$ rpki-client -vvf rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft File: yC1GI7edxaBABywRKhur60QWBBw.mft (raw, json) Hash identifier: teW1tKAtB9yNMWSzPN43tsceAHt2Vr46RL0DBDk+vSI= Subject key identifier: 83:30:C5:75:DB:E4:DF:20:22:4E:6A:E7:C1:3D:1C:81:A7:94:8D:DC Authority key identifier: C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C Certificate issuer: /CN=A91D008B/serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C Certificate serial: 052B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft Manifest number: 0526 Signing time: Fri 22 Nov 2024 23:04:49 +0000 Manifest this update: Fri 22 Nov 2024 23:04:49 +0000 Manifest next update: Fri 29 Nov 2024 23:04:49 +0000 Files and hashes: 1: yC1GI7edxaBABywRKhur60QWBBw.crl (hash: eicTtQFNFadUf5WJl8bCdcl1/RyMpgZLd6GAnXhQEvc=) 2: 469C2676D76111EB97EB721DC4F9AE02.roa (hash: t00CflQYN/OyH00gO0h+rG8Clxsna4wLCpf4dxw1OLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1323 (0x52b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D008B/serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C Validity Not Before: Nov 22 23:04:49 2024 GMT Not After : Nov 29 23:04:49 2024 GMT Subject: CN=67410e11-8ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d5:1f:31:df:6a:04:ee:c2:f7:bb:79:20:4d: 4b:71:17:a4:28:76:a0:ee:47:ac:01:29:cb:91:80: 85:7e:5f:4b:c9:1d:80:1b:32:82:f1:54:b6:f4:c2: 24:8a:5b:ab:80:62:dd:fd:e8:4c:94:66:9f:25:e9: 52:e7:e0:6c:f3:23:1b:38:18:84:3e:a0:1b:bb:8a: c5:8b:bf:ef:cb:70:98:70:1d:ff:63:c9:d6:58:07: 97:a6:d6:82:38:b4:05:8e:b9:91:ae:74:46:5e:41: f8:2e:cb:28:48:73:45:ff:31:e0:24:a9:51:0b:ad: 65:7e:52:9a:4b:c0:42:cb:99:3f:d4:af:40:c5:4a: 08:5f:b6:f8:63:6f:27:36:83:7f:96:66:7d:0b:e7: 6c:b6:21:1c:ea:6d:f3:ce:1e:24:50:bf:5a:28:5d: 6f:99:aa:02:1e:aa:10:c0:d5:11:fd:d7:7a:f7:47: 11:5b:29:73:cb:a6:f8:75:e7:62:c4:50:cb:f7:ea: ad:65:fc:6b:13:15:99:7c:b9:54:a4:47:fb:ce:05: 82:00:e8:99:ee:38:76:78:63:9d:c3:da:65:0e:4d: 90:28:5b:f2:6a:96:00:0f:73:fe:da:6f:8d:37:56: 1f:c5:f4:30:e8:cb:91:5b:67:5a:d8:2c:d9:58:7a: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:30:C5:75:DB:E4:DF:20:22:4E:6A:E7:C1:3D:1C:81:A7:94:8D:DC X509v3 Authority Key Identifier: keyid:C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:10:c3:a3:e4:23:15:56:51:fb:89:eb:1f:9d:c6:44:f6:60: 65:43:b4:4a:3d:3a:fc:eb:56:8e:60:3b:f7:6e:e9:72:94:1a: bb:ba:18:d9:88:72:3f:9b:b7:9a:7d:ff:5b:42:42:b3:c0:7a: 77:5b:37:e1:bd:95:da:88:88:c5:10:81:a1:fd:5b:88:b6:7f: 6a:02:6f:bd:fc:2e:56:b0:cf:5d:d1:df:7f:a5:8c:b2:94:17: 77:26:42:38:2f:ca:f6:3d:26:52:d6:ce:a7:ad:f2:ff:91:40: 36:48:cc:0e:4a:ab:34:f5:6e:5c:7f:14:98:bd:3e:ae:70:15: 8f:1c:29:e4:1f:0d:6a:d3:ce:e7:55:d2:4e:61:ed:e9:d7:44: 96:0a:9d:0b:ef:af:17:72:07:f9:cd:59:4f:00:7a:89:89:a4: e9:96:ae:72:ac:a2:eb:b7:23:b6:bb:ca:36:22:16:5a:39:cd: 4b:c5:4a:32:21:99:d2:3c:59:c6:c6:cf:13:84:2a:4c:fc:35: ed:dd:66:61:04:43:f1:bc:9a:1f:1e:88:7d:bc:54:a7:20:f5: 1a:6f:69:5a:da:7c:e3:37:a7:f6:6d:02:ec:48:d6:3e:5c:c4: 2c:3f:9d:dd:c7:ce:74:11:fa:e3:de:82:60:6b:fc:e8:0b:b2: 49:c2:3d:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAwOEIxMTAvBgNVBAUTKEM4MkQ0NjIzQjc5REM1QTA0MDA3MkMxMTJBMUJBQkVC NDQxNjA0MUMwHhcNMjQxMTIyMjMwNDQ5WhcNMjQxMTI5MjMwNDQ5WjAYMRYwFAYD VQQDEw02NzQxMGUxMS04YWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdUfMd9qBO7C97t5IE1LcRekKHag7kesASnLkYCFfl9LyR2AGzKC8VS29MIk ilurgGLd/ehMlGafJelS5+Bs8yMbOBiEPqAbu4rFi7/vy3CYcB3/Y8nWWAeXptaC OLQFjrmRrnRGXkH4LssoSHNF/zHgJKlRC61lflKaS8BCy5k/1K9AxUoIX7b4Y28n NoN/lmZ9C+dstiEc6m3zzh4kUL9aKF1vmaoCHqoQwNUR/dd690cRWylzy6b4dedi xFDL9+qtZfxrExWZfLlUpEf7zgWCAOiZ7jh2eGOdw9plDk2QKFvyapYAD3P+2m+N N1YfxfQw6MuRW2da2CzZWHo7YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMwxXXb 5N8gIk5q58E9HIGnlI3cMB8GA1UdIwQYMBaAFMgtRiO3ncWgQAcsESobq+tEFgQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDA4Qi80OUU2MjcxNkQ3 NUYxMUVCOUJEMjRCMURDNEY5QUUwMi95QzFHSTdlZHhhQkFCeXdSS2h1cjYwUVdC QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lDMUdJN2VkeGFCQUJ5d1JLaHVyNjBRV0JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDA4Qi80OUU2MjcxNkQ3NUYxMUVCOUJEMjRCMURDNEY5QUUwMi95QzFHSTdlZHhh QkFCeXdSS2h1cjYwUVdCQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiEMOj5CMVVlH7iesfncZE9mBlQ7RKPTr861aOYDv3bulylBq7uhjZ iHI/m7eaff9bQkKzwHp3WzfhvZXaiIjFEIGh/VuItn9qAm+9/C5WsM9d0d9/pYyy lBd3JkI4L8r2PSZS1s6nrfL/kUA2SMwOSqs09W5cfxSYvT6ucBWPHCnkHw1q087n VdJOYe3p10SWCp0L768Xcgf5zVlPAHqJiaTplq5yrKLrtyO2u8o2IhZaOc1LxUoy IZnSPFnGxs8ThCpM/DXt3WZhBEPxvJofHoh9vFSnIPUab2la2nzjN6f2bQLsSNY+ XMQsP53dx850Efrj3oJga/zoC7JJwj3N -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org