$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft File: ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json) Hash identifier: HhoxqhS53IpFI5yeyksCcAxvLDRYNCJHVK2uO32sh+M= Subject key identifier: 75:65:16:6E:FF:EB:16:CD:6E:59:50:FD:72:5E:E9:99:89:5C:0B:62 Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8 Certificate issuer: /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft Manifest number: 016D Signing time: Sat 23 Nov 2024 02:14:44 +0000 Manifest this update: Sat 23 Nov 2024 02:14:43 +0000 Manifest next update: Sat 30 Nov 2024 02:14:43 +0000 Files and hashes: 1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: BgUb7mmJca0OXGjNTNE4c7kUaMOMdJToNdVf9naQ1Tc=) 2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: ADnEMa2Brj1gfAu5du2mdudMmrXS7wa9cPzXrkNiEN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8 Validity Not Before: Nov 23 02:14:43 2024 GMT Not After : Nov 30 02:14:43 2024 GMT Subject: CN=67413a93-69a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e2:b9:6b:31:9f:78:93:14:db:3f:43:6e:47: a3:c0:59:e8:9b:78:b0:20:e3:02:e2:c6:70:e0:f1: 01:1b:42:2c:77:09:03:c5:4d:e1:c6:97:81:97:5d: 2b:62:d6:16:e5:8b:87:15:77:35:de:bd:78:60:4a: 59:39:5d:58:c2:13:b3:cc:6d:1d:55:cf:ed:4a:d2: 63:e6:f5:7e:1c:46:81:d9:dd:d8:8b:a5:cf:90:40: 87:d2:24:91:0c:3f:25:16:04:84:c9:be:5c:f0:7d: ca:52:ca:68:0c:7b:ac:4d:83:f5:40:f9:31:c6:03: 12:a0:db:07:2a:c9:5e:aa:f6:00:61:f1:08:f2:51: 17:43:c3:a0:1f:a9:9a:c3:09:73:52:9f:34:87:c0: c7:b9:dd:f1:b4:af:60:1d:f1:13:ae:61:b8:8c:f0: 6a:20:c1:83:2f:d8:71:e8:4b:d0:77:0a:9e:10:73: 80:63:91:da:78:07:b1:16:f0:0e:c6:38:d7:ed:9d: d0:09:2a:47:bb:de:3e:b8:a5:4a:23:63:79:4d:2f: 87:cd:6a:fe:d2:2a:df:0d:18:6d:2c:39:44:ac:aa: c8:fc:65:8d:0e:46:b3:26:d9:14:f1:b5:f8:91:9f: 8a:55:19:75:af:50:a5:f2:c8:84:f0:03:05:38:f3: e3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:65:16:6E:FF:EB:16:CD:6E:59:50:FD:72:5E:E9:99:89:5C:0B:62 X509v3 Authority Key Identifier: keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:73:e7:54:32:89:26:12:7b:8f:12:fc:27:e5:8d:4e:b9:47: 91:d0:39:20:22:de:a1:5f:93:c1:2d:be:41:9e:6c:cc:69:19: 48:0f:55:05:d0:9d:2c:9c:f4:b5:4b:da:e8:05:d1:95:96:43: 81:94:fa:93:e3:81:18:a5:05:6f:90:1b:33:f5:60:13:66:6a: 14:bc:9d:50:14:38:41:77:70:4a:3f:57:f3:de:73:a9:1b:3c: 05:b2:a0:5c:07:5f:0a:02:a5:97:7a:e0:fe:68:03:5d:34:5b: 51:33:31:97:e8:d3:d2:9b:5b:93:f1:8d:6f:f9:3c:ba:8a:19: 75:87:3a:5d:34:5e:ab:10:19:6b:7d:dd:a5:38:e9:0b:19:fa: 1a:de:21:2c:2b:64:b3:7d:cd:87:01:f2:c1:09:b2:e2:5a:24: cb:e6:14:e6:4d:fc:b0:c3:10:aa:bd:16:83:ac:e0:b8:5f:cb: e1:36:d6:6c:01:f4:8a:aa:f8:b8:25:de:fd:7e:2e:48:fe:db: c2:f9:0c:5b:1d:f0:bc:12:36:bd:e7:6e:6d:1b:b6:6a:c5:38: a1:13:5e:a7:84:83:bb:fb:3a:99:74:42:c9:5a:43:ad:e5:79: de:eb:02:fb:55:e2:97:c8:7c:3f:5c:da:42:b3:0e:15:a6:14: ea:70:79:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCMzkxMTAvBgNVBAUTKENBQzM0REM1QjhEREQzM0IxN0VDNzU1Qzk1RDQ1RDBG NzYyNTBGQTgwHhcNMjQxMTIzMDIxNDQzWhcNMjQxMTMwMDIxNDQzWjAYMRYwFAYD VQQDEw02NzQxM2E5My02OWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeK5azGfeJMU2z9DbkejwFnom3iwIOMC4sZw4PEBG0IsdwkDxU3hxpeBl10r YtYW5YuHFXc13r14YEpZOV1YwhOzzG0dVc/tStJj5vV+HEaB2d3Yi6XPkECH0iSR DD8lFgSEyb5c8H3KUspoDHusTYP1QPkxxgMSoNsHKsleqvYAYfEI8lEXQ8OgH6ma wwlzUp80h8DHud3xtK9gHfETrmG4jPBqIMGDL9hx6EvQdwqeEHOAY5HaeAexFvAO xjjX7Z3QCSpHu94+uKVKI2N5TS+HzWr+0irfDRhtLDlErKrI/GWNDkazJtkU8bX4 kZ+KVRl1r1Cl8siE8AMFOPPj5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVlFm7/ 6xbNbllQ/XJe6ZmJXAtiMB8GA1UdIwQYMBaAFMrDTcW43dM7F+x1XJXUXQ92JQ+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIzOS9CNjE1RDBCQzdC NUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6c1g3SFZjbGRSZEQzWWxE NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lzTk54YmpkMHpzWDdIVmNsZFJkRDNZbEQ2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUIzOS9CNjE1RDBCQzdCNUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6 c1g3SFZjbGRSZEQzWWxENmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMc+dUMokmEnuPEvwn5Y1OuUeR0DkgIt6hX5PBLb5BnmzMaRlID1UF 0J0snPS1S9roBdGVlkOBlPqT44EYpQVvkBsz9WATZmoUvJ1QFDhBd3BKP1fz3nOp GzwFsqBcB18KAqWXeuD+aANdNFtRMzGX6NPSm1uT8Y1v+Ty6ihl1hzpdNF6rEBlr fd2lOOkLGfoa3iEsK2Szfc2HAfLBCbLiWiTL5hTmTfywwxCqvRaDrOC4X8vhNtZs AfSKqvi4Jd79fi5I/tvC+QxbHfC8Eja9525tG7ZqxTihE16nhIO7+zqZdELJWkOt 5Xne6wL7VeKXyHw/XNpCsw4VphTqcHkG -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:51 2024 by rpki-client on console-ams.rpki-client.org