$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft File: y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json) Hash identifier: p7yA5nBV2ECgZ+t2HaZ1KBtmMQONRtidCOK/FWLMBZs= Subject key identifier: 33:4E:89:7E:68:CF:6E:A1:AB:6F:87:9E:9B:2B:AF:4C:2F:26:A3:ED Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 Certificate issuer: /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Certificate serial: 071E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft Manifest number: 0E42 Signing time: Fri 22 Nov 2024 21:18:30 +0000 Manifest this update: Fri 22 Nov 2024 21:18:30 +0000 Manifest next update: Fri 29 Nov 2024 21:18:30 +0000 Files and hashes: 1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: /rZvnr45Cj19KxlpJ6WTLV205ewyhIJzOHrwZtbiZMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1822 (0x71e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Validity Not Before: Nov 22 21:18:30 2024 GMT Not After : Nov 29 21:18:30 2024 GMT Subject: CN=6740f526-d79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:62:98:77:06:f1:d6:e3:42:71:3b:4a:66:53: e8:71:bd:54:83:11:63:74:5d:04:4f:31:ae:f1:0b: 12:39:58:2a:eb:76:d8:e2:e9:42:2c:0c:1d:18:42: ca:d1:f9:47:70:c0:ff:d5:8c:07:ad:47:b5:b7:a6: b2:17:a6:9b:ba:5d:a3:4d:68:6a:19:66:7c:3f:ab: 8e:08:be:5b:4c:0e:9c:f1:3c:86:fb:74:fb:47:25: bd:be:82:97:94:e9:f8:02:8f:d9:54:4b:ac:53:b2: d6:6b:c2:3d:5c:a4:ba:47:7f:da:d1:94:1a:1e:e2: 6c:64:50:34:85:29:62:bb:b2:e0:eb:3f:a9:79:75: d5:a5:f1:20:0f:60:dc:bf:4f:3f:5a:ed:8d:32:e1: 30:9d:c2:0e:93:a1:64:cf:06:ca:96:5e:ea:5d:88: d2:3b:24:82:f5:59:97:14:81:c8:d4:11:9c:37:a1: 7d:25:a8:6e:da:9f:8e:93:0d:6e:4e:6b:6b:0f:7f: 0e:0e:9e:59:c5:5b:0d:9f:c3:a8:1b:0c:7c:cb:df: eb:d7:96:af:63:2f:dc:25:66:7e:89:43:c9:ed:98: 24:e3:5a:6f:0e:17:02:f3:a4:7a:cd:a2:48:0c:43: 3f:0d:9b:43:d5:37:4b:f4:a5:11:a4:ce:b9:f0:f0: df:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4E:89:7E:68:CF:6E:A1:AB:6F:87:9E:9B:2B:AF:4C:2F:26:A3:ED X509v3 Authority Key Identifier: keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f4:4f:cf:6d:eb:62:c9:fd:97:09:45:34:8d:8f:1a:56:06: af:f2:b7:de:73:41:b3:cc:89:20:72:8d:37:b6:5b:37:ab:37: 79:37:33:35:bf:aa:05:42:36:9d:77:0f:38:d6:f3:06:67:90: ef:5f:e8:db:c8:f8:ed:79:51:97:3a:a9:f3:f3:b3:66:bc:91: ab:f5:c7:5a:d5:e6:17:77:5c:86:0c:b8:96:db:36:76:e8:ae: d3:89:1f:d8:a4:90:fe:8a:42:bb:e9:69:4f:6e:a5:c1:4d:b7: 41:6f:83:b2:81:ac:ae:10:b6:a9:e9:37:00:73:2d:a9:89:6e: b8:20:f1:48:e1:60:1b:7f:cb:03:d2:56:ca:e4:9d:8c:9b:40: b7:d3:c0:a6:ef:73:dd:ff:18:f5:a0:10:ec:f6:50:c8:97:18: 0c:6f:94:19:42:11:09:ed:c3:d1:45:06:24:0a:cd:b6:da:49: 30:aa:bd:a2:5c:ac:2f:d5:94:ad:f8:9c:f0:da:ec:80:02:43: 64:95:a7:50:24:2e:ff:fd:ad:13:4f:70:ba:16:09:e2:86:dc: d2:93:21:8b:25:6f:1b:85:b8:14:85:cc:a6:1b:a4:9b:5f:95: 07:9a:64:6a:35:d9:10:69:2d:33:47:06:d8:bb:17:72:25:b7: af:aa:bc:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKENCQjQ1RTcxMUY1MDM4QzQ3NTc1RTZGNEVFMEMwRThD NTY3QkUzODgwHhcNMjQxMTIyMjExODMwWhcNMjQxMTI5MjExODMwWjAYMRYwFAYD VQQDEw02NzQwZjUyNi1kNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4WKYdwbx1uNCcTtKZlPocb1UgxFjdF0ETzGu8QsSOVgq63bY4ulCLAwdGELK 0flHcMD/1YwHrUe1t6ayF6abul2jTWhqGWZ8P6uOCL5bTA6c8TyG+3T7RyW9voKX lOn4Ao/ZVEusU7LWa8I9XKS6R3/a0ZQaHuJsZFA0hSliu7Lg6z+peXXVpfEgD2Dc v08/Wu2NMuEwncIOk6FkzwbKll7qXYjSOySC9VmXFIHI1BGcN6F9Jahu2p+Okw1u TmtrD38ODp5ZxVsNn8OoGwx8y9/r15avYy/cJWZ+iUPJ7Zgk41pvDhcC86R6zaJI DEM/DZtD1TdL9KURpM658PDf/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNOiX5o z26hq2+Hnpsrr0wvJqPtMB8GA1UdIwQYMBaAFMu0XnEfUDjEdXXm9O4MDoxWe+OI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9NUjFkZWIwN2d3T2pGWjc0 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3UmVjUjlRT01SMWRlYjA3Z3dPakZaNzQ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9N UjFkZWIwN2d3T2pGWjc0NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/9E/Pbetiyf2XCUU0jY8aVgav8rfec0GzzIkgco03tls3qzd5NzM1 v6oFQjaddw841vMGZ5DvX+jbyPjteVGXOqnz87NmvJGr9cda1eYXd1yGDLiW2zZ2 6K7TiR/YpJD+ikK76WlPbqXBTbdBb4OygayuELap6TcAcy2piW64IPFI4WAbf8sD 0lbK5J2Mm0C308Cm73Pd/xj1oBDs9lDIlxgMb5QZQhEJ7cPRRQYkCs222kkwqr2i XKwv1ZSt+Jzw2uyAAkNkladQJC7//a0TT3C6FgnihtzSkyGLJW8bhbgUhcymG6Sb X5UHmmRqNdkQaS0zRwbYuxdyJbevqrwE -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:44 2024 by rpki-client on console-ams.rpki-client.org