$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft File: YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json) Hash identifier: ybZQyFmRcqF6DTS35PvYypdN3MkhUBNSrmrO8gVgFpU= Subject key identifier: AC:97:69:C7:FB:FE:66:02:17:F8:33:68:CC:08:04:87:56:92:52:7F Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 Certificate issuer: /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Certificate serial: 0727 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft Manifest number: 0727 Signing time: Wed 20 Nov 2024 21:15:11 +0000 Manifest this update: Wed 20 Nov 2024 21:15:10 +0000 Manifest next update: Wed 27 Nov 2024 21:15:10 +0000 Files and hashes: 1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: Giouf3NYdlub/0dg4ubz9YoBrD5gANGwwRHkYQXSpN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1831 (0x727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Validity Not Before: Nov 20 21:15:10 2024 GMT Not After : Nov 27 21:15:10 2024 GMT Subject: CN=673e515e-9a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:95:b0:33:73:2d:4d:3c:b7:1d:ed:57:f2:a0: 93:90:c5:f8:64:3e:6a:f3:2b:91:22:16:19:8f:ca: d3:51:9f:6c:67:da:fb:e4:a6:54:98:6d:bd:72:f2: 69:0f:1e:b7:c3:ca:70:ab:7d:5b:c7:44:ea:fc:76: b3:34:b6:78:9b:87:ae:96:f1:9e:66:60:1c:41:26: 8f:0d:47:bf:82:71:15:f6:db:6d:16:14:c8:55:28: ae:c7:88:29:17:03:13:e3:f5:d1:5f:2a:2e:4e:05: ca:7a:5b:02:a9:cd:48:0e:93:c2:aa:68:f8:fa:99: ea:1d:e5:ea:86:b8:fd:7a:0f:3e:aa:c7:68:95:98: 9f:78:c0:9b:53:e4:21:15:5b:7d:45:ef:9f:01:1c: ce:c7:fb:bd:60:c3:9c:d2:76:e1:61:8a:b3:ef:aa: be:87:d4:87:48:d2:f5:dc:a9:08:57:3a:b5:be:8f: a1:52:90:c1:ed:4a:7e:cd:e3:0c:18:81:a2:f4:49: 1d:d3:fa:cd:1d:5d:bb:7e:0f:f6:f2:f5:37:fa:27: a1:1f:6a:75:67:95:a4:84:64:24:b2:9c:35:78:da: 46:56:1b:f8:80:16:d6:91:f4:09:bd:46:89:a9:8d: 99:f2:ac:23:01:81:cf:3c:46:d9:29:21:d0:8b:ab: 8e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:97:69:C7:FB:FE:66:02:17:F8:33:68:CC:08:04:87:56:92:52:7F X509v3 Authority Key Identifier: keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:44:b5:10:7f:ac:6c:94:ec:46:e3:b6:22:18:80:5a:92:a6: 43:8c:77:5a:4b:ef:f1:41:cf:ad:85:91:e1:c1:a1:b4:a2:13: fc:94:b7:d0:a0:96:f6:ed:e6:bc:74:92:66:47:68:53:e7:43: d4:ac:33:f6:c1:2c:a8:f6:50:c9:92:4a:c3:d8:71:44:29:63: 7b:84:3b:b2:8a:b0:e4:65:d7:19:45:b7:61:16:17:1d:b3:76: 04:12:56:36:96:16:75:95:36:ba:81:86:4c:1e:4c:a8:77:c5: 4c:dd:13:68:6c:7f:a4:f5:0e:7a:fe:2d:3f:fe:b9:fc:d7:94: 92:1c:65:c7:a8:85:46:4e:93:1f:fc:c7:ec:d9:88:c6:02:9f: 89:a7:1f:34:0b:bd:eb:94:c1:14:8f:c7:99:6f:fd:08:78:62: 6f:b1:3c:94:f3:95:bf:eb:3b:1b:77:c7:a2:b9:38:be:8d:7d: 5e:09:76:b0:73:03:dc:19:10:61:80:21:81:15:e8:98:f8:f4: 3b:d7:61:0a:21:1f:66:e9:06:d0:20:23:24:ed:66:69:44:f7: 92:ee:e9:64:5d:ad:51:84:3f:fe:65:96:08:d3:d0:27:fb:1c: 12:40:63:c8:22:48:23:71:94:e6:11:1e:63:64:f0:d0:b3:32: 8a:1e:8d:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJDNDkxMTAvBgNVBAUTKDYwMzU1QzBEOTk3MjZGRUU5RUU0N0FCNkZBRTZERjBF OUYzODFGMTIwHhcNMjQxMTIwMjExNTEwWhcNMjQxMTI3MjExNTEwWjAYMRYwFAYD VQQDEw02NzNlNTE1ZS05YTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pWwM3MtTTy3He1X8qCTkMX4ZD5q8yuRIhYZj8rTUZ9sZ9r75KZUmG29cvJp Dx63w8pwq31bx0Tq/HazNLZ4m4eulvGeZmAcQSaPDUe/gnEV9tttFhTIVSiux4gp FwMT4/XRXyouTgXKelsCqc1IDpPCqmj4+pnqHeXqhrj9eg8+qsdolZifeMCbU+Qh FVt9Re+fARzOx/u9YMOc0nbhYYqz76q+h9SHSNL13KkIVzq1vo+hUpDB7Up+zeMM GIGi9Ekd0/rNHV27fg/28vU3+iehH2p1Z5WkhGQkspw1eNpGVhv4gBbWkfQJvUaJ qY2Z8qwjAYHPPEbZKSHQi6uOWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyXacf7 /mYCF/gzaMwIBIdWklJ/MB8GA1UdIwQYMBaAFGA1XA2Zcm/unuR6tvrm3w6fOB8S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkM0OS9FNTUyMzdFQzBE NzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWItNmU1SHEyLXViZkRwODRI eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lEVmNEWmx5Yi02ZTVIcTItdWJmRHA4NEh4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkM0OS9FNTUyMzdFQzBENzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWIt NmU1SHEyLXViZkRwODRIeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANRLUQf6xslOxG47YiGIBakqZDjHdaS+/xQc+thZHhwaG0ohP8lLfQ oJb27ea8dJJmR2hT50PUrDP2wSyo9lDJkkrD2HFEKWN7hDuyirDkZdcZRbdhFhcd s3YEElY2lhZ1lTa6gYZMHkyod8VM3RNobH+k9Q56/i0//rn815SSHGXHqIVGTpMf /Mfs2YjGAp+Jpx80C73rlMEUj8eZb/0IeGJvsTyU85W/6zsbd8eiuTi+jX1eCXaw cwPcGRBhgCGBFeiY+PQ712EKIR9m6QbQICMk7WZpRPeS7ulkXa1RhD/+ZZYI09An +xwSQGPIIkgjcZTmER5jZPDQszKKHo2U -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:44 2024 by rpki-client on console-fra.rpki-client.org