$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft File: YC_0-oCgAKxh5tSrL3L72Wph-II.mft (raw, json) Hash identifier: DRmtnZ2mtOXQBdbn6/jjmLmgMs91em0zGPZvs7Danbk= Subject key identifier: 7C:4F:D7:E1:E6:9E:5B:4D:0B:05:21:C6:58:D4:0C:BF:3A:7E:51:C5 Authority key identifier: 60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 Certificate issuer: /CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft Manifest number: 0208 Signing time: Sat 23 Nov 2024 01:35:32 +0000 Manifest this update: Sat 23 Nov 2024 01:35:31 +0000 Manifest next update: Sat 30 Nov 2024 01:35:31 +0000 Files and hashes: 1: YC_0-oCgAKxh5tSrL3L72Wph-II.crl (hash: LkSzy93Qob76Wzh917Ddu6T8enJjigQAXszYm6yX9pM=) 2: 008C0876148311ED856EF438C4F9AE02.roa (hash: TaT1WGLobUSkn2V8H3yXdWE7g83qq/C9PlZR3+C38jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882 Validity Not Before: Nov 23 01:35:31 2024 GMT Not After : Nov 30 01:35:31 2024 GMT Subject: CN=67413163-50fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2b:8c:ee:99:4e:fc:ac:e6:87:03:e1:d5:61: a4:d2:9e:5f:f8:97:73:59:0f:91:b0:5d:7f:fe:bf: 41:41:cb:ff:1e:aa:0d:c8:68:98:b9:e9:e8:5a:07: 0c:64:28:ae:c9:7a:4e:0c:ef:b2:ed:38:ba:bf:fc: ac:fd:5d:a6:46:00:51:be:54:bd:7e:09:ff:ca:32: 84:34:97:e5:09:c3:e7:b7:9e:08:5d:2e:f2:94:5c: 65:27:46:a1:7c:09:b0:24:5e:42:bc:7f:74:b8:18: 43:7a:96:b5:e7:6a:96:ab:2a:c9:ef:2e:28:40:2f: 18:05:45:b0:da:5e:96:1b:25:96:55:3c:db:9a:99: ad:cd:2d:8a:53:7b:7c:4c:c1:15:01:a0:d3:4c:b8: 3b:b0:91:42:51:97:4e:f2:b9:84:38:27:3d:db:5b: b5:63:13:56:74:57:bc:35:bd:55:e0:80:68:47:82: 2e:40:0f:15:ad:55:0a:68:d8:cc:77:13:fe:30:d1: a5:fa:d0:6a:25:d5:27:a4:7b:d4:f1:63:29:d4:1a: a7:86:2c:bf:14:7d:07:33:36:62:5c:45:e7:a2:52: fe:5f:d6:a4:57:97:1f:dd:ed:8d:02:7e:cf:61:ea: 61:98:65:48:1e:21:0b:8b:a0:f0:96:98:25:d5:af: aa:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4F:D7:E1:E6:9E:5B:4D:0B:05:21:C6:58:D4:0C:BF:3A:7E:51:C5 X509v3 Authority Key Identifier: keyid:60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:dd:a6:f3:67:8c:8c:cc:fd:f1:e7:fe:c3:b4:80:62:6b:50: 8c:3a:0a:13:df:dc:05:7b:b1:2b:8d:50:aa:c3:18:4c:b7:70: fe:fb:f7:29:57:55:14:ba:ac:eb:0c:2f:ab:fe:d2:28:72:d9: 05:30:f4:4c:b3:fd:8a:96:87:9e:45:b1:33:43:63:86:b6:ce: 44:98:9b:ce:53:f2:2f:7d:93:8f:3e:5e:15:eb:d9:56:9d:4a: 44:19:b5:12:c0:9b:d8:12:b3:15:be:b5:4b:30:b5:c3:d6:11: d7:92:2c:84:42:58:65:c3:b2:02:ff:24:d8:88:ce:31:70:ff: f0:9e:68:cf:51:de:37:78:21:0b:fa:32:3e:04:5a:e1:e5:fd: a8:e6:01:1e:c9:fc:2b:9f:d4:5d:d8:45:d2:28:0a:9c:28:75: cd:df:e6:04:9c:10:c2:25:9d:5c:ff:b2:96:64:21:82:c5:f6: d4:10:14:2d:62:01:76:d7:f1:3d:0e:21:b6:63:72:83:57:90: 9c:3c:25:37:5c:94:8b:a1:24:71:98:88:f5:de:ec:b0:16:bd: 75:2d:22:ea:0d:15:18:26:4e:09:f4:5d:55:34:a3:e3:20:db: e4:26:da:3d:9a:92:d8:f6:db:d7:8b:fd:4a:1e:b7:cd:04:31: 0a:2a:22:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOTMxMTAvBgNVBAUTKDYwMkZGNEZBODBBMDAwQUM2MUU2RDRBQjJGNzJGQkQ5 NkE2MUY4ODIwHhcNMjQxMTIzMDEzNTMxWhcNMjQxMTMwMDEzNTMxWjAYMRYwFAYD VQQDEw02NzQxMzE2My01MGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4CuM7plO/KzmhwPh1WGk0p5f+JdzWQ+RsF1//r9BQcv/HqoNyGiYuenoWgcM ZCiuyXpODO+y7Ti6v/ys/V2mRgBRvlS9fgn/yjKENJflCcPnt54IXS7ylFxlJ0ah fAmwJF5CvH90uBhDepa152qWqyrJ7y4oQC8YBUWw2l6WGyWWVTzbmpmtzS2KU3t8 TMEVAaDTTLg7sJFCUZdO8rmEOCc921u1YxNWdFe8Nb1V4IBoR4IuQA8VrVUKaNjM dxP+MNGl+tBqJdUnpHvU8WMp1Bqnhiy/FH0HMzZiXEXnolL+X9akV5cf3e2NAn7P YephmGVIHiELi6Dwlpgl1a+qUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxP1+Hm nltNCwUhxljUDL86flHFMB8GA1UdIwQYMBaAFGAv9PqAoACsYebUqy9y+9lqYfiC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5My9BOUEzOEJCRTE0 N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FLeGg1dFNyTDNMNzJXcGgt SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDXzAtb0NnQUt4aDV0U3JMM0w3MldwaC1JSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5My9BOUEzOEJCRTE0N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FL eGg1dFNyTDNMNzJXcGgtSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ3abzZ4yMzP3x5/7DtIBia1CMOgoT39wFe7ErjVCqwxhMt3D++/cp V1UUuqzrDC+r/tIoctkFMPRMs/2KloeeRbEzQ2OGts5EmJvOU/IvfZOPPl4V69lW nUpEGbUSwJvYErMVvrVLMLXD1hHXkiyEQlhlw7IC/yTYiM4xcP/wnmjPUd43eCEL +jI+BFrh5f2o5gEeyfwrn9Rd2EXSKAqcKHXN3+YEnBDCJZ1c/7KWZCGCxfbUEBQt YgF21/E9DiG2Y3KDV5CcPCU3XJSLoSRxmIj13uywFr11LSLqDRUYJk4J9F1VNKPj INvkJto9mpLY9tvXi/1KHrfNBDEKKiJC -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:49 2024 by rpki-client on console-ams.rpki-client.org