4: 92:fe:1a:ec:6a:43:53:ca:86:b4:3f:ac:7f:04:48:05:04:bb: b8:50:4f:b8:ef:61:d8:5d:f4:2e:5b:9e:00:d1:ba:d3:1c:6b: 46:78:6d:34:27:44:9a:88:3d:01:fb:18:9d:86:58:10:e8:ba: dc:23:d0:65:1f:11:4e:1f:01:e8:ad:2c:95:ca:6c:a3:0d:7d: cb:0c:f4:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ1ODkxMTAvBgNVBAUTKDQ1OENERENBM0U4RkI2NEM5RDFBMjM0OTI1MjhCQTc3 N0ZDREQyMzQwHhcNMjQxMTIzMDM0MjA3WhcNMjQxMTMwMDM0MjA3WjAYMRYwFAYD VQQDEw02NzQxNGYwZi03MmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKyPutbAgX3zbWan3lGza4FQo+if5b1IkPv4q12y8wNvms/uXcOIyfyi0BtJ lowWxxmSNUVTkKJK1ZsNOCzCsvepxduck+fV5ugAlcw/PcOjrAQEzNwKQOEZnck8 gtZAjfWHSLwzzwy+c8KYxmsY6ASyZzxthDZtvmJ7tB8f5bdk6cYgrsZe7sUFMARH KxYsUSVVJ8HIrOTuQ0EO5nFJ+LzNT8lZGh7Iotu3oPmo37dkmcDpAP+OtroJVeJF +f/ghtjlHo2W963Z88C8nnVAn/X33SHpj8diG6EEyzn6M0sDd7p72ube7YsucocQ pH9/Tnl67ch+WNqao6ITALZajQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3aIgRN oESqp/sV18uCFAi+5lFbMB8GA1UdIwQYMBaAFEWM3co+j7ZMnRojSSUound/zdI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDU4OS81RkM2MjdDNDYx QzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRreWRHaU5KSlNpNmQzX04w alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZemR5ajZQdGt5ZEdpTkpKU2k2ZDNfTjBqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDU4OS81RkM2MjdDNDYxQzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRr eWRHaU5KSlNpNmQzX04walEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvkM5tsReZehZKx6I4kqG6hCRd4nZynllcKfCbB4uwiC4nv+XS4fUo 7Q9nG2tyT6UPLiZh/fQkdfp5W1y0onwGn7xZ8eO3UnG/+9WS+vknUrZTyvYzEEqa YG6r1HGH9gdRGhL2BYqGI+onz6TZJnd6t8vxST6p95mNDMO3oVEBfH2O+N50XLTR T8VHBfSnWXg6HJm+5XbqApvJdOgpmgwvLpZEavp0LJn0z4Ht6wXV/FbhZqSS/hrs akNTyoa0P6x/BEgFBLu4UE+472HYXfQuW54A0brTHGtGeG00J0SaiD0B+xidhlgQ 6LrcI9BlHxFOHwHorSyVymyjDX3LDPRp -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:51 2024 by rpki-client on console-fra.rpki-client.org