$ rpki-client -vvf rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft File: Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft (raw, json) Hash identifier: QQurmnBSCXOYwTCSqBMnQgHKznd/niE8qIylyEuOcYU= Subject key identifier: 04:88:D2:6A:3B:87:0E:47:64:D9:6C:D8:86:82:5C:D8:72:A2:B7:2B Authority key identifier: 63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C Certificate issuer: /CN=A91C15F2/serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C Certificate serial: 0584 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft Manifest number: 057D Signing time: Fri 22 Nov 2024 22:50:19 +0000 Manifest this update: Fri 22 Nov 2024 22:50:18 +0000 Manifest next update: Fri 29 Nov 2024 22:50:18 +0000 Files and hashes: 1: Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl (hash: EJa4GsXRu7SWcBo01p4lem9sIFOK+APgerO2+oOv7YY=) 2: C8AE3C40B93811EBAC80A46DC4F9AE02.roa (hash: 8A4qahseWZRMlIxZiZssA7PdmU7bh2Sf762zX6THCIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1412 (0x584) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C15F2/serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C Validity Not Before: Nov 22 22:50:18 2024 GMT Not After : Nov 29 22:50:18 2024 GMT Subject: CN=67410aaa-85dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f2:91:77:eb:7c:e1:d9:bb:01:ab:e0:81:ba: cc:71:ff:cb:d1:7b:2b:8a:8c:30:aa:a9:5f:b7:71: 8c:c1:c8:f8:a7:14:26:70:a4:25:7a:6e:af:fe:1b: b8:6f:cd:4a:83:ce:ab:f8:72:87:90:91:89:3f:9e: cd:97:82:f4:22:7e:da:23:a7:b9:cd:d8:9d:1f:6b: b8:43:a6:c5:dd:4d:b8:89:d5:a8:48:e1:b3:93:48: 8f:fa:4d:d0:68:6a:85:fd:67:91:4e:95:5d:d3:6b: 25:88:9c:f4:73:40:88:15:70:9c:61:b3:2a:b4:eb: 76:6a:8f:38:02:17:92:bb:00:15:cc:82:96:b5:ab: 73:1a:7b:0e:d3:bb:db:b7:0d:bf:7f:a7:ff:9a:a4: eb:f0:8e:80:19:84:67:ee:2d:46:9b:c0:62:b4:4d: 92:e9:fc:06:46:b5:f6:23:3e:7e:d5:01:84:09:6e: 08:28:60:06:b1:37:14:ca:23:b1:81:cc:d5:a1:5f: 38:46:70:bc:a8:95:83:92:71:1e:08:10:9f:3b:23: 1e:78:1d:d3:12:86:a9:79:d7:f1:1f:58:fe:7f:73: 91:b1:d4:8f:33:df:d0:77:b9:f6:5f:ad:c9:6b:4b: 9d:2c:f5:ad:f9:2b:3e:70:2c:9d:5f:ec:4f:c6:7b: 43:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:88:D2:6A:3B:87:0E:47:64:D9:6C:D8:86:82:5C:D8:72:A2:B7:2B X509v3 Authority Key Identifier: keyid:63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f1:c4:e8:8f:84:66:ec:45:58:ed:27:b9:26:60:4b:f2:a0: 20:0e:08:6e:45:3b:1f:0c:a1:36:fe:5c:9f:66:01:30:b9:b7: 54:ed:94:3f:53:99:ed:1b:05:9c:14:12:b7:87:6d:85:27:30: 07:75:f5:5d:88:e5:c8:de:f0:23:d1:3e:c9:9f:13:64:5f:bc: 9e:83:35:0c:34:e8:c4:c0:a3:cf:d9:04:33:7a:db:0a:15:38: 21:85:72:ab:ba:98:9f:f7:d5:3c:56:f6:b8:06:7b:b2:ad:87: 96:76:67:dd:e2:28:a7:3b:1c:08:cf:99:dc:d2:f4:df:da:46: b7:a4:67:fe:dc:52:58:70:8a:2c:e0:35:3c:f1:66:f8:48:f8: bd:bc:cc:1c:9a:5d:b1:1a:a4:88:e4:10:5e:61:01:aa:08:39: 23:b9:cc:9c:9d:d7:fe:63:08:1c:ab:b7:99:0c:b3:4f:d3:72: 01:6a:3d:bf:50:0c:34:1d:fe:09:44:d4:70:2c:29:fc:06:77: cd:40:49:4e:12:01:5c:b0:b2:2e:b8:17:4a:06:8c:ea:5f:b9: 26:e2:d6:e6:79:24:9c:3f:99:e1:f0:ef:5b:67:0d:a5:b9:8e: da:dd:ec:7b:11:05:b6:2b:1d:68:8e:bb:d7:d9:88:57:eb:45: 2c:e8:2b:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE1RjIxMTAvBgNVBAUTKDYzODJCNTEzMzQ4MzE1RDVBRjNGMTMwRUM1NEMxREE4 NjcyODhDMkMwHhcNMjQxMTIyMjI1MDE4WhcNMjQxMTI5MjI1MDE4WjAYMRYwFAYD VQQDEw02NzQxMGFhYS04NWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvKRd+t84dm7AavggbrMcf/L0Xsriowwqqlft3GMwcj4pxQmcKQlem6v/hu4 b81Kg86r+HKHkJGJP57Nl4L0In7aI6e5zdidH2u4Q6bF3U24idWoSOGzk0iP+k3Q aGqF/WeRTpVd02sliJz0c0CIFXCcYbMqtOt2ao84AheSuwAVzIKWtatzGnsO07vb tw2/f6f/mqTr8I6AGYRn7i1Gm8BitE2S6fwGRrX2Iz5+1QGECW4IKGAGsTcUyiOx gczVoV84RnC8qJWDknEeCBCfOyMeeB3TEoapedfxH1j+f3ORsdSPM9/Qd7n2X63J a0udLPWt+Ss+cCydX+xPxntDNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASI0mo7 hw5HZNls2IaCXNhyorcrMB8GA1UdIwQYMBaAFGOCtRM0gxXVrz8TDsVMHahnKIws MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTVGMi81NjMyMkQ5OEI4 OTgxMUVCQUQ2QzFENDhDNEY5QUUwMi9ZNEsxRXpTREZkV3ZQeE1PeFV3ZHFHY29q Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0SzFFelNERmRXdlB4TU94VXdkcUdjb2pDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTVGMi81NjMyMkQ5OEI4OTgxMUVCQUQ2QzFENDhDNEY5QUUwMi9ZNEsxRXpTREZk V3ZQeE1PeFV3ZHFHY29qQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd8cToj4Rm7EVY7Se5JmBL8qAgDghuRTsfDKE2/lyfZgEwubdU7ZQ/ U5ntGwWcFBK3h22FJzAHdfVdiOXI3vAj0T7JnxNkX7yegzUMNOjEwKPP2QQzetsK FTghhXKrupif99U8Vva4BnuyrYeWdmfd4iinOxwIz5nc0vTf2ka3pGf+3FJYcIos 4DU88Wb4SPi9vMwcml2xGqSI5BBeYQGqCDkjucycndf+Ywgcq7eZDLNP03IBaj2/ UAw0Hf4JRNRwLCn8BnfNQElOEgFcsLIuuBdKBozqX7km4tbmeSScP5nh8O9bZw2l uY7a3ex7EQW2Kx1ojrvX2YhX60Us6Cv8 -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:33 2024 by rpki-client on console-fra.rpki-client.org