$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft File: y51BptqW92pP8FhrXoqIn8AjVFc.mft (raw, json) Hash identifier: +U+40sTWdV9B8fRAFhcIgPJqO6o7X1Wht2oN3PlF150= Subject key identifier: FD:E7:A9:D0:41:B9:08:09:39:9A:D6:25:03:C4:7E:B7:99:9E:2A:21 Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft Manifest number: 02CF Signing time: Sat 23 Nov 2024 00:56:41 +0000 Manifest this update: Sat 23 Nov 2024 00:56:41 +0000 Manifest next update: Sat 30 Nov 2024 00:56:41 +0000 Files and hashes: 1: y51BptqW92pP8FhrXoqIn8AjVFc.crl (hash: /k/Zwa+wE/GqVoTtbNOg//vSbt784HA9+vZlELXjNUo=) 2: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (hash: p51YofghFqe/P1BWUf3vy05r4fDl5jSux9C8jQxGEcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: Nov 23 00:56:41 2024 GMT Not After : Nov 30 00:56:41 2024 GMT Subject: CN=67412849-5939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e8:ab:af:15:0e:39:07:51:98:43:4a:01:d5: 28:31:f8:62:8d:f4:7f:85:92:10:96:fb:dc:1d:07: a8:59:a8:3a:99:94:e4:55:0c:da:c6:fa:43:c4:11: 48:0b:20:66:7e:f3:97:68:1c:bc:75:3d:35:b0:71: ae:7a:98:81:07:52:92:d4:8f:bf:f9:15:e5:e2:b4: 84:a7:57:03:d7:90:4e:c8:60:65:1b:d0:ee:9a:1e: 55:b9:f4:c2:b5:c5:20:99:39:92:10:fa:e4:b6:fb: ef:6e:b9:37:cb:08:1f:01:1c:e8:40:be:ac:39:ed: 94:d5:2e:a7:06:a8:43:68:e2:af:fc:9e:08:e7:8d: 62:02:b8:21:64:da:12:18:6c:60:a6:e6:07:ce:9b: d2:a0:3a:e4:3c:7e:89:c0:ef:9b:05:df:f2:72:17: 80:17:b5:5e:36:94:78:2d:0a:d4:24:58:31:b4:71: 6a:b2:f0:96:7d:c1:8e:af:82:72:e6:56:56:93:0f: 4c:82:3c:63:5c:d0:72:59:74:08:2f:7c:04:82:2b: 2f:b7:c8:40:d1:a3:9a:8a:52:8d:8a:bd:ec:b5:51: df:80:7a:23:6e:92:de:c9:27:fb:5b:a5:6e:2c:87: 53:fc:7a:a6:4b:28:19:d5:fe:c4:61:c7:27:b3:fc: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E7:A9:D0:41:B9:08:09:39:9A:D6:25:03:C4:7E:B7:99:9E:2A:21 X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:64:b9:cd:49:15:17:a2:aa:65:23:c6:46:86:72:a5:53:ff: 43:28:22:02:f1:d3:fe:7f:1d:d7:e5:d7:d1:c0:9a:e7:fd:06: 3a:86:35:d0:06:ae:72:53:7f:72:b2:53:8e:20:41:80:9c:b5: bd:8e:48:ad:bb:01:aa:80:54:00:d2:be:8b:a8:e8:5e:4d:d0: de:f1:3e:38:ab:fc:84:b1:4a:e1:ce:43:9b:f1:38:d5:c9:a7: 13:45:17:e6:d9:70:35:61:6d:83:4c:b9:ca:6c:47:be:a6:35: 97:f7:bf:e8:78:6e:20:57:01:b8:5b:38:42:e0:5e:6a:7f:00: 9b:4b:41:80:7a:e1:98:be:ec:3d:20:58:4a:51:c2:a2:c6:11: b5:16:c4:77:44:7c:ce:5a:98:4e:61:cb:a7:09:57:05:c4:66: 17:11:53:f8:23:45:e8:cd:7f:a6:d9:72:fd:7c:f9:4a:cd:60: 41:c5:46:72:43:47:6f:c1:9a:73:59:be:a6:14:20:6e:dd:34: c4:b6:77:a8:8f:b5:3c:68:c8:51:0f:31:6a:74:c5:b5:14:34: 3d:89:ff:88:32:1e:66:2f:02:56:e1:d5:eb:78:63:fe:32:11: 20:99:4b:c0:43:d1:ab:c6:49:ab:df:8f:bf:4d:a3:e6:51:cc: 93:9e:d2:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjQxMTIzMDA1NjQxWhcNMjQxMTMwMDA1NjQxWjAYMRYwFAYD VQQDEw02NzQxMjg0OS01OTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+irrxUOOQdRmENKAdUoMfhijfR/hZIQlvvcHQeoWag6mZTkVQzaxvpDxBFI CyBmfvOXaBy8dT01sHGuepiBB1KS1I+/+RXl4rSEp1cD15BOyGBlG9Dumh5VufTC tcUgmTmSEPrktvvvbrk3ywgfARzoQL6sOe2U1S6nBqhDaOKv/J4I541iArghZNoS GGxgpuYHzpvSoDrkPH6JwO+bBd/ycheAF7VeNpR4LQrUJFgxtHFqsvCWfcGOr4Jy 5lZWkw9MgjxjXNByWXQIL3wEgisvt8hA0aOailKNir3stVHfgHojbpLeySf7W6Vu LIdT/HqmSygZ1f7EYccns/xP4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3nqdBB uQgJOZrWJQPEfreZniohMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0E2OS84QUYzRDVCMkM2MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzky cFA4RmhyWG9xSW44QWpWRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhZLnNSRUXoqplI8ZGhnKlU/9DKCIC8dP+fx3X5dfRwJrn/QY6hjXQ Bq5yU39yslOOIEGAnLW9jkituwGqgFQA0r6LqOheTdDe8T44q/yEsUrhzkOb8TjV yacTRRfm2XA1YW2DTLnKbEe+pjWX97/oeG4gVwG4WzhC4F5qfwCbS0GAeuGYvuw9 IFhKUcKixhG1FsR3RHzOWphOYcunCVcFxGYXEVP4I0XozX+m2XL9fPlKzWBBxUZy Q0dvwZpzWb6mFCBu3TTEtneoj7U8aMhRDzFqdMW1FDQ9if+IMh5mLwJW4dXreGP+ MhEgmUvAQ9Grxkmr34+/TaPmUcyTntJY -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:45 2024 by rpki-client on console-fra.rpki-client.org