$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft File: yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json) Hash identifier: K2ei8NpILgBobUKsZItaZRRnVYbGtf1FH1OtjeIg9DA= Subject key identifier: D6:4A:DF:AC:3F:E1:7C:55:48:F3:06:E0:C2:25:7C:BA:FD:99:1C:F0 Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05 Certificate issuer: /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505 Certificate serial: 065F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft Manifest number: 155E Signing time: Fri 22 Nov 2024 17:36:20 +0000 Manifest this update: Fri 22 Nov 2024 17:36:20 +0000 Manifest next update: Fri 29 Nov 2024 17:36:20 +0000 Files and hashes: 1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: sM7+rrJIqvi+O6RVyu5OHjdbMhpTfMk7yOE3bFxzorY=) 2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: 1r2d/Ak19T6Kjigl8OFNB0MlpnTTA5brSJxtx4WES4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505 Validity Not Before: Nov 22 17:36:20 2024 GMT Not After : Nov 29 17:36:20 2024 GMT Subject: CN=6740c114-04b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:81:eb:5c:11:5e:af:58:0a:a1:ed:75:9d:10: 8a:a0:de:06:ed:2d:62:19:4d:a1:3a:e9:80:a8:aa: 55:82:38:40:b0:4f:ba:b9:07:2e:13:31:6d:72:6e: 89:c0:e8:ef:c0:a3:82:9e:f6:01:87:0b:58:4a:d8: c5:a5:f9:c7:30:6c:6e:2d:fd:d7:bd:19:9d:2d:5a: 29:01:e5:0b:ed:42:b7:2a:56:bd:61:fc:2d:15:ab: b7:c5:62:b3:cc:10:8c:8c:49:c5:c6:7a:2d:6c:b8: 87:2a:59:7d:c3:9f:22:27:e5:6a:91:1f:f9:1f:58: bc:2d:bf:90:b4:1f:38:17:1a:7f:24:79:97:4b:3d: 59:c0:16:ee:07:b3:3a:b3:8c:04:65:07:39:dd:f1: 93:9a:17:cb:5f:1a:d4:8b:76:28:ba:7b:61:54:16: f0:a3:84:20:54:74:be:77:ac:ee:96:b0:05:c0:6a: fe:8f:a4:e2:c9:04:2e:9e:86:3a:b3:fc:0b:ca:57: 5d:3e:6e:50:72:5b:a6:80:6b:79:61:40:d7:b2:b0: a6:8a:fe:78:cb:9b:59:70:1d:89:da:01:1a:da:02: c4:70:00:a8:12:35:c9:62:af:7b:8d:42:43:06:4c: bc:25:90:d6:a7:7b:e3:2b:8b:0c:b6:83:03:a2:e8: b0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4A:DF:AC:3F:E1:7C:55:48:F3:06:E0:C2:25:7C:BA:FD:99:1C:F0 X509v3 Authority Key Identifier: keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:59:a5:4d:6d:3e:b3:33:d3:b1:da:87:09:8c:ef:8a:5c:aa: f5:75:f5:fa:fd:be:0f:87:3a:13:76:e3:b6:e0:be:34:73:32: f6:61:01:9e:67:ca:d4:18:78:33:d3:a4:11:c6:ff:c1:76:19: be:ce:99:db:ac:42:83:df:f2:69:3e:8b:10:bc:b0:80:d0:b8: 30:42:97:35:66:3a:df:8a:1a:ad:8e:69:af:00:9f:dc:cc:9b: 4f:25:1d:e9:9f:3d:03:dd:61:3e:f4:16:94:f9:0e:ed:ec:4a: dd:08:53:5c:06:6f:47:6a:64:1a:da:b7:1e:9d:15:c7:bd:a2: b4:7b:8e:68:27:ee:14:67:f2:28:b2:8b:2c:7c:f6:c0:ff:63: fb:8d:87:c5:f8:4c:b7:c1:3a:c6:16:a8:8f:44:e4:88:b2:1d: 45:78:bc:ff:4e:66:ab:2d:11:a5:5b:42:b7:44:46:9f:27:35: 97:d5:e1:4a:ce:27:e8:6f:92:ce:86:b7:0b:03:68:5c:b7:54: ab:26:2a:b1:44:a0:d4:60:31:77:13:15:f3:dd:89:48:c7:dc: 5d:67:a3:07:0f:90:0e:06:46:a5:9e:14:df:5e:94:9f:d7:27: 36:40:43:1c:9d:97:5b:f2:ca:b2:ca:96:e5:70:a4:1c:b0:dd: 96:4c:45:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDNUYxMTAvBgNVBAUTKEM5OTA1REU1MjQ4NkI5RUM0RUY4NzlBMDI2NDQ1Qzcw QjBGRDk1MDUwHhcNMjQxMTIyMTczNjIwWhcNMjQxMTI5MTczNjIwWjAYMRYwFAYD VQQDEw02NzQwYzExNC0wNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oHrXBFer1gKoe11nRCKoN4G7S1iGU2hOumAqKpVgjhAsE+6uQcuEzFtcm6J wOjvwKOCnvYBhwtYStjFpfnHMGxuLf3XvRmdLVopAeUL7UK3Kla9YfwtFau3xWKz zBCMjEnFxnotbLiHKll9w58iJ+VqkR/5H1i8Lb+QtB84Fxp/JHmXSz1ZwBbuB7M6 s4wEZQc53fGTmhfLXxrUi3YounthVBbwo4QgVHS+d6zulrAFwGr+j6TiyQQunoY6 s/wLylddPm5QclumgGt5YUDXsrCmiv54y5tZcB2J2gEa2gLEcACoEjXJYq97jUJD Bky8JZDWp3vjK4sMtoMDouiwOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZK36w/ 4XxVSPMG4MIlfLr9mRzwMB8GA1UdIwQYMBaAFMmQXeUkhrnsTvh5oCZEXHCw/ZUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEM1Ri84QjU0N0E3MjY2 NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3VleE8tSG1nSmtSY2NMRDls UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laQmQ1U1NHdWV4Ty1IbWdKa1JjY0xEOWxRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEM1Ri84QjU0N0E3MjY2NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3Vl eE8tSG1nSmtSY2NMRDlsUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWWaVNbT6zM9Ox2ocJjO+KXKr1dfX6/b4PhzoTduO24L40czL2YQGe Z8rUGHgz06QRxv/Bdhm+zpnbrEKD3/JpPosQvLCA0LgwQpc1ZjrfihqtjmmvAJ/c zJtPJR3pnz0D3WE+9BaU+Q7t7ErdCFNcBm9HamQa2rcenRXHvaK0e45oJ+4UZ/Io sossfPbA/2P7jYfF+Ey3wTrGFqiPROSIsh1FeLz/TmarLRGlW0K3REafJzWX1eFK zifob5LOhrcLA2hct1SrJiqxRKDUYDF3ExXz3YlIx9xdZ6MHD5AOBkalnhTfXpSf 1yc2QEMcnZdb8sqyypblcKQcsN2WTEWy -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org