$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft File: _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json) Hash identifier: R5/dPQrp4/LVHec8fLl/jplajwa+VFmp/DYEAGdgOpQ= Subject key identifier: 47:77:B2:62:23:3C:AF:F7:3D:65:F8:E9:40:F2:54:37:E0:07:E6:CB Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 Certificate issuer: /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft Manifest number: 0F Signing time: Wed 23 Oct 2024 06:44:34 +0000 Manifest this update: Wed 23 Oct 2024 06:44:34 +0000 Manifest next update: Wed 30 Oct 2024 06:44:34 +0000 Files and hashes: 1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: hr66I1DDpQMDj/9jOnLx+VmLP1uTZfn4VA1Wo62f3dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Validity Not Before: Oct 23 06:44:34 2024 GMT Not After : Oct 30 06:44:34 2024 GMT Subject: CN=67189b52-b7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9f:0c:a5:ef:3e:90:bf:2c:d7:da:f6:ca:40: 1e:a8:b2:fa:74:b7:1c:b2:69:4c:e3:11:be:19:14: 8f:c6:7b:2a:ec:5d:70:b9:eb:f2:46:eb:bd:ad:4d: 79:a8:85:f0:35:38:f7:0d:07:23:a3:e6:e8:c1:f3: fe:47:c0:e9:3d:f2:76:e8:23:06:bb:78:74:fc:b2: 5c:d3:b4:0a:5c:d6:e7:38:67:ee:8d:70:2a:0a:c2: c1:62:44:a9:67:84:6a:74:81:04:e2:6e:5f:af:51: 75:bd:c3:da:8e:e4:68:d5:46:44:02:0e:70:bf:2a: 11:2d:b9:9d:b4:b0:34:db:cd:bc:55:91:02:d2:42: b5:82:b8:69:a6:25:be:a5:71:b4:96:2f:71:12:31: 3c:b7:db:af:5a:c2:9d:54:d3:62:ff:21:cc:11:11: 18:92:a4:2f:88:4e:66:5c:fe:79:39:65:40:7b:aa: 87:05:04:fb:28:2e:4f:69:cf:fe:4a:f8:4e:61:21: 8d:c1:22:f3:0e:69:2b:1f:63:ec:24:53:a1:f5:49: a0:2f:d1:f8:5c:b1:ea:2c:24:3f:7d:58:02:75:3b: 78:df:94:47:af:c9:d3:4a:ed:42:4b:36:27:d3:3e: 82:ae:fa:62:f5:3d:55:88:82:72:88:44:25:b9:04: c3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:77:B2:62:23:3C:AF:F7:3D:65:F8:E9:40:F2:54:37:E0:07:E6:CB X509v3 Authority Key Identifier: keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:79:94:75:5f:87:62:a4:4a:ae:d9:81:bd:a4:40:4c:c7:5c: 06:41:a8:94:ce:56:7e:ef:12:21:ff:5d:75:23:72:ef:1b:96: 5d:fe:8a:84:5e:6b:99:af:c8:3a:9f:c9:20:1e:41:0d:e1:a2: ad:58:d2:36:20:69:01:9c:05:90:ac:50:ec:92:dc:3e:8d:85: 3d:3d:0f:fa:85:3f:6d:65:2d:c2:88:ff:95:ca:1e:c3:ec:30: e1:49:8e:5c:5b:b2:08:4a:95:80:7f:78:14:85:00:96:c4:25: a4:79:c8:f9:b1:f7:3d:23:4a:63:e0:6d:ae:03:ce:79:14:13: 8d:a8:61:4f:c7:14:e4:05:63:69:66:ca:31:2e:ee:9e:46:69: 4b:20:97:84:27:22:65:96:90:95:7a:3e:a7:52:6c:1b:50:73: 12:ca:bd:b9:de:39:f5:20:8c:d5:96:be:9f:e6:63:c5:3b:f0: a1:30:fe:3a:c8:7f:47:1b:9b:c9:6f:e2:cd:58:15:a5:08:6f: 3f:01:2a:c1:48:b6:77:50:3b:c8:51:77:f6:c5:72:ba:c3:fa: af:e6:e5:dd:2d:c5:e6:61:2c:07:5e:d3:86:f2:04:a2:d9:61: 9c:c5:f8:d0:86:5f:98:a4:36:77:cc:df:53:82:03:b9:9a:06: 3d:04:f4:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDdCQjExMC8GA1UEBRMoRkQ4MDEyQkZFOTkxMjlFRjlDOEJCN0E0NjAzMjE0NDJG NkQyNjU2MjAeFw0yNDEwMjMwNjQ0MzRaFw0yNDEwMzAwNjQ0MzRaMBgxFjAUBgNV BAMTDTY3MTg5YjUyLWI3ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJnwyl7z6QvyzX2vbKQB6osvp0txyyaUzjEb4ZFI/GeyrsXXC56/JG672tTXmo hfA1OPcNByOj5ujB8/5HwOk98nboIwa7eHT8slzTtApc1uc4Z+6NcCoKwsFiRKln hGp0gQTibl+vUXW9w9qO5GjVRkQCDnC/KhEtuZ20sDTbzbxVkQLSQrWCuGmmJb6l cbSWL3ESMTy3269awp1U02L/IcwRERiSpC+ITmZc/nk5ZUB7qocFBPsoLk9pz/5K +E5hIY3BIvMOaSsfY+wkU6H1SaAv0fhcseosJD99WAJ1O3jflEevydNK7UJLNifT PoKu+mL1PVWIgnKIRCW5BMNTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR3eyYiM8 r/c9ZfjpQPJUN+AH5sswHwYDVR0jBBgwFoAU/YASv+mRKe+ci7ekYDIUQvbSZWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwN0JCLzAxRDIzOUE0N0NC MzExRUY5NkM5RjI1MEM0RjlBRTAyL19ZQVN2LW1SS2UtY2k3ZWtZRElVUXZiU1pX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1lBU3YtbVJLZS1jaTdla1lESVVRdmJTWldJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw N0JCLzAxRDIzOUE0N0NCMzExRUY5NkM5RjI1MEM0RjlBRTAyL19ZQVN2LW1SS2Ut Y2k3ZWtZRElVUXZiU1pXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG15lHVfh2KkSq7Zgb2kQEzHXAZBqJTOVn7vEiH/XXUjcu8bll3+ioRe a5mvyDqfySAeQQ3hoq1Y0jYgaQGcBZCsUOyS3D6NhT09D/qFP21lLcKI/5XKHsPs MOFJjlxbsghKlYB/eBSFAJbEJaR5yPmx9z0jSmPgba4DznkUE42oYU/HFOQFY2lm yjEu7p5GaUsgl4QnImWWkJV6PqdSbBtQcxLKvbneOfUgjNWWvp/mY8U78KEw/jrI f0cbm8lv4s1YFaUIbz8BKsFItndQO8hRd/bFcrrD+q/m5d0txeZhLAde04byBKLZ YZzF+NCGX5ikNnfM31OCA7maBj0E9Ag= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:56 2024 by rpki-client on console-ams.rpki-client.org