$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft File: UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json) Hash identifier: OiQNLh9P4mKQ+6/zpc+F1GngDN78DQWic8ldnydGM0k= Subject key identifier: 99:7D:24:DA:F4:9F:C0:D0:D4:40:C5:BD:7E:15:9C:C6:49:B8:73:1B Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft Manifest number: F9 Signing time: Sat 23 Nov 2024 03:23:25 +0000 Manifest this update: Sat 23 Nov 2024 03:23:25 +0000 Manifest next update: Sat 30 Nov 2024 03:23:25 +0000 Files and hashes: 1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: CCPNGmuxuH483vWNPotx8amOI+8ODj/3iVnopYwwxpM=) 2: 160A52A854EF11EFB9156612C4F9AE02.roa (hash: foSc151i9Iw1FdFYIvaUCOjJLGeEf5CPJvtL9xEjyMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Validity Not Before: Nov 23 03:23:25 2024 GMT Not After : Nov 30 03:23:25 2024 GMT Subject: CN=67414aad-44fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e4:80:2b:70:34:d3:fb:1b:da:3b:ce:9f:01: c7:93:d4:be:3f:b2:8b:c9:76:aa:9a:6c:38:dc:f5: c9:af:44:d6:c2:82:07:50:62:88:2b:47:5e:19:3d: 77:37:57:3d:3a:ba:54:56:b3:e5:5f:e3:dc:0d:e7: 14:c5:a5:33:10:50:44:b8:1b:21:4b:1d:10:ae:04: ed:4a:68:b3:51:1e:34:c7:1d:1c:67:72:4f:0d:2d: 21:5d:b2:d3:06:9f:34:40:97:57:37:8f:4a:6a:53: f2:3f:87:5c:7f:1b:77:6d:66:1d:e2:ca:74:ce:e7: 65:76:7e:3f:78:f9:b6:b6:c2:11:b3:1c:74:65:fe: dd:e9:35:aa:30:25:4e:2a:53:9e:11:df:fe:d6:8b: de:b0:52:f3:4a:2d:ed:06:9d:69:31:21:cc:43:14: 57:d1:e9:78:79:69:70:57:47:3e:2a:50:3e:f2:05: 29:6f:8d:53:88:cb:22:36:fa:89:cc:02:e7:71:e8: dc:75:ab:52:35:9e:9e:92:7e:6e:5e:17:f3:82:0d: ce:0b:f0:b8:f2:f4:46:c1:07:51:8d:ef:59:ec:3c: e4:7a:96:be:7a:05:ca:88:4b:1c:ad:46:c4:34:74: cf:88:01:15:0f:d7:5b:54:8d:9a:0a:72:ea:86:d9: d9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7D:24:DA:F4:9F:C0:D0:D4:40:C5:BD:7E:15:9C:C6:49:B8:73:1B X509v3 Authority Key Identifier: keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:77:dc:5e:be:68:cb:2a:71:10:ad:84:f5:0c:ac:e7:1c:9a: 7f:71:80:21:55:f3:18:a6:15:18:3d:3c:b8:32:ee:ab:be:27: 41:0b:a8:3c:77:4f:01:ab:48:8b:e5:64:e2:d6:fc:37:21:02: 99:44:7b:ae:e8:a7:5e:9d:8d:a9:73:01:bc:17:da:da:f3:26: 2a:d7:15:45:da:19:1e:f6:1f:f6:e8:39:6d:35:04:16:40:e5: 1e:87:ad:c2:69:a7:07:72:56:a8:1c:57:a4:b9:fd:fd:aa:91: 8c:db:24:3f:68:c1:1e:02:1a:03:81:56:f4:14:19:16:84:02: 18:7d:06:53:c3:bc:c9:e4:6c:62:cb:b8:7a:b4:87:06:25:95: 99:ab:33:14:78:74:66:ee:a4:c7:2d:2b:d5:bf:2e:f5:1d:48: 53:9a:65:28:cc:29:7a:81:5c:b4:4c:40:7b:27:f0:59:07:45: 96:75:13:0c:4a:d1:4d:f6:7c:03:9a:87:7a:2e:d6:8b:81:bd: 4c:ca:97:74:fd:08:ed:1f:d8:ca:53:32:4c:f0:9b:a1:6e:a9: 84:2f:1d:c4:7a:1c:4a:e4:70:a8:cc:62:0d:44:e1:2f:ae:f7: 11:64:59:ac:33:2c:cd:18:3a:46:1e:b4:5f:07:cc:12:96:b5: ea:97:ca:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwRkExMTAvBgNVBAUTKDUwQTU4MEYxQkQxMjVGMEFFREM1OTFGRkM4RENEQTlD NjZFMTJDOUYwHhcNMjQxMTIzMDMyMzI1WhcNMjQxMTMwMDMyMzI1WjAYMRYwFAYD VQQDEw02NzQxNGFhZC00NGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OSAK3A00/sb2jvOnwHHk9S+P7KLyXaqmmw43PXJr0TWwoIHUGKIK0deGT13 N1c9OrpUVrPlX+PcDecUxaUzEFBEuBshSx0QrgTtSmizUR40xx0cZ3JPDS0hXbLT Bp80QJdXN49KalPyP4dcfxt3bWYd4sp0zudldn4/ePm2tsIRsxx0Zf7d6TWqMCVO KlOeEd/+1ovesFLzSi3tBp1pMSHMQxRX0el4eWlwV0c+KlA+8gUpb41TiMsiNvqJ zALncejcdatSNZ6ekn5uXhfzgg3OC/C48vRGwQdRje9Z7Dzkepa+egXKiEscrUbE NHTPiAEVD9dbVI2aCnLqhtnZLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJl9JNr0 n8DQ1EDFvX4VnMZJuHMbMB8GA1UdIwQYMBaAFFClgPG9El8K7cWR/8jc2pxm4Syf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjBGQS8yMDZERkM1MDM0 RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3cnR4WkhfeU56YW5HYmhM SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLV0E4YjBTWHdydHhaSF95TnphbkdiaExKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjBGQS8yMDZERkM1MDM0RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3 cnR4WkhfeU56YW5HYmhMSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxd9xevmjLKnEQrYT1DKznHJp/cYAhVfMYphUYPTy4Mu6rvidBC6g8 d08Bq0iL5WTi1vw3IQKZRHuu6KdenY2pcwG8F9ra8yYq1xVF2hke9h/26DltNQQW QOUeh63CaacHclaoHFekuf39qpGM2yQ/aMEeAhoDgVb0FBkWhAIYfQZTw7zJ5Gxi y7h6tIcGJZWZqzMUeHRm7qTHLSvVvy71HUhTmmUozCl6gVy0TEB7J/BZB0WWdRMM StFN9nwDmod6LtaLgb1Mypd0/QjtH9jKUzJM8JuhbqmELx3EehxK5HCozGINROEv rvcRZFmsMyzNGDpGHrRfB8wSlrXql8oG -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:10 2024 by rpki-client on console-ams.rpki-client.org