$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft File: YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json) Hash identifier: izTnL31xT3+N1FsM+ibu6PGEmA8g9BeyztSv6bHnI+Y= Subject key identifier: 91:44:DC:31:F7:EA:8B:8D:68:4D:EB:E1:AD:8E:68:30:AC:3E:40:E6 Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 Certificate issuer: /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft Manifest number: 0D Signing time: Wed 23 Oct 2024 06:44:45 +0000 Manifest this update: Wed 23 Oct 2024 06:44:45 +0000 Manifest next update: Wed 30 Oct 2024 06:44:45 +0000 Files and hashes: 1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: RxG95TQS+2A9HOm9tUUVig1BD7IXoDx8sAy18aLy6sc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Validity Not Before: Oct 23 06:44:45 2024 GMT Not After : Oct 30 06:44:45 2024 GMT Subject: CN=67189b5d-e4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c8:4d:f6:bc:10:36:71:3d:27:32:f7:2a:66: 83:22:6d:70:f3:f4:50:e7:5a:e4:86:ab:39:58:00: 20:3b:65:f3:61:26:73:65:3f:78:a0:c6:e6:6f:2b: 13:9a:b5:00:37:e2:13:a0:59:86:8e:57:d7:0e:21: 4b:c9:a6:19:e9:a1:d2:3a:c4:a6:a7:21:3e:94:4b: 0e:ed:35:58:ee:03:14:4b:39:34:ab:35:11:9e:14: a4:4b:b9:da:4b:a3:2b:7b:5d:3d:6d:1c:92:4e:23: 93:83:4f:ef:df:78:f4:d3:e5:6a:ab:0f:19:34:96: dc:ca:af:98:44:f9:ff:f5:e6:3d:ba:75:42:8e:10: b6:9e:6e:1e:7b:2e:36:42:10:2b:b2:67:55:3f:b7: 70:f9:2a:08:c6:4f:06:61:27:77:6f:07:20:35:89: da:b0:75:14:7f:72:a3:f0:6b:74:57:0d:14:81:36: 64:76:fc:4b:85:54:7a:be:8e:44:e1:02:1d:ef:f9: 11:06:05:ba:ed:25:c8:f0:25:3e:5b:e7:2a:ac:01: b9:88:31:a8:81:0a:05:f2:ca:cf:88:d8:47:1a:90: 71:55:7d:75:bc:e4:8c:c4:41:b9:79:d5:b6:15:6a: 71:d3:60:ea:27:28:7e:bc:9e:70:ff:9b:35:5b:b4: c3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:44:DC:31:F7:EA:8B:8D:68:4D:EB:E1:AD:8E:68:30:AC:3E:40:E6 X509v3 Authority Key Identifier: keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:61:a5:ff:d6:45:75:92:b8:0b:8f:0b:f6:c0:64:48:2a:9a: 89:d6:6b:d5:2c:fd:e0:8c:e5:4c:06:3e:e2:0b:70:af:31:aa: d1:88:43:5c:4c:96:ae:7d:8b:9c:e7:95:2b:32:5b:05:37:a8: 95:fd:ed:94:1b:77:6a:ea:3a:0f:e0:8a:37:1f:b2:6e:c6:49: 0f:04:73:8f:bf:b1:aa:e8:3c:c7:35:46:5f:6b:43:8a:b5:63: 3e:67:86:72:fd:dd:87:64:ae:4c:2e:28:58:24:d0:b0:c2:64: 7a:02:68:2c:50:af:58:ef:e2:08:74:e3:49:80:51:0d:ea:24: f4:2f:e3:b7:d3:4f:03:1e:22:56:3a:af:d0:4e:94:a1:d2:c5: c9:47:cc:0f:f1:b9:8a:fb:39:5d:4d:6f:7e:57:75:3a:b4:cf: 44:64:df:a6:5c:14:c3:f9:ca:60:5b:9a:f5:42:38:f6:83:ea: fd:9b:1a:ca:91:5b:52:09:d7:31:36:6a:57:fa:4d:bc:cb:9f: 12:af:99:f3:c8:4d:38:0b:96:7a:f3:98:33:4e:dc:b2:2b:29: 66:f7:5f:5e:cc:f4:90:69:e2:97:81:f5:0a:aa:00:68:87:8d: d9:63:50:73:4c:11:f7:3d:42:36:8b:c2:81:24:bd:f2:ec:74: 9c:26:eb:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNENTExMC8GA1UEBRMoNjMwNURDQjU1RkQxNEI1QzdBQTI5NEFFMzdDNzAyNzU2 OTJGNDE4MDAeFw0yNDEwMjMwNjQ0NDVaFw0yNDEwMzAwNjQ0NDVaMBgxFjAUBgNV BAMTDTY3MTg5YjVkLWU0YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxyE32vBA2cT0nMvcqZoMibXDz9FDnWuSGqzlYACA7ZfNhJnNlP3igxuZvKxOa tQA34hOgWYaOV9cOIUvJphnpodI6xKanIT6USw7tNVjuAxRLOTSrNRGeFKRLudpL oyt7XT1tHJJOI5ODT+/fePTT5WqrDxk0ltzKr5hE+f/15j26dUKOELaebh57LjZC ECuyZ1U/t3D5KgjGTwZhJ3dvByA1idqwdRR/cqPwa3RXDRSBNmR2/EuFVHq+jkTh Ah3v+REGBbrtJcjwJT5b5yqsAbmIMaiBCgXyys+I2EcakHFVfXW85IzEQbl51bYV anHTYOonKH68nnD/mzVbtMNdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkUTcMffq i41oTevhrY5oMKw+QOYwHwYDVR0jBBgwFoAUYwXctV/RS1x6opSuN8cCdWkvQYAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0Q1LzdBOUEyNTEwN0ZF RjExRUZBODJERjYzOUM0RjlBRTAyL1l3WGN0Vl9SUzF4Nm9wU3VOOGNDZFdrdlFZ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXdYY3RWX1JTMXg2b3BTdU44Y0NkV2t2UVlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0Q1LzdBOUEyNTEwN0ZFRjExRUZBODJERjYzOUM0RjlBRTAyL1l3WGN0Vl9SUzF4 Nm9wU3VOOGNDZFdrdlFZQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFBhpf/WRXWSuAuPC/bAZEgqmonWa9Us/eCM5UwGPuILcK8xqtGIQ1xM lq59i5znlSsyWwU3qJX97ZQbd2rqOg/gijcfsm7GSQ8Ec4+/saroPMc1Rl9rQ4q1 Yz5nhnL93YdkrkwuKFgk0LDCZHoCaCxQr1jv4gh040mAUQ3qJPQv47fTTwMeIlY6 r9BOlKHSxclHzA/xuYr7OV1Nb35XdTq0z0Rk36ZcFMP5ymBbmvVCOPaD6v2bGsqR W1IJ1zE2alf6TbzLnxKvmfPITTgLlnrzmDNO3LIrKWb3X17M9JBp4peB9QqqAGiH jdljUHNMEfc9QjaLwoEkvfLsdJwm69o= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:58 2024 by rpki-client on console-ams.rpki-client.org