$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json) Hash identifier: VI+3FvBBHhDT8koSNaTa7cZ3B7XzS1xjI1PBUWYvJKA= Subject key identifier: ED:42:DD:FC:77:C7:97:B0:B4:F4:17:79:4E:5D:A5:38:A8:D4:F7:D0 Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft Manifest number: 0D Signing time: Thu 21 Nov 2024 06:12:44 +0000 Manifest this update: Thu 21 Nov 2024 06:12:44 +0000 Manifest next update: Thu 28 Nov 2024 06:12:44 +0000 Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: 8I3sxgTqFTXVX6rD7BmmL4Ldx6Ry/rOlmehIxg1mrF4=) 2: DDA167929E5111EF94F71013C4F9AE02.roa (hash: ayuReQbwZQyyFifWvSerspyTPQuIIk708kpChRAJhtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Validity Not Before: Nov 21 06:12:44 2024 GMT Not After : Nov 28 06:12:44 2024 GMT Subject: CN=673ecf5c-9bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bc:f9:53:d6:59:3a:b5:b6:30:74:1c:c3:06: f5:b3:e4:89:41:fe:a6:d9:77:d0:1a:ab:2f:d1:72: b9:60:c6:b1:eb:f7:1a:7c:38:1b:62:eb:27:87:9b: 5f:19:14:76:5c:38:c6:b1:30:46:e4:8d:c8:89:6e: 84:b5:e5:6d:71:3c:f7:df:18:b2:b4:5d:dc:08:ec: 4a:cd:78:84:32:77:e6:26:3d:cb:06:c7:6f:ec:7f: 0f:38:1c:60:ff:bc:fd:c5:ca:d4:83:85:31:50:f9: b7:d3:d5:c7:38:d8:0c:f4:63:48:dd:e3:b4:dc:7b: 80:56:2a:6c:e0:61:0f:a8:da:db:ab:c1:a5:00:3c: 81:fd:7f:56:c7:8b:0c:ec:46:78:dd:b4:ef:ca:2c: 46:55:46:01:c8:bc:71:24:8d:62:38:92:eb:c0:16: bc:fa:66:17:cc:8f:6d:37:d0:9a:13:91:7c:41:d8: 05:75:b5:04:ec:82:85:6a:20:92:1c:93:5a:fc:11: 2d:47:fb:98:32:35:6e:6e:95:80:d6:52:aa:1f:62: ba:8c:95:03:c0:0c:b9:5d:c1:3a:69:6a:69:ef:c8: c1:cd:bf:06:63:e2:5f:9b:61:02:f1:08:b0:23:76: 1e:5f:9b:3f:52:da:a1:38:f3:bb:d8:08:5b:90:41: c9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:42:DD:FC:77:C7:97:B0:B4:F4:17:79:4E:5D:A5:38:A8:D4:F7:D0 X509v3 Authority Key Identifier: keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:aa:3b:18:f8:70:80:68:03:20:06:ab:d8:a0:e9:cd:22:a2: fe:bf:eb:69:d6:55:f7:32:09:34:80:3c:9c:ef:db:19:07:1d: 58:ea:17:74:1b:4f:72:41:8c:3c:1b:ff:60:3d:17:99:ce:61: 12:01:e6:f4:3d:e2:28:28:cd:94:71:b2:08:f4:0c:29:4f:8d: 5f:d6:c3:74:12:55:4f:66:92:41:7d:21:45:55:39:20:6e:ba: 37:7b:b8:e8:8d:de:07:b7:5c:d5:b1:c8:4f:d1:8a:61:e0:54: c7:67:be:16:92:af:a1:67:7b:27:65:ba:0e:c9:86:47:f9:a4: e8:a1:8e:01:9f:23:b9:a1:ab:a1:90:a8:bb:6a:fd:22:b0:d8: b2:f0:52:86:b8:e1:a8:eb:6e:20:c2:12:9f:9c:c0:eb:18:7d: ca:1c:97:ef:5a:9c:15:cd:42:8d:fb:f8:41:61:6a:4f:9e:9d: 6f:e7:32:c3:14:63:c6:af:62:65:6b:ee:4d:e4:c1:69:8d:24: 8d:4b:76:10:5f:39:89:03:e3:9d:a0:47:74:bb:fb:c6:fe:d8: 21:3d:e4:b9:a1:6e:42:d6:6b:4a:e7:48:f2:a1:11:49:fb:8b: da:59:08:57:68:45:3b:bf:c2:ed:b8:61:80:77:54:95:83:db: c9:19:c2:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkE0NjExMC8GA1UEBRMoRkQ4QzVGNDg3NzQyQ0IyMDUxQjI4Njk3MjlCNDY2MTI0 Q0RGNUU2QjAeFw0yNDExMjEwNjEyNDRaFw0yNDExMjgwNjEyNDRaMBgxFjAUBgNV BAMTDTY3M2VjZjVjLTliZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEvPlT1lk6tbYwdBzDBvWz5IlB/qbZd9Aaqy/RcrlgxrHr9xp8OBti6yeHm18Z FHZcOMaxMEbkjciJboS15W1xPPffGLK0XdwI7ErNeIQyd+YmPcsGx2/sfw84HGD/ vP3FytSDhTFQ+bfT1cc42Az0Y0jd47Tce4BWKmzgYQ+o2turwaUAPIH9f1bHiwzs RnjdtO/KLEZVRgHIvHEkjWI4kuvAFrz6ZhfMj2030JoTkXxB2AV1tQTsgoVqIJIc k1r8ES1H+5gyNW5ulYDWUqofYrqMlQPADLldwTppamnvyMHNvwZj4l+bYQLxCLAj dh5fmz9S2qE487vYCFuQQcmLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7ULd/HfH l7C09Bd5Tl2lOKjU99AwHwYDVR0jBBgwFoAU/YxfSHdCyyBRsoaXKbRmEkzfXmsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQTQ2L0ZGOEFBMjRBOUNG NTExRUY4QTZDODU4MUM0RjlBRTAyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlht cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1l4ZlNIZEN5eUJSc29hWEtiUm1Fa3pmWG1zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QTQ2L0ZGOEFBMjRBOUNGNTExRUY4QTZDODU4MUM0RjlBRTAyL19ZeGZTSGRDeXlC UnNvYVhLYlJtRWt6Zlhtcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIyqOxj4cIBoAyAGq9ig6c0iov6/62nWVfcyCTSAPJzv2xkHHVjqF3Qb T3JBjDwb/2A9F5nOYRIB5vQ94igozZRxsgj0DClPjV/Ww3QSVU9mkkF9IUVVOSBu ujd7uOiN3ge3XNWxyE/RimHgVMdnvhaSr6Fneydlug7Jhkf5pOihjgGfI7mhq6GQ qLtq/SKw2LLwUoa44ajrbiDCEp+cwOsYfcocl+9anBXNQo37+EFhak+enW/nMsMU Y8avYmVr7k3kwWmNJI1LdhBfOYkD452gR3S7+8b+2CE95LmhbkLWa0rnSPKhEUn7 i9pZCFdoRTu/wu24YYB3VJWD28kZwgk= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:52 2024 by rpki-client on console-fra.rpki-client.org