$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft File: aUugcLYm4WhY1mDyEg50tvw_cuw.mft (raw, json) Hash identifier: LM4pcVXv9kabTraz6Z5dPtL9AKKiCUeIRRcznVpAv5A= Subject key identifier: E2:04:EB:08:5A:4D:1E:52:D8:2F:82:A0:6F:37:E7:9A:CA:5B:62:AA Authority key identifier: 69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC Certificate issuer: /CN=A91C7426/serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC Certificate serial: 3422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft Manifest number: 3422 Signing time: Fri 22 Nov 2024 15:07:49 +0000 Manifest this update: Fri 22 Nov 2024 15:07:49 +0000 Manifest next update: Fri 29 Nov 2024 15:07:49 +0000 Files and hashes: 1: aUugcLYm4WhY1mDyEg50tvw_cuw.crl (hash: KSmmClfp5qjj8TifVmgvCTUBiYgzESwSziPqRqjqVDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.crl rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13346 (0x3422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7426/serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC Validity Not Before: Nov 22 15:07:49 2024 GMT Not After : Nov 29 15:07:49 2024 GMT Subject: CN=67409e45-637a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:f5:2c:6f:b3:cc:45:52:e8:2f:51:f7:39: 39:e2:e9:e2:03:77:12:53:1c:3e:e5:3f:cb:04:f5: 72:a8:33:98:06:cd:79:5c:bc:1b:28:0e:1a:4b:7c: b0:49:43:e7:ac:be:20:36:f4:26:4d:09:40:fd:c7: 45:fa:33:08:d6:e4:71:ff:13:b1:46:98:09:9b:d0: 3f:57:61:19:0c:be:16:92:e5:a0:57:04:2f:d3:58: 54:d3:e8:fd:4a:06:71:38:5e:90:3d:38:bd:7c:1b: 63:57:16:2b:a9:a1:c0:87:26:5f:59:48:5e:82:a4: a4:e0:f7:13:70:92:3f:14:13:6f:46:1f:d9:93:aa: 88:a0:22:0e:b5:68:b1:88:eb:b5:6f:4f:31:eb:c5: 38:eb:41:03:21:e1:13:de:09:ad:34:b8:94:70:4a: 5f:ba:81:de:9d:5b:ff:d4:19:35:80:63:b8:eb:09: 2b:00:da:6b:9e:d6:cd:1a:59:b1:43:b2:3b:a4:20: 4c:82:65:b9:d5:76:94:70:c1:eb:da:4d:4b:ef:43: 88:b9:38:c3:19:9f:8d:e8:d7:4e:92:2e:06:ff:98: a3:67:d8:22:f1:03:04:33:dd:6d:79:7b:8d:9b:b8: 6f:a3:c7:0c:4c:0d:fa:aa:df:df:29:b8:94:34:11: cd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:04:EB:08:5A:4D:1E:52:D8:2F:82:A0:6F:37:E7:9A:CA:5B:62:AA X509v3 Authority Key Identifier: keyid:69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:74:ab:4d:e9:45:1a:22:1f:e8:97:4d:e2:f9:30:e1:90:c6: 2c:f3:89:f6:e2:3f:43:08:96:f4:3f:0e:2b:52:0d:cd:a1:94: ae:6c:23:46:bd:1f:da:8e:37:ca:65:3f:e5:21:3c:1f:d6:79: cb:75:e0:0e:33:25:59:07:5c:f3:12:ea:90:e0:c4:74:8e:ab: b3:ed:76:76:90:3e:43:ff:7b:10:5d:c6:e1:8f:97:d8:9b:7e: 28:b3:9b:c1:08:2a:5b:40:7b:0f:61:1b:a2:ef:4d:7f:a9:c9: 98:98:48:d0:5d:77:8b:d9:7e:1d:61:ef:11:cb:85:3c:75:1c: 29:cd:d6:ff:5a:1c:7f:c9:66:49:58:e4:58:3b:82:74:5b:5a: 03:0a:88:03:ee:c2:2d:8a:fd:25:a6:99:2e:00:fe:8e:53:a9: 02:d9:df:8e:ad:0a:77:00:1f:e3:b7:26:04:8d:56:8c:6c:61: 85:35:f6:4e:11:2d:bc:0b:43:5c:48:1c:91:85:2d:56:ab:4b: 72:ea:bc:35:c4:33:6d:f9:1f:ce:b1:c5:04:5d:11:95:17:a8: af:62:4d:7f:b8:51:22:b3:f9:bb:eb:72:03:ba:23:3c:df:f4: c0:d7:b8:bf:4c:20:d0:08:d6:1e:27:33:c8:9b:a2:36:a4:a4: d6:d7:33:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0MjYxMTAvBgNVBAUTKDY5NEJBMDcwQjYyNkUxNjg1OEQ2NjBGMjEyMEU3NEI2 RkMzRjcyRUMwHhcNMjQxMTIyMTUwNzQ5WhcNMjQxMTI5MTUwNzQ5WjAYMRYwFAYD VQQDEw02NzQwOWU0NS02MzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmz1LG+zzEVS6C9R9zk54uniA3cSUxw+5T/LBPVyqDOYBs15XLwbKA4aS3yw SUPnrL4gNvQmTQlA/cdF+jMI1uRx/xOxRpgJm9A/V2EZDL4WkuWgVwQv01hU0+j9 SgZxOF6QPTi9fBtjVxYrqaHAhyZfWUhegqSk4PcTcJI/FBNvRh/Zk6qIoCIOtWix iOu1b08x68U460EDIeET3gmtNLiUcEpfuoHenVv/1Bk1gGO46wkrANprntbNGlmx Q7I7pCBMgmW51XaUcMHr2k1L70OIuTjDGZ+N6NdOki4G/5ijZ9gi8QMEM91teXuN m7hvo8cMTA36qt/fKbiUNBHNBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIE6wha TR5S2C+CoG8355rKW2KqMB8GA1UdIwQYMBaAFGlLoHC2JuFoWNZg8hIOdLb8P3Ls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQyNi8yMTI4Nzk2QzFE QTIxMUUyOEY1MUQyOTQwOEIwMkNEMi9hVXVnY0xZbTRXaFkxbUR5RWc1MHR2d19j dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FVdWdjTFltNFdoWTFtRHlFZzUwdHZ3X2N1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzQyNi8yMTI4Nzk2QzFEQTIxMUUyOEY1MUQyOTQwOEIwMkNEMi9hVXVnY0xZbTRX aFkxbUR5RWc1MHR2d19jdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3dKtN6UUaIh/ol03i+TDhkMYs84n24j9DCJb0Pw4rUg3NoZSubCNG vR/ajjfKZT/lITwf1nnLdeAOMyVZB1zzEuqQ4MR0jquz7XZ2kD5D/3sQXcbhj5fY m34os5vBCCpbQHsPYRui701/qcmYmEjQXXeL2X4dYe8Ry4U8dRwpzdb/Whx/yWZJ WORYO4J0W1oDCogD7sItiv0lppkuAP6OU6kC2d+OrQp3AB/jtyYEjVaMbGGFNfZO ES28C0NcSByRhS1Wq0ty6rw1xDNt+R/OscUEXRGVF6ivYk1/uFEis/m763IDuiM8 3/TA17i/TCDQCNYeJzPIm6I2pKTW1zMw -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:04 2024 by rpki-client on console-ams.rpki-client.org