$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft File: yomQiVxPTQ5f49-BWICyA1kPsno.mft (raw, json) Hash identifier: JzgB4GVtt5+G2brcRLi/3SO/zqHDEgArGrOSZt7U2a4= Subject key identifier: C0:D1:D4:28:2C:0D:53:07:89:60:A3:0F:1B:14:30:C6:AC:0E:3B:82 Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A Certificate issuer: /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft Manifest number: 0553 Signing time: Fri 22 Nov 2024 23:42:44 +0000 Manifest this update: Fri 22 Nov 2024 23:42:43 +0000 Manifest next update: Fri 29 Nov 2024 23:42:43 +0000 Files and hashes: 1: yomQiVxPTQ5f49-BWICyA1kPsno.crl (hash: w9ZTHnhh2ujasW1GS/sGvdKjX6GtX3UprEIubh1tLqs=) 2: C885D0C8374B11EEA2157233C4F9AE02.roa (hash: F7+eS/2mxj8NPkOaATw5jcjuastn33+xdcT4OGIAl6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Validity Not Before: Nov 22 23:42:43 2024 GMT Not After : Nov 29 23:42:43 2024 GMT Subject: CN=674116f4-efa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:9b:9c:fc:56:1c:02:e2:21:f4:65:03:81: 99:6b:6e:f9:e0:1a:28:05:f8:b9:5f:f8:1b:44:a5: 3b:06:85:3c:1a:43:26:69:0c:3e:e0:ea:ae:e9:06: d7:6f:ea:0f:c3:8b:d5:d3:19:0a:8f:4d:87:6c:7e: 59:5e:31:e7:59:bf:2a:62:2a:74:d4:3e:9a:c4:0c: a4:8c:9e:ce:a8:1f:6e:70:10:fe:a5:1c:1f:f1:cd: 20:9f:f1:14:a0:56:c1:48:ec:a8:ac:c4:34:d6:23: 38:46:e3:64:cd:88:74:89:9b:2d:44:c6:85:21:f0: a1:e5:fa:c4:2f:16:d6:36:4b:a5:96:3a:99:f3:4b: 00:06:21:b0:b6:d6:e0:14:f0:0f:a8:c8:f9:3e:db: 1d:0e:58:e8:0a:81:a8:13:fb:24:9c:88:9b:d1:6a: b1:e0:46:ea:51:5f:73:5f:a8:9b:da:04:21:b1:c8: 7e:ee:bb:8f:45:36:66:e2:a8:f2:de:1b:f5:40:ff: 95:6b:a0:dd:30:e8:1a:b1:07:3d:6a:5d:b8:59:72: 34:21:66:f3:e5:1e:0b:b3:af:e9:1b:1e:bc:0b:ae: a2:19:ed:06:68:b1:e7:99:54:f5:17:49:01:00:e4: e9:ed:bd:f4:c9:29:cf:df:62:41:30:3e:7d:76:7a: f5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D1:D4:28:2C:0D:53:07:89:60:A3:0F:1B:14:30:C6:AC:0E:3B:82 X509v3 Authority Key Identifier: keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a5:c9:ca:c0:ca:75:21:08:22:0f:fa:1c:35:16:a0:b9:e2: 8d:5b:28:8e:e5:de:65:21:d9:69:72:84:5f:7a:ac:aa:54:1a: 50:ed:bc:2a:68:bd:6f:cb:e0:52:18:9c:cd:51:7a:f0:25:8a: fb:e3:36:41:93:91:55:f0:8e:21:bc:39:35:db:a1:ca:05:71: 5e:1b:bf:dc:4f:af:b2:70:44:3d:eb:26:ed:ee:6b:ad:d3:c9: eb:12:73:cc:aa:a7:fc:a6:c0:1b:62:16:70:c0:da:00:9e:89: 13:5f:aa:72:50:a9:fc:ea:62:50:a9:37:53:42:60:81:09:7f: 04:16:d8:27:53:c5:d4:32:b6:da:25:34:8d:69:c7:60:32:68: 56:e4:e1:a5:44:36:8e:d4:1a:aa:5d:b4:49:13:10:f3:92:02: be:57:c6:c0:e2:f6:3c:b4:38:f5:e1:e6:c5:6e:6e:66:b1:59: 7c:e5:b7:c2:38:9d:8a:fd:f2:56:a0:07:29:32:10:72:a9:51: 12:95:b7:2e:e3:1c:55:0d:36:bb:5f:8e:7a:fe:5e:0a:09:29: de:8a:a8:e5:31:39:a0:6d:d4:ef:22:23:10:0a:65:44:bb:5f: f6:3d:0f:24:56:55:25:e0:a0:1f:be:cf:6b:c4:5e:4b:16:fd: 7d:2c:db:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKENBODk5MDg5NUM0RjREMEU1RkUzREY4MTU4ODBCMjAz NTkwRkIyN0EwHhcNMjQxMTIyMjM0MjQzWhcNMjQxMTI5MjM0MjQzWjAYMRYwFAYD VQQDEw02NzQxMTZmNC1lZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1I+bnPxWHALiIfRlA4GZa2754BooBfi5X/gbRKU7BoU8GkMmaQw+4Oqu6QbX b+oPw4vV0xkKj02HbH5ZXjHnWb8qYip01D6axAykjJ7OqB9ucBD+pRwf8c0gn/EU oFbBSOyorMQ01iM4RuNkzYh0iZstRMaFIfCh5frELxbWNkulljqZ80sABiGwttbg FPAPqMj5PtsdDljoCoGoE/sknIib0Wqx4EbqUV9zX6ib2gQhsch+7ruPRTZm4qjy 3hv1QP+Va6DdMOgasQc9al24WXI0IWbz5R4Ls6/pGx68C66iGe0GaLHnmVT1F0kB AOTp7b30ySnP32JBMD59dnr1bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDR1Cgs DVMHiWCjDxsUMMasDjuCMB8GA1UdIwQYMBaAFMqJkIlcT00OX+PfgViAsgNZD7J6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRRNWY0OS1CV0lDeUExa1Bz bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvbVFpVnhQVFE1ZjQ5LUJXSUN5QTFrUHNuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRR NWY0OS1CV0lDeUExa1Bzbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABpcnKwMp1IQgiD/ocNRagueKNWyiO5d5lIdlpcoRfeqyqVBpQ7bwq aL1vy+BSGJzNUXrwJYr74zZBk5FV8I4hvDk126HKBXFeG7/cT6+ycEQ96ybt7mut 08nrEnPMqqf8psAbYhZwwNoAnokTX6pyUKn86mJQqTdTQmCBCX8EFtgnU8XUMrba JTSNacdgMmhW5OGlRDaO1BqqXbRJExDzkgK+V8bA4vY8tDj14ebFbm5msVl85bfC OJ2K/fJWoAcpMhByqVESlbcu4xxVDTa7X456/l4KCSneiqjlMTmgbdTvIiMQCmVE u1/2PQ8kVlUl4KAfvs9rxF5LFv19LNtP -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org