$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft File: YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft (raw, json) Hash identifier: Q7mHJY3Z0cLQ126TifiC/QLjLrpgQmicn1kk1u7gg58= Subject key identifier: F9:A5:73:BF:BD:F1:1F:92:C6:28:CA:C4:B1:A1:4C:D1:BD:E8:1A:49 Authority key identifier: 60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4 Certificate issuer: /CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4 Certificate serial: 0540 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft Manifest number: 0537 Signing time: Fri 22 Nov 2024 23:03:31 +0000 Manifest this update: Fri 22 Nov 2024 23:03:31 +0000 Manifest next update: Fri 29 Nov 2024 23:03:31 +0000 Files and hashes: 1: YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl (hash: SDC1Y6W2S1/24PNbcf7jPxDzHsl0D1bNERYuRufghLg=) 2: 8504C794D12411EBAD06CD48C4F9AE02.roa (hash: uMrM22xDpwTeMGgiGogguGB15IQuDVpTwtupOlN4TQA=) 3: 84706C70D12411EBAD06CD48C4F9AE02.roa (hash: VcA4sAg9KMN12ntYzwbDb4WPsPomdCfddL3VwOmolOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1344 (0x540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4 Validity Not Before: Nov 22 23:03:31 2024 GMT Not After : Nov 29 23:03:31 2024 GMT Subject: CN=67410dc3-9f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8e:1f:91:c4:98:4f:4f:53:ab:ca:8a:64:47: 7d:72:a9:58:3d:b9:08:f8:2e:d0:60:99:c4:91:94: f1:a2:fc:eb:67:0c:06:cc:d2:f1:47:8d:f8:ab:34: 60:9a:19:15:1b:00:1c:50:ae:d2:58:35:d3:7f:cf: a6:29:f5:bf:47:57:19:84:2f:0b:ec:db:a5:a2:04: bb:81:b4:ff:4a:99:21:01:76:c9:ab:be:ab:04:2a: ad:bd:37:7b:04:f6:d4:b3:ec:22:d6:c0:42:4a:20: cf:fd:01:c4:bc:4c:c3:b4:68:19:b4:21:b9:a7:e2: ee:11:4d:40:54:a8:8d:c3:99:11:11:f7:be:a5:b3: 86:79:d5:b7:89:77:7b:01:37:89:f5:ea:1f:82:ba: bd:6a:04:02:3a:23:80:08:8f:41:90:e9:52:96:62: fb:bc:ec:63:b8:de:83:80:bb:df:44:c2:29:a1:1a: 12:10:f9:32:3e:90:1f:3f:f6:85:49:fa:da:b6:e5: f0:22:ed:4a:8d:08:22:a1:17:5e:3c:bc:29:04:16: 53:68:1b:ca:ad:54:da:be:97:cc:5d:cb:1a:4b:3a: c7:af:db:02:d3:1d:cd:09:43:51:32:8c:73:c0:37: 87:60:00:05:0b:c5:0e:b2:25:01:12:1e:4f:c0:53: e0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A5:73:BF:BD:F1:1F:92:C6:28:CA:C4:B1:A1:4C:D1:BD:E8:1A:49 X509v3 Authority Key Identifier: keyid:60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:61:93:c3:7d:52:16:af:99:80:75:80:94:a5:9c:44:fe:99: 07:31:84:14:c4:58:8b:2e:03:e9:28:f9:1e:f7:96:04:aa:df: f2:a4:dc:2b:c5:96:76:5c:72:f1:f7:00:97:8a:b1:c3:85:d1: 53:52:eb:95:1f:e4:35:f6:34:10:00:18:f7:62:49:71:2c:7f: c4:7d:3c:23:10:09:49:6e:d1:3e:11:cc:d9:af:d5:7b:22:21: 28:ef:7f:9b:90:65:d7:6d:ab:2b:f3:e0:96:26:15:64:66:36: a3:1c:62:a0:82:0d:08:78:44:f2:6b:c5:9e:5c:67:7d:31:9d: 2d:d7:37:dc:76:b2:0a:4f:a5:59:c7:10:b0:b1:3b:62:a2:89: de:94:70:0d:ea:1f:07:52:f9:2f:5a:9a:40:e6:4d:bd:ca:eb: e1:9e:e8:1a:b0:9a:17:4d:df:93:08:6d:2b:79:31:7b:19:68: f2:ca:66:0b:fe:c5:40:18:1e:6c:ab:ab:b3:91:94:bd:8e:e0: 56:87:e7:2b:17:1a:cc:93:a8:33:24:61:be:39:61:3c:26:5e: 04:fe:73:9b:3e:1d:40:ed:b1:d1:d2:94:0b:30:1e:2f:1f:6b: 30:62:df:e4:8c:37:9d:a9:56:d4:dd:e4:07:85:35:a9:1e:e6: 95:8c:5c:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY1NUQxMTAvBgNVBAUTKDYwREMzNzVEQUFDQzk3ODFCQjcwMkUwMzg4MkEzMjVG RUJCRkU5QjQwHhcNMjQxMTIyMjMwMzMxWhcNMjQxMTI5MjMwMzMxWjAYMRYwFAYD VQQDEw02NzQxMGRjMy05ZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7I4fkcSYT09Tq8qKZEd9cqlYPbkI+C7QYJnEkZTxovzrZwwGzNLxR434qzRg mhkVGwAcUK7SWDXTf8+mKfW/R1cZhC8L7NulogS7gbT/SpkhAXbJq76rBCqtvTd7 BPbUs+wi1sBCSiDP/QHEvEzDtGgZtCG5p+LuEU1AVKiNw5kREfe+pbOGedW3iXd7 ATeJ9eofgrq9agQCOiOACI9BkOlSlmL7vOxjuN6DgLvfRMIpoRoSEPkyPpAfP/aF SfratuXwIu1KjQgioRdePLwpBBZTaBvKrVTavpfMXcsaSzrHr9sC0x3NCUNRMoxz wDeHYAAFC8UOsiUBEh5PwFPgNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmlc7+9 8R+SxijKxLGhTNG96BpJMB8GA1UdIwQYMBaAFGDcN12qzJeBu3AuA4gqMl/rv+m0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjU1RC9FN0E3N0JFRUQx MUYxMUVCOUU1QjFBODJDNEY5QUUwMi9ZTnczWGFyTWw0RzdjQzREaUNveVgtdV82 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lOdzNYYXJNbDRHN2NDNERpQ295WC11XzZiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjU1RC9FN0E3N0JFRUQxMUYxMUVCOUU1QjFBODJDNEY5QUUwMi9ZTnczWGFyTWw0 RzdjQzREaUNveVgtdV82YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaYZPDfVIWr5mAdYCUpZxE/pkHMYQUxFiLLgPpKPke95YEqt/ypNwr xZZ2XHLx9wCXirHDhdFTUuuVH+Q19jQQABj3YklxLH/EfTwjEAlJbtE+EczZr9V7 IiEo73+bkGXXbasr8+CWJhVkZjajHGKggg0IeETya8WeXGd9MZ0t1zfcdrIKT6VZ xxCwsTtioonelHAN6h8HUvkvWppA5k29yuvhnugasJoXTd+TCG0reTF7GWjyymYL /sVAGB5sq6uzkZS9juBWh+crFxrMk6gzJGG+OWE8Jl4E/nObPh1A7bHR0pQLMB4v H2swYt/kjDedqVbU3eQHhTWpHuaVjFz0 -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:52 2024 by rpki-client on console-ams.rpki-client.org