$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft File: MpUupGGVY1bTd-vdS_oYcqjh5EM.mft (raw, json) Hash identifier: pOJ0xN8/iqsKGSLI+q2cG25qyKYc+O6EtUzilFkkaig= Subject key identifier: 64:92:E4:13:A8:90:60:46:5C:AC:21:A9:A7:E4:3D:1B:6C:67:4E:AC Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 Certificate issuer: /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Certificate serial: 0A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft Manifest number: 0A4C Signing time: Fri 22 Nov 2024 19:31:50 +0000 Manifest this update: Fri 22 Nov 2024 19:31:49 +0000 Manifest next update: Fri 29 Nov 2024 19:31:49 +0000 Files and hashes: 1: MpUupGGVY1bTd-vdS_oYcqjh5EM.crl (hash: Ezez1W5NImhIRsUq9GeL7oQtZonjTzdxcGxmHEZjRlU=) 2: 77EDB752588311EA98A7C452C4F9AE02.roa (hash: 1xdS0of8jq6b+9XXSYhXqSMAsRL9VgQ5wBfYf2X41Dk=) 3: EF4B2E301CE411EB95E5A216C4F9AE02.roa (hash: hl/3X6BX11WafllMiNd1LQR2jHaTy4LdnM1ilVWB8H4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Validity Not Before: Nov 22 19:31:49 2024 GMT Not After : Nov 29 19:31:49 2024 GMT Subject: CN=6740dc26-b372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bd:1c:00:39:93:63:b8:06:59:09:de:13:7e: c1:a4:4c:62:19:8a:28:bc:02:9e:6c:2b:81:df:83: 4f:37:9a:be:73:9a:34:f6:de:5c:7c:c6:b5:8e:84: 86:4a:06:2a:68:9a:47:cc:98:43:cb:0b:b5:94:07: 14:6c:6a:15:5b:96:05:1c:b5:bc:36:e4:75:0b:1e: d8:8d:04:5b:86:44:60:71:68:26:ee:6e:be:f0:1f: e8:83:39:1d:2c:6d:07:c6:6a:73:a0:c4:9f:b0:c0: 43:5b:23:33:62:4e:2d:c3:3c:4e:85:3e:db:2d:73: b8:88:be:d3:d7:92:a1:4e:1e:d1:a9:28:ef:be:a4: a3:5c:63:c8:4d:c9:5f:4f:cf:73:f0:a9:bd:b9:b5: 6d:f2:08:7b:34:45:1e:b3:b3:84:78:ed:41:6c:09: ef:a8:ea:58:30:04:d4:48:c9:75:a3:d7:6e:38:28: a5:42:29:13:12:41:66:1a:ee:88:2d:1d:56:41:ba: 8d:b6:22:fb:32:62:51:25:71:17:24:f8:3e:d5:cd: 8f:60:89:5c:d0:86:b8:0a:70:fe:8d:8e:d1:f5:89: b8:c3:83:10:ae:49:a7:5f:bb:37:8a:0c:d2:cc:a3: f4:22:8b:fc:4b:08:b6:3f:72:b9:7a:ff:fe:5c:8a: d6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:92:E4:13:A8:90:60:46:5C:AC:21:A9:A7:E4:3D:1B:6C:67:4E:AC X509v3 Authority Key Identifier: keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:44:27:d8:02:41:cd:78:cd:21:1d:9b:af:b0:75:92:99:32: 21:82:04:cb:5b:8e:9d:06:ce:13:e8:e5:6b:31:dd:3a:75:69: 38:c6:24:21:69:8b:4e:f5:e8:8c:09:78:ca:f0:c8:3f:18:e7: 91:b5:a9:6d:86:17:a7:fc:4a:35:76:7e:ec:8b:e4:4a:a7:3e: b3:45:fb:87:25:2e:3e:38:8c:ee:72:82:fa:8e:85:52:9b:32: 02:7b:f7:4f:fa:2a:3c:ca:74:0e:a8:9a:6b:b1:d1:e8:63:5a: cd:c3:fa:e3:36:22:4e:46:c2:31:b6:51:e8:38:ac:a6:02:53: f6:9b:36:a0:39:ab:ff:9b:67:e8:8e:c9:9a:6d:a9:5c:99:c9: 36:1a:a5:5f:ba:28:f5:19:2e:fb:06:c4:7c:4e:87:4b:9a:0b: 54:cd:40:ee:14:24:10:29:4a:12:af:59:43:b1:d5:72:2c:a4: 32:10:df:99:be:d9:ae:a7:80:1a:ba:42:a0:46:ba:4a:f9:c8: fd:f8:6b:1b:53:af:fb:aa:a8:b7:c4:98:f4:ae:2f:ff:2d:40: 5e:7f:e6:fa:0c:f3:15:97:30:f4:85:59:23:87:dc:ee:e9:78: 8f:8b:ad:14:2f:33:08:3a:29:42:4b:9b:a0:0a:1d:67:77:25: 2c:7a:8b:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENEMkQxMTAvBgNVBAUTKDMyOTUyRUE0NjE5NTYzNTZEMzc3RUJERDRCRkExODcy QThFMUU0NDMwHhcNMjQxMTIyMTkzMTQ5WhcNMjQxMTI5MTkzMTQ5WjAYMRYwFAYD VQQDEw02NzQwZGMyNi1iMzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA370cADmTY7gGWQneE37BpExiGYoovAKebCuB34NPN5q+c5o09t5cfMa1joSG SgYqaJpHzJhDywu1lAcUbGoVW5YFHLW8NuR1Cx7YjQRbhkRgcWgm7m6+8B/ogzkd LG0HxmpzoMSfsMBDWyMzYk4twzxOhT7bLXO4iL7T15KhTh7RqSjvvqSjXGPITclf T89z8Km9ubVt8gh7NEUes7OEeO1BbAnvqOpYMATUSMl1o9duOCilQikTEkFmGu6I LR1WQbqNtiL7MmJRJXEXJPg+1c2PYIlc0Ia4CnD+jY7R9Ym4w4MQrkmnX7s3igzS zKP0Iov8Swi2P3K5ev/+XIrWcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSS5BOo kGBGXKwhqafkPRtsZ06sMB8GA1UdIwQYMBaAFDKVLqRhlWNW03fr3Uv6GHKo4eRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0QyRC85NEZGMUZCQzU4 ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkxYlRkLXZkU19vWWNxamg1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wVXVwR0dWWTFiVGQtdmRTX29ZY3FqaDVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0QyRC85NEZGMUZCQzU4ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkx YlRkLXZkU19vWWNxamg1RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeRCfYAkHNeM0hHZuvsHWSmTIhggTLW46dBs4T6OVrMd06dWk4xiQh aYtO9eiMCXjK8Mg/GOeRtalthhen/Eo1dn7si+RKpz6zRfuHJS4+OIzucoL6joVS mzICe/dP+io8ynQOqJprsdHoY1rNw/rjNiJORsIxtlHoOKymAlP2mzagOav/m2fo jsmabalcmck2GqVfuij1GS77BsR8TodLmgtUzUDuFCQQKUoSr1lDsdVyLKQyEN+Z vtmup4AaukKgRrpK+cj9+GsbU6/7qqi3xJj0ri//LUBef+b6DPMVlzD0hVkjh9zu 6XiPi60ULzMIOilCS5ugCh1ndyUseosF -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:26 2024 by rpki-client on console-ams.rpki-client.org