$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft File: -uIUFNET23jVT-q6G2BvhUokC9E.mft (raw, json) Hash identifier: 7fHPqZsZI6zjvsZsK9vpX4VWEtehv93Qe4gjBikJY08= Subject key identifier: 85:51:47:7F:DD:63:05:71:A1:DC:6B:27:F3:A4:9B:36:CC:85:C8:6C Authority key identifier: FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 Certificate issuer: /CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft Manifest number: 0120 Signing time: Sat 23 Nov 2024 02:57:28 +0000 Manifest this update: Sat 23 Nov 2024 02:57:27 +0000 Manifest next update: Sat 30 Nov 2024 02:57:27 +0000 Files and hashes: 1: -uIUFNET23jVT-q6G2BvhUokC9E.crl (hash: Me9LXXgvV+QjLuDit+n0HZiypqwH87gbZq9Z918TQi0=) 2: 05C6C85CF3C211ED8B9B1450C4F9AE02.roa (hash: nYA6dKLF7hZ2252OSmbcet0fM3uQj9FqvEVTxCVbcwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Validity Not Before: Nov 23 02:57:27 2024 GMT Not After : Nov 30 02:57:27 2024 GMT Subject: CN=67414498-a572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2e:08:25:39:d2:da:20:12:63:b7:ae:15:38: 55:a8:ed:e2:6d:66:33:cf:d6:c9:8e:1d:1c:6a:1a: 4d:e3:b1:3f:94:f2:20:d2:e4:a1:03:fa:81:1d:d5: a4:ae:47:f3:9d:ba:4a:4f:1e:2e:84:01:41:e9:9e: d7:f2:98:07:6f:c7:d0:3f:fe:07:a1:42:a8:af:45: d8:93:3c:0c:d3:87:3e:b8:a0:f0:98:93:6f:64:38: 06:c6:cb:b3:d3:87:0a:03:5d:7a:93:cb:49:ea:dd: 6c:b0:12:3c:0e:6f:c8:77:58:ff:35:c1:d4:7b:64: 4e:25:14:ad:b3:99:bd:47:22:31:f0:5e:2a:fc:43: f9:b8:39:d4:df:70:c1:c3:84:65:3f:11:71:65:bc: 52:a5:22:0a:06:4b:c5:14:13:24:3d:4f:45:71:ab: f9:92:5e:65:65:31:53:27:fb:d9:62:ef:64:4b:5b: db:6b:49:de:e3:69:55:15:18:59:d1:54:c9:14:f5: d6:8f:2e:87:51:dc:7e:6c:8c:00:84:ca:cd:c0:47: 54:c0:3b:e3:65:a7:6b:46:7d:85:36:a0:fb:a2:fd: 92:04:be:93:f0:3f:28:b9:87:2b:54:91:bb:d3:46: 78:f9:da:35:ae:0d:d7:88:35:90:43:c7:16:59:30: d8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:51:47:7F:DD:63:05:71:A1:DC:6B:27:F3:A4:9B:36:CC:85:C8:6C X509v3 Authority Key Identifier: keyid:FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:da:34:8d:fb:2f:25:01:62:db:16:79:93:57:5d:e4:4d:f0: 8f:2f:22:79:f5:55:ec:af:c6:4c:c3:ad:08:15:9f:91:3f:01: b6:ed:6a:14:60:5e:5f:d3:0f:6f:68:94:68:8e:07:f5:2c:7f: 9b:e5:85:e6:b4:79:db:b3:62:3d:01:7d:b0:09:ca:58:d8:40: 88:3c:38:a2:2d:ab:61:46:83:02:38:27:e5:86:70:9d:4a:39: 5b:3e:6b:e7:d3:47:06:f7:49:83:12:38:05:df:c5:bc:e3:b2: ff:ae:d9:fd:f7:e8:59:db:9d:49:89:29:ee:c3:bf:09:95:97: 94:ae:cd:6d:89:22:0d:b9:61:18:21:08:13:06:83:3e:13:ed: 7a:29:91:6a:fe:7a:61:13:de:9d:6a:1f:eb:7d:ee:8f:0e:9a: 40:09:b0:7c:09:39:d1:2b:7b:5b:7e:86:be:74:bc:88:65:a6: 16:37:68:2e:53:03:25:5f:9d:18:50:6a:c5:51:c9:77:dc:ca: 77:01:1a:df:7a:6c:af:42:cf:f7:09:a6:73:c6:f5:f6:4d:58: 2f:c0:13:c7:2b:59:e8:ed:3b:7e:88:dc:a1:d5:63:59:a1:a3: aa:c2:54:4f:04:90:f7:31:ab:25:58:67:24:0d:e5:ee:68:0b: 4d:d5:ef:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMkExMTAvBgNVBAUTKEZBRTIxNDE0RDExM0RCNzhENTRGRUFCQTFCNjA2Rjg1 NEEyNDBCRDEwHhcNMjQxMTIzMDI1NzI3WhcNMjQxMTMwMDI1NzI3WjAYMRYwFAYD VQQDEw02NzQxNDQ5OC1hNTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC4IJTnS2iASY7euFThVqO3ibWYzz9bJjh0cahpN47E/lPIg0uShA/qBHdWk rkfznbpKTx4uhAFB6Z7X8pgHb8fQP/4HoUKor0XYkzwM04c+uKDwmJNvZDgGxsuz 04cKA116k8tJ6t1ssBI8Dm/Id1j/NcHUe2ROJRSts5m9RyIx8F4q/EP5uDnU33DB w4RlPxFxZbxSpSIKBkvFFBMkPU9Fcav5kl5lZTFTJ/vZYu9kS1vba0ne42lVFRhZ 0VTJFPXWjy6HUdx+bIwAhMrNwEdUwDvjZadrRn2FNqD7ov2SBL6T8D8ouYcrVJG7 00Z4+do1rg3XiDWQQ8cWWTDY/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVRR3/d YwVxodxrJ/OkmzbMhchsMB8GA1UdIwQYMBaAFPriFBTRE9t41U/quhtgb4VKJAvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEyQS8xNDc3MTFCMkYz QkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIzalZULXE2RzJCdmhVb2tD OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11SVVGTkVUMjNqVlQtcTZHMkJ2aFVva0M5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEyQS8xNDc3MTFCMkYzQkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIz alZULXE2RzJCdmhVb2tDOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf2jSN+y8lAWLbFnmTV13kTfCPLyJ59VXsr8ZMw60IFZ+RPwG27WoU YF5f0w9vaJRojgf1LH+b5YXmtHnbs2I9AX2wCcpY2ECIPDiiLathRoMCOCflhnCd SjlbPmvn00cG90mDEjgF38W847L/rtn99+hZ251JiSnuw78JlZeUrs1tiSINuWEY IQgTBoM+E+16KZFq/nphE96dah/rfe6PDppACbB8CTnRK3tbfoa+dLyIZaYWN2gu UwMlX50YUGrFUcl33Mp3ARrfemyvQs/3CaZzxvX2TVgvwBPHK1no7Tt+iNyh1WNZ oaOqwlRPBJD3MaslWGckDeXuaAtN1e/w -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:49 2024 by rpki-client on console-ams.rpki-client.org