$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft File: yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json) Hash identifier: jAXhqynoud6aeUvLd6gkVGby7vSqKeORqn19sH+axmA= Subject key identifier: B3:49:6D:94:BD:E6:B9:54:C7:33:1F:09:96:B4:01:C8:C3:8F:39:99 Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Certificate serial: 0CE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft Manifest number: 0CDA Signing time: Fri 22 Nov 2024 18:01:36 +0000 Manifest this update: Fri 22 Nov 2024 18:01:35 +0000 Manifest next update: Fri 29 Nov 2024 18:01:35 +0000 Files and hashes: 1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: lrZPyT3B8vXXKRWOC5vh/1rwtzq2N+4vtU9Kqxe2+cQ=) 2: 002EAE98D49311E997CAE52BC4F9AE02.roa (hash: /zE8O4o4N6lVGm8ShbW04Y0fOJD+HppzYxISHXmwhls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3298 (0xce2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Validity Not Before: Nov 22 18:01:35 2024 GMT Not After : Nov 29 18:01:35 2024 GMT Subject: CN=6740c700-03ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:5f:30:c3:a8:aa:30:e4:ad:d0:7d:c8:b2: ff:7c:21:18:70:c3:b8:ae:4c:fc:a4:ba:c9:e8:ad: c2:e9:a3:fb:51:42:82:7b:6f:fd:60:21:a0:b6:4c: 2a:da:5d:23:db:bb:24:0a:b9:0b:7a:ac:c0:d4:82: f7:bb:b6:b2:70:6a:c1:c1:85:53:c3:50:f6:70:be: 0b:d8:b6:bd:eb:63:59:35:07:93:4e:0b:63:6d:ee: e1:95:33:c5:69:10:41:df:d4:e8:82:82:28:7b:f5: 3a:f1:13:2c:29:76:fc:f4:f4:39:66:ec:85:e8:07: 30:ff:da:6c:d0:70:8d:57:99:50:46:21:2c:92:6a: fd:2f:83:74:fb:e8:dc:a9:5d:c3:65:f3:e8:93:f9: bd:a5:80:99:bc:2e:65:fb:fb:22:92:38:24:a0:3a: 22:87:3a:d9:a6:c1:02:81:e4:ae:ba:f7:b2:b8:60: b6:00:ea:c6:e1:ae:76:86:b4:a1:04:39:4a:10:cc: b5:6f:25:c2:65:01:a0:a1:20:83:36:ee:38:30:61: 58:65:5d:de:31:3c:ec:68:75:e7:b4:22:f3:36:03: 77:06:b4:80:17:0e:3a:0c:36:2d:30:c4:8d:1d:a4: de:09:34:86:1c:b5:fe:b7:ea:49:c5:0c:67:7e:0b: f7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:49:6D:94:BD:E6:B9:54:C7:33:1F:09:96:B4:01:C8:C3:8F:39:99 X509v3 Authority Key Identifier: keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:a4:0a:5c:5d:07:7a:8b:b0:a8:2b:cd:3e:26:9b:d5:0c:3d: fe:c0:fd:40:80:66:e3:3f:fa:1f:25:dd:02:c4:3e:12:a9:90: ff:12:8e:0f:5c:c1:2a:8d:2f:ce:9c:12:0a:c7:04:6e:ba:a3: 37:d8:ff:ca:17:d4:50:be:74:1e:3e:f8:a5:2d:ce:ce:e9:e6: 3b:d4:4b:42:7a:af:b4:57:22:c2:10:09:88:ab:87:17:2e:16: 9c:a5:2e:ff:d3:86:69:31:db:a1:82:4b:a1:ec:4e:7e:f9:5e: 24:e4:9b:f9:f2:4e:88:de:a4:6a:f7:0b:03:dc:61:85:4d:ef: 0b:09:c4:7f:03:5d:ea:80:3c:0a:73:32:cf:72:41:5b:1b:ac: eb:87:b3:c0:47:a1:94:2b:e1:18:23:6e:da:27:f6:64:41:0c: 2a:a7:eb:9a:bd:0d:a4:b7:1c:83:ab:b3:7c:2d:c6:e7:c3:4c: 9a:be:9f:e5:fb:60:de:c6:33:7d:0e:00:58:bd:dc:7e:ce:26: 26:81:56:e4:b5:f9:7e:b8:4f:29:1b:86:46:e1:07:81:aa:2a: 57:7e:0c:27:cb:3f:2b:9d:44:da:ca:f5:83:95:d4:0c:ae:83: bd:9a:f5:e1:bd:87:01:f5:62:af:4d:fe:a6:51:6d:83:ec:d7: 2e:cb:32:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFNkMxMTAvBgNVBAUTKEM5NkQxMjQ3RjVDQkEyNzhBRUFGNTI5MzUxQjVGODFD QTU3MTcwQTMwHhcNMjQxMTIyMTgwMTM1WhcNMjQxMTI5MTgwMTM1WjAYMRYwFAYD VQQDEw02NzQwYzcwMC0wM2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmdfMMOoqjDkrdB9yLL/fCEYcMO4rkz8pLrJ6K3C6aP7UUKCe2/9YCGgtkwq 2l0j27skCrkLeqzA1IL3u7aycGrBwYVTw1D2cL4L2La962NZNQeTTgtjbe7hlTPF aRBB39TogoIoe/U68RMsKXb89PQ5ZuyF6Acw/9ps0HCNV5lQRiEskmr9L4N0++jc qV3DZfPok/m9pYCZvC5l+/sikjgkoDoihzrZpsECgeSuuveyuGC2AOrG4a52hrSh BDlKEMy1byXCZQGgoSCDNu44MGFYZV3eMTzsaHXntCLzNgN3BrSAFw46DDYtMMSN HaTeCTSGHLX+t+pJxQxnfgv3FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNJbZS9 5rlUxzMfCZa0AcjDjzmZMB8GA1UdIwQYMBaAFMltEkf1y6J4rq9Sk1G1+BylcXCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEU2Qy85QzY5QTczMkQ0 OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9uaXVyMUtUVWJYNEhLVnhj S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXMFNSX1hMb25pdXIxS1RVYlg0SEtWeGNLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEU2Qy85QzY5QTczMkQ0OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9u aXVyMUtUVWJYNEhLVnhjS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCpApcXQd6i7CoK80+JpvVDD3+wP1AgGbjP/ofJd0CxD4SqZD/Eo4P XMEqjS/OnBIKxwRuuqM32P/KF9RQvnQePvilLc7O6eY71EtCeq+0VyLCEAmIq4cX LhacpS7/04ZpMduhgkuh7E5++V4k5Jv58k6I3qRq9wsD3GGFTe8LCcR/A13qgDwK czLPckFbG6zrh7PAR6GUK+EYI27aJ/ZkQQwqp+uavQ2ktxyDq7N8Lcbnw0yavp/l +2DexjN9DgBYvdx+ziYmgVbktfl+uE8pG4ZG4QeBqipXfgwnyz8rnUTayvWDldQM roO9mvXhvYcB9WKvTf6mUW2D7NcuyzJB -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org