$ rpki-client -vvf rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft File: uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft (raw, json) Hash identifier: wgPT4MowrB+yxb4rrVrxXNQFl+5+DPpKUViMCMBLpo0= Subject key identifier: 2D:23:4C:89:9D:67:D9:DB:20:DF:B2:0D:A1:49:34:DE:F7:96:25:20 Authority key identifier: B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 Certificate issuer: /CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Certificate serial: 05D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft Manifest number: 05CE Signing time: Fri 22 Nov 2024 22:33:22 +0000 Manifest this update: Fri 22 Nov 2024 22:33:22 +0000 Manifest next update: Fri 29 Nov 2024 22:33:22 +0000 Files and hashes: 1: uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl (hash: LnMv5ragzIlCWjeHb4k46UB/eHH1+HX8hyuIhEUUDME=) 2: 00C79724968F11EB9A79630BC4F9AE02.roa (hash: CbFvyeP64z7lPjcb6/hOHGkSsa1q6j/tQwjni6wEqq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1491 (0x5d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Validity Not Before: Nov 22 22:33:22 2024 GMT Not After : Nov 29 22:33:22 2024 GMT Subject: CN=674106b2-88b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6d:e6:1b:f1:2a:c2:dd:61:0a:ac:32:7b:39: ad:a2:65:05:ce:af:23:e4:da:0f:e1:7c:a2:23:99: aa:0b:4e:49:8a:8c:0d:2d:77:7f:e2:8f:98:e2:65: 4d:a4:fc:e2:b9:85:0d:3c:ef:ad:f2:bd:7e:d8:ee: 31:d7:f0:cb:c3:e5:65:91:10:dd:09:c7:16:06:83: 0e:e9:95:9a:f5:cc:c2:c1:11:00:be:3f:2a:44:e6: 0d:1f:dd:6b:a9:99:16:26:6b:1f:a0:7a:eb:a4:24: 86:c4:1d:7e:0f:07:16:67:3a:e2:dd:51:f3:0a:37: 83:a8:b3:65:00:93:52:95:24:fc:ba:da:ef:bd:fc: 90:a6:84:04:35:7c:c5:a4:c6:60:e3:f8:02:6b:a3: 27:4a:9f:3a:62:c0:f0:6f:4a:93:63:b7:90:70:30: 1b:c4:d6:a7:82:1e:14:31:59:4c:55:04:bb:57:7b: 46:4b:cc:fa:24:f0:3d:d8:83:c0:67:93:2c:c0:10: 79:62:81:11:f1:59:ae:e3:a5:13:71:f4:98:6a:ca: 68:d5:1b:c1:ac:b5:34:3a:33:c8:a1:b1:28:ef:d2: f6:88:fb:d5:5d:38:06:63:84:09:dd:4f:de:83:de: 0a:ca:52:bf:de:26:1e:56:a2:a5:25:9a:e8:1f:5a: d7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:23:4C:89:9D:67:D9:DB:20:DF:B2:0D:A1:49:34:DE:F7:96:25:20 X509v3 Authority Key Identifier: keyid:B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:be:0c:22:ba:99:9b:3d:8c:bf:6a:d0:7f:bd:f4:b7:bb:d9: 0b:a7:d7:90:aa:58:0c:75:d2:d6:16:94:71:84:ce:56:e4:ac: a6:63:b3:c1:ff:25:d4:c5:f2:09:28:e3:20:5f:e2:cf:77:6c: 91:2b:de:b4:31:5c:df:31:35:93:e0:6d:00:1d:54:cd:66:89: f1:ba:48:53:88:67:3d:5c:7b:37:0b:86:55:66:90:14:cc:b4: 4b:c3:14:7e:27:56:74:f5:ab:75:b3:d1:22:fa:c7:dc:87:10: a6:d3:ce:57:84:25:62:0d:e2:86:0d:7f:3a:84:c3:86:58:31: 38:c9:f5:dc:0a:86:8a:15:70:29:3a:09:0c:2e:11:ed:d7:d6: e1:8d:58:14:16:7e:d3:33:3e:e5:c0:95:58:f5:ba:68:97:90: bd:c4:4f:c8:6c:da:21:e9:d4:74:87:6f:cd:1c:8d:fe:31:72: 97:3b:df:b1:66:b4:73:8a:4a:7d:12:fd:fc:d0:ba:8c:52:03: 48:45:0a:33:26:80:14:ad:83:f0:93:97:ea:45:46:ad:d1:80: 0b:9b:84:66:6b:0c:15:0e:9f:08:ab:d3:c1:47:bc:b5:51:6a: 49:a1:c8:24:7a:e4:75:4b:e5:8f:c1:19:5f:65:65:13:0d:22: 47:ea:23:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3MkQxMTAvBgNVBAUTKEI4RjYxQ0FCQjkxMTlENkMzNzY4NUYwQUJFMzRBRUUy NkEwMjE3RTYwHhcNMjQxMTIyMjIzMzIyWhcNMjQxMTI5MjIzMzIyWjAYMRYwFAYD VQQDEw02NzQxMDZiMi04OGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvG3mG/Eqwt1hCqwyezmtomUFzq8j5NoP4XyiI5mqC05JiowNLXd/4o+Y4mVN pPziuYUNPO+t8r1+2O4x1/DLw+VlkRDdCccWBoMO6ZWa9czCwREAvj8qROYNH91r qZkWJmsfoHrrpCSGxB1+DwcWZzri3VHzCjeDqLNlAJNSlST8utrvvfyQpoQENXzF pMZg4/gCa6MnSp86YsDwb0qTY7eQcDAbxNangh4UMVlMVQS7V3tGS8z6JPA92IPA Z5MswBB5YoER8Vmu46UTcfSYaspo1RvBrLU0OjPIobEo79L2iPvVXTgGY4QJ3U/e g94KylK/3iYeVqKlJZroH1rXzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0jTImd Z9nbIN+yDaFJNN73liUgMB8GA1UdIwQYMBaAFLj2HKu5EZ1sN2hfCr40ruJqAhfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDcyRC85OEJBNDZCNDk2 OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5XdzNhRjhLdmpTdTRtb0NG LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQWWNxN2tSbld3M2FGOEt2alN1NG1vQ0YtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDcyRC85OEJBNDZCNDk2OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5X dzNhRjhLdmpTdTRtb0NGLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApvgwiupmbPYy/atB/vfS3u9kLp9eQqlgMddLWFpRxhM5W5KymY7PB /yXUxfIJKOMgX+LPd2yRK960MVzfMTWT4G0AHVTNZonxukhTiGc9XHs3C4ZVZpAU zLRLwxR+J1Z09at1s9Ei+sfchxCm085XhCViDeKGDX86hMOGWDE4yfXcCoaKFXAp OgkMLhHt19bhjVgUFn7TMz7lwJVY9bpol5C9xE/IbNoh6dR0h2/NHI3+MXKXO9+x ZrRzikp9Ev380LqMUgNIRQozJoAUrYPwk5fqRUat0YALm4RmawwVDp8Iq9PBR7y1 UWpJocgkeuR1S+WPwRlfZWUTDSJH6iOl -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:46 2024 by rpki-client on console-ams.rpki-client.org