$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft File: UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft (raw, json) Hash identifier: XF35EHLiizT9TxmXlIxXMwKszIr3vzr9YEvmpFmvkGg= Subject key identifier: 74:73:13:FF:3B:5B:39:DB:49:49:D1:EC:55:48:81:36:8D:3D:D7:D1 Authority key identifier: 51:E0:94:C0:57:BE:DA:70:A4:C2:B2:00:91:92:8D:E7:26:4B:46:C5 Certificate issuer: /CN=A91BA8F5/serialNumber=51E094C057BEDA70A4C2B20091928DE7264B46C5 Certificate serial: 0328 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft Manifest number: 0325 Signing time: Sat 23 Nov 2024 00:42:46 +0000 Manifest this update: Sat 23 Nov 2024 00:42:46 +0000 Manifest next update: Sat 30 Nov 2024 00:42:46 +0000 Files and hashes: 1: UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl (hash: OfljKsPMjvNuBzHfmGz67bhL3JsfXz0LwumPHQ5erRg=) 2: 713001A0A35811EC88C42869C4F9AE02.roa (hash: SzmhUiOKFGJoKuBX56C52miBzPamnKu8Ji/qVMaBki8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA8F5/serialNumber=51E094C057BEDA70A4C2B20091928DE7264B46C5 Validity Not Before: Nov 23 00:42:46 2024 GMT Not After : Nov 30 00:42:46 2024 GMT Subject: CN=67412506-e044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:07:cf:36:8c:98:96:b9:cf:9b:80:62:8b:f3: 9e:e4:09:78:a6:94:56:63:b2:25:ea:72:57:e3:ad: f0:1d:57:9d:bf:23:3b:33:1d:90:b6:fe:64:80:8d: fe:19:7b:63:f4:fa:80:1a:46:ce:9f:7e:5f:34:48: 79:91:4f:75:57:06:b9:2d:92:5f:c3:06:6e:f5:ec: 74:aa:2c:71:1e:40:1d:bb:cf:4a:8b:f7:6b:7a:a6: a8:68:c8:53:ec:f0:43:cf:ed:80:56:78:c2:8b:eb: 01:40:cf:b9:59:31:88:4d:e4:38:38:6e:e8:04:68: aa:e3:ab:7a:b9:e4:54:ef:b1:1b:2f:07:70:84:d6: d5:92:21:65:29:f2:66:05:90:77:69:a3:26:54:81: e7:67:64:0b:f9:8e:a3:01:f2:1d:2c:ce:0f:52:e2: 2d:5c:8a:3d:11:7d:f1:d3:4a:4c:d9:8a:df:ba:98: c0:e8:6d:62:98:c3:ba:69:eb:9e:ea:49:59:71:3f: 49:60:74:96:91:04:cd:91:cf:35:49:bf:5d:5d:75: 3f:6d:32:4e:fc:73:39:45:a0:51:08:bf:4d:de:c3: bf:22:33:78:e0:86:a4:af:69:3f:5a:aa:2d:9f:ee: cc:8a:f4:12:13:1a:35:36:0b:cb:da:da:13:d0:25: 6b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:73:13:FF:3B:5B:39:DB:49:49:D1:EC:55:48:81:36:8D:3D:D7:D1 X509v3 Authority Key Identifier: keyid:51:E0:94:C0:57:BE:DA:70:A4:C2:B2:00:91:92:8D:E7:26:4B:46:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c9:86:1e:bd:52:87:d4:5b:b8:79:ff:29:19:c5:99:5a:92: be:7a:2e:2c:b0:5a:af:e3:03:85:d8:24:d1:02:34:89:27:c0: fb:88:1d:01:67:4e:03:e1:43:f1:17:bc:4a:dc:0a:9f:28:0f: ba:ec:0e:1b:2e:3b:a4:ff:6b:4b:36:74:84:ae:c7:a3:1e:b3: 80:a6:88:bd:64:78:5e:7f:1a:aa:a6:c2:f0:32:e5:7e:f9:67: de:a6:f0:a0:b3:64:3c:e8:45:05:3e:34:64:5f:1b:30:74:3a: 9e:5a:c3:f3:39:ce:04:07:04:d5:d3:2d:9f:3e:71:c6:d9:5b: ac:0d:2b:c5:1c:93:04:e7:05:b8:51:d1:40:44:2b:5f:16:c7: c8:4a:27:f9:0f:11:ac:b8:55:74:fd:1d:ff:29:de:b7:22:53: b9:be:1d:6b:9a:d0:24:b5:08:4b:c2:7a:9c:21:98:51:de:bb: 59:fc:2e:4b:27:82:9f:5e:49:18:95:73:de:1e:ea:f8:e6:7f: 2f:5d:22:98:1e:18:08:84:1a:2d:10:1c:02:62:50:65:63:00: ad:aa:96:55:3b:c2:a2:87:46:05:2e:3a:3f:fc:e4:50:6f:0e: 0f:0f:c9:a3:67:01:e1:e2:86:23:31:6f:88:ba:65:72:63:c1: 3d:75:08:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE4RjUxMTAvBgNVBAUTKDUxRTA5NEMwNTdCRURBNzBBNEMyQjIwMDkxOTI4REU3 MjY0QjQ2QzUwHhcNMjQxMTIzMDA0MjQ2WhcNMjQxMTMwMDA0MjQ2WjAYMRYwFAYD VQQDEw02NzQxMjUwNi1lMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AfPNoyYlrnPm4Bii/Oe5Al4ppRWY7Il6nJX463wHVedvyM7Mx2Qtv5kgI3+ GXtj9PqAGkbOn35fNEh5kU91Vwa5LZJfwwZu9ex0qixxHkAdu89Ki/dreqaoaMhT 7PBDz+2AVnjCi+sBQM+5WTGITeQ4OG7oBGiq46t6ueRU77EbLwdwhNbVkiFlKfJm BZB3aaMmVIHnZ2QL+Y6jAfIdLM4PUuItXIo9EX3x00pM2YrfupjA6G1imMO6aeue 6klZcT9JYHSWkQTNkc81Sb9dXXU/bTJO/HM5RaBRCL9N3sO/IjN44Iakr2k/Wqot n+7MivQSExo1NgvL2toT0CVrMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRzE/87 WznbSUnR7FVIgTaNPdfRMB8GA1UdIwQYMBaAFFHglMBXvtpwpMKyAJGSjecmS0bF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQThGNS85NUFBMUVFQ0Ez NTUxMUVDODYxRkUxNjZDNEY5QUUwMi9VZUNVd0ZlLTJuQ2t3cklBa1pLTjV5WkxS c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VlQ1V3RmUtMm5Da3dySUFrWktONXlaTFJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QThGNS85NUFBMUVFQ0EzNTUxMUVDODYxRkUxNjZDNEY5QUUwMi9VZUNVd0ZlLTJu Q2t3cklBa1pLTjV5WkxSc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALyYYevVKH1Fu4ef8pGcWZWpK+ei4ssFqv4wOF2CTRAjSJJ8D7iB0B Z04D4UPxF7xK3AqfKA+67A4bLjuk/2tLNnSErsejHrOApoi9ZHhefxqqpsLwMuV+ +WfepvCgs2Q86EUFPjRkXxswdDqeWsPzOc4EBwTV0y2fPnHG2VusDSvFHJME5wW4 UdFARCtfFsfISif5DxGsuFV0/R3/Kd63IlO5vh1rmtAktQhLwnqcIZhR3rtZ/C5L J4KfXkkYlXPeHur45n8vXSKYHhgIhBotEBwCYlBlYwCtqpZVO8Kih0YFLjo//ORQ bw4PD8mjZwHh4oYjMW+IumVyY8E9dQib -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org