$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json) Hash identifier: CWvQ3QvM7cmy5ycoCsbyZZtoDg8wC2uV/7mis/BCfAA= Subject key identifier: 34:F9:59:76:41:E9:B5:E8:0F:AF:B5:3B:92:32:5D:C4:D9:79:63:CD Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft Manifest number: 085A Signing time: Fri 22 Nov 2024 20:25:27 +0000 Manifest this update: Fri 22 Nov 2024 20:25:26 +0000 Manifest next update: Fri 29 Nov 2024 20:25:26 +0000 Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: nYJcAOFq5gM7ht0SxzamWnNVdkhEPJxyu9CrrgzVfhg=) 2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: JxZWn5gUtZs3FqzsBx/u0h4tz2O2P41zy+u5PnGJhgM=) 3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: 85e5q4B8Tonp2u+9ZiIqMVSULJtcSozfDDexZXqSpSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Validity Not Before: Nov 22 20:25:26 2024 GMT Not After : Nov 29 20:25:26 2024 GMT Subject: CN=6740e8b6-cc62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bb:fe:71:80:94:19:5d:8e:b0:67:47:3e:40: 59:4d:b4:6b:4c:9e:a3:c1:69:eb:fc:e0:d1:e7:3a: 48:e4:d5:a6:af:5a:36:62:d4:e6:7e:25:0f:6a:03: 35:12:04:39:37:dc:56:4c:cb:89:7e:03:06:cc:7f: 5e:41:8f:8e:cf:46:23:1c:f7:ad:75:0e:81:37:02: c3:8f:52:5e:ee:33:4b:7f:64:34:10:f5:60:c4:6f: 5b:be:09:4a:bd:4a:f0:c0:da:3e:15:f0:a8:4e:95: 71:35:aa:c4:4b:e7:2c:a5:a7:eb:df:f1:de:0e:74: 61:af:56:31:43:76:c9:bb:3a:7f:67:a9:5c:f0:c4: 7d:ad:f5:16:5e:12:ed:a9:ef:bc:db:71:e0:8b:47: 28:9f:96:b7:9b:e6:fe:59:cb:5c:28:01:05:50:49: 90:c3:40:bc:b1:e4:ef:b1:52:a0:01:1a:91:e7:8b: 37:ee:91:cf:a9:f9:76:e9:7f:34:ed:d1:f4:a3:dd: 7e:a9:0d:fc:61:66:e1:9f:ef:4a:33:70:7e:9f:65: f4:45:83:88:5e:6b:c0:ea:c0:bf:9f:ae:8d:3b:62: c5:75:46:ec:dc:00:05:7a:65:1f:33:e0:97:4b:b4: 91:86:d5:2b:68:a2:67:d8:69:f5:91:e6:46:b2:85: 15:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F9:59:76:41:E9:B5:E8:0F:AF:B5:3B:92:32:5D:C4:D9:79:63:CD X509v3 Authority Key Identifier: keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:cc:2a:c5:3d:0e:64:4f:4d:f4:96:5b:83:a2:54:36:b1:a1: f5:92:f0:d4:fc:1d:10:f6:ee:78:14:2d:07:9e:b5:24:6a:6c: 2d:93:3a:05:21:f4:6a:f5:a4:97:b1:30:fa:fa:fe:8f:6d:aa: ec:3d:3b:db:ba:64:0e:2c:e5:b9:55:1c:20:3e:68:52:22:f4: ac:38:fa:14:5c:b6:ca:66:92:8f:0c:99:55:c7:9f:68:15:6f: 22:2f:f1:25:26:ba:2c:3d:3e:78:36:6c:ff:e5:d7:ce:46:52: ef:31:37:23:d8:1b:70:c9:79:22:b4:a9:f6:87:29:ed:3b:68: 20:9c:8f:0b:68:af:58:40:48:cd:7c:25:2a:0c:b8:ef:50:02: 65:3a:4c:81:d7:f4:43:4c:6b:61:7b:7e:22:40:a5:35:af:c0: c1:20:bf:8b:13:c3:d3:28:bb:e5:63:6c:98:a7:91:b3:ca:d7: 6c:96:c8:0a:89:74:25:75:c9:9f:e7:40:fa:4c:49:51:47:9c: a4:a0:9b:a8:f0:36:f2:12:03:5a:a9:8c:df:ec:47:c9:24:32: 6d:e4:60:ce:d1:56:67:35:58:f3:72:1f:a4:f2:7e:bd:1b:74: ce:70:79:a7:f6:9a:0d:16:44:24:08:43:4f:5f:3d:db:2f:de: f5:c7:a4:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5 RTBERTg1MTcwHhcNMjQxMTIyMjAyNTI2WhcNMjQxMTI5MjAyNTI2WjAYMRYwFAYD VQQDEw02NzQwZThiNi1jYzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybv+cYCUGV2OsGdHPkBZTbRrTJ6jwWnr/ODR5zpI5NWmr1o2YtTmfiUPagM1 EgQ5N9xWTMuJfgMGzH9eQY+Oz0YjHPetdQ6BNwLDj1Je7jNLf2Q0EPVgxG9bvglK vUrwwNo+FfCoTpVxNarES+cspafr3/HeDnRhr1YxQ3bJuzp/Z6lc8MR9rfUWXhLt qe+823Hgi0con5a3m+b+WctcKAEFUEmQw0C8seTvsVKgARqR54s37pHPqfl26X80 7dH0o91+qQ38YWbhn+9KM3B+n2X0RYOIXmvA6sC/n66NO2LFdUbs3AAFemUfM+CX S7SRhtUraKJn2Gn1keZGsoUV0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDT5WXZB 6bXoD6+1O5IyXcTZeWPNMB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1 NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTIzQy9FNTYyMUE2OEI1NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9U Y1p0SS13QTNQTlNlRGVoUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALzCrFPQ5kT030lluDolQ2saH1kvDU/B0Q9u54FC0HnrUkamwtkzoF IfRq9aSXsTD6+v6PbarsPTvbumQOLOW5VRwgPmhSIvSsOPoUXLbKZpKPDJlVx59o FW8iL/ElJrosPT54Nmz/5dfORlLvMTcj2BtwyXkitKn2hyntO2ggnI8LaK9YQEjN fCUqDLjvUAJlOkyB1/RDTGthe34iQKU1r8DBIL+LE8PTKLvlY2yYp5GzytdslsgK iXQldcmf50D6TElRR5ykoJuo8DbyEgNaqYzf7EfJJDJt5GDO0VZnNVjzch+k8n69 G3TOcHmn9poNFkQkCENPXz3bL971x6TK -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org