$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft File: CygSqDkChy-62yLLBA3ssw_v9Ww.mft (raw, json) Hash identifier: CW0g1Gnue0WLBta1POw/2lwh2T53TmQx6dl/uSAKmWQ= Subject key identifier: 5F:8D:5F:32:CD:34:7A:92:81:02:EA:C5:9D:0F:C1:1E:08:13:8E:FC Authority key identifier: 0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C Certificate issuer: /CN=A91EAE0A/serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft Manifest number: 0A Signing time: Wed 25 Dec 2024 06:13:19 +0000 Manifest this update: Wed 25 Dec 2024 06:13:18 +0000 Manifest next update: Wed 01 Jan 2025 06:13:18 +0000 Files and hashes: 1: CygSqDkChy-62yLLBA3ssw_v9Ww.crl (hash: 4fkHUvVUyzAWTFVGIdjbMX7YmKfw2cm7e2QR5+CJUQA=) 2: 54D1F77EB84611EFB170E471C4F9AE02.roa (hash: +biwJF0qQl4PAaHILuta0LOfQdS1SMB1VEPi0AmtR6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A/serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Validity Not Before: Dec 25 06:13:18 2024 GMT Not After : Jan 1 06:13:18 2025 GMT Subject: CN=676ba27e-2214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:26:41:7b:07:ef:1c:0f:ed:6f:e8:02:4d: e0:0f:5a:57:40:30:83:aa:0d:da:f1:0e:1d:dd:d8: 11:dc:6e:67:81:ff:5f:8e:da:30:72:28:7d:46:60: fb:cd:d0:5a:93:51:5a:27:5c:95:24:a9:ba:5f:a3: f1:f8:89:b3:39:71:71:74:65:b9:7f:42:3b:3e:eb: 65:6e:1c:59:07:e8:02:70:28:25:5d:5c:dd:9b:79: 83:c3:d7:6f:c6:ac:38:dd:fa:69:26:c0:64:4a:6b: c3:ba:36:29:30:f3:46:92:a3:e6:50:af:66:26:23: c8:17:84:e9:4d:ce:03:2c:c4:c1:b4:93:9a:4f:53: 09:06:fe:0f:56:3d:3a:26:d5:df:2a:c4:5a:c9:d7: 19:21:0d:42:c3:ff:6c:5d:11:d0:85:83:8c:2c:8a: b3:ac:15:e1:f2:f6:97:6c:86:01:f1:e0:5e:8b:6f: 45:c9:b2:87:dc:de:f1:a4:79:02:31:a7:ae:aa:08: 7b:0f:83:fd:87:e5:ed:c5:9f:94:9a:38:44:63:9f: 31:2d:e2:5c:c0:b2:1c:fe:70:19:f5:18:d8:8b:46: b1:13:ca:47:3b:48:65:fe:86:91:97:9c:fc:6d:31: 2e:a2:3e:29:0c:fc:15:83:a6:9b:20:92:d4:31:8f: d3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8D:5F:32:CD:34:7A:92:81:02:EA:C5:9D:0F:C1:1E:08:13:8E:FC X509v3 Authority Key Identifier: keyid:0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:d6:f6:1f:cf:94:8b:61:b0:1d:71:5a:12:03:9b:49:76:da: 8c:ce:27:74:94:ba:f5:3c:0c:e4:94:66:29:26:0e:63:d9:16: cb:1d:e8:00:bf:2e:f1:ce:7d:fd:bc:87:b0:1f:dc:79:46:64: cb:7c:fe:66:94:55:88:02:ab:90:49:68:a2:0c:d3:3f:a4:4c: 8f:16:27:b4:b3:96:91:3e:f7:9f:e4:60:d5:2f:be:2f:7f:1e: 98:6d:cd:47:fe:77:82:75:0f:d6:82:a8:fa:79:8f:92:3c:06: 6a:6a:92:fd:79:bc:14:9b:b8:5f:b2:d3:f8:8c:e5:d1:f2:50: 31:fc:20:a0:f9:ca:11:e5:9c:49:47:e4:78:9d:aa:ec:d7:68: e7:21:f6:62:8d:97:6d:29:35:69:93:21:6c:b0:bb:f3:00:c9: e6:88:f9:02:1f:a5:b5:38:ae:f3:91:c6:c9:70:dc:c1:8f:ff: fd:05:fe:44:cd:f0:39:17:5c:82:68:52:26:73:0a:11:af:28: 04:12:6d:ac:b7:83:52:e5:a5:38:24:c9:db:a5:72:62:9f:c8: e7:ef:72:2c:49:fe:19:22:e0:57:20:ec:77:7b:cb:7d:44:d4: 62:35:75:d5:39:d6:70:76:d4:7c:15:6d:cc:d3:84:98:22:a5: 42:ec:92:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QUUwQTExMC8GA1UEBRMoMEIyODEyQTgzOTAyODcyRkJBREIyMkNCMDQwREVDQjMw RkVGRjU2QzAeFw0yNDEyMjUwNjEzMThaFw0yNTAxMDEwNjEzMThaMBgxFjAUBgNV BAMTDTY3NmJhMjdlLTIyMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvuyZBewfvHA/tb+gCTeAPWldAMIOqDdrxDh3d2BHcbmeB/1+O2jByKH1GYPvN 0FqTUVonXJUkqbpfo/H4ibM5cXF0Zbl/Qjs+62VuHFkH6AJwKCVdXN2beYPD12/G rDjd+mkmwGRKa8O6Nikw80aSo+ZQr2YmI8gXhOlNzgMsxMG0k5pPUwkG/g9WPTom 1d8qxFrJ1xkhDULD/2xdEdCFg4wsirOsFeHy9pdshgHx4F6Lb0XJsofc3vGkeQIx p66qCHsPg/2H5e3Fn5SaOERjnzEt4lzAshz+cBn1GNiLRrETykc7SGX+hpGXnPxt MS6iPikM/BWDppsgktQxj9OrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX41fMs00 epKBAurFnQ/BHggTjvwwHwYDVR0jBBgwFoAUCygSqDkChy+62yLLBA3ssw/v9Www DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRTBBL0UzODM2NkQwQjcy MjExRUZCQzM2QTc0OEM0RjlBRTAyL0N5Z1NxRGtDaHktNjJ5TExCQTNzc3dfdjlX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3lnU3FEa0NoeS02MnlMTEJBM3Nzd192OVd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB RTBBL0UzODM2NkQwQjcyMjExRUZCQzM2QTc0OEM0RjlBRTAyL0N5Z1NxRGtDaHkt NjJ5TExCQTNzc3dfdjlXdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMHW9h/PlIthsB1xWhIDm0l22ozOJ3SUuvU8DOSUZikmDmPZFssd6AC/ LvHOff28h7Af3HlGZMt8/maUVYgCq5BJaKIM0z+kTI8WJ7SzlpE+95/kYNUvvi9/ HphtzUf+d4J1D9aCqPp5j5I8Bmpqkv15vBSbuF+y0/iM5dHyUDH8IKD5yhHlnElH 5HidquzXaOch9mKNl20pNWmTIWywu/MAyeaI+QIfpbU4rvORxslw3MGP//0F/kTN 8DkXXIJoUiZzChGvKAQSbay3g1LlpTgkydulcmKfyOfvcixJ/hki4Fcg7Hd7y31E 1GI1ddU51nB21HwVbczThJgipULskko= -----END CERTIFICATE-----Generated at Wed Dec 25 08:00:07 2024 by rpki-client on console-ams.rpki-client.org