$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft File: yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json) Hash identifier: XayEP8nL5BMjx+1NM7oE4iSrxbA+QuR27vsnUf2mxak= Subject key identifier: 86:1B:5B:A4:CE:15:7A:57:ED:F3:6C:EA:B2:14:D5:69:7B:49:A2:00 Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft Manifest number: 0130 Signing time: Sat 23 Nov 2024 02:49:30 +0000 Manifest this update: Sat 23 Nov 2024 02:49:29 +0000 Manifest next update: Sat 30 Nov 2024 02:49:29 +0000 Files and hashes: 1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: cWZ/CyTNEqq9o/AGpqejkrlGZ/TB9KE4ya9VwNy2jds=) 2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: zBXFPWfaswR6Z/aWy5q3A7gzOnqOgIOIPnKiNURo3D0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Validity Not Before: Nov 23 02:49:29 2024 GMT Not After : Nov 30 02:49:29 2024 GMT Subject: CN=674142b9-cbcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ff:b3:c2:98:84:65:c1:5a:2a:c0:77:71:bf: 25:19:7e:4c:05:7a:d0:8e:f6:d2:70:f9:9c:8b:d0: 1d:e6:24:e4:d5:ab:99:55:03:0f:76:14:a6:3f:63: d3:80:3a:78:cb:1d:23:a0:00:da:9a:93:d1:22:2e: c5:a8:86:78:85:96:3c:07:26:39:c8:c4:c7:89:d3: db:56:30:a2:bb:75:20:d3:c8:8b:e3:2a:4f:22:7e: 70:6a:5c:45:d8:c7:6f:8a:33:b3:5f:a2:7b:a9:23: 20:64:e9:a2:63:4d:60:09:33:29:f7:06:15:09:14: 74:4c:c9:25:84:b3:00:b4:e6:1f:f9:07:9e:6c:0e: 5f:3b:3a:71:24:e1:ff:3b:87:0c:f4:34:06:0a:22: f8:15:10:e6:28:8a:2f:83:f7:ca:87:2b:31:79:2a: 83:74:f9:3b:8a:64:49:e6:3d:d8:ee:f4:96:50:ab: 03:2c:ae:03:3e:66:c2:a2:d1:06:10:4d:96:c4:b1: f4:12:6d:8a:3a:dc:40:de:b2:61:1e:c4:d9:35:d6: ea:7c:d8:0f:90:0c:5a:9d:a1:5c:15:34:b6:cd:d9: e6:68:d9:26:d7:39:3b:ed:11:72:03:0c:6c:14:0e: 46:2d:84:cf:b6:05:1d:f7:b5:de:d1:1a:0d:26:6e: 07:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1B:5B:A4:CE:15:7A:57:ED:F3:6C:EA:B2:14:D5:69:7B:49:A2:00 X509v3 Authority Key Identifier: keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:bb:9e:4e:2c:6b:0f:5c:cd:0a:f1:8f:1f:a5:34:28:58:79: 59:59:ef:db:b7:b1:6b:b0:b6:64:48:28:1f:e2:f6:38:45:f5: b3:e0:fb:ed:cd:28:90:d3:b2:2c:5b:b1:a0:25:e2:d8:97:f6: 81:d9:7f:e6:1b:14:9f:f1:c3:3e:ad:5e:79:ad:b6:73:c3:12: 62:ae:98:e8:fa:c1:35:99:fe:bc:2b:e8:8a:96:f6:0e:62:db: 47:47:be:4a:a8:68:b3:04:67:62:11:48:de:0a:c5:95:8b:95: 26:ab:29:43:21:e2:6f:57:f9:ef:36:25:6f:32:d7:e4:89:51: 8b:7f:a4:2d:63:61:77:ae:52:7f:f3:57:1a:bb:90:0b:c1:8f: 93:07:46:53:37:59:39:01:81:88:9d:19:0b:8f:62:f8:07:0a: fe:f7:9e:b8:a3:ef:90:98:0d:a5:3c:e3:f8:db:09:1a:03:39: 2a:d9:cd:8a:d1:8f:92:fb:12:6e:b4:ff:91:13:82:ba:81:16: be:cc:5a:1e:e6:e3:9f:ea:10:eb:d5:4b:46:46:e4:5b:79:1f: fc:7d:2d:cf:a6:da:97:0e:d6:55:7a:87:b7:0b:ec:de:c5:ba: f4:89:7b:8d:d2:03:d7:fd:f3:64:19:28:48:91:a9:e0:cb:4a: 7f:4a:ef:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy QkM5QzQ0OEIwHhcNMjQxMTIzMDI0OTI5WhcNMjQxMTMwMDI0OTI5WjAYMRYwFAYD VQQDEw02NzQxNDJiOS1jYmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzP+zwpiEZcFaKsB3cb8lGX5MBXrQjvbScPmci9Ad5iTk1auZVQMPdhSmP2PT gDp4yx0joADampPRIi7FqIZ4hZY8ByY5yMTHidPbVjCiu3Ug08iL4ypPIn5walxF 2MdvijOzX6J7qSMgZOmiY01gCTMp9wYVCRR0TMklhLMAtOYf+QeebA5fOzpxJOH/ O4cM9DQGCiL4FRDmKIovg/fKhysxeSqDdPk7imRJ5j3Y7vSWUKsDLK4DPmbCotEG EE2WxLH0Em2KOtxA3rJhHsTZNdbqfNgPkAxanaFcFTS2zdnmaNkm1zk77RFyAwxs FA5GLYTPtgUd97Xe0RoNJm4HbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYbW6TO FXpX7fNs6rIU1Wl7SaIAMB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg5MC9BREUxMzE4NkRBREYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lS UlhSbzNKSm5YR3NyeWNSSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCu55OLGsPXM0K8Y8fpTQoWHlZWe/bt7FrsLZkSCgf4vY4RfWz4Pvt zSiQ07IsW7GgJeLYl/aB2X/mGxSf8cM+rV55rbZzwxJirpjo+sE1mf68K+iKlvYO YttHR75KqGizBGdiEUjeCsWVi5UmqylDIeJvV/nvNiVvMtfkiVGLf6QtY2F3rlJ/ 81cau5ALwY+TB0ZTN1k5AYGInRkLj2L4Bwr+9564o++QmA2lPOP42wkaAzkq2c2K 0Y+S+xJutP+RE4K6gRa+zFoe5uOf6hDr1UtGRuRbeR/8fS3PptqXDtZVeoe3C+ze xbr0iXuN0gPX/fNkGShIkangy0p/Su98 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:46 2024 by rpki-client on console-ams.rpki-client.org