$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft File: uRm6CzrV4m_DHTlL4TK7yof8yFI.mft (raw, json) Hash identifier: frsDqHLcGtQPCB4DeG0Vm3ptk33jp3uTM7q5u1l9zoY= Subject key identifier: CC:B7:10:1A:40:59:C7:E5:23:47:2A:76:D3:05:63:72:14:1D:9C:B4 Authority key identifier: B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52 Certificate issuer: /CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft Manifest number: 01EF Signing time: Sat 23 Nov 2024 01:40:13 +0000 Manifest this update: Sat 23 Nov 2024 01:40:12 +0000 Manifest next update: Sat 30 Nov 2024 01:40:12 +0000 Files and hashes: 1: uRm6CzrV4m_DHTlL4TK7yof8yFI.crl (hash: miHWP8P8YmunR8Ka74wVjDDCKb3BNkgSV53RAHu8QBg=) 2: 4C0F405E1E1C11EDA19CF560C4F9AE02.roa (hash: Mjvz0g/6VHNBx1WBrf/RAQ24UJcGDEU3e3YasLXb4ZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852 Validity Not Before: Nov 23 01:40:12 2024 GMT Not After : Nov 30 01:40:12 2024 GMT Subject: CN=6741327d-b5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:db:99:36:14:b3:43:29:98:fa:fb:47:31:ed: c1:35:e0:28:f1:0d:70:af:ec:71:c4:06:2b:4a:6e: 2c:b2:71:85:e6:c1:0e:33:3b:8d:5b:b4:0a:f8:fa: 4f:af:6c:f8:68:32:00:3d:e7:6d:53:2f:a8:9d:a5: d2:8a:88:d4:dd:ea:8b:1e:83:51:bb:ad:c4:fa:03: 8c:39:59:8d:d6:af:93:10:ab:de:e7:5c:f9:78:fb: 6a:b4:47:a7:95:b7:cf:9e:01:22:4e:cf:83:74:9d: 17:11:7d:2b:1e:2c:62:99:05:a7:9f:63:89:96:39: e8:18:18:0f:30:ed:35:dd:15:b0:e9:b6:20:72:41: a8:d1:4e:db:47:53:fd:32:b5:25:2e:d4:ec:18:2a: da:36:8b:a1:8c:be:37:b3:e6:68:64:fe:8e:f4:ac: 14:4a:52:dd:a9:09:74:03:30:26:69:0a:86:f8:98: aa:a7:e6:8d:41:60:55:8a:22:6f:e7:c9:16:ec:0d: ee:10:3c:7f:21:e4:c4:29:19:ff:88:a7:83:5d:8f: 4c:64:fc:07:17:25:26:13:ab:76:43:a3:c2:8a:df: bb:e9:75:eb:13:82:26:16:87:7a:97:25:66:00:3e: 7b:ad:1a:0c:ea:86:6e:2e:03:a0:a1:25:89:44:a9: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B7:10:1A:40:59:C7:E5:23:47:2A:76:D3:05:63:72:14:1D:9C:B4 X509v3 Authority Key Identifier: keyid:B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:5f:50:d8:bc:01:f6:32:ea:b5:42:b8:cc:d1:86:ce:77:8b: f8:cb:5e:4a:30:a9:ee:9f:e0:50:24:7c:6e:8c:2d:f2:22:be: ef:59:f5:d0:1b:8a:45:ac:fc:e3:77:65:ed:42:92:cc:d5:34: 24:73:ca:e3:60:3e:7b:a9:09:59:30:ee:34:36:36:a5:1b:48: 34:07:c6:64:3e:53:f2:65:ef:e8:77:94:16:5e:43:6e:38:1e: 3a:b8:45:67:a2:27:3f:d1:b6:e2:ad:c8:98:a4:25:56:76:f5: 33:ac:92:45:fa:23:ae:de:6e:2a:71:03:c6:ef:7c:07:51:a5: 04:4e:47:84:a2:1a:c9:e6:d1:ed:39:e7:9c:01:3d:6c:37:ff: bb:ee:5b:57:59:fd:0b:9e:c2:90:99:95:9b:21:4b:46:04:e2: 06:5c:17:d3:1f:fe:a9:5e:ba:bf:29:91:8d:75:d2:68:83:45: 12:e5:45:ab:f0:e5:7c:ae:9d:83:40:5f:52:8a:5b:d3:15:26: 29:8e:92:e6:1a:57:35:ab:f9:ae:60:a7:ff:86:86:0d:1d:83: 01:8b:2d:59:1d:7d:58:cc:73:bc:c2:af:75:b1:93:92:29:a9: c6:8d:d0:a9:46:cc:66:85:b7:05:ef:48:04:66:6e:8f:e8:77: d1:d9:a5:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU0QzYxMTAvBgNVBAUTKEI5MTlCQTBCM0FENUUyNkZDMzFEMzk0QkUxMzJCQkNB ODdGQ0M4NTIwHhcNMjQxMTIzMDE0MDEyWhcNMjQxMTMwMDE0MDEyWjAYMRYwFAYD VQQDEw02NzQxMzI3ZC1iNWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNuZNhSzQymY+vtHMe3BNeAo8Q1wr+xxxAYrSm4ssnGF5sEOMzuNW7QK+PpP r2z4aDIAPedtUy+onaXSiojU3eqLHoNRu63E+gOMOVmN1q+TEKve51z5ePtqtEen lbfPngEiTs+DdJ0XEX0rHiximQWnn2OJljnoGBgPMO013RWw6bYgckGo0U7bR1P9 MrUlLtTsGCraNouhjL43s+ZoZP6O9KwUSlLdqQl0AzAmaQqG+Jiqp+aNQWBViiJv 58kW7A3uEDx/IeTEKRn/iKeDXY9MZPwHFyUmE6t2Q6PCit+76XXrE4ImFod6lyVm AD57rRoM6oZuLgOgoSWJRKka1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMy3EBpA WcflI0cqdtMFY3IUHZy0MB8GA1UdIwQYMBaAFLkZugs61eJvwx05S+Eyu8qH/MhS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTRDNi9FQUI5NDdBODFF MTgxMUVEOTQ3OTM2NURDNEY5QUUwMi91Um02Q3pyVjRtX0RIVGxMNFRLN3lvZjh5 RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VSbTZDenJWNG1fREhUbEw0VEs3eW9mOHlGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTRDNi9FQUI5NDdBODFFMTgxMUVEOTQ3OTM2NURDNEY5QUUwMi91Um02Q3pyVjRt X0RIVGxMNFRLN3lvZjh5RkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcX1DYvAH2Muq1QrjM0YbOd4v4y15KMKnun+BQJHxujC3yIr7vWfXQ G4pFrPzjd2XtQpLM1TQkc8rjYD57qQlZMO40NjalG0g0B8ZkPlPyZe/od5QWXkNu OB46uEVnoic/0bbirciYpCVWdvUzrJJF+iOu3m4qcQPG73wHUaUETkeEohrJ5tHt OeecAT1sN/+77ltXWf0LnsKQmZWbIUtGBOIGXBfTH/6pXrq/KZGNddJog0US5UWr 8OV8rp2DQF9SilvTFSYpjpLmGlc1q/muYKf/hoYNHYMBiy1ZHX1YzHO8wq91sZOS KanGjdCpRsxmhbcF70gEZm6P6HfR2aVB -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:42 2024 by rpki-client on console-fra.rpki-client.org