$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft File: _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json) Hash identifier: iX4Yh5CQlECCa2TmWsPLpVVbsDmxB2T6bKastz/B9jQ= Subject key identifier: 97:A5:74:D7:58:A2:F0:8D:58:4C:5A:B0:66:A4:B6:ED:A5:46:86:D3 Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 Certificate issuer: /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft Manifest number: 1F Signing time: Sat 23 Nov 2024 05:48:20 +0000 Manifest this update: Sat 23 Nov 2024 05:48:20 +0000 Manifest next update: Sat 30 Nov 2024 05:48:20 +0000 Files and hashes: 1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: NaWlGOsK8XWu7Y3XW/k9FU3/YbqK201YsZq63Vw+lqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Validity Not Before: Nov 23 05:48:20 2024 GMT Not After : Nov 30 05:48:20 2024 GMT Subject: CN=67416ca4-71c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:37:be:59:54:c2:6a:01:8b:01:5e:93:4b:22: 84:46:ca:db:58:7c:63:ae:12:fe:fa:d1:15:64:1e: 68:2c:ac:3b:09:e0:0b:d3:76:77:73:64:d5:eb:4b: 13:dc:8d:56:77:52:f8:00:f0:a6:3d:29:e8:6d:57: 6f:0c:c3:88:95:52:33:eb:da:5b:10:3c:ff:54:82: f0:83:5f:31:e6:d1:07:92:a5:49:e3:63:b7:f2:6a: 15:97:42:53:f3:4d:68:e7:49:62:c6:3a:1c:4c:1e: 52:ba:08:89:34:91:b4:34:ab:53:f9:78:db:20:f8: a7:a2:72:51:81:30:12:30:af:aa:ab:b6:77:b6:8e: be:7a:ba:ee:50:67:85:11:e9:a5:17:a4:7d:9d:87: 42:25:88:10:fe:fc:59:29:a1:f8:55:09:ea:a0:3a: 67:9f:8a:03:64:35:ce:2c:16:27:1a:19:55:a1:3c: a1:4f:ea:24:89:2a:d7:12:4f:fa:4a:38:2a:5e:0b: 75:98:77:87:be:48:3c:b2:32:14:3b:73:a2:df:62: 19:3f:38:55:5d:27:b9:90:41:76:a0:6e:1d:2f:b4: bf:e1:1e:7a:0d:cb:7f:2b:9e:4a:f1:2e:d6:35:5d: 8c:af:97:83:46:3f:e8:73:74:97:4a:cb:a0:c3:18: 99:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A5:74:D7:58:A2:F0:8D:58:4C:5A:B0:66:A4:B6:ED:A5:46:86:D3 X509v3 Authority Key Identifier: keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0f:d2:54:e4:62:2c:12:3b:66:b7:ae:d4:64:ef:c1:bd:87: f9:ce:3a:be:f8:41:3f:16:cb:e6:b2:db:7e:09:e8:55:00:ca: dd:64:42:31:9e:fa:03:80:96:be:50:f0:96:d2:a7:e6:cb:44: 31:d9:b1:ba:8e:02:43:3e:7b:6b:45:77:79:10:47:a7:18:6c: 34:c1:40:12:f2:83:f7:5a:4a:7f:65:8c:54:8f:c8:9e:a7:49: 37:08:14:39:a9:89:a4:25:5b:0a:90:2f:b6:89:40:f6:f3:99: 4b:45:1f:43:b0:76:2f:cb:db:0f:38:59:f2:81:a5:77:96:08: 57:c3:d3:eb:3a:65:04:38:ac:8b:29:23:a0:15:91:d2:ba:25: c1:f3:d7:89:3f:e9:e3:d4:d4:b6:33:96:72:12:8f:7c:f2:c1: be:2c:62:13:45:c1:5b:44:70:0e:f2:4e:07:79:37:e3:b9:bf: 2e:11:0c:c5:a2:8e:82:7f:31:2f:77:d5:7f:e9:76:fa:59:c3: 7b:46:cb:cc:80:2c:03:88:42:dc:a9:42:4e:48:b4:3d:24:94: 92:66:08:21:8b:6b:47:17:11:89:c1:05:2d:4f:de:de:8c:1c: 3f:8f:82:12:88:17:38:c9:64:58:1b:21:3d:e0:09:98:42:05: 27:0e:ef:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDdCQjExMC8GA1UEBRMoRkQ4MDEyQkZFOTkxMjlFRjlDOEJCN0E0NjAzMjE0NDJG NkQyNjU2MjAeFw0yNDExMjMwNTQ4MjBaFw0yNDExMzAwNTQ4MjBaMBgxFjAUBgNV BAMTDTY3NDE2Y2E0LTcxYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZN75ZVMJqAYsBXpNLIoRGyttYfGOuEv760RVkHmgsrDsJ4AvTdndzZNXrSxPc jVZ3UvgA8KY9KehtV28Mw4iVUjPr2lsQPP9UgvCDXzHm0QeSpUnjY7fyahWXQlPz TWjnSWLGOhxMHlK6CIk0kbQ0q1P5eNsg+KeiclGBMBIwr6qrtne2jr56uu5QZ4UR 6aUXpH2dh0IliBD+/FkpofhVCeqgOmefigNkNc4sFicaGVWhPKFP6iSJKtcST/pK OCpeC3WYd4e+SDyyMhQ7c6LfYhk/OFVdJ7mQQXagbh0vtL/hHnoNy38rnkrxLtY1 XYyvl4NGP+hzdJdKy6DDGJnxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl6V011ii 8I1YTFqwZqS27aVGhtMwHwYDVR0jBBgwFoAU/YASv+mRKe+ci7ekYDIUQvbSZWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwN0JCLzAxRDIzOUE0N0NC MzExRUY5NkM5RjI1MEM0RjlBRTAyL19ZQVN2LW1SS2UtY2k3ZWtZRElVUXZiU1pX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1lBU3YtbVJLZS1jaTdla1lESVVRdmJTWldJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw N0JCLzAxRDIzOUE0N0NCMzExRUY5NkM5RjI1MEM0RjlBRTAyL19ZQVN2LW1SS2Ut Y2k3ZWtZRElVUXZiU1pXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA0P0lTkYiwSO2a3rtRk78G9h/nOOr74QT8Wy+ay234J6FUAyt1kQjGe +gOAlr5Q8JbSp+bLRDHZsbqOAkM+e2tFd3kQR6cYbDTBQBLyg/daSn9ljFSPyJ6n STcIFDmpiaQlWwqQL7aJQPbzmUtFH0Owdi/L2w84WfKBpXeWCFfD0+s6ZQQ4rIsp I6AVkdK6JcHz14k/6ePU1LYzlnISj3zywb4sYhNFwVtEcA7yTgd5N+O5vy4RDMWi joJ/MS931X/pdvpZw3tGy8yALAOIQtypQk5ItD0klJJmCCGLa0cXEYnBBS1P3t6M HD+PghKIFzjJZFgbIT3gCZhCBScO7xM= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org