$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft File: y4244fF7x3I0bdn_uyByz6j9plI.mft (raw, json) Hash identifier: sMr4Dtbsy6cbw334RkpSmjMZJQ/OD0J4mmqopYkx2Bk= Subject key identifier: FD:EF:38:7D:20:08:35:43:C6:9F:E3:47:48:0F:97:13:16:C8:0F:27 Authority key identifier: CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52 Certificate issuer: /CN=A91DB7E9/serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft Manifest number: D1 Signing time: Thu 21 Nov 2024 03:51:40 +0000 Manifest this update: Thu 21 Nov 2024 03:51:40 +0000 Manifest next update: Thu 28 Nov 2024 03:51:40 +0000 Files and hashes: 1: y4244fF7x3I0bdn_uyByz6j9plI.crl (hash: 5ZzfJCNLXGaI0h1RJiXguy6mWB7JSa4kxGr3yT2WfaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7E9/serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652 Validity Not Before: Nov 21 03:51:40 2024 GMT Not After : Nov 28 03:51:40 2024 GMT Subject: CN=673eae4c-fb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3c:6a:81:46:f6:91:93:f7:b3:47:25:5d:03: 50:fb:67:cc:ac:f1:91:16:47:a3:d4:c9:99:1b:24: b7:e0:1b:bd:90:dc:c6:f4:9a:09:52:68:ee:4f:e4: b3:b5:eb:94:eb:95:61:33:5d:e4:bc:8c:99:3c:ab: 61:67:b6:79:02:7a:59:b6:05:79:fa:ba:11:7e:11: 23:e0:03:b0:94:4e:12:43:38:eb:0a:1f:4d:66:41: 23:64:df:97:5a:dc:65:ba:fb:54:75:0b:8a:44:85: 21:58:bc:5a:12:f2:56:8e:5b:57:c5:67:57:2a:83: 1a:8a:eb:64:24:1b:cb:7c:cb:94:ef:c0:5c:68:cf: fc:e4:84:e3:ac:a3:d4:e8:5e:39:c5:1c:6d:27:4b: 5d:80:2f:97:e2:14:8d:e5:2d:2c:a7:30:5f:2e:b8: 51:83:ec:c0:fc:b9:ae:fe:d5:fa:60:64:18:3c:ca: a1:f2:22:ef:61:aa:09:6f:79:40:96:69:60:0e:6e: 89:a2:aa:85:51:d7:c3:b2:29:14:55:b6:77:05:f3: 2b:07:4d:3b:12:9f:3b:3e:ed:8d:da:78:37:dd:57: d5:d9:e5:69:11:f6:0c:21:05:f0:38:94:71:d9:c7: 28:fc:f5:99:56:ad:83:56:00:7f:d5:1b:01:21:fe: d1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EF:38:7D:20:08:35:43:C6:9F:E3:47:48:0F:97:13:16:C8:0F:27 X509v3 Authority Key Identifier: keyid:CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:5b:41:0b:25:b0:a9:5e:76:bf:99:2a:d0:01:09:44:0e:e8: 82:9e:d4:92:b8:ca:a3:ba:3f:75:2c:59:ee:dc:62:4c:95:2e: 76:ed:99:31:3e:58:a2:ff:89:e1:7e:fc:da:a5:3b:17:a2:7b: ac:37:5e:e3:94:76:4e:97:c8:65:bd:19:f1:96:41:54:41:a7: 28:d8:70:34:ed:a6:f6:48:e2:79:29:fe:74:a0:34:de:fd:79: 5d:f3:21:de:7f:f1:d8:10:04:bf:80:47:ce:7c:59:31:6f:7f: 18:e3:4d:4e:5d:53:ae:50:52:5b:91:6a:33:93:de:01:e4:ef: 3f:ea:98:ae:0e:93:5a:ee:a1:bb:c5:ba:40:12:5a:7b:b6:12: b5:60:e3:9c:da:55:02:27:25:85:d0:09:96:ee:73:47:23:e4: 3e:27:b5:b6:67:54:03:de:46:67:1c:11:ec:bc:47:9e:e1:4d: db:6a:8d:05:fe:36:3a:8e:d0:ea:d2:23:58:69:eb:d0:98:e8: f8:cc:a8:ec:e3:9b:9d:d9:ca:3d:6f:ac:1a:0f:cd:50:93:25: a9:19:02:09:9d:bc:5c:03:eb:1c:01:df:bb:59:54:99:a4:ef: da:3a:e4:2c:41:2c:fb:28:52:d4:68:cb:d0:c9:b1:83:49:8c: 3f:53:b9:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3RTkxMTAvBgNVBAUTKENCOERCOEUxRjE3QkM3NzIzNDZERDlGRkJCMjA3MkNG QThGREE2NTIwHhcNMjQxMTIxMDM1MTQwWhcNMjQxMTI4MDM1MTQwWjAYMRYwFAYD VQQDEw02NzNlYWU0Yy1mYjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTxqgUb2kZP3s0clXQNQ+2fMrPGRFkej1MmZGyS34Bu9kNzG9JoJUmjuT+Sz teuU65VhM13kvIyZPKthZ7Z5AnpZtgV5+roRfhEj4AOwlE4SQzjrCh9NZkEjZN+X WtxluvtUdQuKRIUhWLxaEvJWjltXxWdXKoMaiutkJBvLfMuU78BcaM/85ITjrKPU 6F45xRxtJ0tdgC+X4hSN5S0spzBfLrhRg+zA/Lmu/tX6YGQYPMqh8iLvYaoJb3lA lmlgDm6JoqqFUdfDsikUVbZ3BfMrB007Ep87Pu2N2ng33VfV2eVpEfYMIQXwOJRx 2cco/PWZVq2DVgB/1RsBIf7R9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3vOH0g CDVDxp/jR0gPlxMWyA8nMB8GA1UdIwQYMBaAFMuNuOHxe8dyNG3Z/7sgcs+o/aZS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdFOS9FMEM0NjEzMDZF MkUxMUVFODVEOTJEMzJDNEY5QUUwMi95NDI0NGZGN3gzSTBiZG5fdXlCeXo2ajlw bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3k0MjQ0ZkY3eDNJMGJkbl91eUJ5ejZqOXBsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdFOS9FMEM0NjEzMDZFMkUxMUVFODVEOTJEMzJDNEY5QUUwMi95NDI0NGZGN3gz STBiZG5fdXlCeXo2ajlwbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoW0ELJbCpXna/mSrQAQlEDuiCntSSuMqjuj91LFnu3GJMlS527Zkx Plii/4nhfvzapTsXonusN17jlHZOl8hlvRnxlkFUQaco2HA07ab2SOJ5Kf50oDTe /Xld8yHef/HYEAS/gEfOfFkxb38Y401OXVOuUFJbkWozk94B5O8/6piuDpNa7qG7 xbpAElp7thK1YOOc2lUCJyWF0AmW7nNHI+Q+J7W2Z1QD3kZnHBHsvEee4U3bao0F /jY6jtDq0iNYaevQmOj4zKjs45ud2co9b6waD81QkyWpGQIJnbxcA+scAd+7WVSZ pO/aOuQsQSz7KFLUaMvQybGDSYw/U7k0 -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:18 2024 by rpki-client on console-ams.rpki-client.org