$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft File: uNk1BsinkdH5_6W2fDiBbdwD7ms.mft (raw, json) Hash identifier: dPCZCKNWIVrOsPMsXCkE2qNyFtbr8/BmKmKkLOpq+r4= Subject key identifier: 1E:97:5B:AB:91:A9:CC:C2:02:F5:41:87:4B:F8:A1:98:98:2E:17:5A Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B Certificate issuer: /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Certificate serial: 09D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft Manifest number: 09D2 Signing time: Fri 22 Nov 2024 19:42:45 +0000 Manifest this update: Fri 22 Nov 2024 19:42:45 +0000 Manifest next update: Fri 29 Nov 2024 19:42:45 +0000 Files and hashes: 1: uNk1BsinkdH5_6W2fDiBbdwD7ms.crl (hash: muPrIqZGiJ+71YLtfnZ+9grRonCBNc3X5zWJTDoia6U=) 2: C01674A86BF011EA87B33D25C4F9AE02.roa (hash: 70ds0/DyF5wXCHSmR464rx4ZYg97rO4f023Z3VGG144=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2520 (0x9d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Validity Not Before: Nov 22 19:42:45 2024 GMT Not After : Nov 29 19:42:45 2024 GMT Subject: CN=6740deb5-07ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b7:24:72:4b:dc:b7:21:9b:5c:6b:8f:09:74: 60:a7:bd:74:3e:a1:45:60:cf:f9:a3:d0:05:92:bf: b2:97:02:51:62:eb:33:14:3d:ce:15:d1:68:7f:91: 6d:65:12:77:06:de:dd:e9:d9:61:97:bd:40:32:53: 64:52:fe:4b:3b:4c:d7:d4:18:2c:8f:6f:c1:e5:a6: ee:28:80:91:66:ce:39:a0:76:fa:af:51:d5:cd:ab: c9:7c:be:38:44:c7:a3:f9:eb:26:c2:2f:19:87:75: 30:0f:6b:1f:10:2e:f0:eb:e6:97:cd:b2:e5:56:99: a9:42:47:ca:4d:1c:ab:6b:63:8b:71:52:f7:47:12: df:dc:b9:6e:16:85:37:2f:c2:de:18:6d:7e:db:76: 3d:3e:7f:05:fa:76:05:6a:98:c1:9e:f3:2c:b7:58: bf:93:4e:be:e7:38:b9:bc:40:6a:6c:7c:8f:de:67: 3d:92:41:8f:1e:27:29:54:9c:9c:71:f3:39:79:24: 35:01:58:c0:b2:cd:70:9e:ce:d1:06:60:6f:56:c6: 55:3e:e6:d2:90:59:cc:f1:e2:a6:54:28:07:2d:0d: 4f:b6:f7:b0:48:b8:7d:51:43:ee:33:e3:ef:6b:66: eb:07:c3:e0:f2:d1:d2:0e:a7:fd:e8:27:fa:38:17: e0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:97:5B:AB:91:A9:CC:C2:02:F5:41:87:4B:F8:A1:98:98:2E:17:5A X509v3 Authority Key Identifier: keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:30:a1:bd:7b:31:76:f3:38:f8:d1:e0:b1:42:99:95:50:c8: 43:c3:2a:c4:5d:17:ff:cd:88:6c:39:c8:cb:c0:83:8a:c8:9d: b5:6d:65:54:ef:91:d8:a6:61:a6:22:73:11:24:66:37:90:05: e2:b2:77:74:58:10:cc:97:3e:fc:e9:f1:9d:dd:c9:eb:dc:3c: ea:95:e9:5b:53:ba:db:28:23:74:fe:f6:b8:88:16:d2:3d:f8: 93:86:1f:7c:0e:ff:54:56:83:cc:ba:a1:1a:f9:61:3c:54:9c: fd:6d:5a:7e:85:87:fe:af:f9:ec:e7:eb:3c:d0:5f:2f:cd:10: 39:09:39:98:96:2a:d5:6f:bb:4b:75:59:cc:2f:1e:7d:2c:66: 57:a1:f0:ea:2d:f5:0a:d3:f6:15:c7:b7:9a:4d:b6:4c:60:f0: a2:42:58:59:6e:17:dd:e3:f3:3d:1d:8b:c9:d6:e4:c7:38:03: e9:c0:39:86:37:01:7a:d1:89:48:a6:a7:7e:94:76:1c:ff:18: 2c:47:3d:e9:cb:7a:77:94:e7:fc:c4:c9:31:a2:57:95:9d:10: f6:54:fa:07:fe:97:b6:78:8f:9b:b6:b6:bd:f3:fb:5d:e6:12: 55:5c:df:00:22:8a:d6:a4:64:1a:8c:73:e3:73:eb:47:f3:1c: 32:7b:9f:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBERUMxMTAvBgNVBAUTKEI4RDkzNTA2QzhBNzkxRDFGOUZGQTVCNjdDMzg4MTZE REMwM0VFNkIwHhcNMjQxMTIyMTk0MjQ1WhcNMjQxMTI5MTk0MjQ1WjAYMRYwFAYD VQQDEw02NzQwZGViNS0wN2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bckckvctyGbXGuPCXRgp710PqFFYM/5o9AFkr+ylwJRYuszFD3OFdFof5Ft ZRJ3Bt7d6dlhl71AMlNkUv5LO0zX1Bgsj2/B5abuKICRZs45oHb6r1HVzavJfL44 RMej+esmwi8Zh3UwD2sfEC7w6+aXzbLlVpmpQkfKTRyra2OLcVL3RxLf3LluFoU3 L8LeGG1+23Y9Pn8F+nYFapjBnvMst1i/k06+5zi5vEBqbHyP3mc9kkGPHicpVJyc cfM5eSQ1AVjAss1wns7RBmBvVsZVPubSkFnM8eKmVCgHLQ1PtvewSLh9UUPuM+Pv a2brB8Pg8tHSDqf96Cf6OBfgRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6XW6uR qczCAvVBh0v4oZiYLhdaMB8GA1UdIwQYMBaAFLjZNQbIp5HR+f+ltnw4gW3cA+5r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMERFQy8xNzJEMEEyNDZC RUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtkSDVfNlcyZkRpQmJkd0Q3 bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VOazFCc2lua2RINV82VzJmRGlCYmR3RDdtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MERFQy8xNzJEMEEyNDZCRUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtk SDVfNlcyZkRpQmJkd0Q3bXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZMKG9ezF28zj40eCxQpmVUMhDwyrEXRf/zYhsOcjLwIOKyJ21bWVU 75HYpmGmInMRJGY3kAXisnd0WBDMlz786fGd3cnr3DzqlelbU7rbKCN0/va4iBbS PfiThh98Dv9UVoPMuqEa+WE8VJz9bVp+hYf+r/ns5+s80F8vzRA5CTmYlirVb7tL dVnMLx59LGZXofDqLfUK0/YVx7eaTbZMYPCiQlhZbhfd4/M9HYvJ1uTHOAPpwDmG NwF60YlIpqd+lHYc/xgsRz3py3p3lOf8xMkxoleVnRD2VPoH/pe2eI+btra98/td 5hJVXN8AIorWpGQajHPjc+tH8xwye5/1 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org