$ rpki-client -vvf rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft File: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft (raw, json) Hash identifier: r85pOZtcmSiet7pSfJfmb/5Eg2HoWJU3a0bJoERafLU= Subject key identifier: 0D:8C:07:29:2D:1F:D0:5C:8A:59:B6:E9:0E:46:7D:6C:9C:20:7F:D8 Authority key identifier: 62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 Certificate issuer: /CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Certificate serial: 0BD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft Manifest number: 0BCC Signing time: Fri 22 Nov 2024 18:35:57 +0000 Manifest this update: Fri 22 Nov 2024 18:35:57 +0000 Manifest next update: Fri 29 Nov 2024 18:35:57 +0000 Files and hashes: 1: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl (hash: SZ8pqFsFwpbeJr70PSG82Zlb07bTgMeFS7H7XC/Zkm0=) 2: F22CC508A01811EFA1D64F09C4F9AE02.roa (hash: 42lol7ocjMoRIFNb/jOjDU3dvQhE5zJeP2U3nNQhg/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3033 (0xbd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Validity Not Before: Nov 22 18:35:57 2024 GMT Not After : Nov 29 18:35:57 2024 GMT Subject: CN=6740cf0d-ba2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:31:f3:aa:2e:d0:37:cf:01:09:d4:6d:30: ab:12:e8:c6:15:c5:be:04:3f:2a:ab:5b:95:17:7b: db:79:3d:91:72:2e:62:13:f5:ba:06:a1:46:70:4b: b2:f0:b9:11:a3:11:47:d1:c3:20:c6:de:5e:5f:ee: 18:6d:3b:b5:4b:83:2b:1a:8d:9e:51:4e:8c:12:9c: 8a:8f:25:7c:88:e3:5e:bb:ce:f8:55:42:77:58:44: ae:b1:78:a9:5d:85:75:d9:c8:ab:b1:73:e9:d3:c1: 56:50:5c:f3:c0:8b:9a:eb:43:18:32:cb:61:99:7f: fe:94:01:ab:ea:d0:9e:8f:36:f8:b1:18:a0:09:db: 79:e3:3d:03:21:33:58:c7:8b:71:11:4b:3e:58:95: 1b:20:74:a2:d6:da:02:8f:a5:79:fb:f0:d3:36:3f: f9:ab:96:4b:68:66:64:e6:d9:28:54:87:02:4e:64: 81:d4:28:ee:11:ab:0e:c9:f2:7e:f0:a2:e6:55:9d: 91:a3:6b:6a:84:15:69:92:ad:cf:43:18:e1:c3:53: f6:36:64:47:5f:af:c4:97:95:9e:e0:d9:bb:f7:cf: fe:cf:e6:9e:c4:ab:58:b9:02:22:16:39:97:fa:05: 2c:75:dc:ae:c2:d7:88:15:c2:b3:03:c2:32:6c:fe: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8C:07:29:2D:1F:D0:5C:8A:59:B6:E9:0E:46:7D:6C:9C:20:7F:D8 X509v3 Authority Key Identifier: keyid:62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:5f:dd:0d:e7:1b:7e:50:0f:d1:d5:91:b0:87:1b:b6:5d:f9: 5b:3c:3b:57:90:90:f0:6d:59:72:4f:5d:62:64:98:bf:2f:af: 89:8c:b8:20:b1:35:09:d5:dd:1b:47:5f:ac:43:81:53:e0:4f: 04:13:ab:8e:b3:58:d3:4c:a3:16:0c:ce:eb:4e:43:4f:4b:cc: d6:29:61:33:7a:88:b0:31:41:b1:00:b5:51:19:fd:8e:ea:8d: b1:3a:a0:84:3b:3e:19:ed:d7:68:fc:0a:2c:9b:95:97:bb:20: 91:4f:18:56:e9:73:dd:26:64:88:44:ff:15:55:78:1d:53:0c: 99:22:4c:b8:ec:66:2f:7d:95:60:44:5b:d7:8b:1d:91:bf:4e: 56:63:a7:ff:f2:56:83:d4:46:d8:5d:42:5e:e7:e6:20:2e:4e: 0b:92:a1:01:5b:24:c4:21:75:f0:4d:e2:14:fe:9b:8b:07:bc: 9a:dc:e3:3a:72:90:86:32:2c:00:15:75:26:af:d3:19:83:ef: 5b:42:f2:13:36:e9:f2:a8:3c:32:3b:e9:43:a4:1e:a2:49:b2: 53:40:8d:f0:7e:31:5e:f2:a3:48:f4:7d:d9:23:3b:c9:48:3d: 4b:0f:e0:dc:9f:43:96:02:55:f1:d4:3f:8f:1e:93:e3:71:32: 0c:65:37:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBGRUExMTAvBgNVBAUTKDYyN0ZBOTk2MEVBMjgzQUEyMzkyMTNDQUNEMzc1MDRE MjQ2MEExMDQwHhcNMjQxMTIyMTgzNTU3WhcNMjQxMTI5MTgzNTU3WjAYMRYwFAYD VQQDEw02NzQwY2YwZC1iYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTsx86ou0DfPAQnUbTCrEujGFcW+BD8qq1uVF3vbeT2Rci5iE/W6BqFGcEuy 8LkRoxFH0cMgxt5eX+4YbTu1S4MrGo2eUU6MEpyKjyV8iONeu874VUJ3WESusXip XYV12cirsXPp08FWUFzzwIua60MYMsthmX/+lAGr6tCejzb4sRigCdt54z0DITNY x4txEUs+WJUbIHSi1toCj6V5+/DTNj/5q5ZLaGZk5tkoVIcCTmSB1CjuEasOyfJ+ 8KLmVZ2Ro2tqhBVpkq3PQxjhw1P2NmRHX6/El5We4Nm798/+z+aexKtYuQIiFjmX +gUsddyuwteIFcKzA8IybP7AkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2MBykt H9Bcilm26Q5GfWycIH/YMB8GA1UdIwQYMBaAFGJ/qZYOooOqI5ITys03UE0kYKEE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEZFQS8yNDBEQUNFQTBC NzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2b2praFBLelRkUVRTUmdv UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1luLXBsZzZpZzZvamtoUEt6VGRRVFNSZ29RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEZFQS8yNDBEQUNFQTBCNzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2 b2praFBLelRkUVRTUmdvUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjX90N5xt+UA/R1ZGwhxu2XflbPDtXkJDwbVlyT11iZJi/L6+JjLgg sTUJ1d0bR1+sQ4FT4E8EE6uOs1jTTKMWDM7rTkNPS8zWKWEzeoiwMUGxALVRGf2O 6o2xOqCEOz4Z7ddo/Aosm5WXuyCRTxhW6XPdJmSIRP8VVXgdUwyZIky47GYvfZVg RFvXix2Rv05WY6f/8laD1EbYXUJe5+YgLk4LkqEBWyTEIXXwTeIU/puLB7ya3OM6 cpCGMiwAFXUmr9MZg+9bQvITNunyqDwyO+lDpB6iSbJTQI3wfjFe8qNI9H3ZIzvJ SD1LD+Dcn0OWAlXx1D+PHpPjcTIMZTeT -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org