$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json) Hash identifier: 4zgdGvrxreuAvoIcNTIItJmwHuuywVa/MSqPJjiIrcw= Subject key identifier: 2E:82:52:55:65:D6:1C:E1:06:6B:31:67:8C:CF:1D:3F:22:E5:44:A9 Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Certificate serial: 25AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft Manifest number: 2597 Signing time: Fri 22 Nov 2024 15:43:55 +0000 Manifest this update: Fri 22 Nov 2024 15:43:55 +0000 Manifest next update: Fri 29 Nov 2024 15:43:55 +0000 Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: g7rff5ITChKWVvW9kYKCAUTJRQhNLkwMIP6eQ/kDH78=) 2: 767655BE561A11E79F98831DC4F9AE02.roa (hash: LdoIT0wZJ+74LacPG030WBXR/g4yrD4qxzi4ZrGHRkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9645 (0x25ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Validity Not Before: Nov 22 15:43:55 2024 GMT Not After : Nov 29 15:43:55 2024 GMT Subject: CN=6740a6bb-a02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:26:9a:cb:6e:12:f5:cb:1d:92:ac:e2:cf: cf:99:ad:03:e7:50:e8:26:6c:56:10:f8:55:48:2b: ff:44:40:bd:f4:e4:bc:20:dd:66:20:1b:d7:2c:e9: e4:bf:8a:08:50:4a:bb:da:4d:10:0d:1f:25:68:f3: 3c:c2:70:ea:ec:10:4c:b0:9e:3b:4a:12:f7:a2:c6: 5a:8c:8a:be:50:bf:86:ff:54:3c:34:b2:03:3f:2f: 8d:59:96:da:d7:10:a9:ca:35:18:23:0f:da:db:55: 45:7a:64:9b:f3:ab:18:5a:8f:6a:f3:5e:76:34:b2: c5:56:b5:77:e1:c6:dd:54:97:0a:ba:b6:e8:e8:2d: f9:3f:64:6e:04:47:d1:8e:8f:92:dd:2a:c6:aa:56: 64:95:a4:f0:4c:c9:06:63:4f:7e:57:76:97:0f:f8: 96:c8:c6:87:b8:09:93:9f:cf:3c:eb:a0:e0:bc:e3: 56:7a:56:4d:e2:b2:19:f3:bc:27:0f:86:41:5a:b2: f3:bc:c7:a9:32:0b:20:33:b6:49:a9:d3:6f:62:da: 45:d9:50:cf:07:73:31:0e:1f:c5:47:aa:27:20:8e: c8:d9:53:46:e3:dc:bd:1a:86:3c:12:2f:3d:19:08: e0:32:28:00:33:0d:6d:3f:78:2b:19:73:fe:23:a1: 99:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:82:52:55:65:D6:1C:E1:06:6B:31:67:8C:CF:1D:3F:22:E5:44:A9 X509v3 Authority Key Identifier: keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a0:9a:45:9a:b2:3c:9d:ae:69:66:dd:a9:c3:e2:37:d1:e3: 99:7b:82:c3:af:b6:21:73:b3:24:f7:00:f4:d3:4d:29:6b:a9: c5:75:6f:00:6f:c0:86:ad:ef:d5:8c:48:35:78:94:9b:55:fb: ff:5d:06:e1:d9:9a:ea:45:96:60:c8:bd:5c:21:e0:c6:2a:fc: 93:95:09:6f:c4:41:82:a2:9e:18:64:ce:88:cb:40:f6:23:a8: 07:ca:bc:bf:11:23:1c:0b:30:75:86:28:ad:40:5d:0d:11:54: 81:b4:f5:30:e0:a1:17:7f:d4:9b:8b:cb:2e:f4:51:88:68:99: 4d:01:ea:eb:75:14:47:ae:70:1c:31:61:83:cd:e3:46:b8:17: 7a:7f:ea:e8:0e:4f:99:b7:62:e9:95:ad:fd:4c:1c:1b:cc:4a: a5:60:34:fa:6b:6a:0a:53:c4:d8:f5:55:f9:49:c5:35:63:50: e0:93:29:03:f3:84:87:c5:46:93:72:e5:79:22:28:cd:81:9f: 16:9f:0a:a3:df:89:01:23:ab:09:cc:d2:f1:f0:49:09:1a:1f: 3e:11:ee:1c:14:ed:63:94:88:42:3a:d9:de:0d:3e:9b:f2:55: b2:8a:9b:67:a3:2f:14:44:07:e9:de:72:89:76:08:60:67:e5: 92:f8:98:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKENCN0I4REI0MjQ4MjRDNzFBODcwM0JCRkI5NDJBMzE1 MjkxNTQzNjMwHhcNMjQxMTIyMTU0MzU1WhcNMjQxMTI5MTU0MzU1WjAYMRYwFAYD VQQDEw02NzQwYTZiYi1hMDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPgmmstuEvXLHZKs4s/Pma0D51DoJmxWEPhVSCv/REC99OS8IN1mIBvXLOnk v4oIUEq72k0QDR8laPM8wnDq7BBMsJ47ShL3osZajIq+UL+G/1Q8NLIDPy+NWZba 1xCpyjUYIw/a21VFemSb86sYWo9q8152NLLFVrV34cbdVJcKurbo6C35P2RuBEfR jo+S3SrGqlZklaTwTMkGY09+V3aXD/iWyMaHuAmTn88866DgvONWelZN4rIZ87wn D4ZBWrLzvMepMgsgM7ZJqdNvYtpF2VDPB3MxDh/FR6onII7I2VNG49y9GoY8Ei89 GQjgMigAMw1tP3grGXP+I6GZOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6CUlVl 1hzhBmsxZ4zPHT8i5USpMB8GA1UdIwQYMBaAFMt7jbQkgkxxqHA7v7lCoxUpFUNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83Q0I0QTA1NkZE M0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RIR29jRHVfdVVLakZTa1ZR Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzdU50Q1NDVEhHb2NEdV91VUtqRlNrVlEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83Q0I0QTA1NkZEM0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RI R29jRHVfdVVLakZTa1ZRMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcoJpFmrI8na5pZt2pw+I30eOZe4LDr7Yhc7Mk9wD0000pa6nFdW8A b8CGre/VjEg1eJSbVfv/XQbh2ZrqRZZgyL1cIeDGKvyTlQlvxEGCop4YZM6Iy0D2 I6gHyry/ESMcCzB1hiitQF0NEVSBtPUw4KEXf9Sbi8su9FGIaJlNAerrdRRHrnAc MWGDzeNGuBd6f+roDk+Zt2Lpla39TBwbzEqlYDT6a2oKU8TY9VX5ScU1Y1DgkykD 84SHxUaTcuV5IijNgZ8Wnwqj34kBI6sJzNLx8EkJGh8+Ee4cFO1jlIhCOtneDT6b 8lWyiptnoy8URAfp3nKJdghgZ+WS+Jix -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:04 2024 by rpki-client on console-ams.rpki-client.org