$ rpki-client -vvf rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft File: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft (raw, json) Hash identifier: 3XZeP34s1lpDOwoJByNlTr6gZWIt8th1/F/jwfGqx4o= Subject key identifier: 85:DE:97:BB:37:F5:B5:64:F6:FE:18:4F:68:78:F6:47:25:72:B0:47 Authority key identifier: BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4 Certificate issuer: /CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft Manifest number: 014D Signing time: Sat 23 Nov 2024 02:31:59 +0000 Manifest this update: Sat 23 Nov 2024 02:31:59 +0000 Manifest next update: Sat 30 Nov 2024 02:31:59 +0000 Files and hashes: 1: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl (hash: agk3Vf51nluqPwJiPaujgmlCQkntQGR8PtFiacGvFZ0=) 2: 9E8DB380B2C611EDBC366A1DC4F9AE02.roa (hash: c8sSxOBhaka5oI+rejJqQKmQr9sb2fk2xAAz0q5NEqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4 Validity Not Before: Nov 23 02:31:59 2024 GMT Not After : Nov 30 02:31:59 2024 GMT Subject: CN=67413e9f-64c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f4:82:1f:f6:0a:79:6a:f1:2f:db:a7:db:4b: 08:f7:e3:d8:5c:69:32:14:de:4f:cc:be:01:56:5e: 0a:63:4b:21:b8:54:ab:94:00:f4:d7:6c:aa:d6:c9: ae:70:c8:db:a7:92:54:cb:1a:80:15:ce:07:eb:cd: d0:9d:7b:85:e8:e0:82:03:a2:ff:5d:b4:ac:2b:10: 0a:fd:2d:33:8e:ba:45:7f:b8:ab:8d:da:89:0b:97: 00:28:66:1f:e7:a4:eb:cd:ae:4a:b4:50:54:52:4d: df:eb:4f:ae:f7:70:07:e0:58:05:7b:e3:20:81:20: c9:08:61:76:43:35:c9:ec:6a:fe:fd:eb:31:cd:50: 73:3e:7c:7a:b9:58:e8:1f:3d:4d:30:89:65:52:d9: a4:82:07:97:e8:1a:31:8f:ab:53:44:ca:be:62:06: 10:a2:44:3e:c4:20:a3:72:3e:5d:71:04:82:da:15: 60:30:b5:b8:ce:db:f4:32:ac:69:1b:57:e4:fa:aa: 6e:43:5f:3e:d0:4c:f2:51:a9:58:34:6e:99:7f:40: cf:31:0d:0a:b3:8e:48:02:f4:78:08:67:18:0e:b8: ac:64:2f:8f:68:6a:51:50:54:8f:68:cb:6d:54:c7: a3:cd:1c:94:32:bd:d8:79:24:42:f8:13:cf:af:8f: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DE:97:BB:37:F5:B5:64:F6:FE:18:4F:68:78:F6:47:25:72:B0:47 X509v3 Authority Key Identifier: keyid:BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:e3:59:be:39:8f:b6:3d:2f:21:4d:93:68:f4:18:9a:1e:3c: a9:a8:81:d4:2c:9c:83:00:48:b7:f7:02:a2:fe:95:9d:72:d4: ea:ba:ac:80:c5:5e:dd:28:78:d1:b2:ae:7d:d2:d8:f3:40:e0: c5:dd:80:35:ff:89:0d:78:2d:d5:e1:ce:9e:5d:36:66:b3:2f: cb:44:f6:99:4a:f4:cf:bd:0f:9d:a3:77:8b:39:6a:83:47:be: 67:f9:8f:d0:45:ac:9f:08:ed:f8:bd:4d:6e:4c:8a:67:4d:fe: bc:98:b5:87:fd:6d:6e:c2:31:4c:b4:6d:73:3a:20:00:92:40: af:c1:a0:0e:b2:55:cd:63:9c:89:11:4e:3a:37:47:b4:de:79: 4c:65:98:e8:56:21:ae:f2:a2:16:e7:01:b7:f7:28:1e:18:4f: 60:a7:01:11:39:74:52:f1:8f:0d:ea:3a:2c:13:b4:cb:5d:c4: 94:cd:cf:29:2d:3c:c7:a4:e6:16:92:22:02:57:09:04:2d:b1: 53:45:b1:0f:97:ca:82:8b:19:6d:3c:26:e4:d3:63:86:08:ca: ba:82:8d:a5:13:6e:74:be:72:91:bb:dc:3c:2f:a2:aa:70:72: fe:d9:15:62:dc:89:db:e6:20:1d:5e:9a:9e:cc:09:e0:4f:8a: 1b:f0:bc:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxMjIxMTAvBgNVBAUTKEJCNEZBRTg1NTQwQTVBRDlGOTNDQjQ4MkM0NUM5NTc2 RjUyQTNCRjQwHhcNMjQxMTIzMDIzMTU5WhcNMjQxMTMwMDIzMTU5WjAYMRYwFAYD VQQDEw02NzQxM2U5Zi02NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/SCH/YKeWrxL9un20sI9+PYXGkyFN5PzL4BVl4KY0shuFSrlAD012yq1smu cMjbp5JUyxqAFc4H683QnXuF6OCCA6L/XbSsKxAK/S0zjrpFf7irjdqJC5cAKGYf 56Trza5KtFBUUk3f60+u93AH4FgFe+MggSDJCGF2QzXJ7Gr+/esxzVBzPnx6uVjo Hz1NMIllUtmkggeX6Boxj6tTRMq+YgYQokQ+xCCjcj5dcQSC2hVgMLW4ztv0Mqxp G1fk+qpuQ18+0EzyUalYNG6Zf0DPMQ0Ks45IAvR4CGcYDrisZC+PaGpRUFSPaMtt VMejzRyUMr3YeSRC+BPPr4/azQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXel7s3 9bVk9v4YT2h49kclcrBHMB8GA1UdIwQYMBaAFLtProVUClrZ+Ty0gsRclXb1Kjv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTEyMi8wRkQ0RUY0RUFF RUYxMUVEQTJFOUJDNjhDNEY5QUUwMi91MC11aFZRS1d0bjVQTFNDeEZ5VmR2VXFP X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UwLXVoVlFLV3RuNVBMU0N4RnlWZHZVcU9fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTEyMi8wRkQ0RUY0RUFFRUYxMUVEQTJFOUJDNjhDNEY5QUUwMi91MC11aFZRS1d0 bjVQTFNDeEZ5VmR2VXFPX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC841m+OY+2PS8hTZNo9BiaHjypqIHULJyDAEi39wKi/pWdctTquqyA xV7dKHjRsq590tjzQODF3YA1/4kNeC3V4c6eXTZmsy/LRPaZSvTPvQ+do3eLOWqD R75n+Y/QRayfCO34vU1uTIpnTf68mLWH/W1uwjFMtG1zOiAAkkCvwaAOslXNY5yJ EU46N0e03nlMZZjoViGu8qIW5wG39ygeGE9gpwEROXRS8Y8N6josE7TLXcSUzc8p LTzHpOYWkiICVwkELbFTRbEPl8qCixltPCbk02OGCMq6go2lE250vnKRu9w8L6Kq cHL+2RVi3Inb5iAdXpqezAngT4ob8Ly3 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org