$ rpki-client -vvf rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft File: uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft (raw, json) Hash identifier: JHbDuVTWp+jPEE1cpK3YtPA5np1aBKtlJJ5Gj2AeVAE= Subject key identifier: 36:05:1B:6C:8F:69:F0:DC:29:4D:71:5B:A8:63:51:3F:F3:6E:67:81 Authority key identifier: B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25 Certificate issuer: /CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25 Certificate serial: 0604 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft Manifest number: 05FC Signing time: Fri 22 Nov 2024 22:19:16 +0000 Manifest this update: Fri 22 Nov 2024 22:19:15 +0000 Manifest next update: Fri 29 Nov 2024 22:19:15 +0000 Files and hashes: 1: uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl (hash: i+Gqc+z613NL6D4vkulw5b9GUDoTfVAOdRQvl2WvqBw=) 2: 8889F4E484A711EBB701E773C4F9AE02.roa (hash: J+8/ZwrlIkoJr01jQAl9vk2aVwqPeoCZlFWB5DqiI1A=) 3: 7464EB1E876411EE8971C221C4F9AE02.roa (hash: ojB4V4VtVHXuFHAezvaTkfH4Bh/CstC86ZtstiMw1LA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1540 (0x604) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25 Validity Not Before: Nov 22 22:19:15 2024 GMT Not After : Nov 29 22:19:15 2024 GMT Subject: CN=67410363-8a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:87:ee:19:4c:8c:6a:b3:6a:59:5f:6a:80:1b: 4c:b8:f4:10:4c:ae:a2:f6:2a:d1:f9:b3:da:d3:80: 5e:0c:91:e3:89:cb:1d:1c:f6:0e:ab:07:69:17:cd: 5e:1e:28:22:b2:bd:23:0f:0a:5d:f5:60:2b:5f:2f: 08:ff:97:76:10:e1:e1:17:48:12:e8:01:2d:70:47: c2:4d:37:71:a0:35:71:ce:a1:66:47:ee:1d:4a:6f: c0:1b:c8:0c:f1:1b:ca:6b:61:78:78:78:70:0c:13: c3:0c:28:5d:19:31:8f:b9:5d:9a:02:c0:70:b4:37: 41:04:a6:fb:ae:52:01:5a:1a:96:ad:23:35:5f:6f: 3d:af:b2:9a:aa:9c:3e:dd:e9:e3:5f:7c:57:bb:a3: 5b:ed:57:1c:f7:aa:20:03:ac:f7:4d:7f:89:6e:23: 6b:bb:6b:bc:88:82:01:7e:22:cd:92:99:36:38:f8: 00:f9:c0:5f:53:eb:be:8d:bf:9f:81:7f:34:fe:47: 55:ab:fd:64:77:e4:f0:df:bb:44:e5:c8:dd:3e:7e: cc:22:81:2e:05:37:ed:76:04:1c:dd:88:8a:ad:7a: 47:76:59:5b:da:1c:97:59:ab:87:24:b1:a1:69:ea: 47:d4:e4:f8:22:19:f2:28:6c:36:9a:2a:eb:2b:e3: d4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:05:1B:6C:8F:69:F0:DC:29:4D:71:5B:A8:63:51:3F:F3:6E:67:81 X509v3 Authority Key Identifier: keyid:B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:2a:07:eb:14:06:18:1f:08:5e:b8:6a:19:3b:14:b5:41:12: 8c:e7:d9:5a:85:60:e4:24:37:97:a3:89:e7:38:30:9f:6d:63: 2c:a9:f0:4e:8c:66:48:1d:17:fd:1e:40:22:55:e6:a5:71:7e: b8:1c:1b:ac:8c:e8:27:10:f0:13:ce:bb:58:90:c5:62:bc:bf: 22:80:10:89:8b:7d:f4:26:62:b8:af:b9:01:06:84:04:e2:62: a9:4b:48:e9:cc:e3:98:f4:eb:2f:e1:7f:bb:94:88:b5:dc:75: 5f:98:78:3d:70:ea:af:79:8e:1b:34:ce:d3:95:4b:fd:be:8a: c4:5c:30:2c:24:8e:2f:97:3a:00:28:c3:30:11:1c:92:de:e0: a7:0e:96:af:b8:01:cd:43:53:5a:fa:0c:90:b1:1c:a9:61:2a: 0f:00:24:6d:44:6a:32:12:c9:46:ed:04:57:59:db:8f:dd:1d: 35:72:bf:f1:1a:80:35:13:7a:e7:31:f5:fe:95:b9:6a:b1:b6: 25:ca:94:3e:4f:17:0d:d6:ad:fb:93:e2:be:60:bb:69:b0:aa: 4f:09:a5:be:69:2c:a5:60:8f:70:61:f9:07:9f:c5:8b:fc:db: ac:2c:ba:dc:d4:06:c9:5d:9b:51:0a:b6:38:92:b8:ef:5b:40: 66:e8:b0:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2OEUxMTAvBgNVBAUTKEI4RjhDMzYyNkREMDYxNjJFNjdFMjVGNTlBOUE4MUZB RTQ3MjBBMjUwHhcNMjQxMTIyMjIxOTE1WhcNMjQxMTI5MjIxOTE1WjAYMRYwFAYD VQQDEw02NzQxMDM2My04YTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+IfuGUyMarNqWV9qgBtMuPQQTK6i9irR+bPa04BeDJHjicsdHPYOqwdpF81e Higisr0jDwpd9WArXy8I/5d2EOHhF0gS6AEtcEfCTTdxoDVxzqFmR+4dSm/AG8gM 8RvKa2F4eHhwDBPDDChdGTGPuV2aAsBwtDdBBKb7rlIBWhqWrSM1X289r7Kaqpw+ 3enjX3xXu6Nb7Vcc96ogA6z3TX+JbiNru2u8iIIBfiLNkpk2OPgA+cBfU+u+jb+f gX80/kdVq/1kd+Tw37tE5cjdPn7MIoEuBTftdgQc3YiKrXpHdllb2hyXWauHJLGh aepH1OT4IhnyKGw2mirrK+PUoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYFG2yP afDcKU1xW6hjUT/zbmeBMB8GA1UdIwQYMBaAFLj4w2Jt0GFi5n4l9Zqagfrkcgol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDY4RS9ENkVGNjcxQTg0 QTUxMUVCQUU5RTQ0NzJDNEY5QUUwMi91UGpEWW0zUVlXTG1maVgxbXBxQi11UnlD aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQakRZbTNRWVdMbWZpWDFtcHFCLXVSeUNpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDY4RS9ENkVGNjcxQTg0QTUxMUVCQUU5RTQ0NzJDNEY5QUUwMi91UGpEWW0zUVlX TG1maVgxbXBxQi11UnlDaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTKgfrFAYYHwheuGoZOxS1QRKM59lahWDkJDeXo4nnODCfbWMsqfBO jGZIHRf9HkAiVealcX64HBusjOgnEPATzrtYkMVivL8igBCJi330JmK4r7kBBoQE 4mKpS0jpzOOY9Osv4X+7lIi13HVfmHg9cOqveY4bNM7TlUv9vorEXDAsJI4vlzoA KMMwERyS3uCnDpavuAHNQ1Na+gyQsRypYSoPACRtRGoyEslG7QRXWduP3R01cr/x GoA1E3rnMfX+lblqsbYlypQ+TxcN1q37k+K+YLtpsKpPCaW+aSylYI9wYfkHn8WL /NusLLrc1AbJXZtRCrY4krjvW0Bm6LDe -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:28 2024 by rpki-client on console-fra.rpki-client.org