$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json) Hash identifier: 2KGroFCk7FTjJjQMF1NzQZ7s/OFSocT+3gaMAg0NmRY= Subject key identifier: 88:18:BF:62:E0:B7:67:78:B8:14:75:D7:CB:D7:67:18:27:CE:34:FA Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Certificate serial: 342B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft Manifest number: 3427 Signing time: Wed 20 Nov 2024 15:03:48 +0000 Manifest this update: Wed 20 Nov 2024 15:03:47 +0000 Manifest next update: Wed 27 Nov 2024 15:03:47 +0000 Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: Z8l5SmZeBJy64tqw6ZvwAAiI0kbibkrtRoV90U7TvSE=) 2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: lc/qlMf4LlkPKULr4QDdOr7yT3mSRd2CWo/AG45TiUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13355 (0x342b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Validity Not Before: Nov 20 15:03:47 2024 GMT Not After : Nov 27 15:03:47 2024 GMT Subject: CN=673dfa54-bce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:32:13:96:e8:d3:40:fc:9c:32:f4:f0:7d:53: b6:0c:b6:56:5b:e3:04:b2:29:cd:74:d1:32:1e:27: d9:dc:c6:f7:47:f9:1b:d3:41:34:08:37:32:48:3e: 44:13:78:11:d8:f1:da:2f:eb:35:37:cd:d0:94:ff: 55:d2:cc:f2:65:60:4b:70:54:4d:7f:6f:ca:7d:1d: b8:4c:c8:cc:22:66:20:f8:d4:77:47:d0:49:14:e9: 0f:03:ef:fb:60:53:77:a7:e0:88:69:0d:a2:c8:0f: 1a:67:e5:d2:ed:62:87:d4:4b:6e:08:f6:06:ef:69: 09:df:40:47:5f:77:cf:ec:1d:d6:2f:d7:48:53:01: 00:d7:5d:d0:b6:eb:91:e8:a8:f0:71:6c:0b:34:19: b8:28:31:f9:0d:a6:18:5a:7c:43:7e:4b:04:e6:a6: 42:e5:bf:b8:98:6a:33:27:10:d9:f9:24:f1:b8:9d: ad:e8:c2:09:0c:b4:32:c1:cf:ec:b2:4c:2d:24:7e: 43:7a:7a:8a:64:de:e8:13:0e:7c:25:50:ec:78:74: af:b7:75:9d:73:5b:2e:e9:a0:5b:ae:11:21:3d:e4: 90:7b:05:40:b8:f0:e4:a7:73:3c:56:2f:e5:25:18: 09:7f:b7:39:90:f2:94:f4:eb:51:2b:7d:f5:dc:46: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:18:BF:62:E0:B7:67:78:B8:14:75:D7:CB:D7:67:18:27:CE:34:FA X509v3 Authority Key Identifier: keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4b:15:fc:b5:63:12:5f:fe:01:e1:db:45:18:43:2c:b8:b3: 54:c5:19:74:6d:cc:43:1e:b2:d9:4a:3a:68:45:3a:cf:3c:18: 9d:af:60:21:89:ce:11:5b:26:30:5f:09:ad:0d:a9:d8:39:1a: a1:db:fe:73:e8:f8:16:a0:f1:a0:ca:ad:80:70:83:a2:f7:19: 0d:ca:a1:82:c1:2b:a0:33:0d:2e:89:2e:21:83:0f:f4:92:52: fa:2f:d8:45:f6:39:c9:d5:90:e8:9d:09:a7:19:90:16:54:ad: e2:c2:a3:75:17:06:85:5e:8f:c3:0c:9f:1d:1b:de:19:a6:40: b6:8d:01:1f:75:0b:69:0c:10:5b:6c:12:e3:80:06:c6:7a:d2: 62:a0:cd:ff:4b:d1:cb:f1:18:16:2c:39:ec:70:9e:51:75:a9: 05:4e:0d:e2:7d:ea:fa:72:25:38:4d:f4:08:33:a3:ee:07:b5: a9:23:9a:da:0b:31:5b:6f:f8:9c:e9:b4:95:1e:ef:bc:57:cc: 93:9f:aa:88:0f:6f:f7:30:a1:1a:21:63:6a:ae:f5:e2:8d:88: b1:9b:02:1c:5c:90:fb:96:58:1a:c4:e6:5a:1b:a7:e9:50:0d: ec:99:66:97:01:ac:77:0b:ba:28:ac:69:b1:76:bd:5c:10:65: fa:8b:70:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKDYzMkM4REUwMjIwQjhDMTBCNDFGRjQ5QkZGOEI0MzJD RjhGRkQyNTQwHhcNMjQxMTIwMTUwMzQ3WhcNMjQxMTI3MTUwMzQ3WjAYMRYwFAYD VQQDEw02NzNkZmE1NC1iY2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TITlujTQPycMvTwfVO2DLZWW+MEsinNdNEyHifZ3Mb3R/kb00E0CDcySD5E E3gR2PHaL+s1N83QlP9V0szyZWBLcFRNf2/KfR24TMjMImYg+NR3R9BJFOkPA+/7 YFN3p+CIaQ2iyA8aZ+XS7WKH1EtuCPYG72kJ30BHX3fP7B3WL9dIUwEA113QtuuR 6KjwcWwLNBm4KDH5DaYYWnxDfksE5qZC5b+4mGozJxDZ+STxuJ2t6MIJDLQywc/s skwtJH5DenqKZN7oEw58JVDseHSvt3Wdc1su6aBbrhEhPeSQewVAuPDkp3M8Vi/l JRgJf7c5kPKU9OtRK3313EbIQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgYv2Lg t2d4uBR118vXZxgnzjT6MB8GA1UdIwQYMBaAFGMsjeAiC4wQtB/0m/+LQyz4/9JU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy80NDlCQTUwNjFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpCQzBIX1NiXzR0RExQal8w bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l5eU40Q0lMakJDMEhfU2JfNHRETFBqXzBsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy80NDlCQTUwNjFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpC QzBIX1NiXzR0RExQal8wbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6SxX8tWMSX/4B4dtFGEMsuLNUxRl0bcxDHrLZSjpoRTrPPBidr2Ah ic4RWyYwXwmtDanYORqh2/5z6PgWoPGgyq2AcIOi9xkNyqGCwSugMw0uiS4hgw/0 klL6L9hF9jnJ1ZDonQmnGZAWVK3iwqN1FwaFXo/DDJ8dG94ZpkC2jQEfdQtpDBBb bBLjgAbGetJioM3/S9HL8RgWLDnscJ5RdakFTg3ifer6ciU4TfQIM6PuB7WpI5ra CzFbb/ic6bSVHu+8V8yTn6qID2/3MKEaIWNqrvXijYixmwIcXJD7llgaxOZaG6fp UA3smWaXAax3C7oorGmxdr1cEGX6i3AF -----END CERTIFICATE-----Generated at Wed Nov 20 16:12:04 2024 by rpki-client on console-fra.rpki-client.org