$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft File: YcuQhfAv-PpF5zL1gDQPQkngDKI.mft (raw, json) Hash identifier: qIexKPX+iyKUQULoRSWMlBYJAX0nE76zpiYlZPpCGHU= Subject key identifier: EC:95:06:DF:F1:0C:12:63:1D:AE:E4:3B:4E:B7:6D:64:9E:5A:6D:00 Authority key identifier: 61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 Certificate issuer: /CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Certificate serial: 1123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft Manifest number: 111B Signing time: Fri 22 Nov 2024 17:16:08 +0000 Manifest this update: Fri 22 Nov 2024 17:16:07 +0000 Manifest next update: Fri 29 Nov 2024 17:16:07 +0000 Files and hashes: 1: YcuQhfAv-PpF5zL1gDQPQkngDKI.crl (hash: 5B4fKC5LyvhegsesUUZEZ5URGb2cLW6QzwsntD8E/cI=) 2: BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa (hash: W8Pn/sq38ZFH49tNBuEJsAdeSaButY/8Fr7mt/fCMSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4387 (0x1123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Validity Not Before: Nov 22 17:16:07 2024 GMT Not After : Nov 29 17:16:07 2024 GMT Subject: CN=6740bc58-670c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3b:09:9e:df:22:47:50:d9:d0:0a:77:8b:ac: e5:a8:4d:35:e1:27:f3:7b:11:e5:ca:0a:9a:2c:d8: f7:ff:17:7b:79:ce:61:e4:d1:32:89:07:77:44:53: 54:16:b1:95:95:ec:56:9a:df:7a:c8:e3:f9:cf:39: 5b:92:c0:f3:18:e0:77:03:f8:c1:3f:c7:08:65:5f: 7c:6b:e7:03:c6:5e:32:3b:6e:1c:06:da:e9:9f:78: fc:8d:3d:67:b9:7b:7c:c6:a6:0a:ca:42:ba:dc:28: 28:0f:33:ef:06:8b:e4:f5:95:a7:bf:4e:4a:27:f9: 65:c2:0f:bb:2d:d5:68:1a:b0:d3:3f:49:db:d0:0f: ef:ce:7b:7a:16:25:2f:d4:7f:a8:31:f8:97:cd:0e: 40:98:eb:46:20:9c:a9:cd:92:04:1e:d4:fe:ec:bc: 80:e1:ab:6b:45:ea:ce:c1:3c:5b:e5:7c:c3:d1:76: 02:b7:66:52:97:b2:2b:90:95:e9:2e:bb:be:c9:9b: 71:30:fe:30:a0:39:de:37:16:81:41:a9:1a:58:9e: 97:88:a3:b0:74:bb:96:84:88:5c:ee:bf:f3:b8:b1: 36:99:36:40:0c:ab:f8:3f:9b:ad:4d:d9:3c:b8:43: c5:04:9e:f8:59:e3:7b:98:45:1a:25:d5:34:eb:3e: e8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:95:06:DF:F1:0C:12:63:1D:AE:E4:3B:4E:B7:6D:64:9E:5A:6D:00 X509v3 Authority Key Identifier: keyid:61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:97:2a:3a:25:57:42:ba:c0:70:dd:51:f5:4c:e6:59:b5:3f: 6d:93:98:7a:06:03:89:de:ae:e7:67:e0:ee:9e:83:e3:99:3a: ba:83:08:53:09:04:83:8e:e3:6c:5a:37:cf:1f:c5:1e:ff:f4: e2:e6:85:85:55:83:ce:fa:b9:ed:db:a8:9d:97:54:a6:2c:17: 8a:cf:19:39:ca:82:8b:1e:6c:c8:c3:0e:24:24:17:1b:95:d2: 9f:f4:06:db:6b:ff:0d:e1:d6:a3:26:98:25:c7:1b:75:03:0d: c2:75:70:46:9c:89:28:f0:1e:ae:09:91:5e:bc:86:26:90:81: d5:7a:b2:7d:0c:48:c2:c6:e8:ce:f4:6d:1e:9f:46:86:19:00: ce:9f:46:a2:3b:8f:9c:8d:e6:82:f3:99:eb:3e:5c:17:a2:e5: 1c:c1:68:9d:84:e9:50:6e:84:b2:a8:21:4d:b6:86:7a:5d:2a: 53:7c:ec:69:a6:08:36:4d:ae:6e:b0:fc:ea:8c:08:03:34:ad: f3:a5:48:70:e3:c5:53:19:dc:d4:b6:62:1c:66:90:61:ee:20: d0:cc:a8:71:38:5a:60:26:f4:60:50:20:0a:4f:18:2b:0b:d4: b7:69:12:28:df:ce:b9:7e:6c:d3:fe:6d:30:61:39:d8:2f:0e: 3c:06:5f:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCMjUxMTAvBgNVBAUTKDYxQ0I5MDg1RjAyRkY4RkE0NUU3MzJGNTgwMzQwRjQy NDlFMDBDQTIwHhcNMjQxMTIyMTcxNjA3WhcNMjQxMTI5MTcxNjA3WjAYMRYwFAYD VQQDEw02NzQwYmM1OC02NzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TsJnt8iR1DZ0Ap3i6zlqE014SfzexHlygqaLNj3/xd7ec5h5NEyiQd3RFNU FrGVlexWmt96yOP5zzlbksDzGOB3A/jBP8cIZV98a+cDxl4yO24cBtrpn3j8jT1n uXt8xqYKykK63CgoDzPvBovk9ZWnv05KJ/llwg+7LdVoGrDTP0nb0A/vznt6FiUv 1H+oMfiXzQ5AmOtGIJypzZIEHtT+7LyA4atrRerOwTxb5XzD0XYCt2ZSl7IrkJXp Lru+yZtxMP4woDneNxaBQakaWJ6XiKOwdLuWhIhc7r/zuLE2mTZADKv4P5utTdk8 uEPFBJ74WeN7mEUaJdU06z7ooQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyVBt/x DBJjHa7kO063bWSeWm0AMB8GA1UdIwQYMBaAFGHLkIXwL/j6Recy9YA0D0JJ4Ayi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0IyNS8yQzYwREZEOEZE QTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1QcEY1ekwxZ0RRUFFrbmdE S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ljdVFoZkF2LVBwRjV6TDFnRFFQUWtuZ0RLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0IyNS8yQzYwREZEOEZEQTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1Q cEY1ekwxZ0RRUFFrbmdES0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLlyo6JVdCusBw3VH1TOZZtT9tk5h6BgOJ3q7nZ+DunoPjmTq6gwhT CQSDjuNsWjfPH8Ue//Ti5oWFVYPO+rnt26idl1SmLBeKzxk5yoKLHmzIww4kJBcb ldKf9Abba/8N4dajJpglxxt1Aw3CdXBGnIko8B6uCZFevIYmkIHVerJ9DEjCxujO 9G0en0aGGQDOn0aiO4+cjeaC85nrPlwXouUcwWidhOlQboSyqCFNtoZ6XSpTfOxp pgg2Ta5usPzqjAgDNK3zpUhw48VTGdzUtmIcZpBh7iDQzKhxOFpgJvRgUCAKTxgr C9S3aRIo3865fmzT/m0wYTnYLw48Bl+0 -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org