$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft File: byZ-RWYIP-sjaiw5I7cDlgC955Q.mft (raw, json) Hash identifier: rAxYRAIM5YfY9w7i7W2ZK/vGYpBFIGgYD14nYX49vtA= Subject key identifier: B7:32:33:BC:85:29:66:C1:17:8B:92:C9:90:03:87:35:1B:CD:EC:90 Authority key identifier: 6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94 Certificate issuer: /CN=A91E0C24/serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794 Certificate serial: 0ABD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft Manifest number: 0AA8 Signing time: Fri 22 Nov 2024 19:18:17 +0000 Manifest this update: Fri 22 Nov 2024 19:18:17 +0000 Manifest next update: Fri 29 Nov 2024 19:18:16 +0000 Files and hashes: 1: byZ-RWYIP-sjaiw5I7cDlgC955Q.crl (hash: Yc30cjrqdUpYtT1C11Xf/zbhAnol5Nmk8y+9b5tLXYw=) 2: A86EF6C8C9AF11EAA26C015FC4F9AE02.roa (hash: kONUJBoxY/BhLOEc4dA2tylYELY1wDWg8sTmx/gxQHk=) 3: 40569A6AC9AE11EAA7F2915BC4F9AE02.roa (hash: wgftKb4IInisu650djsPHH84sPf1yKI2QWeFmfVp8Yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.crl rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2749 (0xabd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C24/serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794 Validity Not Before: Nov 22 19:18:17 2024 GMT Not After : Nov 29 19:18:16 2024 GMT Subject: CN=6740d8f9-a2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f6:2d:ee:ae:e3:5e:ca:2c:01:91:c9:98:f8: c5:24:17:7a:1f:f5:85:61:ea:db:9d:1a:6a:64:28: 0c:ed:e5:01:e9:4d:32:85:04:17:01:a6:7c:7e:c2: 6b:b2:47:f7:3d:a4:f3:62:6b:e6:00:90:69:53:61: 06:e0:82:a8:3f:07:66:7a:49:b3:f4:f6:fc:f4:e6: c2:2a:23:a6:b1:5c:49:44:da:87:79:66:f8:57:f1: 1d:8d:77:9d:7e:d7:62:97:4e:15:d5:41:1c:a6:c4: fe:4a:b0:2f:7d:3a:e5:4e:07:f2:bd:09:63:e7:45: fc:8a:73:26:d8:18:44:f1:75:e9:7a:bd:3b:27:40: d4:09:a6:71:fa:a0:4b:c9:1c:38:d4:8b:01:08:37: 82:b7:40:f4:2e:97:70:06:0e:0a:2c:70:d5:d9:61: f2:a0:4e:45:70:95:51:68:5b:0e:46:fc:a1:cd:0c: d8:6f:0b:e7:00:0d:7f:96:f8:cb:dd:56:a0:fb:54: f2:07:d4:b6:de:10:5a:b6:1b:e7:94:27:f2:e2:bb: e9:c5:39:f9:db:13:20:43:9b:ff:6f:2a:35:e4:ed: 91:bb:64:7c:70:b8:1e:4a:9f:bf:40:73:fe:eb:1d: 33:7b:52:b2:a2:7d:57:6b:7f:bc:d4:5a:23:d3:e6: dc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:32:33:BC:85:29:66:C1:17:8B:92:C9:90:03:87:35:1B:CD:EC:90 X509v3 Authority Key Identifier: keyid:6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:35:22:83:13:bf:e8:ef:1d:d9:80:2f:db:89:16:74:a4:37: 4f:92:c6:84:97:01:0c:51:c3:d5:dd:c0:63:a7:ad:39:8b:df: 28:b2:81:f8:5c:08:74:03:86:f2:f9:35:d1:f0:bc:57:ff:c7: c8:8d:d6:e8:e5:fe:13:01:8a:ab:d0:70:99:40:5e:9c:bf:4d: f7:27:bf:79:a7:f3:5f:ad:54:97:6b:b7:75:3a:ee:89:29:d9: 78:c5:fc:ab:51:95:1f:ce:60:5e:c8:78:91:7a:62:9a:04:8f: f9:ac:33:ef:4a:72:37:e9:99:c2:9f:99:84:20:8e:cf:0b:4d: ac:b3:63:09:5e:b4:04:94:4b:f8:18:82:9a:34:b9:1c:26:d3: 23:fb:86:9c:17:ea:61:2c:8c:48:8b:af:c5:d6:ee:e6:d6:d4: 25:ae:a0:55:ef:4e:4f:75:09:44:3b:2b:c7:f9:8b:da:57:0b: 80:c9:d4:e5:ab:41:ab:8a:f9:b3:3d:7e:d2:eb:54:0f:44:1f: 11:17:6d:cd:08:38:f8:22:af:06:b7:c7:fb:6a:a8:7e:48:8b: 00:3e:35:8d:83:35:7a:80:21:0b:f8:41:e7:f5:e7:1b:50:ca: 43:fc:f9:e1:d7:44:af:bb:f3:47:7c:75:eb:01:0f:15:d0:d8: 3b:49:18:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDMjQxMTAvBgNVBAUTKDZGMjY3RTQ1NjYwODNGRUIyMzZBMkMzOTIzQjcwMzk2 MDBCREU3OTQwHhcNMjQxMTIyMTkxODE3WhcNMjQxMTI5MTkxODE2WjAYMRYwFAYD VQQDEw02NzQwZDhmOS1hMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPYt7q7jXsosAZHJmPjFJBd6H/WFYerbnRpqZCgM7eUB6U0yhQQXAaZ8fsJr skf3PaTzYmvmAJBpU2EG4IKoPwdmekmz9Pb89ObCKiOmsVxJRNqHeWb4V/EdjXed ftdil04V1UEcpsT+SrAvfTrlTgfyvQlj50X8inMm2BhE8XXper07J0DUCaZx+qBL yRw41IsBCDeCt0D0LpdwBg4KLHDV2WHyoE5FcJVRaFsORvyhzQzYbwvnAA1/lvjL 3Vag+1TyB9S23hBathvnlCfy4rvpxTn52xMgQ5v/byo15O2Ru2R8cLgeSp+/QHP+ 6x0ze1Kyon1Xa3+81Foj0+bcmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcyM7yF KWbBF4uSyZADhzUbzeyQMB8GA1UdIwQYMBaAFG8mfkVmCD/rI2osOSO3A5YAveeU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEMyNC8xOEM4QjY5MjQ0 MzIxMUVBOUNBREZEMUNDNEY5QUUwMi9ieVotUldZSVAtc2phaXc1STdjRGxnQzk1 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5Wi1SV1lJUC1zamFpdzVJN2NEbGdDOTU1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEMyNC8xOEM4QjY5MjQ0MzIxMUVBOUNBREZEMUNDNEY5QUUwMi9ieVotUldZSVAt c2phaXc1STdjRGxnQzk1NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXNSKDE7/o7x3ZgC/biRZ0pDdPksaElwEMUcPV3cBjp605i98osoH4 XAh0A4by+TXR8LxX/8fIjdbo5f4TAYqr0HCZQF6cv033J795p/NfrVSXa7d1Ou6J Kdl4xfyrUZUfzmBeyHiRemKaBI/5rDPvSnI36ZnCn5mEII7PC02ss2MJXrQElEv4 GIKaNLkcJtMj+4acF+phLIxIi6/F1u7m1tQlrqBV705PdQlEOyvH+YvaVwuAydTl q0GrivmzPX7S61QPRB8RF23NCDj4Iq8Gt8f7aqh+SIsAPjWNgzV6gCEL+EHn9ecb UMpD/Pnh10Svu/NHfHXrAQ8V0Ng7SRjs -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:48 2024 by rpki-client on console-ams.rpki-client.org