$ rpki-client -vvf rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft File: uftCI-sDug7mzge0ZgIXr69xbV0.mft (raw, json) Hash identifier: mldpis124w7bm8DRTnCJevvVnsu9j38BoY8YeylwgAs= Subject key identifier: F0:5E:C1:64:88:79:83:8E:86:66:6E:CA:96:24:AE:4E:AC:E0:6A:65 Authority key identifier: B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D Certificate issuer: /CN=A916D5A2/serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D Certificate serial: 0609 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft Manifest number: 0604 Signing time: Fri 22 Nov 2024 22:16:37 +0000 Manifest this update: Fri 22 Nov 2024 22:16:36 +0000 Manifest next update: Fri 29 Nov 2024 22:16:36 +0000 Files and hashes: 1: uftCI-sDug7mzge0ZgIXr69xbV0.crl (hash: yDJVSKlwhfEkmj4h/A8j+/I0wG/b+njUilREZ9xiD8U=) 2: 179D126A80BB11EB8827C40AC4F9AE02.roa (hash: Z2FHnDXg4Ip1mKaBZDT4wmtIm4sbvDrPsJ6u/yKuqxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1545 (0x609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D5A2/serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D Validity Not Before: Nov 22 22:16:36 2024 GMT Not After : Nov 29 22:16:36 2024 GMT Subject: CN=674102c4-3c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bf:fb:3f:ec:63:0a:54:51:ac:6f:2e:bb:6d: 79:fb:9f:fb:61:53:20:db:e6:bf:ce:30:88:75:05: 3e:20:3b:e1:99:c8:46:83:02:ec:47:fe:1e:23:14: 8f:4d:44:54:85:00:78:4d:29:6c:3a:ff:1d:9f:1b: 33:16:e9:03:cb:18:83:14:40:90:3f:d7:31:4d:d1: 40:c8:f1:96:43:e7:01:11:23:5d:5b:ed:5c:f5:57: 33:8a:73:30:ec:a6:6c:70:06:cb:d5:5e:08:44:76: e5:4a:9b:7f:46:18:3a:59:b1:4e:eb:21:05:0b:3f: 13:97:2f:44:0f:3d:88:6a:0f:d7:43:d5:38:37:d9: 48:6b:cb:22:fe:c8:5f:96:17:94:60:80:6c:31:4c: 32:37:fb:ff:39:20:d5:e7:00:2f:08:3d:13:8c:26: 4f:9d:0f:ad:23:4d:1d:5d:d4:6f:9d:6b:23:c6:9b: 6e:9e:48:35:31:35:fa:a4:f5:e5:4c:cf:62:0d:7d: 3d:32:e5:3f:46:a8:ec:18:e5:1a:bd:9b:18:68:d5: dc:a7:ce:b0:6d:64:d0:c2:86:72:78:2f:b2:98:c1: c7:dd:7a:6c:b2:6d:6a:e7:09:1b:c8:df:d9:a7:c2: ff:0b:e4:7b:69:de:c0:a4:80:1a:5b:f0:cc:49:83: f5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5E:C1:64:88:79:83:8E:86:66:6E:CA:96:24:AE:4E:AC:E0:6A:65 X509v3 Authority Key Identifier: keyid:B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:81:4b:e4:85:83:46:4d:e9:74:2f:a5:9a:45:47:7e:f0:36: ea:a8:81:87:fa:6a:fd:ec:fe:1d:dd:20:7d:e1:3c:4b:16:94: 72:4a:69:bb:f0:d5:16:71:cd:e9:0e:1c:ed:b2:1c:e7:ee:d9: 91:57:da:28:e8:5e:68:cf:5b:6a:23:51:c0:d6:bf:a0:9d:b1: a7:2f:bf:03:16:79:67:4e:bf:86:42:3a:e6:29:a3:91:78:56: 7c:46:60:58:74:e7:e4:28:5f:f1:c7:17:e0:80:d8:65:0c:74: d6:3b:70:9e:31:63:96:34:e8:22:c5:f4:3b:7b:d5:0a:97:5d: 53:f5:b3:d1:ca:f4:b9:28:11:4d:44:4f:ba:16:45:20:32:47: 68:11:28:b9:d9:b9:ec:eb:98:76:5f:e4:e5:b3:b0:d5:74:15: d6:30:62:98:d6:16:4a:b1:7c:7e:52:33:1d:a7:ba:91:3f:e1: e8:be:b0:34:92:4f:d1:51:56:20:9c:15:fc:79:78:df:1e:82: 13:ff:70:23:bc:76:3a:b0:a7:4f:2c:16:76:d1:18:ef:44:1b: a4:93:5b:29:26:32:39:09:a9:2e:a9:82:79:88:20:b2:46:df: f7:7b:86:a8:72:eb:93:f8:4e:3d:b1:54:2a:80:8b:b5:26:9e: c8:bf:c9:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ1QTIxMTAvBgNVBAUTKEI5RkI0MjIzRUIwM0JBMEVFNkNFMDdCNDY2MDIxN0FG QUY3MTZENUQwHhcNMjQxMTIyMjIxNjM2WhcNMjQxMTI5MjIxNjM2WjAYMRYwFAYD VQQDEw02NzQxMDJjNC0zYzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5L/7P+xjClRRrG8uu215+5/7YVMg2+a/zjCIdQU+IDvhmchGgwLsR/4eIxSP TURUhQB4TSlsOv8dnxszFukDyxiDFECQP9cxTdFAyPGWQ+cBESNdW+1c9VczinMw 7KZscAbL1V4IRHblSpt/Rhg6WbFO6yEFCz8Tly9EDz2Iag/XQ9U4N9lIa8si/shf lheUYIBsMUwyN/v/OSDV5wAvCD0TjCZPnQ+tI00dXdRvnWsjxptunkg1MTX6pPXl TM9iDX09MuU/RqjsGOUavZsYaNXcp86wbWTQwoZyeC+ymMHH3Xpssm1q5wkbyN/Z p8L/C+R7ad7ApIAaW/DMSYP1xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBewWSI eYOOhmZuypYkrk6s4GplMB8GA1UdIwQYMBaAFLn7QiPrA7oO5s4HtGYCF6+vcW1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDVBMi9DMjFBNTM4Njgw QjgxMUVCQkVCMTlFODNDNEY5QUUwMi91ZnRDSS1zRHVnN216Z2UwWmdJWHI2OXhi VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmdENJLXNEdWc3bXpnZTBaZ0lYcjY5eGJWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDVBMi9DMjFBNTM4NjgwQjgxMUVCQkVCMTlFODNDNEY5QUUwMi91ZnRDSS1zRHVn N216Z2UwWmdJWHI2OXhiVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMgUvkhYNGTel0L6WaRUd+8DbqqIGH+mr97P4d3SB94TxLFpRySmm7 8NUWcc3pDhztshzn7tmRV9oo6F5oz1tqI1HA1r+gnbGnL78DFnlnTr+GQjrmKaOR eFZ8RmBYdOfkKF/xxxfggNhlDHTWO3CeMWOWNOgixfQ7e9UKl11T9bPRyvS5KBFN RE+6FkUgMkdoESi52bns65h2X+Tls7DVdBXWMGKY1hZKsXx+UjMdp7qRP+HovrA0 kk/RUVYgnBX8eXjfHoIT/3AjvHY6sKdPLBZ20RjvRBukk1spJjI5CakuqYJ5iCCy Rt/3e4aocuuT+E49sVQqgIu1Jp7Iv8mL -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:28 2024 by rpki-client on console-fra.rpki-client.org