$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft File: y0yV-DniHR3g9FhVPZpM4o5BTYg.mft (raw, json) Hash identifier: 10bznLs8w2AWIXuNTgK5zC6xAgOmm0KQi3DP15B5vaM= Subject key identifier: 79:3D:C3:B6:6B:44:2A:B2:69:EC:88:15:5D:8D:BD:74:ED:9E:28:69 Authority key identifier: CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88 Certificate issuer: /CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88 Certificate serial: 088F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft Manifest number: 086D Signing time: Wed 20 Nov 2024 20:21:43 +0000 Manifest this update: Wed 20 Nov 2024 20:21:42 +0000 Manifest next update: Wed 27 Nov 2024 20:21:42 +0000 Files and hashes: 1: y0yV-DniHR3g9FhVPZpM4o5BTYg.crl (hash: sek/GPNLfUWKUfHR93GTuMdlDPe40TvLDdKxXeQZdsU=) 2: 9768CAB2550211EDA744F948C4F9AE02.roa (hash: +c7JrobNieG+ZMgvcidemgeezLPPKCFpg7+084o7JoA=) 3: 8CE5EE808E1A11EC96B4970AC4F9AE02.roa (hash: EZBagVr/hD3KJ6ELkAAEEOXAeLi6XW6fcfcVyYg3wjQ=) 4: 8C3B232E8E1A11EC96B4970AC4F9AE02.roa (hash: 8QLJCSW7Dx5LXrLw450pRNDRNzSQEQRY9thpGou2vRw=) 5: F407F0D49B8C11EC98C88432C4F9AE02.roa (hash: S/k+u3wzST4BAkpqg+O7+3Um9PXES4RfHWYozst9ucQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2191 (0x88f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88 Validity Not Before: Nov 20 20:21:42 2024 GMT Not After : Nov 27 20:21:42 2024 GMT Subject: CN=673e44d7-7d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:33:e0:07:55:39:5c:7d:45:e2:c5:55:1b:e1: 2d:f3:3d:cc:1c:37:a7:fb:07:af:9d:ea:35:a8:a1: e4:b1:c0:b8:63:0e:f9:36:c1:4d:a5:07:a8:c5:5a: a1:3d:e6:d5:47:df:9d:1d:bf:b3:28:5f:ef:24:52: bf:41:f7:4f:96:23:dc:11:11:2a:4a:da:e3:2d:03: 4e:d0:61:ec:3d:f5:51:f7:57:2d:db:b1:fc:56:93: fb:72:e7:bc:ec:fe:de:42:7a:8c:09:c4:a8:c4:23: b6:45:26:53:47:ca:76:1b:7b:6a:79:18:f7:b4:27: 29:a7:ff:f8:12:01:78:8d:b1:8d:b5:42:8a:7c:50: d0:7d:b0:e5:45:82:1e:a2:1a:0e:ed:c5:5b:48:94: 00:ec:f4:ed:08:23:e7:ff:66:07:28:a6:df:a1:b5: 4c:c2:59:2b:81:8f:9c:d5:a0:67:31:b1:cd:f5:82: d3:a5:da:98:4b:8c:e4:9e:36:3f:30:21:c7:50:c8: be:05:c1:a9:01:68:86:9d:bd:7c:c3:7c:07:cf:00: 6e:8e:a4:30:37:92:e0:c9:af:c3:6a:1f:f8:b2:ce: f0:53:6b:76:f8:f5:88:9d:f5:43:45:57:29:62:c6: b5:f6:33:16:4d:89:8e:6b:e4:c1:c0:2e:4d:f9:7f: 29:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3D:C3:B6:6B:44:2A:B2:69:EC:88:15:5D:8D:BD:74:ED:9E:28:69 X509v3 Authority Key Identifier: keyid:CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:68:94:d3:6b:8e:2d:ab:f2:6c:6d:e6:ce:2e:77:b5:63:00: 90:7f:1d:e9:a3:6b:b4:38:1b:c8:10:ab:cc:32:86:5e:c3:c0: ea:ab:13:5d:d8:b5:59:2d:d3:c9:6e:86:34:6a:61:4f:a6:5f: 0a:e2:7f:64:5e:47:0f:75:74:8d:84:74:0f:58:63:3f:4c:f4: 78:1b:a2:5c:95:bb:ed:ca:95:01:ec:b5:ec:0f:ef:e3:42:f0: 1a:dc:29:8d:60:12:0e:69:47:02:2d:d7:fc:fd:c5:5f:07:aa: f6:61:55:c6:df:40:98:65:86:af:3a:90:7e:e3:2c:80:7c:de: 35:81:61:d8:07:92:42:c9:ce:7c:b9:b3:5a:3f:90:35:8f:18: 9f:95:ff:42:21:6a:d8:a7:6e:48:7d:85:c6:38:ec:25:80:b6: d1:f0:8b:44:4c:40:7f:20:3d:78:9c:9b:50:5a:2a:3f:5b:48: a9:34:ec:a8:25:04:45:2a:5c:2f:98:d4:69:1d:83:1f:da:5f: a3:7b:a2:e2:c2:a5:20:0c:47:69:6c:ff:09:37:c0:12:e1:84: 73:fd:db:4d:2c:27:54:84:23:3e:e0:3e:30:56:bf:fb:3a:ef: 62:aa:0c:f8:4c:51:a4:2d:84:93:ba:67:37:03:44:eb:a6:4e: 6d:01:2f:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1MDIxMTAvBgNVBAUTKENCNEM5NUY4MzlFMjFEMURFMEY0NTg1NTNEOUE0Q0Uy OEU0MTREODgwHhcNMjQxMTIwMjAyMTQyWhcNMjQxMTI3MjAyMTQyWjAYMRYwFAYD VQQDEw02NzNlNDRkNy03ZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DPgB1U5XH1F4sVVG+Et8z3MHDen+wevneo1qKHkscC4Yw75NsFNpQeoxVqh PebVR9+dHb+zKF/vJFK/QfdPliPcEREqStrjLQNO0GHsPfVR91ct27H8VpP7cue8 7P7eQnqMCcSoxCO2RSZTR8p2G3tqeRj3tCcpp//4EgF4jbGNtUKKfFDQfbDlRYIe ohoO7cVbSJQA7PTtCCPn/2YHKKbfobVMwlkrgY+c1aBnMbHN9YLTpdqYS4zknjY/ MCHHUMi+BcGpAWiGnb18w3wHzwBujqQwN5Lgya/Dah/4ss7wU2t2+PWInfVDRVcp Ysa19jMWTYmOa+TBwC5N+X8pqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHk9w7Zr RCqyaeyIFV2NvXTtnihpMB8GA1UdIwQYMBaAFMtMlfg54h0d4PRYVT2aTOKOQU2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDUwMi80MEUyREZDQ0I1 MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhSM2c5RmhWUFpwTTRvNUJU WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kweVYtRG5pSFIzZzlGaFZQWnBNNG81QlRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDUwMi80MEUyREZDQ0I1MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhS M2c5RmhWUFpwTTRvNUJUWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUaJTTa44tq/JsbebOLne1YwCQfx3po2u0OBvIEKvMMoZew8DqqxNd 2LVZLdPJboY0amFPpl8K4n9kXkcPdXSNhHQPWGM/TPR4G6JclbvtypUB7LXsD+/j QvAa3CmNYBIOaUcCLdf8/cVfB6r2YVXG30CYZYavOpB+4yyAfN41gWHYB5JCyc58 ubNaP5A1jxiflf9CIWrYp25IfYXGOOwlgLbR8ItETEB/ID14nJtQWio/W0ipNOyo JQRFKlwvmNRpHYMf2l+je6LiwqUgDEdpbP8JN8AS4YRz/dtNLCdUhCM+4D4wVr/7 Ou9iqgz4TFGkLYSTumc3A0Trpk5tAS8A -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:45 2024 by rpki-client on console-fra.rpki-client.org