$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft File: YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json) Hash identifier: owH0BK+NZQUeqnkxtoEAuSzi/k8krCvw/NtULreYIjE= Subject key identifier: 48:03:A7:1B:98:B0:F2:DF:5A:8D:27:7F:4B:66:AB:85:16:A0:48:4D Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 Certificate issuer: /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft Manifest number: 1C Signing time: Thu 21 Nov 2024 05:56:29 +0000 Manifest this update: Thu 21 Nov 2024 05:56:28 +0000 Manifest next update: Thu 28 Nov 2024 05:56:28 +0000 Files and hashes: 1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: 6uNQepXPZbgDmsUt+N/23QreTKOdJTmc2h64dbOLkjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Validity Not Before: Nov 21 05:56:28 2024 GMT Not After : Nov 28 05:56:28 2024 GMT Subject: CN=673ecb8c-3526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:89:53:de:7e:4a:2e:87:0d:32:8b:6d:8c: 4e:0c:c8:f7:62:56:40:02:2e:d6:87:0d:dd:db:28: 9e:d1:c3:5f:ab:e8:12:d6:95:07:19:20:c6:d8:44: 64:59:93:ed:ae:2a:91:22:45:c7:21:ae:b3:95:d9: a3:69:73:23:23:1a:2b:e1:31:5b:87:37:71:72:88: 36:04:ec:c3:bc:2f:47:1c:cb:c6:d4:62:a4:01:1e: 9d:8d:f1:c5:f2:e6:8a:97:7f:2b:d2:59:45:66:9d: f0:73:55:e0:f1:49:ea:d4:f4:a8:22:21:00:9c:0a: dd:03:55:4d:1c:c1:df:5a:d8:e0:ed:2f:89:6c:5e: 73:c9:d5:b7:b6:4d:12:63:5a:a7:77:29:0a:86:36: fd:80:19:0a:2b:c7:53:ef:3f:3e:88:99:d9:b5:29: d5:bb:bb:8f:77:6d:b0:2c:be:ed:70:5c:be:fa:c9: e8:54:92:99:f9:8a:1f:e6:91:84:25:33:5d:77:64: 34:37:1b:a2:4d:8c:e8:e0:0d:43:ad:ae:23:48:55: 4c:37:85:d4:85:7d:10:e8:67:03:92:2e:cd:cf:f1: 75:1f:88:08:66:f0:72:25:79:64:64:06:04:37:90: 4c:30:93:c8:70:a2:b8:6a:72:0e:b5:94:9e:a5:8d: f8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:03:A7:1B:98:B0:F2:DF:5A:8D:27:7F:4B:66:AB:85:16:A0:48:4D X509v3 Authority Key Identifier: keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1a:b0:77:7b:e5:e1:d6:65:b1:5b:60:2b:96:e9:14:e6:52: 94:f4:bf:bb:49:3d:de:8b:f1:61:52:08:fb:8f:77:49:c6:ba: 6b:90:56:d6:1e:bf:45:c7:48:7f:65:27:72:10:97:2a:c9:72: 5d:73:b4:2a:8a:8d:d5:c2:fa:56:93:19:74:fe:48:33:e7:14: 8b:b6:b5:e4:4c:a7:d4:24:78:1a:75:6b:32:f9:c9:45:5d:17: 74:74:7f:e2:61:5b:7f:1a:bb:4e:65:2d:4e:16:da:ab:37:54: cd:f2:7b:43:b9:88:7b:83:f2:2b:66:76:40:c1:bd:d2:a8:47: a9:01:ec:e6:79:7b:59:ef:1c:e9:ee:f8:a7:d7:52:f7:c9:1a: ac:f3:bd:de:b0:f4:44:ca:d7:06:a6:13:14:d8:17:d6:f3:5e: 84:80:30:e8:f8:9f:4c:16:e1:db:91:e0:03:b9:96:0e:50:6f: 0a:78:ef:28:75:74:c1:a4:53:19:dc:6c:b5:ba:7b:6c:18:67: 23:3c:1e:02:07:10:16:35:46:85:27:98:d9:e1:36:f6:65:1b: 25:28:7c:d3:91:00:86:19:9c:61:e0:d1:4c:67:99:09:01:fd: bf:47:75:6d:6b:80:c5:77:cc:48:9a:f2:41:ae:4e:3e:7b:e2: 34:26:91:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNENTExMC8GA1UEBRMoNjMwNURDQjU1RkQxNEI1QzdBQTI5NEFFMzdDNzAyNzU2 OTJGNDE4MDAeFw0yNDExMjEwNTU2MjhaFw0yNDExMjgwNTU2MjhaMBgxFjAUBgNV BAMTDTY3M2VjYjhjLTM1MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpu4lT3n5KLocNMottjE4MyPdiVkACLtaHDd3bKJ7Rw1+r6BLWlQcZIMbYRGRZ k+2uKpEiRcchrrOV2aNpcyMjGivhMVuHN3FyiDYE7MO8L0ccy8bUYqQBHp2N8cXy 5oqXfyvSWUVmnfBzVeDxSerU9KgiIQCcCt0DVU0cwd9a2ODtL4lsXnPJ1be2TRJj Wqd3KQqGNv2AGQorx1PvPz6Imdm1KdW7u493bbAsvu1wXL76yehUkpn5ih/mkYQl M113ZDQ3G6JNjOjgDUOtriNIVUw3hdSFfRDoZwOSLs3P8XUfiAhm8HIleWRkBgQ3 kEwwk8hworhqcg61lJ6ljfgZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSAOnG5iw 8t9ajSd/S2arhRagSE0wHwYDVR0jBBgwFoAUYwXctV/RS1x6opSuN8cCdWkvQYAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0Q1LzdBOUEyNTEwN0ZF RjExRUZBODJERjYzOUM0RjlBRTAyL1l3WGN0Vl9SUzF4Nm9wU3VOOGNDZFdrdlFZ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXdYY3RWX1JTMXg2b3BTdU44Y0NkV2t2UVlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0Q1LzdBOUEyNTEwN0ZFRjExRUZBODJERjYzOUM0RjlBRTAyL1l3WGN0Vl9SUzF4 Nm9wU3VOOGNDZFdrdlFZQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABsasHd75eHWZbFbYCuW6RTmUpT0v7tJPd6L8WFSCPuPd0nGumuQVtYe v0XHSH9lJ3IQlyrJcl1ztCqKjdXC+laTGXT+SDPnFIu2teRMp9QkeBp1azL5yUVd F3R0f+JhW38au05lLU4W2qs3VM3ye0O5iHuD8itmdkDBvdKoR6kB7OZ5e1nvHOnu +KfXUvfJGqzzvd6w9ETK1wamExTYF9bzXoSAMOj4n0wW4duR4AO5lg5Qbwp47yh1 dMGkUxncbLW6e2wYZyM8HgIHEBY1RoUnmNnhNvZlGyUofNORAIYZnGHg0UxnmQkB /b9HdW1rgMV3zEia8kGuTj574jQmkQ4= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:47 2024 by rpki-client on console-fra.rpki-client.org