$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft File: pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft (raw, json) Hash identifier: sSK3FQUFt0plNS9IdEx5tMmg2eMjG33iv+RrqG1h/R4= Subject key identifier: 8C:A8:37:D3:B2:E4:DC:83:DD:29:7E:A9:D1:40:B2:A1:83:7D:D7:21 Authority key identifier: A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 Certificate issuer: /CN=A9199B04/serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Certificate serial: 0370 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft Manifest number: 036B Signing time: Sat 23 Nov 2024 00:28:54 +0000 Manifest this update: Sat 23 Nov 2024 00:28:54 +0000 Manifest next update: Sat 30 Nov 2024 00:28:54 +0000 Files and hashes: 1: pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl (hash: rKl/y6uh40YOViIjL9KycBMRaVhB6LHTZP7QqP9IFeQ=) 2: 1DD9F6A83F0411EDB1462810C4F9AE02.roa (hash: oge9TjupBUCAcqx0xe/m5q70dmPd4uWuHJhY0GMcBu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 880 (0x370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B04/serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629 Validity Not Before: Nov 23 00:28:54 2024 GMT Not After : Nov 30 00:28:54 2024 GMT Subject: CN=674121c6-4a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:42:10:e2:5a:ba:c1:56:6c:16:61:cb:25:7b: f6:72:65:5d:f1:c2:3d:3d:30:a0:fb:71:30:ab:32: 34:b5:11:02:5a:63:08:97:60:34:40:33:60:6e:76: a8:9e:f6:cc:56:f7:84:b3:25:b0:a2:6b:f5:72:18: fd:73:d1:d9:4f:8d:f4:f6:58:2d:bf:a9:f0:c3:20: 1e:0f:43:36:6b:ce:af:33:f5:38:b2:3d:91:86:ca: 16:95:ae:ca:6f:b3:f9:b2:8f:9e:f5:0a:e0:17:50: 6a:8a:ea:31:fe:91:07:37:2e:ad:e8:61:67:45:dd: 64:b3:94:93:ae:f9:88:57:13:f8:4d:f1:9b:43:74: 93:45:93:5b:8d:d2:31:a6:8e:e3:a3:c2:ea:01:90: 04:23:e6:ce:b5:7f:7a:9f:67:02:be:74:cd:7e:58: 9d:bc:97:06:aa:6e:26:3f:08:fc:55:34:8f:6c:23: 48:86:a7:1e:65:97:85:25:5c:43:37:5f:c6:35:70: 7b:8c:4f:b6:a9:49:e2:11:7a:ae:c6:6e:3e:74:5f: 5d:ff:6c:ca:01:46:ae:88:f7:2f:14:4d:d3:9d:9c: fb:47:fa:d2:c6:55:6f:f1:6f:51:e4:2b:91:fa:58: 41:d2:dc:51:6f:b3:d8:bb:53:45:f0:e8:74:c3:4b: b5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A8:37:D3:B2:E4:DC:83:DD:29:7E:A9:D1:40:B2:A1:83:7D:D7:21 X509v3 Authority Key Identifier: keyid:A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2d:47:6c:f8:0c:86:33:b3:05:7f:7d:3d:6f:9d:33:23:bf: 34:f4:bc:32:ef:e7:8c:3a:3c:ac:a3:84:65:c5:ad:fd:49:f5: 8b:cc:93:e8:c2:a5:78:f0:a5:f2:9b:59:fd:fa:e3:ef:82:73: 4a:17:5f:c2:56:74:a2:3f:79:7a:e9:5d:f7:97:4d:5f:3e:91: 4f:2d:c1:80:0f:33:46:ac:a5:f5:82:13:a4:ce:6f:67:64:69: a2:76:20:cc:e1:13:44:02:79:f8:d4:97:74:8d:f5:1f:b0:09: 2d:bd:d9:21:e4:b3:fa:bc:00:fa:ce:2c:d3:d2:7c:b7:57:99: ca:28:d6:26:e5:f3:78:b1:8b:81:35:c9:38:aa:c2:05:1c:b0: 81:7e:88:f7:84:1d:c3:c6:aa:c2:88:67:6d:ce:0e:12:26:70: f3:c5:06:53:cd:08:ec:2d:8e:24:0b:19:c3:04:0f:76:3f:25: f2:00:25:58:1a:f6:ad:82:b7:0d:f5:3a:40:a3:e5:10:47:c7: e5:68:7d:7c:0d:71:38:3e:ad:20:ea:d7:48:5d:e8:71:c8:b8: 96:a5:03:c8:a5:01:98:8b:ff:5c:44:f7:ee:48:91:7f:05:0f: c4:1a:9a:9c:7c:9f:cd:cc:8d:65:74:bb:89:93:14:06:cf:07: 97:4a:43:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMDQxMTAvBgNVBAUTKEE1ODI1MEFFQUIxM0I4RDNEMzI3OUUzMjJFMTgxMkZE QUQ0NkQ2MjkwHhcNMjQxMTIzMDAyODU0WhcNMjQxMTMwMDAyODU0WjAYMRYwFAYD VQQDEw02NzQxMjFjNi00YTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EIQ4lq6wVZsFmHLJXv2cmVd8cI9PTCg+3EwqzI0tRECWmMIl2A0QDNgbnao nvbMVveEsyWwomv1chj9c9HZT4309lgtv6nwwyAeD0M2a86vM/U4sj2RhsoWla7K b7P5so+e9QrgF1Bqiuox/pEHNy6t6GFnRd1ks5STrvmIVxP4TfGbQ3STRZNbjdIx po7jo8LqAZAEI+bOtX96n2cCvnTNflidvJcGqm4mPwj8VTSPbCNIhqceZZeFJVxD N1/GNXB7jE+2qUniEXquxm4+dF9d/2zKAUauiPcvFE3TnZz7R/rSxlVv8W9R5CuR +lhB0txRb7PYu1NF8Oh0w0u13wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyoN9Oy 5NyD3Sl+qdFAsqGDfdchMB8GA1UdIwQYMBaAFKWCUK6rE7jT0yeeMi4YEv2tRtYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIwNC82NDJFMDdEQzg4 QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVOUFRKNTR5TGhnU19hMUcx aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZSlFycXNUdU5QVEo1NHlMaGdTX2ExRzFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIwNC82NDJFMDdEQzg4QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFzVHVO UFRKNTR5TGhnU19hMUcxaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKLUds+AyGM7MFf309b50zI7809Lwy7+eMOjyso4Rlxa39SfWLzJPo wqV48KXym1n9+uPvgnNKF1/CVnSiP3l66V33l01fPpFPLcGADzNGrKX1ghOkzm9n ZGmidiDM4RNEAnn41Jd0jfUfsAktvdkh5LP6vAD6zizT0ny3V5nKKNYm5fN4sYuB Nck4qsIFHLCBfoj3hB3DxqrCiGdtzg4SJnDzxQZTzQjsLY4kCxnDBA92PyXyACVY GvatgrcN9TpAo+UQR8flaH18DXE4Pq0g6tdIXehxyLiWpQPIpQGYi/9cRPfuSJF/ BQ/EGpqcfJ/NzI1ldLuJkxQGzweXSkMR -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:42 2024 by rpki-client on console-fra.rpki-client.org