$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft File: YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft (raw, json) Hash identifier: nN0G9OBI/S8hQ6Jfrtanvvh8D80YzPsM/t5fSKI7K6M= Subject key identifier: E9:BD:C9:A1:17:46:52:2F:C7:9F:96:6E:73:1B:0F:91:8A:EA:38:BB Authority key identifier: 61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00 Certificate issuer: /CN=A91C2F8C/serialNumber=611E1C149528F17A0EC799C39D562619C9A15100 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft Manifest number: 09 Signing time: Wed 23 Oct 2024 06:49:28 +0000 Manifest this update: Wed 23 Oct 2024 06:49:28 +0000 Manifest next update: Wed 30 Oct 2024 06:49:28 +0000 Files and hashes: 1: YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl (hash: aJfPXNirYmgyyOQlZHjeRbXlfPL+Tp2Fip8S2VnCYzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C/serialNumber=611E1C149528F17A0EC799C39D562619C9A15100 Validity Not Before: Oct 23 06:49:28 2024 GMT Not After : Oct 30 06:49:28 2024 GMT Subject: CN=67189c78-b70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:de:8e:69:99:e3:79:5f:6d:48:17:ea:ac:2d: 53:9a:b1:b7:ae:dd:71:65:aa:39:f3:45:d7:29:5c: ff:25:40:1c:ee:89:9b:56:34:7f:97:a6:8e:ca:15: 4b:68:7d:37:eb:a9:41:71:68:0f:c8:8b:23:11:63: 3a:3b:37:c3:82:f4:12:41:ed:14:88:b4:f5:d8:45: 74:43:87:2a:f8:40:e0:f1:82:ff:0c:f3:1c:76:c1: 49:f7:73:66:61:6c:1e:3b:07:46:2c:82:57:c9:f3: fa:6b:74:19:66:13:42:02:4b:b2:93:23:90:70:90: 8e:2b:c2:70:c2:d1:70:1a:71:ca:52:52:b8:ca:31: 4a:0e:4c:d9:17:5b:e1:83:7c:fa:63:c1:3c:20:df: 43:cc:38:7a:76:00:9e:46:5a:d4:57:e7:fe:e7:0c: 19:de:d3:b4:d2:ab:31:04:bb:f7:90:ab:1b:22:99: 4d:5a:7e:e5:a3:ac:49:86:f1:8e:3c:16:e0:82:a9: 7f:73:4c:22:33:be:24:f2:3b:e5:b0:f3:44:ab:6f: 94:33:b0:d5:2b:ff:a4:1b:39:ab:18:dd:13:4d:96: ed:25:28:e1:9e:95:64:bd:d1:a8:26:7f:1b:ab:a4: cf:e8:4b:8f:66:d7:fd:17:1f:35:a0:ed:fe:82:f7: 7f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BD:C9:A1:17:46:52:2F:C7:9F:96:6E:73:1B:0F:91:8A:EA:38:BB X509v3 Authority Key Identifier: keyid:61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:20:7f:0d:58:92:c3:95:cc:0d:3e:df:3d:93:b4:4a:39:42: c2:f5:51:9b:41:32:c1:01:52:45:29:d8:8f:9a:d2:b3:56:81: d4:a9:e6:cd:20:cc:a5:24:f2:ff:31:08:98:78:40:9c:ca:78: bd:4b:a5:3e:73:5b:13:d7:45:37:d8:05:09:1a:3a:3e:a0:1a: ff:36:f0:69:19:b5:5f:c3:9d:52:6b:cd:3d:46:e3:b7:b1:01: 5b:47:46:0d:bf:ae:f4:79:92:eb:e7:eb:fd:d9:21:f9:69:15: 25:bc:70:1b:04:72:28:61:c6:3c:ed:ae:04:3e:b4:cd:4d:d4: 86:91:2c:9c:f7:da:c4:dc:8d:47:9b:84:8c:40:00:37:c9:c6: a0:d5:d7:50:41:67:75:0a:42:d0:a6:33:c7:b1:d4:b8:2b:d6: d6:b5:7c:d6:e5:3b:e3:57:2f:ca:ae:f7:e9:e6:65:db:e7:e9: db:c4:8a:83:3a:94:eb:d3:72:8c:20:6c:86:f1:b2:22:47:99: ed:36:74:e3:2b:6b:fd:d6:ab:66:dc:b2:01:e2:0e:c0:56:37: 75:d9:f7:89:d0:25:2b:2b:3d:ee:ea:26:71:f0:bc:4e:c0:3c: a0:23:f3:94:15:60:33:d6:dd:3a:74:aa:a5:04:10:56:a5:6d: 89:30:3b:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MkY4QzExMC8GA1UEBRMoNjExRTFDMTQ5NTI4RjE3QTBFQzc5OUMzOUQ1NjI2MTlD OUExNTEwMDAeFw0yNDEwMjMwNjQ5MjhaFw0yNDEwMzAwNjQ5MjhaMBgxFjAUBgNV BAMTDTY3MTg5Yzc4LWI3MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDj3o5pmeN5X21IF+qsLVOasbeu3XFlqjnzRdcpXP8lQBzuiZtWNH+Xpo7KFUto fTfrqUFxaA/IiyMRYzo7N8OC9BJB7RSItPXYRXRDhyr4QODxgv8M8xx2wUn3c2Zh bB47B0YsglfJ8/prdBlmE0ICS7KTI5BwkI4rwnDC0XAaccpSUrjKMUoOTNkXW+GD fPpjwTwg30PMOHp2AJ5GWtRX5/7nDBne07TSqzEEu/eQqxsimU1afuWjrEmG8Y48 FuCCqX9zTCIzviTyO+Ww80Srb5QzsNUr/6QbOasY3RNNlu0lKOGelWS90agmfxur pM/oS49m1/0XHzWg7f6C93/BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6b3JoRdG Ui/Hn5ZucxsPkYrqOLswHwYDVR0jBBgwFoAUYR4cFJUo8XoOx5nDnVYmGcmhUQAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyRjhDLzVFMDcyQUZFODZF MDExRUY5QjZCMTc3RUM0RjlBRTAyL1lSNGNGSlVvOFhvT3g1bkRuVlltR2NtaFVR QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVI0Y0ZKVW84WG9PeDVuRG5WWW1HY21oVVFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy RjhDLzVFMDcyQUZFODZFMDExRUY5QjZCMTc3RUM0RjlBRTAyL1lSNGNGSlVvOFhv T3g1bkRuVlltR2NtaFVRQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMMgfw1YksOVzA0+3z2TtEo5QsL1UZtBMsEBUkUp2I+a0rNWgdSp5s0g zKUk8v8xCJh4QJzKeL1LpT5zWxPXRTfYBQkaOj6gGv828GkZtV/DnVJrzT1G47ex AVtHRg2/rvR5kuvn6/3ZIflpFSW8cBsEcihhxjztrgQ+tM1N1IaRLJz32sTcjUeb hIxAADfJxqDV11BBZ3UKQtCmM8ex1Lgr1ta1fNblO+NXL8qu9+nmZdvn6dvEioM6 lOvTcowgbIbxsiJHme02dOMra/3Wq2bcsgHiDsBWN3XZ94nQJSsrPe7qJnHwvE7A PKAj85QVYDPW3Tp0qqUEEFalbYkwO7k= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:02 2024 by rpki-client on console-ams.rpki-client.org