$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json) Hash identifier: 8iU6GIgYZyGMILUR6VQE7Tmlc3HsIluJCfmakJIm3Lk= Subject key identifier: 35:FD:87:57:3E:43:4F:6F:84:E2:B4:39:6C:6B:0F:41:16:C0:85:D3 Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Certificate serial: 0A03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft Manifest number: 1086 Signing time: Fri 22 Nov 2024 19:35:35 +0000 Manifest this update: Fri 22 Nov 2024 19:35:34 +0000 Manifest next update: Fri 29 Nov 2024 19:35:34 +0000 Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: 7ovmb3TXoGQiE07vCJ77rOTBYumfrxfJOQITxKr+kE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2563 (0xa03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Validity Not Before: Nov 22 19:35:34 2024 GMT Not After : Nov 29 19:35:34 2024 GMT Subject: CN=6740dd06-0b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3c:a9:19:ac:71:03:ba:b1:07:cb:7b:c0:8e: 04:74:1c:86:7a:92:7f:66:54:4a:aa:94:8f:e5:96: 51:5f:07:13:f7:90:3d:ee:62:a7:fe:a5:cd:76:e7: 15:c7:d3:87:f0:28:cf:87:5b:a3:58:b1:5e:27:64: 89:66:19:bb:ef:95:1f:e9:b2:7c:c8:a6:5e:95:3c: 98:fe:db:17:ed:00:e4:33:87:64:7a:f0:6b:b1:9c: c0:3b:80:3b:46:93:d7:31:6a:a9:b6:38:b1:dd:db: de:7f:8b:a3:97:97:6f:87:2f:c7:e8:58:2e:f7:7e: 2d:99:0d:de:27:7b:f3:75:1f:13:cd:91:80:fb:e0: 9e:b2:24:91:75:63:f7:93:1f:75:3c:a9:16:b4:90: d7:ec:27:0f:24:ea:3f:49:7c:93:a8:e1:e7:51:d6: fc:c5:dd:01:31:5f:94:0e:b6:99:2c:ed:05:77:19: be:01:4d:b0:46:b7:76:12:22:ce:d2:6f:eb:1f:bf: c5:bf:88:66:40:4a:91:73:33:12:43:0e:b4:19:e3: 3e:5d:d4:30:40:ec:3b:ca:81:76:23:c4:2d:0a:48: 55:65:db:cf:29:c7:b3:f4:62:f0:83:57:7e:46:b4: dc:8c:c8:1c:bb:75:4c:81:d6:04:5b:8e:a3:55:3d: b7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FD:87:57:3E:43:4F:6F:84:E2:B4:39:6C:6B:0F:41:16:C0:85:D3 X509v3 Authority Key Identifier: keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ce:4c:35:e5:4c:3c:2c:e5:73:84:a3:b8:07:b6:eb:7c:8f: 72:40:37:e8:b9:16:1b:3c:eb:16:3f:fb:9f:5a:fc:fb:af:40: a3:bc:3d:a3:27:cb:57:14:d9:67:a9:6b:68:cb:15:e3:83:52: a9:00:69:43:ae:9d:82:90:eb:15:3a:a2:36:0f:96:15:f0:f4: 78:52:f4:50:16:15:28:36:39:8e:ff:a7:21:fb:bb:31:91:1a: f3:d5:80:b6:85:27:22:4d:e8:a0:98:e4:e3:d1:a2:fd:9d:99: f9:c6:e9:d8:27:cc:aa:6c:7f:8f:e4:81:3e:2b:f8:e4:e0:aa: fc:2d:33:1e:aa:c6:ab:05:cc:f9:3f:9f:cb:cb:2d:a9:f4:77: 12:51:dd:ca:99:a8:a5:c7:ea:24:c8:5f:ee:75:a5:7a:ff:6b: 56:6e:1e:28:e0:7b:cd:3f:e0:74:ba:05:de:82:de:8f:b3:63: 9f:a9:ae:44:1e:3a:ba:47:32:c1:ff:43:c6:01:ba:a4:49:e8: 2c:bc:a6:66:8c:5e:40:27:87:bd:b1:73:a1:7f:3a:fd:43:4f: 87:33:74:9c:7f:bb:3b:5f:41:28:48:8e:b8:95:3b:29:2d:9a: 9a:13:c3:91:ed:19:24:f5:57:99:6a:48:f3:e1:76:07:04:74: d1:40:5b:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz RTRDRjM2NDQwHhcNMjQxMTIyMTkzNTM0WhcNMjQxMTI5MTkzNTM0WjAYMRYwFAYD VQQDEw02NzQwZGQwNi0wYjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7DypGaxxA7qxB8t7wI4EdByGepJ/ZlRKqpSP5ZZRXwcT95A97mKn/qXNducV x9OH8CjPh1ujWLFeJ2SJZhm775Uf6bJ8yKZelTyY/tsX7QDkM4dkevBrsZzAO4A7 RpPXMWqptjix3dvef4ujl5dvhy/H6Fgu934tmQ3eJ3vzdR8TzZGA++CesiSRdWP3 kx91PKkWtJDX7CcPJOo/SXyTqOHnUdb8xd0BMV+UDraZLO0Fdxm+AU2wRrd2EiLO 0m/rH7/Fv4hmQEqRczMSQw60GeM+XdQwQOw7yoF2I8QtCkhVZdvPKcez9GLwg1d+ RrTcjMgcu3VMgdYEW46jVT233wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDX9h1c+ Q09vhOK0OWxrD0EWwIXTMB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZzkw15Uw8LOVzhKO4B7brfI9yQDfouRYbPOsWP/ufWvz7r0CjvD2j J8tXFNlnqWtoyxXjg1KpAGlDrp2CkOsVOqI2D5YV8PR4UvRQFhUoNjmO/6ch+7sx kRrz1YC2hSciTeigmOTj0aL9nZn5xunYJ8yqbH+P5IE+K/jk4Kr8LTMeqsarBcz5 P5/Lyy2p9HcSUd3Kmailx+okyF/udaV6/2tWbh4o4HvNP+B0ugXegt6Ps2Ofqa5E Hjq6RzLB/0PGAbqkSegsvKZmjF5AJ4e9sXOhfzr9Q0+HM3Scf7s7X0EoSI64lTsp LZqaE8OR7Rkk9VeZakjz4XYHBHTRQFsR -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:34 2024 by rpki-client on console-fra.rpki-client.org