$ rpki-client -vvf rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft File: YT7L4D69dbDJ5elhFPZXzliVsfc.mft (raw, json) Hash identifier: ou4so6Zoof0Ka5DaoLtRD0Sp3npJkZ1EO83AhzinQkQ= Subject key identifier: 9B:D6:B3:FB:42:3E:90:74:34:5D:6C:51:4C:8E:C1:48:78:68:8E:E7 Authority key identifier: 61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7 Certificate issuer: /CN=A9182794/serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft Manifest number: 11 Signing time: Sat 23 Nov 2024 06:01:25 +0000 Manifest this update: Sat 23 Nov 2024 06:01:25 +0000 Manifest next update: Sat 30 Nov 2024 06:01:25 +0000 Files and hashes: 1: YT7L4D69dbDJ5elhFPZXzliVsfc.crl (hash: k7Ru/JfoakAH7cDzoXR7jnjgn43SiL6PzoA+xz7PpS8=) 2: C296778C95CB11EFA3BE9873C4F9AE02.roa (hash: +UFQWnXReAket39ycprPx9UMMcj46jyJIl0XNC8+2yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182794/serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7 Validity Not Before: Nov 23 06:01:25 2024 GMT Not After : Nov 30 06:01:25 2024 GMT Subject: CN=67416fb5-609b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:c5:99:c3:c2:af:1f:3e:79:03:1a:ac:af: e2:36:d8:52:e5:eb:15:3d:5a:09:eb:0e:8e:4d:30: aa:0f:5f:9b:49:97:06:bb:8a:45:fc:af:12:ce:33: 33:bd:28:0a:22:8b:4f:1e:16:b6:46:c7:bf:7e:0d: 32:0c:76:d4:50:e5:0f:f8:5b:e7:56:d0:42:2b:e8: 34:a7:b2:ff:48:1d:05:55:b7:e5:19:c9:47:da:2c: 5b:6f:44:f5:41:b2:d7:37:68:3a:3a:d1:f3:10:14: b0:2e:70:a8:49:96:fa:94:f5:72:eb:86:dd:44:7e: 71:c2:d7:f1:2c:9f:57:59:e1:4b:b6:82:0d:74:4f: 86:ef:7b:5e:38:fc:b1:89:cc:32:8a:bf:3a:76:e2: 0a:e0:76:9c:4b:da:0b:82:3f:a6:80:f3:0c:2d:8d: c2:d4:ca:f9:15:a9:c0:c5:ac:67:7f:68:83:ae:c0: af:c5:4f:0a:5b:bd:1f:f9:e9:b5:06:fe:dd:fb:53: 77:43:f4:79:1e:a5:e2:4b:c8:35:71:0b:93:9a:6f: 61:f6:b3:5a:f9:fc:44:b9:38:9a:25:a8:29:06:7d: a9:8b:a6:0b:8a:44:4f:b8:fa:69:fe:9c:13:fa:fc: 58:4e:39:7d:eb:e8:9d:c6:73:d4:5b:8c:86:7e:98: c1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D6:B3:FB:42:3E:90:74:34:5D:6C:51:4C:8E:C1:48:78:68:8E:E7 X509v3 Authority Key Identifier: keyid:61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:9d:67:5d:a3:dc:95:33:6b:5a:bd:2d:d8:45:6b:6e:7a:62: 6b:f5:5d:6c:72:c6:96:a0:48:63:21:71:51:61:52:de:b3:9b: a4:ff:0d:d8:78:29:cc:58:87:a0:3b:e6:85:73:c5:e1:c3:b3: b0:fd:bd:ed:2b:22:80:b1:ad:c5:5f:b7:12:5a:37:05:e2:4c: 30:30:63:8b:58:20:84:5a:dc:d0:07:1e:6c:9f:b4:ea:bb:86: 8a:6f:9e:ac:e6:5d:10:92:84:6c:cb:04:a9:2a:33:6a:55:06: 58:ed:69:05:b0:57:13:88:79:4d:2d:30:d9:52:aa:c1:af:a4: ba:59:99:2a:f9:1d:d5:b1:57:25:fb:88:08:14:f9:c2:47:12: 37:96:39:f6:9e:b8:a2:b9:b2:5f:28:7b:ea:f4:a4:04:5c:93: ec:6b:94:26:ff:68:cd:c6:9e:c7:e6:e6:a7:28:2c:83:f1:1d: 20:da:4f:80:35:62:d1:b4:8a:01:6d:4d:ac:b1:b6:06:06:2c: 93:f0:80:3d:90:91:f8:a3:64:a7:d0:01:18:93:cb:42:60:93: 8e:fb:80:90:46:3e:2e:cd:88:f9:1a:3c:68:79:46:68:fc:1e: c6:11:fa:5f:48:f9:c5:38:ec:06:8e:6d:fb:c1:f1:10:ed:7d: 95:9e:82:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Mjc5NDExMC8GA1UEBRMoNjEzRUNCRTAzRUJENzVCMEM5RTVFOTYxMTRGNjU3Q0U1 ODk1QjFGNzAeFw0yNDExMjMwNjAxMjVaFw0yNDExMzAwNjAxMjVaMBgxFjAUBgNV BAMTDTY3NDE2ZmI1LTYwOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1z8WZw8KvHz55Axqsr+I22FLl6xU9WgnrDo5NMKoPX5tJlwa7ikX8rxLOMzO9 KAoii08eFrZGx79+DTIMdtRQ5Q/4W+dW0EIr6DSnsv9IHQVVt+UZyUfaLFtvRPVB stc3aDo60fMQFLAucKhJlvqU9XLrht1EfnHC1/Esn1dZ4Uu2gg10T4bve144/LGJ zDKKvzp24grgdpxL2guCP6aA8wwtjcLUyvkVqcDFrGd/aIOuwK/FTwpbvR/56bUG /t37U3dD9HkepeJLyDVxC5Oab2H2s1r5/ES5OJolqCkGfamLpguKRE+4+mn+nBP6 /FhOOX3r6J3Gc9RbjIZ+mMEnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm9az+0I+ kHQ0XWxRTI7BSHhojucwHwYDVR0jBBgwFoAUYT7L4D69dbDJ5elhFPZXzliVsfcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyNzk0LzczREI3N0QwOTVC RTExRUY4NEE4MjM4MUM0RjlBRTAyL1lUN0w0RDY5ZGJESjVlbGhGUFpYemxpVnNm Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVQ3TDRENjlkYkRKNWVsaEZQWlh6bGlWc2ZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy Nzk0LzczREI3N0QwOTVCRTExRUY4NEE4MjM4MUM0RjlBRTAyL1lUN0w0RDY5ZGJE SjVlbGhGUFpYemxpVnNmYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHmdZ12j3JUza1q9LdhFa256Ymv1XWxyxpagSGMhcVFhUt6zm6T/Ddh4 KcxYh6A75oVzxeHDs7D9ve0rIoCxrcVftxJaNwXiTDAwY4tYIIRa3NAHHmyftOq7 hopvnqzmXRCShGzLBKkqM2pVBljtaQWwVxOIeU0tMNlSqsGvpLpZmSr5HdWxVyX7 iAgU+cJHEjeWOfaeuKK5sl8oe+r0pARck+xrlCb/aM3Gnsfm5qcoLIPxHSDaT4A1 YtG0igFtTayxtgYGLJPwgD2QkfijZKfQARiTy0Jgk477gJBGPi7NiPkaPGh5Rmj8 HsYR+l9I+cU47AaObfvB8RDtfZWegp8= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org