$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft File: ccY9WQk_BNBLObseorRpLN_Rb-E.mft (raw, json) Hash identifier: U0HATmIiP1TSCMHePaMwK5CraIpO2OsM8HNelfhM+vA= Subject key identifier: 60:B3:A8:34:75:0E:3B:A2:B4:EC:2A:88:ED:82:8F:DC:57:A2:78:9D Authority key identifier: 71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1 Certificate issuer: /CN=A91D6721/serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1 Certificate serial: 089D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft Manifest number: 0896 Signing time: Fri 22 Nov 2024 20:17:28 +0000 Manifest this update: Fri 22 Nov 2024 20:17:27 +0000 Manifest next update: Fri 29 Nov 2024 20:17:27 +0000 Files and hashes: 1: ccY9WQk_BNBLObseorRpLN_Rb-E.crl (hash: 8qdv3ieGr/vPmy7U7NUXrhuziI49Ctp0EnqWjYV6YE0=) 2: CD77D766287911ED93621A30C4F9AE02.roa (hash: 9wjECpQxMHiWIScEWQz9Aw6dt/TmNOFZhpVGY5NdNQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2205 (0x89d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6721/serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1 Validity Not Before: Nov 22 20:17:27 2024 GMT Not After : Nov 29 20:17:27 2024 GMT Subject: CN=6740e6d7-641e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:92:44:54:0f:9c:5b:bb:9d:91:5a:e4:2e: df:9a:bf:f1:58:50:80:be:9a:f3:bb:5d:9a:cf:fc: ed:e4:63:b0:2d:10:a0:40:23:2f:bd:f8:50:3c:e6: af:54:d5:8c:49:ff:f1:da:38:77:6c:fe:91:fe:14: d8:29:41:d4:d0:76:04:a7:71:be:bf:c6:07:49:dc: ef:77:9b:36:8d:f0:ee:85:d9:b8:e4:df:eb:f0:b6: fc:45:a4:99:7a:70:29:b8:05:8a:16:46:86:3b:c1: d8:fc:85:2e:17:96:35:57:54:3a:9d:51:31:f8:65: cb:04:a9:0c:37:7a:81:4e:0c:9c:9f:2b:98:6a:fe: 70:56:35:3b:79:d8:6f:36:df:52:28:92:40:70:f2: 87:f3:25:2b:ec:f9:61:ae:f7:ad:6e:85:e0:77:05: 60:9d:4d:b3:d0:02:eb:ad:e7:63:2c:d4:6d:fb:e2: 81:20:7a:69:5a:38:a7:e1:d8:65:a0:7d:58:d8:6a: 0d:54:7e:66:1b:69:87:de:eb:56:81:52:ab:43:72: 8d:1b:0b:87:fc:ec:ae:06:16:10:b6:0e:26:5c:88: a7:1a:bc:8e:73:53:fd:47:78:cf:ae:78:85:87:2a: e7:87:04:aa:cf:c0:34:36:cb:b7:ff:7c:ac:57:c4: a8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B3:A8:34:75:0E:3B:A2:B4:EC:2A:88:ED:82:8F:DC:57:A2:78:9D X509v3 Authority Key Identifier: keyid:71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:11:f2:bf:27:90:ff:8a:7d:ab:7f:fb:d1:c3:03:9d:48:ce: 4a:df:52:08:cc:4c:2e:39:f7:d0:c6:71:c3:12:2c:02:77:aa: d3:dd:4a:1a:b8:31:51:c2:22:40:8c:17:df:a2:db:8e:51:e6: 6c:ac:c4:90:76:94:69:9d:cc:5d:5f:4e:96:98:10:65:31:4f: 94:85:e6:ff:2a:a9:8d:d2:ae:4f:04:70:c4:3b:c9:da:a1:cf: 5f:08:05:af:7d:bc:e7:c5:b4:97:2a:21:4e:5c:09:79:e7:e3: 34:14:48:30:56:d8:2d:84:ef:e5:0c:1b:61:c4:af:51:49:4c: e7:a9:a6:46:db:31:f6:22:cd:b1:40:47:45:96:40:5c:66:f6: 7b:79:be:e2:dc:15:b0:fa:7c:5e:25:50:e8:49:cc:e9:fb:be: bd:14:d3:0a:36:ba:2f:8b:9d:71:07:bb:15:45:29:68:0b:ad: 82:f8:bb:18:5f:9e:2b:e5:cc:52:bf:fb:81:12:e7:bd:d8:a8: de:ec:ac:4f:2b:14:fa:7b:81:21:c1:22:d8:92:d2:20:29:d0: b4:43:49:18:dd:49:ba:22:94:2d:79:34:99:19:9a:73:89:92: fb:76:53:40:4c:b7:ae:8b:6e:af:fb:df:35:70:d7:d8:a7:66: 72:16:fe:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3MjExMTAvBgNVBAUTKDcxQzYzRDU5MDkzRjA0RDA0QjM5QkIxRUEyQjQ2OTJD REZEMTZGRTEwHhcNMjQxMTIyMjAxNzI3WhcNMjQxMTI5MjAxNzI3WjAYMRYwFAYD VQQDEw02NzQwZTZkNy02NDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbKSRFQPnFu7nZFa5C7fmr/xWFCAvprzu12az/zt5GOwLRCgQCMvvfhQPOav VNWMSf/x2jh3bP6R/hTYKUHU0HYEp3G+v8YHSdzvd5s2jfDuhdm45N/r8Lb8RaSZ enApuAWKFkaGO8HY/IUuF5Y1V1Q6nVEx+GXLBKkMN3qBTgycnyuYav5wVjU7edhv Nt9SKJJAcPKH8yUr7PlhrvetboXgdwVgnU2z0ALrredjLNRt++KBIHppWjin4dhl oH1Y2GoNVH5mG2mH3utWgVKrQ3KNGwuH/OyuBhYQtg4mXIinGryOc1P9R3jPrniF hyrnhwSqz8A0Nsu3/3ysV8SofwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCzqDR1 DjuitOwqiO2Cj9xXonidMB8GA1UdIwQYMBaAFHHGPVkJPwTQSzm7HqK0aSzf0W/h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjcyMS9BM0MwNkFENkE5 QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JOQkxPYnNlb3JScExOX1Ji LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjWTlXUWtfQk5CTE9ic2VvclJwTE5fUmItRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjcyMS9BM0MwNkFENkE5QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JO QkxPYnNlb3JScExOX1JiLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtEfK/J5D/in2rf/vRwwOdSM5K31IIzEwuOffQxnHDEiwCd6rT3Uoa uDFRwiJAjBffotuOUeZsrMSQdpRpncxdX06WmBBlMU+Uheb/KqmN0q5PBHDEO8na oc9fCAWvfbznxbSXKiFOXAl55+M0FEgwVtgthO/lDBthxK9RSUznqaZG2zH2Is2x QEdFlkBcZvZ7eb7i3BWw+nxeJVDoSczp+769FNMKNrovi51xB7sVRSloC62C+LsY X54r5cxSv/uBEue92Kje7KxPKxT6e4EhwSLYktIgKdC0Q0kY3Um6IpQteTSZGZpz iZL7dlNATLeui26v+981cNfYp2ZyFv4f -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org