$ rpki-client -vvf rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft File: YQPK5q-yXkC6nl2kxULP4JtndCo.mft (raw, json) Hash identifier: AQNNgHjDJXwIIQRN0SQOEoXEU446J+smPfbpeR1tHXs= Subject key identifier: B3:41:8D:4B:77:C2:FE:C4:26:72:B1:A7:1F:3D:22:C8:88:B6:1C:AC Authority key identifier: 61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A Certificate issuer: /CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A Certificate serial: 0924 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft Manifest number: 091C Signing time: Fri 22 Nov 2024 20:05:47 +0000 Manifest this update: Fri 22 Nov 2024 20:05:46 +0000 Manifest next update: Fri 29 Nov 2024 20:05:46 +0000 Files and hashes: 1: YQPK5q-yXkC6nl2kxULP4JtndCo.crl (hash: oHkldULMCuVVZ+6xi6gXdIfPL3ceG5seR6lipWc4gZM=) 2: B781FD5C8FB411EAA396FB5CC4F9AE02.roa (hash: kppfjOmUGO+tWg93gbF2w14mllXA4v8g2v3smcz3zqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2340 (0x924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A Validity Not Before: Nov 22 20:05:46 2024 GMT Not After : Nov 29 20:05:46 2024 GMT Subject: CN=6740e41a-a80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:65:8b:2a:61:67:57:b9:2c:e4:ef:0a:bb:ce: 93:e0:e9:55:7c:39:5d:fc:da:73:38:33:78:e2:83: 05:52:89:98:22:55:af:21:a5:a8:7d:ba:dc:96:7e: c8:d3:ca:df:3d:da:fd:32:76:fa:5b:b4:ac:b1:5e: 17:cb:d5:8a:a7:5e:95:2c:f2:13:68:ee:56:c1:6b: bf:ec:84:59:b5:b0:f9:33:1a:53:9c:01:62:44:01: db:d4:06:81:a1:f0:3b:31:49:41:60:c1:4a:57:6e: 5e:33:6b:5d:63:50:38:4b:54:75:68:b7:a7:ee:d7: 47:7a:53:40:3c:c4:34:7d:45:48:dc:68:08:22:6c: 7a:c1:97:1b:b9:0c:b6:61:2a:59:9d:b0:78:de:26: 24:c7:2c:d4:d8:3a:e1:00:09:3e:b0:b3:32:55:17: 88:51:4a:c2:e0:db:b6:d7:d1:0b:35:b8:0a:0e:c9: 06:75:22:05:00:15:c3:ea:fa:58:d6:07:2d:fa:13: f9:05:dc:7e:c6:42:40:be:8c:9f:bc:fc:56:90:24: 9c:ff:31:79:f8:ae:d3:11:75:f5:7a:6b:ef:a7:92: e9:ee:a3:1d:54:8d:00:81:af:e9:a2:15:3e:41:d1: 20:54:2f:a5:61:b4:5b:fb:4a:39:2a:af:8b:29:78: 42:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:41:8D:4B:77:C2:FE:C4:26:72:B1:A7:1F:3D:22:C8:88:B6:1C:AC X509v3 Authority Key Identifier: keyid:61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:e6:aa:b2:a4:1f:87:92:d1:7f:72:20:30:38:ae:b7:46:e2: 3a:87:14:a2:69:fd:2f:f4:a4:ca:b8:62:dc:05:ca:4e:f2:ff: f0:91:9d:7a:a3:87:87:51:e2:19:49:8d:cb:7c:a3:ec:bf:cf: 20:34:f8:0d:29:ee:84:f4:18:5e:d3:ed:0c:ee:57:36:a5:8e: 3b:35:63:bd:da:d6:7d:36:47:f3:9f:c7:2a:34:e4:a8:42:c0: ba:cb:43:95:ef:bc:34:06:ff:17:bb:6f:21:f9:ed:3a:23:8a: ac:98:02:26:8c:f2:ea:aa:3b:de:6a:61:63:a9:69:4b:3a:39: 7e:50:1a:57:9c:bc:eb:e9:9f:17:03:e9:ba:f5:4c:6c:bc:7a: 46:92:58:4a:7d:1c:14:da:70:61:86:7a:1b:0f:aa:a3:ae:bb: d7:8b:32:97:5d:b7:9b:db:cb:ae:39:46:f6:43:c6:73:36:ea: 22:d8:02:c9:f8:79:c8:03:7a:fb:ac:50:7f:0f:eb:47:30:7b: 1f:ab:24:f1:08:5f:5d:c9:26:ce:8a:1a:2d:61:cf:fa:6e:1b: c2:64:19:b5:ff:8b:b4:00:0c:06:c4:00:61:02:50:3e:66:2a: 75:ed:25:08:66:fe:94:f0:f5:53:90:fb:dc:c3:19:50:21:f8: f3:58:1e:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYxOTMxMTAvBgNVBAUTKDYxMDNDQUU2QUZCMjVFNDBCQTlFNURBNEM1NDJDRkUw OUI2Nzc0MkEwHhcNMjQxMTIyMjAwNTQ2WhcNMjQxMTI5MjAwNTQ2WjAYMRYwFAYD VQQDEw02NzQwZTQxYS1hODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WWLKmFnV7ks5O8Ku86T4OlVfDld/NpzODN44oMFUomYIlWvIaWofbrcln7I 08rfPdr9Mnb6W7SssV4Xy9WKp16VLPITaO5WwWu/7IRZtbD5MxpTnAFiRAHb1AaB ofA7MUlBYMFKV25eM2tdY1A4S1R1aLen7tdHelNAPMQ0fUVI3GgIImx6wZcbuQy2 YSpZnbB43iYkxyzU2DrhAAk+sLMyVReIUUrC4Nu219ELNbgKDskGdSIFABXD6vpY 1gct+hP5Bdx+xkJAvoyfvPxWkCSc/zF5+K7TEXX1emvvp5Lp7qMdVI0Aga/pohU+ QdEgVC+lYbRb+0o5Kq+LKXhCswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNBjUt3 wv7EJnKxpx89IsiIthysMB8GA1UdIwQYMBaAFGEDyuavsl5Aup5dpMVCz+CbZ3Qq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjE5My8xRDUxNDA1RThG QjMxMUVBQjcxMjZDNTdDNEY5QUUwMi9ZUVBLNXEteVhrQzZubDJreFVMUDRKdG5k Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lRUEs1cS15WGtDNm5sMmt4VUxQNEp0bmRDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjE5My8xRDUxNDA1RThGQjMxMUVBQjcxMjZDNTdDNEY5QUUwMi9ZUVBLNXEteVhr QzZubDJreFVMUDRKdG5kQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo5qqypB+HktF/ciAwOK63RuI6hxSiaf0v9KTKuGLcBcpO8v/wkZ16 o4eHUeIZSY3LfKPsv88gNPgNKe6E9Bhe0+0M7lc2pY47NWO92tZ9Nkfzn8cqNOSo QsC6y0OV77w0Bv8Xu28h+e06I4qsmAImjPLqqjveamFjqWlLOjl+UBpXnLzr6Z8X A+m69UxsvHpGklhKfRwU2nBhhnobD6qjrrvXizKXXbeb28uuOUb2Q8ZzNuoi2ALJ +HnIA3r7rFB/D+tHMHsfqyTxCF9dySbOihotYc/6bhvCZBm1/4u0AAwGxABhAlA+ Zip17SUIZv6U8PVTkPvcwxlQIfjzWB5h -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org