$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft File: uLRz022lJgglzQu_YvbsGQ00Ahg.mft (raw, json) Hash identifier: 4dmQk1vxCKPDAaNqAjy/5Wh7uZXMYzA8yGhAIg8m+Ls= Subject key identifier: 09:02:CD:A5:FE:00:3C:12:86:D1:1B:B2:C6:09:FC:12:80:14:E7:97 Authority key identifier: B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 Certificate issuer: /CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Certificate serial: 3433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft Manifest number: 342E Signing time: Sun 24 Nov 2024 14:18:17 +0000 Manifest this update: Sun 24 Nov 2024 14:18:17 +0000 Manifest next update: Sun 01 Dec 2024 14:18:17 +0000 Files and hashes: 1: uLRz022lJgglzQu_YvbsGQ00Ahg.crl (hash: RjXKtJPdVjmoMEHzIw9G6Q9m5s6ulPq+c18VDIygySs=) 2: 75C18F96305811EB94E3192FC4F9AE02.roa (hash: UzsieRuJZfKKtvrR8Sja2Ma73F9hqR2aOcUuvBHYQ7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13363 (0x3433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Validity Not Before: Nov 24 14:18:17 2024 GMT Not After : Dec 1 14:18:17 2024 GMT Subject: CN=674335a9-53b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:53:3d:b6:0e:19:db:9b:f8:e9:03:05:1a:af: db:bb:59:a4:85:11:86:f9:d9:7b:11:02:0c:ad:e5: d9:91:32:2c:0c:a9:47:d5:e6:0b:52:db:f2:f9:6c: 5d:11:a0:94:76:83:a5:d3:b2:10:2f:6b:a5:53:ad: db:0f:d6:01:88:a7:85:78:43:90:7a:95:e3:51:e6: 7c:17:19:a4:58:48:d1:c5:94:c3:d6:12:de:86:37: 0c:42:b8:4b:d6:aa:10:81:59:fe:a1:81:fc:34:77: 07:5b:78:2e:db:bd:bb:ad:10:e8:5f:92:67:c4:f8: 72:14:da:31:09:6f:bd:14:b4:a2:c8:5e:54:75:b6: e5:5a:40:8e:71:8d:7c:3e:44:43:af:5d:db:b1:50: b0:de:fa:36:7c:03:88:6e:05:e6:71:05:f0:f1:5f: 93:a0:ef:a2:33:fb:2e:5d:0d:17:f2:f8:e7:61:6a: 01:29:30:13:13:f8:1a:a0:7c:31:1a:43:e7:25:36: a4:40:52:6b:38:89:b5:67:7d:e8:30:87:4a:8b:1a: ff:a7:73:1e:26:4f:93:9d:df:46:f3:b8:d3:9d:4f: 00:50:56:8b:90:14:7d:98:79:bf:c7:55:6b:f6:56: 7c:82:b8:42:e2:45:19:90:38:c6:27:fc:6a:3f:ce: c9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:02:CD:A5:FE:00:3C:12:86:D1:1B:B2:C6:09:FC:12:80:14:E7:97 X509v3 Authority Key Identifier: keyid:B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:0b:1e:58:bf:2b:39:6a:13:44:74:ee:db:6d:36:b4:f4:b2: ad:99:d4:14:92:8f:56:98:62:d2:0f:26:85:a6:d1:4e:bd:db: d3:8a:c5:15:cd:e2:dd:53:39:62:ff:8e:01:10:59:9c:ca:27: 54:1b:54:d2:8d:75:c8:13:58:e6:8a:5f:e1:55:15:82:29:f0: 89:7d:d6:0b:a8:49:ad:f7:50:cb:9f:5a:8d:d7:9d:4c:2f:59: 8b:e3:87:e7:c2:bd:2a:ca:d0:36:20:5f:c1:aa:20:bf:f9:d2: b8:0e:41:c7:f8:f3:40:99:5d:d2:cf:59:21:cd:70:54:76:3d: 38:22:bb:c5:7a:d3:c3:95:cb:ac:2a:77:32:d1:e8:9b:0e:c3: a6:c6:5b:7c:fb:08:d0:8c:6c:1a:d6:58:85:66:01:b6:43:b9: 99:50:d8:d8:d5:d5:6c:54:12:2d:6d:16:9c:79:f0:9d:b2:cc: 3f:45:92:31:87:03:27:42:81:af:b7:cd:f3:3a:c3:32:0a:c0: fe:e7:04:c0:d3:e5:82:09:56:9b:3c:92:df:59:57:14:cf:70: be:9f:4b:d1:b1:f9:2c:b1:38:27:35:c3:ee:66:8c:20:6d:ec: af:e1:f8:04:b1:fb:d4:4c:4a:3e:f1:6f:c3:84:fa:42:e2:35: 8c:bd:9e:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEODExMTAvBgNVBAUTKEI4QjQ3M0QzNkRBNTI2MDgyNUNEMEJCRjYyRjZFQzE5 MEQzNDAyMTgwHhcNMjQxMTI0MTQxODE3WhcNMjQxMjAxMTQxODE3WjAYMRYwFAYD VQQDEw02NzQzMzVhOS01M2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFM9tg4Z25v46QMFGq/bu1mkhRGG+dl7EQIMreXZkTIsDKlH1eYLUtvy+Wxd EaCUdoOl07IQL2ulU63bD9YBiKeFeEOQepXjUeZ8FxmkWEjRxZTD1hLehjcMQrhL 1qoQgVn+oYH8NHcHW3gu2727rRDoX5JnxPhyFNoxCW+9FLSiyF5UdbblWkCOcY18 PkRDr13bsVCw3vo2fAOIbgXmcQXw8V+ToO+iM/suXQ0X8vjnYWoBKTATE/gaoHwx GkPnJTakQFJrOIm1Z33oMIdKixr/p3MeJk+Tnd9G87jTnU8AUFaLkBR9mHm/x1Vr 9lZ8grhC4kUZkDjGJ/xqP87J2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkCzaX+ ADwShtEbssYJ/BKAFOeXMB8GA1UdIwQYMBaAFLi0c9NtpSYIJc0Lv2L27BkNNAIY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ4MS80NzA1OUREODFE NkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpnZ2x6UXVfWXZic0dRMDBB aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VMUnowMjJsSmdnbHpRdV9ZdmJzR1EwMEFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ4MS80NzA1OUREODFENkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpn Z2x6UXVfWXZic0dRMDBBaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Cx5Yvys5ahNEdO7bbTa09LKtmdQUko9WmGLSDyaFptFOvdvTisUV zeLdUzli/44BEFmcyidUG1TSjXXIE1jmil/hVRWCKfCJfdYLqEmt91DLn1qN151M L1mL44fnwr0qytA2IF/BqiC/+dK4DkHH+PNAmV3Sz1khzXBUdj04IrvFetPDlcus Kncy0eibDsOmxlt8+wjQjGwa1liFZgG2Q7mZUNjY1dVsVBItbRacefCdssw/RZIx hwMnQoGvt83zOsMyCsD+5wTA0+WCCVabPJLfWVcUz3C+n0vRsfkssTgnNcPuZowg beyv4fgEsfvUTEo+8W/DhPpC4jWMvZ4K -----END CERTIFICATE-----Generated at Sun Nov 24 14:56:38 2024 by rpki-client on console-fra.rpki-client.org