$ rpki-client -vvf rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft File: Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft (raw, json) Hash identifier: 9O3tcKJif60+YRgc1/rMLVQ/RPE7g6yvq+98aFAMOCg= Subject key identifier: 20:0D:AE:AB:97:6E:BD:F6:07:04:2D:5A:11:15:C7:1E:EB:55:0D:7B Authority key identifier: 63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B Certificate issuer: /CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B Certificate serial: 05F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft Manifest number: 05EC Signing time: Fri 22 Nov 2024 22:24:01 +0000 Manifest this update: Fri 22 Nov 2024 22:24:00 +0000 Manifest next update: Fri 29 Nov 2024 22:24:00 +0000 Files and hashes: 1: Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl (hash: x29GLpCg0wMsv3tG508NtSW6Jsu4Yq7Uz5tgBarNd6Y=) 2: 47EB76428ABA11EB8A85C01BC4F9AE02.roa (hash: 1AEXU+7Y4PfWz8jQxA5HlFwuXkljqopTv6bNdtPTBW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1523 (0x5f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B Validity Not Before: Nov 22 22:24:00 2024 GMT Not After : Nov 29 22:24:00 2024 GMT Subject: CN=67410481-4829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:af:e5:52:6c:c0:44:10:d9:c9:c1:49:c0:e6: bc:2d:56:10:58:94:5d:1f:28:bf:1d:20:7d:39:57: 94:ff:44:26:e9:83:21:65:a8:f6:21:49:bd:87:d7: 95:76:32:4f:c0:13:c5:a9:78:18:ee:ad:45:bb:0d: fb:c0:8b:dc:f1:5d:a4:93:72:63:4c:63:c8:1c:0d: 64:f3:96:58:c2:49:5a:63:a0:fe:f8:f5:4c:42:d4: 29:df:ed:0f:2e:41:5e:69:d8:f8:4c:cb:75:42:87: cd:f0:6b:01:23:39:b3:fe:0d:cc:74:1c:ea:12:ce: 53:21:d8:50:58:ce:34:c2:70:bf:a8:9c:fb:c0:d0: b2:0a:a3:ab:06:51:7d:1f:c1:39:ec:47:1d:aa:0e: 57:4f:c5:d6:b6:5b:6a:ff:cb:7a:34:de:9c:95:71: e1:a0:28:96:e7:07:62:54:74:46:5d:c6:14:6d:82: 06:10:1c:7a:ba:15:41:02:7a:8a:c1:84:ba:41:5e: 86:7a:cd:a5:6e:92:41:a4:09:30:2d:41:67:a5:ed: 4a:a2:80:b6:40:f8:e4:32:72:9e:99:9f:96:4d:a6: 6c:f4:45:d7:5a:32:32:d9:ea:a9:07:7c:4a:ac:fb: 3a:03:d8:96:f8:30:f2:59:a4:42:1b:49:af:2f:c6: dc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0D:AE:AB:97:6E:BD:F6:07:04:2D:5A:11:15:C7:1E:EB:55:0D:7B X509v3 Authority Key Identifier: keyid:63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e4:29:c2:e8:67:fd:3c:47:ab:48:93:fc:31:11:8f:03:a7: 46:69:3f:92:2d:10:86:88:08:7f:91:d6:42:8b:e3:47:4d:ec: 0c:d8:7d:19:7f:5b:1b:62:8c:f3:22:3e:2a:12:94:c1:5e:9f: 27:e9:bb:8d:b7:ac:eb:02:fe:73:4d:49:20:fa:eb:4a:17:f6: 42:b2:21:a3:79:31:74:0a:eb:d4:12:2a:20:2e:4e:5f:e7:c3: 68:3d:b5:28:af:92:d0:69:3b:c3:74:62:6d:d9:33:76:39:30: dc:e5:20:85:3a:2e:56:1b:8e:98:4d:d5:52:9b:19:0a:a2:d1: 96:09:98:de:6f:69:88:3c:7d:df:7f:55:26:b3:0e:22:0c:03: e1:0a:d5:a7:29:96:64:16:cc:7f:96:aa:26:22:11:9e:72:e8: 65:1a:b2:be:d5:2f:c5:41:c7:6e:ab:49:e7:b7:c2:70:2f:06: 75:be:24:22:ec:55:62:2d:d4:16:e0:d9:d6:10:4b:6f:0e:e1: 8d:5d:ee:03:07:d5:e4:9c:25:60:3a:92:21:41:b5:2e:85:fc: cc:7f:9b:be:4c:e7:b2:fa:3a:50:64:20:13:35:6b:49:f3:39: 1d:5e:f1:e0:a8:20:1b:4c:20:c4:6f:54:91:c0:90:e0:a1:0a: af:61:89:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzNUQxMTAvBgNVBAUTKDYzNTkzMDlFRjQ5QjQ0NUY2RUI1MzMxQkRGMEE5NEM1 QzZFRkMzN0IwHhcNMjQxMTIyMjIyNDAwWhcNMjQxMTI5MjIyNDAwWjAYMRYwFAYD VQQDEw02NzQxMDQ4MS00ODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6/lUmzARBDZycFJwOa8LVYQWJRdHyi/HSB9OVeU/0Qm6YMhZaj2IUm9h9eV djJPwBPFqXgY7q1Fuw37wIvc8V2kk3JjTGPIHA1k85ZYwklaY6D++PVMQtQp3+0P LkFeadj4TMt1QofN8GsBIzmz/g3MdBzqEs5TIdhQWM40wnC/qJz7wNCyCqOrBlF9 H8E57Ecdqg5XT8XWtltq/8t6NN6clXHhoCiW5wdiVHRGXcYUbYIGEBx6uhVBAnqK wYS6QV6Ges2lbpJBpAkwLUFnpe1KooC2QPjkMnKemZ+WTaZs9EXXWjIy2eqpB3xK rPs6A9iW+DDyWaRCG0mvL8bcTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCANrquX br32BwQtWhEVxx7rVQ17MB8GA1UdIwQYMBaAFGNZMJ70m0RfbrUzG98KlMXG78N7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTM1RC9GNTAwRjcyODhB QjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJGOXV0VE1iM3dxVXhjYnZ3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxa3dudlNiUkY5dXRUTWIzd3FVeGNidnczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTM1RC9GNTAwRjcyODhBQjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJG OXV0VE1iM3dxVXhjYnZ3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN5CnC6Gf9PEerSJP8MRGPA6dGaT+SLRCGiAh/kdZCi+NHTewM2H0Z f1sbYozzIj4qEpTBXp8n6buNt6zrAv5zTUkg+utKF/ZCsiGjeTF0CuvUEiogLk5f 58NoPbUor5LQaTvDdGJt2TN2OTDc5SCFOi5WG46YTdVSmxkKotGWCZjeb2mIPH3f f1Umsw4iDAPhCtWnKZZkFsx/lqomIhGecuhlGrK+1S/FQcduq0nnt8JwLwZ1viQi 7FViLdQW4NnWEEtvDuGNXe4DB9XknCVgOpIhQbUuhfzMf5u+TOey+jpQZCATNWtJ 8zkdXvHgqCAbTCDEb1SRwJDgoQqvYYkp -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:47 2024 by rpki-client on console-ams.rpki-client.org