$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft File: CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json) Hash identifier: pj3qIOQCdAs1CzNhTnSI7dG5V1ohdXGQw5f0dT2yJ+Y= Subject key identifier: 1F:A1:0B:BF:C0:BA:36:DE:07:34:0F:BA:04:78:F3:0C:33:CC:0F:A4 Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Certificate serial: 0EA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft Manifest number: 0E96 Signing time: Fri 22 Nov 2024 17:41:28 +0000 Manifest this update: Fri 22 Nov 2024 17:41:27 +0000 Manifest next update: Fri 29 Nov 2024 17:41:27 +0000 Files and hashes: 1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: vaoDPGW0QmLB0crLjsWRnoYM+gJMTRcM4N4oxn3SPUw=) 2: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: e0d6vw79IEqP0AdvR6b4v7RskAnTjUKydxlFYiex0pY=) 3: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: v5g7cjNReibtump5AZbTVG2Okqg2HIeG+osQENS8uAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3747 (0xea3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Validity Not Before: Nov 22 17:41:27 2024 GMT Not After : Nov 29 17:41:27 2024 GMT Subject: CN=6740c248-5e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:57:2e:52:b4:c0:f9:02:01:64:4c:3f:74:8e: 1d:32:22:c1:a8:98:e3:ef:c7:6f:5f:9d:41:c8:90: 2a:58:3c:a1:95:6b:d2:f8:9f:93:f2:18:15:b2:f4: 8d:9f:e5:cd:ea:eb:5b:c4:05:4c:4d:ed:cb:ec:2c: c3:c2:ed:27:24:b5:73:1d:c1:19:9d:b2:95:76:6d: eb:e5:40:89:c3:30:c9:65:79:d9:e6:b7:7f:2c:5e: 2c:34:f5:a3:cd:67:e3:c5:b3:45:97:58:71:ec:12: 2d:1d:60:69:3f:0e:47:59:fe:ac:5d:7c:93:4b:4b: b4:f7:73:f7:0a:26:b9:97:aa:65:63:6c:7d:03:34: f4:7d:cb:79:11:e3:76:18:65:3c:b5:c8:d5:7e:3f: 8f:bc:85:c3:48:53:cf:22:53:dc:2f:96:c2:cd:53: 63:41:f4:9c:7a:ab:9b:83:f4:6e:52:27:0a:3f:6c: 5a:c6:2e:b6:85:d6:e1:32:e0:83:5f:9b:94:ff:00: 0c:60:be:4c:66:9c:18:28:3c:d1:ac:9a:68:b9:20: 7b:5f:2d:f8:6e:ff:e4:22:20:ac:83:60:19:15:c1: 34:38:4e:e3:56:fd:d0:7d:49:95:d1:d7:b5:32:fc: 09:57:8e:90:e6:07:0c:b0:74:a8:dd:e9:bb:8e:dd: d1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A1:0B:BF:C0:BA:36:DE:07:34:0F:BA:04:78:F3:0C:33:CC:0F:A4 X509v3 Authority Key Identifier: keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:fb:78:19:ff:cd:0b:c3:fc:9a:a7:f4:90:e8:b2:48:87:41: c5:29:cc:8c:48:be:c5:e6:9b:1f:6b:74:2e:ec:24:5c:2b:da: 28:ab:67:79:c5:cc:e5:b4:56:02:5a:c8:5b:bf:72:07:f2:e2: 1c:ba:b5:54:76:e5:67:2d:35:4c:61:47:a8:76:03:82:25:a1: 2e:b5:9b:83:d3:0d:38:1b:f2:30:92:f2:50:1c:36:5d:d9:8c: 00:26:29:46:03:84:40:55:18:65:b6:02:3b:75:6e:65:ce:87: 15:fc:7b:d5:3c:40:f1:48:3d:10:d4:b6:fc:bc:d7:8d:29:b7: 1f:f9:5e:ba:0f:76:79:ea:fc:75:a3:58:70:d8:5b:08:06:0c: c6:ca:29:f4:e2:04:96:66:5a:8b:fc:92:2f:50:07:57:45:31: 12:28:9f:7b:86:44:6e:d5:53:69:f1:31:4f:b8:5a:23:0a:48: 0b:e9:bd:74:dc:7d:6c:98:44:47:14:1f:f6:ef:98:0d:10:43: 43:a3:30:ff:8c:b5:a0:5b:ab:c3:0a:88:30:c3:5f:30:e0:e1: e1:20:d2:a7:ac:18:5c:6f:03:1e:6b:12:b5:8c:e9:22:53:e7: c3:b8:8a:37:fd:35:99:ef:dd:ab:c7:2d:27:be:b3:96:17:fd: af:e2:b5:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExNTUxMTAvBgNVBAUTKDBCMjU2MUM0QjU3REE4MUQ3MEYzOTcyNEIwREUyQzcx MDE3NDlGNUQwHhcNMjQxMTIyMTc0MTI3WhcNMjQxMTI5MTc0MTI3WjAYMRYwFAYD VQQDEw02NzQwYzI0OC01ZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51cuUrTA+QIBZEw/dI4dMiLBqJjj78dvX51ByJAqWDyhlWvS+J+T8hgVsvSN n+XN6utbxAVMTe3L7CzDwu0nJLVzHcEZnbKVdm3r5UCJwzDJZXnZ5rd/LF4sNPWj zWfjxbNFl1hx7BItHWBpPw5HWf6sXXyTS0u093P3Cia5l6plY2x9AzT0fct5EeN2 GGU8tcjVfj+PvIXDSFPPIlPcL5bCzVNjQfScequbg/RuUicKP2xaxi62hdbhMuCD X5uU/wAMYL5MZpwYKDzRrJpouSB7Xy34bv/kIiCsg2AZFcE0OE7jVv3QfUmV0de1 MvwJV46Q5gcMsHSo3em7jt3RHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+hC7/A ujbeBzQPugR48wwzzA+kMB8GA1UdIwQYMBaAFAslYcS1fagdcPOXJLDeLHEBdJ9d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE1NS81Mzk5OEEzNDdF QjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFCMXc4NWNrc040c2NRRjBu MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N5Vmh4TFY5cUIxdzg1Y2tzTjRzY1FGMG4xMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTE1NS81Mzk5OEEzNDdFQjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFC MXc4NWNrc040c2NRRjBuMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQ+3gZ/80Lw/yap/SQ6LJIh0HFKcyMSL7F5psfa3Qu7CRcK9ooq2d5 xczltFYCWshbv3IH8uIcurVUduVnLTVMYUeodgOCJaEutZuD0w04G/IwkvJQHDZd 2YwAJilGA4RAVRhltgI7dW5lzocV/HvVPEDxSD0Q1Lb8vNeNKbcf+V66D3Z56vx1 o1hw2FsIBgzGyin04gSWZlqL/JIvUAdXRTESKJ97hkRu1VNp8TFPuFojCkgL6b10 3H1smERHFB/275gNEENDozD/jLWgW6vDCogww18w4OHhINKnrBhcbwMeaxK1jOki U+fDuIo3/TWZ792rxy0nvrOWF/2v4rU/ -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org