$ rpki-client -vvf rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft File: UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft (raw, json) Hash identifier: ompTfKiqlS/fbKNGuniOpa9ocWSjfPaA3rMlgQCZdGg= Subject key identifier: EA:D1:FF:76:F5:FA:2C:C6:44:FE:54:D7:4D:CF:35:1D:70:D2:AF:44 Authority key identifier: 52:1B:06:C2:91:10:28:4A:AA:FE:08:75:AA:61:86:B0:00:6D:27:67 Certificate issuer: /CN=A911902E/serialNumber=521B06C29110284AAAFE0875AA6186B0006D2767 Certificate serial: 0604 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft Manifest number: 05FC Signing time: Fri 22 Nov 2024 22:20:09 +0000 Manifest this update: Fri 22 Nov 2024 22:20:08 +0000 Manifest next update: Fri 29 Nov 2024 22:20:08 +0000 Files and hashes: 1: UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl (hash: Ub4Tt0MHZPYbO5Lvs3IfdXMtdsebqKDWwsaCF+suryc=) 2: C3FEC56C855711EB871D267FC4F9AE02.roa (hash: y8hsODPDu9mxz9gFgQEr+IEal2qwbZYp1jlJlCiW6og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1540 (0x604) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911902E/serialNumber=521B06C29110284AAAFE0875AA6186B0006D2767 Validity Not Before: Nov 22 22:20:08 2024 GMT Not After : Nov 29 22:20:08 2024 GMT Subject: CN=67410399-736f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:88:97:c1:31:a6:72:68:93:d8:d3:be:46:9b: 74:b8:04:93:7a:f2:5e:88:0a:13:bb:22:19:a3:b8: e2:df:97:28:11:b6:cd:41:17:a8:6a:64:e7:2e:1d: 8b:a2:bb:b0:93:e9:19:dc:71:db:d0:84:96:9f:0c: 8f:ed:a6:59:87:86:e2:e1:c7:7a:fb:8f:b2:ed:b4: 60:b4:15:a4:d1:37:66:3f:ee:51:9a:e3:c4:fc:5c: b6:a3:fc:a2:ba:0c:e8:c1:40:a2:2b:7d:03:fa:63: e8:04:aa:8c:37:96:8b:e7:99:01:36:56:0e:f4:f7: f0:f6:e6:7f:0f:2f:52:1f:1e:39:75:20:96:7b:04: 13:0d:d5:80:1f:98:e7:41:f3:e2:44:2e:3d:51:7c: 4f:bc:5a:ad:84:c5:9f:92:7a:6c:3b:8f:aa:63:69: 52:1a:6d:cc:ca:b7:ee:b2:8a:b6:cc:5d:04:60:1d: 70:cd:dd:16:26:b0:32:ab:b7:6a:6c:41:66:5d:99: 3d:62:df:c1:65:a8:5d:f0:6d:f2:dc:c4:92:92:dc: fb:5a:e6:66:f5:00:77:fa:87:92:43:bb:6c:2a:b5: 76:5d:70:89:01:f1:40:ee:b8:ba:6a:0c:a5:f5:d2: 05:04:6e:da:33:2b:dc:91:9a:41:bf:c0:e6:84:e5: 1e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D1:FF:76:F5:FA:2C:C6:44:FE:54:D7:4D:CF:35:1D:70:D2:AF:44 X509v3 Authority Key Identifier: keyid:52:1B:06:C2:91:10:28:4A:AA:FE:08:75:AA:61:86:B0:00:6D:27:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:4e:18:99:04:27:9a:3b:80:4c:2c:d1:08:61:61:9e:7d:81: 18:22:77:eb:ef:43:da:3b:7a:22:7e:48:2d:4b:cb:f7:84:77: 2b:f1:fe:5f:aa:86:7b:f2:19:30:46:a8:5a:6f:38:34:e4:8f: af:ad:d5:e8:4b:f2:a9:e5:07:f1:f5:aa:4e:67:00:85:cc:9e: 1a:c4:69:02:13:4e:ed:ab:85:8f:e6:24:d9:d5:9a:82:c6:e3: 6d:18:ad:5c:d9:8d:29:28:80:06:95:e6:f1:99:07:e9:23:fb: b0:51:0e:8e:b4:3b:ed:f5:46:03:2f:a1:92:88:13:08:38:0c: df:53:4e:74:3a:ab:a9:68:f1:ea:e2:6b:f1:66:ba:a1:b3:b5: 1c:38:8e:22:4f:0f:96:d6:3b:a6:ee:a2:d9:af:4b:18:3b:76: df:cb:b3:d7:57:65:3b:67:5c:d1:ee:55:a9:24:66:1c:65:86: 87:47:72:ff:e6:3c:63:53:69:36:a3:7b:3f:c2:fa:46:29:ae: 3d:40:b6:b2:66:4b:c0:79:cf:db:9b:23:ce:cc:ad:ae:38:1d: 0d:86:08:d8:05:44:4e:60:c4:89:45:c0:58:2f:16:fe:74:e4: ad:52:6f:1a:98:07:6a:44:a6:66:be:f8:2a:27:76:6b:23:b0: 8b:fa:3b:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwMkUxMTAvBgNVBAUTKDUyMUIwNkMyOTExMDI4NEFBQUZFMDg3NUFBNjE4NkIw MDA2RDI3NjcwHhcNMjQxMTIyMjIyMDA4WhcNMjQxMTI5MjIyMDA4WjAYMRYwFAYD VQQDEw02NzQxMDM5OS03MzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA54iXwTGmcmiT2NO+Rpt0uASTevJeiAoTuyIZo7ji35coEbbNQReoamTnLh2L oruwk+kZ3HHb0ISWnwyP7aZZh4bi4cd6+4+y7bRgtBWk0TdmP+5RmuPE/Fy2o/yi ugzowUCiK30D+mPoBKqMN5aL55kBNlYO9Pfw9uZ/Dy9SHx45dSCWewQTDdWAH5jn QfPiRC49UXxPvFqthMWfknpsO4+qY2lSGm3Myrfusoq2zF0EYB1wzd0WJrAyq7dq bEFmXZk9Yt/BZahd8G3y3MSSktz7WuZm9QB3+oeSQ7tsKrV2XXCJAfFA7ri6agyl 9dIFBG7aMyvckZpBv8DmhOUeqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrR/3b1 +izGRP5U103PNR1w0q9EMB8GA1UdIwQYMBaAFFIbBsKREChKqv4IdaphhrAAbSdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTAyRS81N0FGREIyODg1 NTUxMUVCOTRDMjIxNUZDNEY5QUUwMi9VaHNHd3BFUUtFcXFfZ2gxcW1HR3NBQnRK MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Voc0d3cEVRS0VxcV9naDFxbUdHc0FCdEoyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTAyRS81N0FGREIyODg1NTUxMUVCOTRDMjIxNUZDNEY5QUUwMi9VaHNHd3BFUUtF cXFfZ2gxcW1HR3NBQnRKMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzThiZBCeaO4BMLNEIYWGefYEYInfr70PaO3oifkgtS8v3hHcr8f5f qoZ78hkwRqhabzg05I+vrdXoS/Kp5Qfx9apOZwCFzJ4axGkCE07tq4WP5iTZ1ZqC xuNtGK1c2Y0pKIAGlebxmQfpI/uwUQ6OtDvt9UYDL6GSiBMIOAzfU050OqupaPHq 4mvxZrqhs7UcOI4iTw+W1jum7qLZr0sYO3bfy7PXV2U7Z1zR7lWpJGYcZYaHR3L/ 5jxjU2k2o3s/wvpGKa49QLayZkvAec/bmyPOzK2uOB0NhgjYBUROYMSJRcBYLxb+ dOStUm8amAdqRKZmvvgqJ3ZrI7CL+ju1 -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:22 2024 by rpki-client on console-fra.rpki-client.org