$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft File: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft (raw, json) Hash identifier: +TCqiTupxs/QbJfjMNDPJemclXE2Xq9axbJrA7YUuT0= Subject key identifier: C6:86:2E:1B:96:DE:27:B5:09:A9:26:17:2D:5A:AC:3C:05:54:34:55 Authority key identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 Certificate issuer: /CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Certificate serial: 061C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft Manifest number: 061C Signing time: Wed 20 Nov 2024 22:07:25 +0000 Manifest this update: Wed 20 Nov 2024 22:07:25 +0000 Manifest next update: Wed 27 Nov 2024 22:07:24 +0000 Files and hashes: 1: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl (hash: Yk6sxGyGy47UfSW0ujYT74jYV9GFkl869II8/iDLXBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1564 (0x61c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Validity Not Before: Nov 20 22:07:25 2024 GMT Not After : Nov 27 22:07:24 2024 GMT Subject: CN=673e5d9d-da68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b2:7c:1a:2b:d4:66:8f:9e:0e:7a:c9:ec:49: fe:01:c1:dc:af:4a:a8:10:51:d5:7c:57:4e:19:79: 96:4c:38:44:f1:42:ad:73:69:eb:64:4a:70:72:9e: f5:0f:a5:f5:4b:9a:e6:49:e2:10:a8:ec:64:4d:d5: be:7b:82:7a:f1:44:ff:54:14:d7:b2:38:39:f3:2c: 52:d5:5f:5d:07:a3:24:a3:4e:8f:96:03:f1:3a:34: 9e:37:33:1e:d4:09:56:c3:c3:f8:29:10:dd:9f:44: 2d:92:03:42:ee:2a:a3:9b:25:b3:ec:6c:29:1e:0a: 35:e1:54:24:6b:09:03:a4:20:7a:0b:c9:f7:6c:21: e8:0b:76:e9:0e:4e:f0:7a:1b:bb:e2:e9:f9:25:97: 94:53:85:68:4f:ff:f3:41:e2:e7:c6:dc:95:14:a2: 04:88:53:db:1d:e7:28:21:80:a8:3d:35:b9:0d:8d: e9:55:7c:25:75:6f:0f:cb:6a:5b:64:77:e0:9b:14: 09:3b:21:07:40:82:b8:5b:d2:17:95:29:14:67:26: a0:b5:e7:d4:87:44:3f:fc:57:c6:16:69:bc:1b:5b: 5d:f0:ae:9b:17:da:21:92:04:53:7a:bb:b1:6a:44: 9e:87:d3:63:a6:cd:24:e3:12:82:68:3b:c4:ac:13: ab:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:86:2E:1B:96:DE:27:B5:09:A9:26:17:2D:5A:AC:3C:05:54:34:55 X509v3 Authority Key Identifier: keyid:C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:34:6d:7b:8c:a2:0b:21:1b:60:29:59:89:17:10:64:e0:47: 5e:22:e8:34:3e:94:b0:2d:69:84:d9:be:d9:67:6e:8a:0e:77: 6a:79:94:71:56:49:de:25:61:ec:e1:3f:d9:9d:57:1f:62:b2: 31:3a:04:c7:7b:d4:24:e6:f6:61:0a:04:bd:05:10:84:ad:3d: 9f:f1:12:26:a6:a2:e0:ed:71:db:40:af:ff:31:f0:f8:73:37: 54:f4:37:d5:6f:4f:da:f4:8b:4c:83:b7:a5:a8:40:93:70:59: 5a:0b:4f:d2:07:4d:3b:79:e4:37:e3:dd:ca:90:ca:89:21:6f: 93:d9:ea:27:31:4f:d0:3a:a7:3f:15:3b:17:61:bd:fe:8e:94: 5a:2d:63:d3:c8:e3:1f:39:d5:34:c4:b0:88:d7:a0:d1:70:31: c4:50:e9:75:ce:8f:eb:6f:b1:69:9d:91:fa:57:1e:d1:f3:a7: 05:40:86:fa:71:16:52:2f:6f:13:28:61:f6:40:a5:68:0b:27: 1c:59:ee:67:87:ef:09:b4:7d:5b:03:80:95:6c:a1:fb:03:c1: 5d:98:cf:d1:d6:5d:9f:40:7e:28:d5:47:fc:5c:1c:5c:37:c4: af:92:b1:88:e4:73:d8:7b:36:7b:cb:c8:ce:64:bc:2b:f4:76: 93:bc:7a:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEM4OEQ1NUI3QkZENTQzODhCNjEwMjA2QUE0MTFEMkUx OTk3NzkwMTcwHhcNMjQxMTIwMjIwNzI1WhcNMjQxMTI3MjIwNzI0WjAYMRYwFAYD VQQDEw02NzNlNWQ5ZC1kYTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbJ8GivUZo+eDnrJ7En+AcHcr0qoEFHVfFdOGXmWTDhE8UKtc2nrZEpwcp71 D6X1S5rmSeIQqOxkTdW+e4J68UT/VBTXsjg58yxS1V9dB6Mko06PlgPxOjSeNzMe 1AlWw8P4KRDdn0QtkgNC7iqjmyWz7GwpHgo14VQkawkDpCB6C8n3bCHoC3bpDk7w ehu74un5JZeUU4VoT//zQeLnxtyVFKIEiFPbHecoIYCoPTW5DY3pVXwldW8Py2pb ZHfgmxQJOyEHQIK4W9IXlSkUZyagtefUh0Q//FfGFmm8G1td8K6bF9ohkgRTerux akSeh9Njps0k4xKCaDvErBOrzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaGLhuW 3ie1CakmFy1arDwFVDRVMB8GA1UdIwQYMBaAFMiNVbe/1UOIthAgaqQR0uGZd5AX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC8xQjg4RDJBMDc0 RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0aTJFQ0JxcEJIUzRabDNr QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJMVZ0N19WUTRpMkVDQnFwQkhTNFpsM2tCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC8xQjg4RDJBMDc0RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0 aTJFQ0JxcEJIUzRabDNrQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJNG17jKILIRtgKVmJFxBk4EdeIug0PpSwLWmE2b7ZZ26KDndqeZRx VkneJWHs4T/ZnVcfYrIxOgTHe9Qk5vZhCgS9BRCErT2f8RImpqLg7XHbQK//MfD4 czdU9DfVb0/a9ItMg7elqECTcFlaC0/SB007eeQ3493KkMqJIW+T2eonMU/QOqc/ FTsXYb3+jpRaLWPTyOMfOdU0xLCI16DRcDHEUOl1zo/rb7FpnZH6Vx7R86cFQIb6 cRZSL28TKGH2QKVoCyccWe5nh+8JtH1bA4CVbKH7A8FdmM/R1l2fQH4o1Uf8XBxc N8SvkrGI5HPYezZ7y8jOZLwr9HaTvHof -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:50 2024 by rpki-client on console-fra.rpki-client.org