$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft File: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft (raw, json) Hash identifier: V7qRPKDd5L0bM+pqbCNrAJIi7aLXVEBSSmRQHIwhUaE= Subject key identifier: 62:1E:C9:DA:E5:22:8F:39:AB:3F:FC:91:86:E5:90:C3:29:06:07:39 Authority key identifier: 52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 Certificate issuer: /CN=A91AFA16/serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Certificate serial: 0AEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft Manifest number: 0AE8 Signing time: Fri 22 Nov 2024 19:05:21 +0000 Manifest this update: Fri 22 Nov 2024 19:05:21 +0000 Manifest next update: Fri 29 Nov 2024 19:05:21 +0000 Files and hashes: 1: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl (hash: IWnNYMvFhnnPRBEglwHGgSm7uOM2eU+CK8b1KjyEHzk=) 2: 11DB043CF61E11EEB39BD261C4F9AE02.roa (hash: /5CCqw1EtUstMrkUM6asomv231tJ85ybbdA6hr7U5Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2799 (0xaef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFA16/serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Validity Not Before: Nov 22 19:05:21 2024 GMT Not After : Nov 29 19:05:21 2024 GMT Subject: CN=6740d5f1-ccac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:d6:f8:be:fb:b1:84:73:4a:88:55:26:d0: 63:29:a3:c6:14:93:31:f8:4c:1d:9e:51:3f:12:1f: 71:cc:f5:aa:34:a3:3a:ff:08:00:cd:8a:a2:7f:59: c0:0b:fc:c0:ca:13:a4:99:c4:b9:66:34:df:31:bf: 88:7c:c8:39:c6:4d:08:d9:3f:78:f2:1a:31:53:8b: 91:d7:95:82:ce:89:0b:17:f3:fe:e3:93:ff:28:36: eb:6a:58:7c:37:6e:29:42:57:ce:b3:17:5c:e4:ae: 90:7b:bb:64:2f:64:82:6a:52:f7:3a:10:b3:00:b7: 0c:bf:23:40:24:83:5f:94:51:5a:25:69:60:1a:aa: be:4b:89:77:35:51:36:44:41:bc:ac:39:be:45:33: 61:22:be:3a:1c:1f:f2:47:a2:e2:a1:1a:90:57:ad: 04:09:1d:74:59:4f:c5:06:5e:b7:75:6c:95:a2:66: 39:35:d8:fb:4a:ec:4d:12:0d:25:8c:71:21:71:32: f2:42:bf:ac:85:d0:6b:2f:24:36:35:c3:15:1b:25: 18:e5:6b:7e:3f:2a:16:82:e3:be:29:3d:f9:c4:ff: 18:8c:da:03:f2:b7:ba:a0:6c:90:99:6e:5d:95:cf: c4:38:ab:26:4f:10:a8:f1:30:31:e8:07:83:ba:92: 84:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1E:C9:DA:E5:22:8F:39:AB:3F:FC:91:86:E5:90:C3:29:06:07:39 X509v3 Authority Key Identifier: keyid:52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:91:da:b1:70:b5:9e:42:c2:f4:9a:37:cb:24:5c:1a:e3:ea: c7:e8:bd:c3:7c:75:3f:a3:f4:f5:8d:7b:e6:5b:5a:74:18:e2: e4:0f:68:9d:5a:fc:b4:25:13:ea:5a:96:05:53:68:ae:e2:9d: 00:10:72:b9:b9:25:09:fc:34:34:cb:47:fc:d4:0e:74:ff:57: d4:26:cd:55:ac:4d:92:85:93:f7:4c:ab:64:f1:bf:91:6d:83: 2a:d5:5e:c1:9a:b3:70:fa:d4:1f:f6:ac:1c:29:71:df:b8:f7: f3:22:fb:b5:db:17:4e:2e:e0:ba:d7:01:0a:16:bc:4a:b8:21: 02:e5:b0:20:03:75:bb:15:5a:82:7e:c3:5f:16:ae:2f:17:bf: e5:f5:90:e8:af:f1:94:9a:0a:1d:60:99:b9:f3:49:f5:36:33: 66:c4:52:60:54:08:3c:3b:9d:ca:90:e9:b9:dc:f9:16:82:0e: 69:82:28:05:b4:27:41:fb:4c:55:09:7e:79:f8:2a:df:e3:f2: 16:db:93:3f:f3:88:6e:ab:3b:11:4a:d7:1d:79:96:d5:41:ee: b4:28:54:d8:8c:6f:2b:d2:0e:69:88:c2:c3:ac:cb:b1:b0:78: 94:37:30:be:84:5e:ba:1c:cc:d3:ab:7b:21:5d:91:9e:37:7d: 9e:30:da:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZBMTYxMTAvBgNVBAUTKDUyRkQxREUyNERBRjhERDVGQzNBQTAwNzhCMDc3MzJG QzI3NDc4OTQwHhcNMjQxMTIyMTkwNTIxWhcNMjQxMTI5MTkwNTIxWjAYMRYwFAYD VQQDEw02NzQwZDVmMS1jY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGTW+L77sYRzSohVJtBjKaPGFJMx+EwdnlE/Eh9xzPWqNKM6/wgAzYqif1nA C/zAyhOkmcS5ZjTfMb+IfMg5xk0I2T948hoxU4uR15WCzokLF/P+45P/KDbralh8 N24pQlfOsxdc5K6Qe7tkL2SCalL3OhCzALcMvyNAJINflFFaJWlgGqq+S4l3NVE2 REG8rDm+RTNhIr46HB/yR6LioRqQV60ECR10WU/FBl63dWyVomY5Ndj7SuxNEg0l jHEhcTLyQr+shdBrLyQ2NcMVGyUY5Wt+PyoWguO+KT35xP8YjNoD8re6oGyQmW5d lc/EOKsmTxCo8TAx6AeDupKEZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIeydrl Io85qz/8kYblkMMpBgc5MB8GA1UdIwQYMBaAFFL9HeJNr43V/DqgB4sHcy/CdHiU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkExNi9DNTU0MjA4MDM1 QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpkWDhPcUFIaXdkekw4SjBl SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V2MGQ0azJ2amRYOE9xQUhpd2R6TDhKMGVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkExNi9DNTU0MjA4MDM1QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpk WDhPcUFIaXdkekw4SjBlSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4kdqxcLWeQsL0mjfLJFwa4+rH6L3DfHU/o/T1jXvmW1p0GOLkD2id Wvy0JRPqWpYFU2iu4p0AEHK5uSUJ/DQ0y0f81A50/1fUJs1VrE2ShZP3TKtk8b+R bYMq1V7BmrNw+tQf9qwcKXHfuPfzIvu12xdOLuC61wEKFrxKuCEC5bAgA3W7FVqC fsNfFq4vF7/l9ZDor/GUmgodYJm580n1NjNmxFJgVAg8O53KkOm53PkWgg5pgigF tCdB+0xVCX55+Crf4/IW25M/84huqzsRStcdeZbVQe60KFTYjG8r0g5piMLDrMux sHiUNzC+hF66HMzTq3shXZGeN32eMNo8 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org