$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft File: ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json) Hash identifier: pvZQ6fJqCbjKe321ApSSAQOGc3o3ZNLJHJnQpbCgLoI= Subject key identifier: 1A:14:CA:B6:19:CB:26:7C:49:C0:B9:C2:17:A7:19:12:AF:C9:06:BB Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 Certificate issuer: /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Certificate serial: 0AFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft Manifest number: 0AE8 Signing time: Fri 22 Nov 2024 19:08:20 +0000 Manifest this update: Fri 22 Nov 2024 19:08:20 +0000 Manifest next update: Fri 29 Nov 2024 19:08:20 +0000 Files and hashes: 1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: WV3L7IJkD8cVG+7ochNPRQHPWB0HT0ftAJV0tDwouiY=) 2: AD989788E05511EEADC7D67EC4F9AE02.roa (hash: bSu0/aJwqyDIpSQexz7gKeDLygCiwIxJotGQrEfJHow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2814 (0xafe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Validity Not Before: Nov 22 19:08:20 2024 GMT Not After : Nov 29 19:08:20 2024 GMT Subject: CN=6740d6a4-2849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:30:06:53:aa:9f:24:11:a4:f4:42:80:a0:30: b6:68:50:20:ef:c7:b0:de:b2:d7:00:99:ae:8b:44: 57:07:75:12:47:4e:1d:53:f8:a7:78:69:0e:92:ff: 97:d4:84:05:9f:58:b1:f1:b1:cb:18:dd:05:23:a7: aa:a7:65:b3:47:e2:9d:c6:45:c2:ce:ce:9b:48:e0: 7a:27:1a:06:75:9d:b2:37:bc:41:9f:45:fc:bf:1a: e4:d6:0f:23:3f:3c:6d:0c:7a:05:b3:b7:91:93:da: ad:9d:f9:2c:78:07:3a:2d:53:c0:40:37:a8:a3:7f: 34:0f:08:a4:e5:98:c6:e1:41:e3:1c:11:43:95:60: d5:af:6f:99:ab:a2:30:42:84:7c:e3:04:bf:24:2c: de:1e:0d:d2:c3:eb:b5:b6:0a:5c:a4:26:ec:88:e8: be:36:1e:09:ad:23:cf:7f:9e:23:16:56:e6:cb:3a: 56:b2:9f:d3:7a:1b:dd:36:a2:ef:35:ff:bd:3c:9c: 26:1d:65:39:b2:7d:45:ff:92:74:c6:20:41:77:d1: 6e:c6:66:15:27:43:70:86:45:c2:60:09:11:00:84: af:62:20:73:a2:76:4a:3d:63:db:14:2b:d5:13:df: 63:fc:72:a6:20:45:0c:bb:7d:35:d3:fb:ca:e3:85: 59:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:14:CA:B6:19:CB:26:7C:49:C0:B9:C2:17:A7:19:12:AF:C9:06:BB X509v3 Authority Key Identifier: keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7b:b6:57:52:9a:7d:88:0d:92:c9:87:ee:9d:d0:62:52:79: e4:7d:55:65:4d:a8:e6:31:7c:29:54:12:9a:66:7d:d8:33:7c: df:b4:85:58:f1:8b:a9:c2:d7:9f:6e:fd:06:25:ec:37:80:41: ff:53:1a:55:61:fc:02:0e:a1:05:6c:6a:01:27:d1:67:eb:eb: eb:a8:43:b2:b2:44:fb:4c:37:62:df:39:0a:ec:bc:11:42:a1: 2d:54:a0:02:64:4a:a5:32:cd:5a:f6:5e:8a:91:b1:2f:44:73: 3a:1d:8d:bf:a8:1f:51:0b:5b:2c:ce:2a:56:5b:c5:c1:5c:f3: de:3b:ee:4a:ee:df:51:0a:eb:cd:34:8f:5e:d4:7b:92:db:4f: ff:d2:6a:39:a5:bd:f0:3a:71:36:ba:12:49:e0:73:20:7e:b7: fa:3e:dd:b2:90:f9:6d:e1:50:54:0f:f1:e1:22:ea:61:c0:29: f2:63:20:63:49:c2:46:75:8b:77:fe:c7:e9:48:f8:30:75:c2: 6b:98:37:26:a7:80:58:68:33:2d:e5:e2:6e:12:bb:f1:c5:7b: 0f:cc:94:85:28:70:4e:e8:fe:68:5c:f6:0b:b8:ef:3a:e7:b5: bf:5d:50:90:8a:e2:4c:85:a4:b5:fb:c4:8e:58:13:82:be:ad: 01:fd:59:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNDMxMTAvBgNVBAUTKENBMENFMkNCQTk5Q0RFMEQ5MDI3RkNFNDg2NEYyNkM5 MTNENDE5RTMwHhcNMjQxMTIyMTkwODIwWhcNMjQxMTI5MTkwODIwWjAYMRYwFAYD VQQDEw02NzQwZDZhNC0yODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jAGU6qfJBGk9EKAoDC2aFAg78ew3rLXAJmui0RXB3USR04dU/ineGkOkv+X 1IQFn1ix8bHLGN0FI6eqp2WzR+KdxkXCzs6bSOB6JxoGdZ2yN7xBn0X8vxrk1g8j PzxtDHoFs7eRk9qtnfkseAc6LVPAQDeoo380Dwik5ZjG4UHjHBFDlWDVr2+Zq6Iw QoR84wS/JCzeHg3Sw+u1tgpcpCbsiOi+Nh4JrSPPf54jFlbmyzpWsp/TehvdNqLv Nf+9PJwmHWU5sn1F/5J0xiBBd9FuxmYVJ0NwhkXCYAkRAISvYiBzonZKPWPbFCvV E99j/HKmIEUMu3010/vK44VZMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoUyrYZ yyZ8ScC5whenGRKvyQa7MB8GA1UdIwQYMBaAFMoM4supnN4NkCf85IZPJskT1Bnj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM0My9EQzJGNTQ2ODM5 RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNnMlFKX3praGs4bXlSUFVH ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lneml5Nm1jM2cyUUpfemtoazhteVJQVUdlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM0My9EQzJGNTQ2ODM5RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNn MlFKX3praGs4bXlSUFVHZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbe7ZXUpp9iA2SyYfundBiUnnkfVVlTajmMXwpVBKaZn3YM3zftIVY 8Yupwtefbv0GJew3gEH/UxpVYfwCDqEFbGoBJ9Fn6+vrqEOyskT7TDdi3zkK7LwR QqEtVKACZEqlMs1a9l6KkbEvRHM6HY2/qB9RC1sszipWW8XBXPPeO+5K7t9RCuvN NI9e1HuS20//0mo5pb3wOnE2uhJJ4HMgfrf6Pt2ykPlt4VBUD/HhIuphwCnyYyBj ScJGdYt3/sfpSPgwdcJrmDcmp4BYaDMt5eJuErvxxXsPzJSFKHBO6P5oXPYLuO86 57W/XVCQiuJMhaS1+8SOWBOCvq0B/Vnd -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:38 2024 by rpki-client on console-ams.rpki-client.org