$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft File: yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft (raw, json) Hash identifier: IheOYWVYRdEiQ8Q/pFC5kv0F1jfgPGkJqFGT8VtjDpo= Subject key identifier: 67:34:E7:3A:05:4C:56:3F:96:13:AA:45:03:21:2E:2C:94:39:13:8C Authority key identifier: C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28 Certificate issuer: /CN=A91C1710/serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft Manifest number: 060F Signing time: Sat 23 Nov 2024 00:25:25 +0000 Manifest this update: Sat 23 Nov 2024 00:25:25 +0000 Manifest next update: Sat 30 Nov 2024 00:25:25 +0000 Files and hashes: 1: yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl (hash: dr6+buEXFrOdxklpYYUsrBkuT20ztncDWaKicqco6IQ=) 2: 99667AD4F83211ED97101D26C4F9AE02.roa (hash: /nDMz4Pz2U+zhmiQ5RBk7WsimK68dDcy3QsRRkTPKlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1710/serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228 Validity Not Before: Nov 23 00:25:25 2024 GMT Not After : Nov 30 00:25:25 2024 GMT Subject: CN=674120f5-b25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:55:9f:84:7e:d2:36:75:ea:9d:ac:20:8d: f4:10:dc:1a:72:db:49:38:e0:52:96:28:2f:21:b9: eb:48:ef:44:7a:f7:11:02:65:a7:6c:0d:d2:76:82: 3f:21:cb:c6:59:26:60:07:7f:73:4e:2e:b8:75:99: 7b:3d:df:88:d1:45:c6:1a:54:b9:5a:e8:da:e1:ef: 87:62:c3:83:e6:67:ad:91:e8:ba:17:7f:37:fb:2b: 23:8e:07:5b:45:10:07:40:53:7e:9d:8d:e8:53:76: 9d:6f:4b:bb:94:ad:10:37:f7:96:d5:b3:d2:37:ac: f3:1f:41:56:64:78:09:ff:6a:9a:84:a5:39:71:22: 15:67:dc:d7:db:c2:61:fa:a8:5e:b3:20:aa:f7:62: 9a:d7:f8:17:05:03:bd:2a:4b:bd:6b:16:94:93:e2: 13:cd:ea:c7:06:9f:ab:ef:4e:5c:b5:ed:b9:ac:01: 42:75:a1:6d:e1:56:42:15:59:a6:86:46:58:68:2f: 79:3b:e0:c1:02:d8:ef:ef:96:67:f6:f5:d8:03:85: fd:f4:77:e7:8f:f6:2e:f4:2f:3f:d8:8a:f7:a9:48: fc:14:80:e5:ea:15:44:7c:65:aa:3f:19:90:5e:fc: fc:22:8c:e4:5b:9a:80:71:22:e0:b5:68:a7:c0:eb: 98:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:34:E7:3A:05:4C:56:3F:96:13:AA:45:03:21:2E:2C:94:39:13:8C X509v3 Authority Key Identifier: keyid:C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:08:99:59:63:6d:fb:ff:fb:74:b9:e0:2b:b4:e4:e5:d8:28: fd:4e:5b:7f:d1:a3:5a:25:ba:fa:09:db:62:1c:16:17:62:4e: da:c4:fa:dc:43:ad:9f:da:d4:f1:27:0e:b4:da:9c:61:29:72: 98:7d:40:e6:cf:a7:76:e5:16:63:86:72:69:66:09:c3:73:01: 97:8d:ec:82:81:23:46:dc:56:84:64:1c:4c:88:f3:97:c4:d2: 8b:30:d9:75:56:42:0b:69:e8:57:a9:08:d9:fd:1b:10:1a:39: 49:3f:bb:26:b8:ed:2e:8b:0b:0f:08:df:96:f5:b0:b9:bb:a7: eb:fd:52:e6:6e:2a:25:4b:13:f4:6a:92:9d:07:2e:ed:e9:2f: 88:d3:10:0e:3e:90:b1:fc:66:1c:d8:b6:f7:ec:98:40:56:8a: e8:d3:5b:50:f2:95:aa:75:78:f6:03:ca:bd:21:d9:4f:51:81: 4f:26:e4:27:a3:23:99:1a:29:18:cd:97:03:ac:32:55:4a:ad: af:55:e5:c8:75:ec:8c:07:11:09:20:77:30:c6:ec:2e:64:46: 4d:c5:2a:88:8c:1c:89:03:55:7b:99:ed:4a:81:be:4a:2d:b7: 47:8f:4a:bb:d8:63:4c:9c:aa:d7:e8:ca:b4:92:64:60:22:be: cc:46:43:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE3MTAxMTAvBgNVBAUTKEM5Mzc1M0E5QUFBMkE4NkU1NkNBNEVBMEMzRkY4NTdD MzBFMzQyMjgwHhcNMjQxMTIzMDAyNTI1WhcNMjQxMTMwMDAyNTI1WjAYMRYwFAYD VQQDEw02NzQxMjBmNS1iMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNFVn4R+0jZ16p2sII30ENwacttJOOBSligvIbnrSO9EevcRAmWnbA3SdoI/ IcvGWSZgB39zTi64dZl7Pd+I0UXGGlS5Wuja4e+HYsOD5metkei6F383+ysjjgdb RRAHQFN+nY3oU3adb0u7lK0QN/eW1bPSN6zzH0FWZHgJ/2qahKU5cSIVZ9zX28Jh +qhesyCq92Ka1/gXBQO9Kku9axaUk+ITzerHBp+r705cte25rAFCdaFt4VZCFVmm hkZYaC95O+DBAtjv75Zn9vXYA4X99Hfnj/Yu9C8/2Ir3qUj8FIDl6hVEfGWqPxmQ Xvz8IozkW5qAcSLgtWinwOuYLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGc05zoF TFY/lhOqRQMhLiyUOROMMB8GA1UdIwQYMBaAFMk3U6mqoqhuVspOoMP/hXww40Io MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy NkIxMUVDQTExQkE1MkJDNEY5QUUwMi95VGRUcWFxaXFHNVd5azZnd18tRmZERGpR aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lUZFRxYXFpcUc1V3lrNmd3Xy1GZkREalFpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi95VGRUcWFxaXFH NVd5azZnd18tRmZERGpRaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgCJlZY237//t0ueArtOTl2Cj9Tlt/0aNaJbr6CdtiHBYXYk7axPrc Q62f2tTxJw602pxhKXKYfUDmz6d25RZjhnJpZgnDcwGXjeyCgSNG3FaEZBxMiPOX xNKLMNl1VkILaehXqQjZ/RsQGjlJP7smuO0uiwsPCN+W9bC5u6fr/VLmbiolSxP0 apKdBy7t6S+I0xAOPpCx/GYc2Lb37JhAVoro01tQ8pWqdXj2A8q9IdlPUYFPJuQn oyOZGikYzZcDrDJVSq2vVeXIdeyMBxEJIHcwxuwuZEZNxSqIjByJA1V7me1Kgb5K LbdHj0q72GNMnKrX6Mq0kmRgIr7MRkOT -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org