$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft File: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft (raw, json) Hash identifier: B3eFuIDS2V7QZtEUC9Duyc/LlA8h30i3jf1VnzwOhq0= Subject key identifier: CA:9E:29:E9:70:2B:CF:53:D0:48:B8:23:D1:2D:D1:F6:2A:4C:A9:4D Authority key identifier: ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70 Certificate issuer: /CN=A9180542/serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70 Certificate serial: 0D10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft Manifest number: 11D6 Signing time: Fri 22 Nov 2024 17:59:26 +0000 Manifest this update: Fri 22 Nov 2024 17:59:25 +0000 Manifest next update: Fri 29 Nov 2024 17:59:25 +0000 Files and hashes: 1: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl (hash: 0Dqba7jKZQ9DVNL4aFbajVDABuzIZcf3OXXMFMZBRUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3344 (0xd10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180542/serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70 Validity Not Before: Nov 22 17:59:25 2024 GMT Not After : Nov 29 17:59:25 2024 GMT Subject: CN=6740c67e-2203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:75:20:64:59:ee:d8:08:08:1a:a9:83:24: f5:29:de:89:b8:62:f1:d4:37:7e:ac:80:15:70:8e: 89:60:3d:c8:72:4b:b1:1b:8c:82:43:39:6e:a7:ef: dd:8a:87:b6:f2:e1:00:b2:7c:e5:ae:69:61:91:fc: 50:2b:ce:13:73:17:60:12:a5:7d:48:66:5b:23:e5: 7b:f8:fa:d0:79:5b:37:ca:14:53:a9:b8:59:65:4b: 1d:74:13:eb:e0:2d:fe:4e:7a:b8:22:c6:7d:cd:37: 7c:61:21:3b:fc:b2:a4:d1:70:8c:4a:d0:5d:93:9e: 94:ec:54:1f:28:0c:53:4e:8d:cd:2f:9f:87:36:2a: cf:4e:28:63:77:b9:92:8b:57:7a:93:17:be:ef:c8: 55:b5:65:8a:0a:68:26:a9:07:a1:3f:b6:d1:88:be: b2:ff:b6:07:60:b5:6d:a1:ea:2d:ab:b1:53:85:64: 77:78:2f:4d:3c:43:b1:8f:61:57:0a:83:61:7d:8c: b3:81:2b:fe:9a:70:0d:8f:c5:f3:d4:6a:ed:ea:70: 4a:23:c5:d6:4b:91:b6:9f:a9:25:c7:2f:35:b5:cc: 0b:62:86:ca:59:03:83:ad:d4:bb:6b:d8:97:88:15: 57:68:3c:aa:8e:6d:ef:c5:91:ec:33:2b:1d:d0:8d: b8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9E:29:E9:70:2B:CF:53:D0:48:B8:23:D1:2D:D1:F6:2A:4C:A9:4D X509v3 Authority Key Identifier: keyid:ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:7f:4a:a4:a5:07:16:8d:83:d0:e3:59:d8:05:ac:be:fc:2f: 0a:80:20:8d:6f:1b:0e:12:86:91:83:61:f9:60:fe:5e:c8:96: f1:38:f6:63:cc:0a:ea:c6:cf:32:4c:9a:7c:da:10:6c:ef:3d: 11:c8:42:d9:30:7a:bb:fb:67:a0:f7:4d:36:f8:d4:89:17:84: 04:f2:f9:da:6f:f4:99:8f:fb:2f:64:c1:73:33:7b:ce:5f:fa: 20:4e:02:d8:f5:72:07:8c:e9:79:63:75:71:c8:65:8c:f2:65: 01:80:fb:a2:dc:4a:f7:30:59:a3:e7:a2:81:11:69:78:b6:b2: f3:c1:f2:42:ce:7a:18:fe:8d:3a:1d:4f:45:e8:7f:d4:12:1b: f6:15:cd:b8:7e:fc:b2:15:92:b3:c6:70:87:95:c7:30:f3:75: ee:7c:13:f8:f1:e3:6c:3a:d7:13:f0:6d:c3:8e:d8:1d:0a:e4: 96:cc:8b:55:63:22:ba:c9:e8:59:87:31:9c:b2:90:92:f0:6d: 70:78:cc:11:6e:48:fb:e6:ac:45:ae:d9:da:78:c8:ad:a0:5d: f8:db:8c:0c:e2:f4:d7:83:37:0f:d2:3b:0d:b6:dc:ce:cd:0b: c2:b6:a0:39:cf:03:4d:0a:5e:33:18:a7:ce:dc:77:be:6a:48: 51:4d:ae:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NDIxMTAvBgNVBAUTKEVEODgyNkIzOEY5NDhCRTk1NDVCMjUyNEVCMEEwNTBF ODAyQTlCNzAwHhcNMjQxMTIyMTc1OTI1WhcNMjQxMTI5MTc1OTI1WjAYMRYwFAYD VQQDEw02NzQwYzY3ZS0yMjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvS91IGRZ7tgICBqpgyT1Kd6JuGLx1Dd+rIAVcI6JYD3IckuxG4yCQzlup+/d ioe28uEAsnzlrmlhkfxQK84TcxdgEqV9SGZbI+V7+PrQeVs3yhRTqbhZZUsddBPr 4C3+Tnq4IsZ9zTd8YSE7/LKk0XCMStBdk56U7FQfKAxTTo3NL5+HNirPTihjd7mS i1d6kxe+78hVtWWKCmgmqQehP7bRiL6y/7YHYLVtoeotq7FThWR3eC9NPEOxj2FX CoNhfYyzgSv+mnANj8Xz1Grt6nBKI8XWS5G2n6klxy81tcwLYobKWQODrdS7a9iX iBVXaDyqjm3vxZHsMysd0I24sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqeKelw K89T0Ei4I9Et0fYqTKlNMB8GA1UdIwQYMBaAFO2IJrOPlIvpVFslJOsKBQ6AKptw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0Mi8wQTQ3OUM5MENB RTkxMUU5QkJFOTIxODNDNEY5QUUwMi83WWdtczQtVWktbFVXeVVrNndvRkRvQXFt M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZZ21zNC1VaS1sVVd5VWs2d29GRG9BcW0zQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0Mi8wQTQ3OUM5MENBRTkxMUU5QkJFOTIxODNDNEY5QUUwMi83WWdtczQtVWkt bFVXeVVrNndvRkRvQXFtM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAif0qkpQcWjYPQ41nYBay+/C8KgCCNbxsOEoaRg2H5YP5eyJbxOPZj zArqxs8yTJp82hBs7z0RyELZMHq7+2eg9002+NSJF4QE8vnab/SZj/svZMFzM3vO X/ogTgLY9XIHjOl5Y3VxyGWM8mUBgPui3Er3MFmj56KBEWl4trLzwfJCznoY/o06 HU9F6H/UEhv2Fc24fvyyFZKzxnCHlccw83XufBP48eNsOtcT8G3DjtgdCuSWzItV YyK6yehZhzGcspCS8G1weMwRbkj75qxFrtnaeMitoF3424wM4vTXgzcP0jsNttzO zQvCtqA5zwNNCl4zGKfO3He+akhRTa6y -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org