$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft File: FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json) Hash identifier: mtZEqydkTqhssQBZClMwXYNqwFMVdTnCypfLxUUIDq8= Subject key identifier: 04:23:0F:50:71:DA:59:4D:2D:E6:C4:52:F6:6E:C4:87:0D:55:62:34 Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC Certificate issuer: /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft Manifest number: 01A8 Signing time: Sat 23 Nov 2024 01:52:39 +0000 Manifest this update: Sat 23 Nov 2024 01:52:39 +0000 Manifest next update: Sat 30 Nov 2024 01:52:39 +0000 Files and hashes: 1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: QTGIVigr3fVb1FcbfBtXylpqUq2fxix7tHjVBtixsGc=) 2: 59A2E9D8A01411EF8E674221C4F9AE02.roa (hash: Awesdi3w1tMsyunxz0+auFNmXjcMcElIgsBpVsZJdUI=) 3: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: XHpwnOzWirhZDyC+O+dd8moXeBpb4e61IwD/RSr7i40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC Validity Not Before: Nov 23 01:52:39 2024 GMT Not After : Nov 30 01:52:39 2024 GMT Subject: CN=67413567-ff81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:23:0c:04:3c:a2:81:5d:8c:f4:bd:b5:a6:b5: 1a:e4:91:dd:89:67:f5:eb:a6:4f:45:4e:57:5a:2c: b4:84:d2:1d:65:75:3f:7e:87:6c:92:5a:39:56:7d: ba:ec:4f:57:9f:59:7d:33:d8:4d:4c:2d:66:f1:72: ed:23:4c:43:7d:15:17:92:a2:ac:08:31:f3:c1:f8: 36:18:36:14:d3:c0:f1:a1:c2:dc:74:b1:02:2f:e7: e6:4c:26:4b:c1:f2:57:d5:26:21:21:34:34:15:61: 1c:fc:f4:ea:8d:a0:1b:70:e0:cc:51:6d:ab:56:a2: 1d:f2:eb:35:be:bd:c3:80:b4:66:5f:01:71:94:b2: 09:ef:94:f6:99:11:a0:49:ec:eb:6d:5d:8d:81:0a: de:d8:76:a4:f1:10:b8:b2:6b:4d:94:ce:62:1f:cc: 08:7d:df:6c:88:b2:6f:0c:3e:64:53:fe:97:04:4a: 95:eb:7a:55:36:10:17:e0:ad:9d:74:d2:68:45:39: 92:30:9d:23:bc:67:9d:c0:4b:bc:3b:fa:6f:99:ea: 51:6a:78:b9:a7:6c:26:8f:ae:f2:07:14:4e:1c:b6: 2f:cc:d1:2e:b1:60:05:31:88:1b:4d:fe:77:6a:19: c8:02:61:ca:b6:2b:6c:a9:e7:67:0a:a1:11:4d:5a: e6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:23:0F:50:71:DA:59:4D:2D:E6:C4:52:F6:6E:C4:87:0D:55:62:34 X509v3 Authority Key Identifier: keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bb:8c:6d:fe:1f:62:19:33:bf:8d:c7:a8:e9:ed:24:28:1a: d4:48:37:d0:48:94:2f:5d:c1:66:60:59:15:02:00:75:ea:e6: 4d:89:79:14:50:77:2a:50:8e:68:35:78:1d:b4:90:11:85:bd: 4b:03:49:85:0b:4d:3c:34:cd:5f:57:bb:b3:93:d7:45:0a:f1: f7:90:dc:ae:96:58:ab:52:16:67:5f:d3:e9:42:45:de:0b:6f: 07:e4:a7:bc:af:71:59:97:f2:11:ce:3d:f0:38:74:9f:19:31: a6:7e:61:21:30:da:22:ce:15:45:57:02:cf:9c:ce:27:66:ec: b8:7e:ab:ae:80:67:62:3c:25:26:16:8e:df:d4:22:18:21:8a: 5b:19:a9:64:39:8f:92:80:0d:3c:03:92:5e:bb:98:3a:4b:a3: ab:94:bf:ea:ce:ff:74:b1:25:fe:71:49:4a:16:65:a5:76:35: f2:7f:5a:96:71:cb:e2:bb:67:c9:bf:2e:88:a1:52:9f:d6:95: ca:b9:e7:95:7b:7f:b6:7d:0f:bf:ea:60:e7:8c:06:e6:a8:49: 90:65:22:db:59:e5:0b:7e:82:e5:db:e2:f9:37:f9:27:b8:5f: 95:51:c6:01:4f:ef:2a:a4:68:8f:07:35:cf:07:26:5f:9d:fd: 81:da:b8:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA4RUUxMTAvBgNVBAUTKDE1OEI5NjY2NEZCMUM5QUVFRUIzRDI4NzA3Rjg3N0ZF MjM3QjAyREMwHhcNMjQxMTIzMDE1MjM5WhcNMjQxMTMwMDE1MjM5WjAYMRYwFAYD VQQDEw02NzQxMzU2Ny1mZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yMMBDyigV2M9L21prUa5JHdiWf166ZPRU5XWiy0hNIdZXU/fodsklo5Vn26 7E9Xn1l9M9hNTC1m8XLtI0xDfRUXkqKsCDHzwfg2GDYU08DxocLcdLECL+fmTCZL wfJX1SYhITQ0FWEc/PTqjaAbcODMUW2rVqId8us1vr3DgLRmXwFxlLIJ75T2mRGg SezrbV2NgQre2Hak8RC4smtNlM5iH8wIfd9siLJvDD5kU/6XBEqV63pVNhAX4K2d dNJoRTmSMJ0jvGedwEu8O/pvmepRani5p2wmj67yBxROHLYvzNEusWAFMYgbTf53 ahnIAmHKtitsqednCqERTVrmCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQjD1Bx 2llNLebEUvZuxIcNVWI0MB8GA1UdIwQYMBaAFBWLlmZPscmu7rPShwf4d/4jewLc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDhFRS81M0M2NzhENjQz MDAxMUVEODQwQjMzNTdDNEY5QUUwMi9GWXVXWmsteHlhN3VzOUtIQl9oM19pTjdB dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZdVdaay14eWE3dXM5S0hCX2gzX2lON0F0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDhFRS81M0M2NzhENjQzMDAxMUVEODQwQjMzNTdDNEY5QUUwMi9GWXVXWmsteHlh N3VzOUtIQl9oM19pTjdBdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPu4xt/h9iGTO/jceo6e0kKBrUSDfQSJQvXcFmYFkVAgB16uZNiXkU UHcqUI5oNXgdtJARhb1LA0mFC008NM1fV7uzk9dFCvH3kNyullirUhZnX9PpQkXe C28H5Ke8r3FZl/IRzj3wOHSfGTGmfmEhMNoizhVFVwLPnM4nZuy4fquugGdiPCUm Fo7f1CIYIYpbGalkOY+SgA08A5Jeu5g6S6OrlL/qzv90sSX+cUlKFmWldjXyf1qW ccviu2fJvy6IoVKf1pXKueeVe3+2fQ+/6mDnjAbmqEmQZSLbWeULfoLl2+L5N/kn uF+VUcYBT+8qpGiPBzXPByZfnf2B2rj2 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:50 2024 by rpki-client on console-ams.rpki-client.org