$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft File: uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json) Hash identifier: 7LkVt03MHwDB77NYnPHlUl3othypae9QWyrytxBP1k8= Subject key identifier: 1B:54:FA:F0:CD:5C:69:2C:FB:53:34:B1:62:83:0F:12:1F:26:D5:72 Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 Certificate issuer: /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Certificate serial: 0BB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft Manifest number: 0BB1 Signing time: Fri 22 Nov 2024 18:39:50 +0000 Manifest this update: Fri 22 Nov 2024 18:39:50 +0000 Manifest next update: Fri 29 Nov 2024 18:39:50 +0000 Files and hashes: 1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: ZJqLGJ5KHc8xU1TiCHNV3eAXERbfQhmdef1zpb4UzYc=) 2: C4391160305611EABE7DF272C4F9AE02.roa (hash: 3CS63lxTVcr1lDEM5PMs5CO7XzdKCmryVXHiyIzoBgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3001 (0xbb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Validity Not Before: Nov 22 18:39:50 2024 GMT Not After : Nov 29 18:39:50 2024 GMT Subject: CN=6740cff6-a972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:18:97:6a:40:f4:23:8f:da:4b:cd:7e:38: ef:f2:70:a8:4d:21:bc:80:db:5e:98:e4:86:22:15: 59:f7:b5:99:de:fa:5d:88:7a:43:7f:ae:c1:b5:0f: 07:92:32:eb:da:44:bf:fb:17:3d:b7:9f:93:b1:f5: 3a:2c:84:9e:21:39:fb:bb:59:6d:c1:f9:55:8a:46: 4a:5b:68:c3:67:0d:44:01:2b:8e:91:36:6e:4f:6e: 49:b8:13:54:b7:a3:fc:e5:75:bf:d0:2f:04:fd:5e: aa:f7:55:f5:d2:45:d2:d6:bb:d2:bc:43:21:dd:37: 99:6c:54:0f:ee:d0:cd:55:f8:20:94:55:c9:2e:65: 0a:0e:5c:04:10:92:f3:7e:b7:06:0d:b3:71:6f:7d: 4a:82:64:c6:3c:9c:d9:f7:16:3e:9e:e2:ad:d1:35: 0f:d8:f3:57:2b:63:16:71:f2:ba:37:eb:d6:8a:e1: d3:d3:fd:e5:91:a1:25:18:0a:a4:4f:df:65:47:f0: 5c:1c:a8:88:68:cc:75:7b:c8:ab:43:35:e3:f4:94: ac:26:6a:98:9c:55:71:8f:95:8b:0f:83:25:04:37: f2:06:06:c8:a7:04:4b:6e:1f:6f:1a:85:bf:46:8f: 74:1f:e2:ac:c9:9c:aa:27:15:fe:9f:e4:e3:b3:c8: 4a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:54:FA:F0:CD:5C:69:2C:FB:53:34:B1:62:83:0F:12:1F:26:D5:72 X509v3 Authority Key Identifier: keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:66:bf:46:8c:a2:3d:05:3b:86:52:a5:8b:35:76:65:78:c2: 29:af:53:1e:53:6e:69:4a:74:2c:0d:93:eb:e2:f8:4f:77:c7: be:f8:27:7b:01:46:82:e9:7b:af:d3:38:59:4d:e0:ed:28:71: a3:83:e4:8d:e0:46:31:a4:13:d2:c9:1a:83:63:75:55:26:bf: d8:ee:56:7e:35:ec:7b:d6:82:4f:74:66:04:74:fa:14:27:0f: 6a:b8:3a:bd:02:42:e4:56:83:ed:e7:1f:42:ed:44:a9:60:27: 96:91:b2:2c:e1:25:48:68:6a:46:e5:e3:75:13:c7:13:a8:60: 17:57:d2:b0:8d:7a:98:34:63:96:eb:85:89:45:69:be:93:89: ee:a1:6d:6e:95:59:e3:d5:64:8e:52:6f:05:8d:3b:0d:6d:2e: 8d:18:dc:53:8e:98:02:af:fd:da:48:26:6c:da:0c:f6:54:00: 96:5b:0f:15:04:44:ad:4b:2d:b7:30:7a:89:6d:72:2a:57:46: 74:ff:a3:c5:29:1f:33:ea:e7:54:85:a5:0e:bc:74:ef:20:a2: 29:f9:9e:85:ff:60:8a:e1:fe:a6:d9:fd:f5:60:5b:bd:96:04: 51:1c:44:9a:96:c1:5a:fd:b0:25:b5:af:88:74:39:79:28:26: 8a:f4:9d:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE2NDkxMTAvBgNVBAUTKEI5RUIxNTQ4NjY3NzczN0RCMjczOUZENjU0NjJBRUU3 OTA2MTY4QzIwHhcNMjQxMTIyMTgzOTUwWhcNMjQxMTI5MTgzOTUwWjAYMRYwFAYD VQQDEw02NzQwY2ZmNi1hOTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6cYl2pA9COP2kvNfjjv8nCoTSG8gNtemOSGIhVZ97WZ3vpdiHpDf67BtQ8H kjLr2kS/+xc9t5+TsfU6LISeITn7u1ltwflVikZKW2jDZw1EASuOkTZuT25JuBNU t6P85XW/0C8E/V6q91X10kXS1rvSvEMh3TeZbFQP7tDNVfgglFXJLmUKDlwEEJLz frcGDbNxb31KgmTGPJzZ9xY+nuKt0TUP2PNXK2MWcfK6N+vWiuHT0/3lkaElGAqk T99lR/BcHKiIaMx1e8irQzXj9JSsJmqYnFVxj5WLD4MlBDfyBgbIpwRLbh9vGoW/ Ro90H+KsyZyqJxX+n+Tjs8hKzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtU+vDN XGks+1M0sWKDDxIfJtVyMB8GA1UdIwQYMBaAFLnrFUhmd3N9snOf1lRirueQYWjC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTY0OS81RDk3Nzc0QzBG NTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2MzMnljNV9XVkdLdTU1Qmhh TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vlc1ZTR1ozYzMyeWM1X1dWR0t1NTVCaGFNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTY0OS81RDk3Nzc0QzBGNTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2Mz MnljNV9XVkdLdTU1QmhhTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmZr9GjKI9BTuGUqWLNXZleMIpr1MeU25pSnQsDZPr4vhPd8e++Cd7 AUaC6Xuv0zhZTeDtKHGjg+SN4EYxpBPSyRqDY3VVJr/Y7lZ+Nex71oJPdGYEdPoU Jw9quDq9AkLkVoPt5x9C7USpYCeWkbIs4SVIaGpG5eN1E8cTqGAXV9KwjXqYNGOW 64WJRWm+k4nuoW1ulVnj1WSOUm8FjTsNbS6NGNxTjpgCr/3aSCZs2gz2VACWWw8V BEStSy23MHqJbXIqV0Z0/6PFKR8z6udUhaUOvHTvIKIp+Z6F/2CK4f6m2f31YFu9 lgRRHESalsFa/bAlta+IdDl5KCaK9J36 -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org