$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json) Hash identifier: gNvjUVhVzRkg3eRzLhfSoip1XZID7MPDDz//biyEXO4= Subject key identifier: 9C:A0:28:DD:66:0B:8F:E0:CB:39:38:2D:14:8B:79:A7:A4:97:EE:92 Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft Manifest number: 92 Signing time: Sat 23 Nov 2024 04:32:52 +0000 Manifest this update: Sat 23 Nov 2024 04:32:52 +0000 Manifest next update: Sat 30 Nov 2024 04:32:52 +0000 Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: SjVSyrdKgfRft10BQsbPT3RJnE/+w+kNDjZu6i25ucs=) 2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: XKcOzakVnPRp9ouJIJxeStnG3KeM6fFZu4MKPyMThqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Validity Not Before: Nov 23 04:32:52 2024 GMT Not After : Nov 30 04:32:52 2024 GMT Subject: CN=67415af4-ebf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:63:e5:38:43:50:a6:d7:a7:42:9f:93:94:ac: 09:22:a2:0c:fe:1a:12:f9:e9:7f:c7:ef:c6:21:ce: 4a:59:58:5e:25:85:e7:58:c0:9c:e0:03:c6:de:5d: 61:ec:39:45:ed:e1:c9:52:f1:da:f2:4e:b6:f7:0e: d6:8f:f8:5b:21:93:ed:e6:ef:41:50:35:13:f6:8d: f6:16:3c:b3:14:c6:b1:82:f1:cb:40:ed:79:e7:d9: 00:35:9b:ee:30:a1:b1:ca:fb:99:f6:df:cb:52:51: 9c:23:f7:ae:da:57:5d:0d:91:c7:14:e4:16:2d:a4: 35:88:44:d1:6b:99:c5:07:34:95:cf:46:2b:95:22: 16:35:46:14:e2:e9:c8:f8:5d:27:bb:b6:fb:d4:71: ed:20:74:b7:ba:7a:7f:c2:d5:e4:96:ee:6b:69:09: 7c:3a:a8:35:97:67:7f:76:c2:97:5f:dd:6b:bb:c3: 5f:ac:82:d7:7c:5b:a8:c5:9f:2f:3b:9b:3e:73:f6: 80:a8:0e:27:2c:28:22:c7:75:5e:fe:39:f0:e6:33: 8d:c0:d8:cd:4a:e8:3c:e3:0b:bb:e9:c1:7a:f4:ae: c0:7d:04:cd:11:63:4b:31:e3:23:ef:f4:93:e2:78: 3a:4f:4b:08:ba:7f:bd:b8:09:14:ee:c7:c2:cb:2a: a6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A0:28:DD:66:0B:8F:E0:CB:39:38:2D:14:8B:79:A7:A4:97:EE:92 X509v3 Authority Key Identifier: keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:e5:c6:86:ff:5c:68:7f:a3:5c:1f:e1:04:15:66:b4:62:4b: 9a:6b:82:86:7b:1b:05:2a:b8:ac:0d:b8:cb:3f:77:39:d2:b8: bb:ce:da:c2:7f:3e:ae:57:46:a3:46:8b:e6:9b:44:54:a4:39: 88:55:01:c8:77:77:54:af:05:77:05:29:c5:1f:99:95:c9:7f: e7:5e:41:6e:17:df:22:6e:f1:12:9b:ae:59:71:e6:84:d6:46: 75:ae:09:10:c2:bd:a9:3d:13:54:dd:c8:9f:63:6a:34:63:ac: c2:34:7b:bb:43:9b:2d:98:af:58:81:ba:de:c2:8c:e3:ff:b6: 75:53:01:59:56:e2:c6:7b:b5:6f:a7:11:38:65:9c:88:73:43: 24:58:ba:95:13:07:50:be:d6:ac:ac:fb:71:eb:01:50:e2:d9: 44:fd:90:9d:e8:89:48:16:9a:47:17:92:06:82:c6:48:3e:50: d7:a6:66:33:3b:5c:00:ca:ab:0d:7b:61:d2:59:58:c2:e0:05: 04:ea:ad:a3:ce:2c:f2:9a:2a:eb:26:c2:17:47:7e:91:94:29: 5c:46:e8:d5:39:1e:87:32:70:d0:14:b0:24:0b:97:e0:00:0e: e1:8d:0f:cf:3d:ac:cd:d5:18:32:4e:f6:27:76:3e:dc:63:33: 7f:a5:40:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2 Nzc1NTBBQzgwHhcNMjQxMTIzMDQzMjUyWhcNMjQxMTMwMDQzMjUyWjAYMRYwFAYD VQQDEw02NzQxNWFmNC1lYmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mPlOENQptenQp+TlKwJIqIM/hoS+el/x+/GIc5KWVheJYXnWMCc4APG3l1h 7DlF7eHJUvHa8k629w7Wj/hbIZPt5u9BUDUT9o32FjyzFMaxgvHLQO1559kANZvu MKGxyvuZ9t/LUlGcI/eu2lddDZHHFOQWLaQ1iETRa5nFBzSVz0YrlSIWNUYU4unI +F0nu7b71HHtIHS3unp/wtXklu5raQl8Oqg1l2d/dsKXX91ru8NfrILXfFuoxZ8v O5s+c/aAqA4nLCgix3Ve/jnw5jONwNjNSug84wu76cF69K7AfQTNEWNLMeMj7/ST 4ng6T0sIun+9uAkU7sfCyyqmWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJygKN1m C4/gyzk4LRSLeaekl+6SMB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0 Tlh3cVdwbS16XzluZFZDc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ5caG/1xof6NcH+EEFWa0Ykuaa4KGexsFKrisDbjLP3c50ri7ztrC fz6uV0ajRovmm0RUpDmIVQHId3dUrwV3BSnFH5mVyX/nXkFuF98ibvESm65ZceaE 1kZ1rgkQwr2pPRNU3cifY2o0Y6zCNHu7Q5stmK9Ygbrewozj/7Z1UwFZVuLGe7Vv pxE4ZZyIc0MkWLqVEwdQvtasrPtx6wFQ4tlE/ZCd6IlIFppHF5IGgsZIPlDXpmYz O1wAyqsNe2HSWVjC4AUE6q2jzizymirrJsIXR36RlClcRujVOR6HMnDQFLAkC5fg AA7hjQ/PPazN1RgyTvYndj7cYzN/pUBc -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org