$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft File: RUCi-buGGfZIYtCWyEyTjoivPGw.mft (raw, json) Hash identifier: K6+mTEVuD7O9BkDBJKBnXwpgLzlekHVqPo0tE874Mew= Subject key identifier: E3:41:D0:A0:22:10:30:E3:51:0A:35:33:93:26:47:5E:30:AD:B3:72 Authority key identifier: 45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C Certificate issuer: /CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft Manifest number: 0108 Signing time: Sat 23 Nov 2024 03:09:40 +0000 Manifest this update: Sat 23 Nov 2024 03:09:40 +0000 Manifest next update: Sat 30 Nov 2024 03:09:40 +0000 Files and hashes: 1: RUCi-buGGfZIYtCWyEyTjoivPGw.crl (hash: tAgABgjQhNY7R/4AvhBMXWyqw95v00E60+Qqhhdunds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C Validity Not Before: Nov 23 03:09:40 2024 GMT Not After : Nov 30 03:09:40 2024 GMT Subject: CN=67414774-ef1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d4:1d:17:e5:45:80:f5:8e:6d:79:b8:29:c8: da:ea:3f:ce:41:45:6c:6a:15:2c:46:8c:c3:dc:4e: af:d5:f5:b6:01:93:e5:54:3d:d5:f1:85:f4:c1:7c: 19:4a:ea:82:ba:b9:ed:f7:25:6f:b5:a6:00:b7:7e: c2:36:e8:50:8a:18:b8:d2:52:9e:99:2f:c4:43:af: a1:53:cb:97:b4:4e:f3:17:8e:8e:73:61:c1:65:1a: cc:99:b0:03:4b:8f:9e:f1:26:eb:24:2e:b2:3b:71: 9a:2a:85:de:8f:75:c1:a1:bd:58:6f:1d:c4:f7:61: 5c:a2:55:da:a2:0f:14:85:a3:47:38:c0:d9:39:7f: 74:ea:1c:df:10:53:5b:4f:85:9d:cd:4d:d8:72:6d: 7a:95:5a:78:01:54:0e:6a:dd:25:d3:a3:f9:70:5c: 59:fe:f5:5a:62:28:b9:2a:2d:a5:c2:10:a1:53:16: 31:5d:9e:e3:28:a9:ca:be:73:e7:08:4a:18:b7:0d: 0d:d6:e6:13:79:f8:cf:b9:9f:9a:cf:17:25:4f:6f: cd:c3:d9:e0:49:f4:c4:74:f1:0e:bc:73:21:40:e8: 6d:66:f8:f1:2f:65:44:f4:a0:35:d0:4a:e1:d2:a1: 97:50:30:8e:15:72:10:60:c0:32:a4:a4:20:50:11: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:41:D0:A0:22:10:30:E3:51:0A:35:33:93:26:47:5E:30:AD:B3:72 X509v3 Authority Key Identifier: keyid:45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:74:cb:58:a9:68:d7:ec:a4:07:f5:db:af:19:bf:0e:27:40: ef:6a:50:ba:d8:f7:99:6f:cb:8b:e3:7a:73:38:74:7a:ac:a0: e0:06:1d:59:a7:12:87:b6:78:af:d5:0e:eb:3d:e8:9d:ac:52: 7e:46:e3:c0:21:19:8b:69:2e:c5:e1:13:db:1e:dc:9c:d6:76: 46:41:35:cb:4c:83:b7:32:4a:f0:fa:09:f7:f7:b8:bf:ff:17: ee:44:a5:77:69:a9:de:83:ff:51:0b:bc:33:3a:26:ec:df:28: 7e:3a:cc:e6:5f:61:ee:a3:22:28:6c:ff:fc:29:22:3c:6d:99: 3a:56:b1:cf:d9:65:99:74:90:c1:05:d6:ba:9c:c1:f1:5c:e8: 8d:4f:19:14:ac:7e:37:1d:6f:9d:c8:d9:25:15:ad:99:55:e5: ea:b7:08:da:b3:b8:ff:4f:de:c9:df:4d:f5:ef:37:43:a0:ff: 1e:36:62:39:11:fc:41:bc:bf:db:3e:67:3e:5c:10:a1:44:6c: a5:0d:a3:1c:e1:4a:b6:27:1c:fb:af:55:e1:21:9f:b7:79:df: c8:6b:b2:e2:5d:9c:f7:f3:d6:36:f6:cc:52:cd:27:69:51:e3: 37:e9:62:bf:da:be:21:be:0e:9f:53:07:69:ab:e5:77:63:5e: 74:67:78:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENGM0QxMTAvBgNVBAUTKDQ1NDBBMkY5QkI4NjE5RjY0ODYyRDA5NkM4NEM5MzhF ODhBRjNDNkMwHhcNMjQxMTIzMDMwOTQwWhcNMjQxMTMwMDMwOTQwWjAYMRYwFAYD VQQDEw02NzQxNDc3NC1lZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NQdF+VFgPWObXm4Kcja6j/OQUVsahUsRozD3E6v1fW2AZPlVD3V8YX0wXwZ SuqCurnt9yVvtaYAt37CNuhQihi40lKemS/EQ6+hU8uXtE7zF46Oc2HBZRrMmbAD S4+e8SbrJC6yO3GaKoXej3XBob1Ybx3E92FcolXaog8UhaNHOMDZOX906hzfEFNb T4WdzU3Ycm16lVp4AVQOat0l06P5cFxZ/vVaYii5Ki2lwhChUxYxXZ7jKKnKvnPn CEoYtw0N1uYTefjPuZ+azxclT2/Nw9ngSfTEdPEOvHMhQOhtZvjxL2VE9KA10Erh 0qGXUDCOFXIQYMAypKQgUBHt2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONB0KAi EDDjUQo1M5MmR14wrbNyMB8GA1UdIwQYMBaAFEVAovm7hhn2SGLQlshMk46Irzxs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0YzRC9ERTI5RDUwQzEz RjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dmWklZdENXeUV5VGpvaXZQ R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JVQ2ktYnVHR2ZaSVl0Q1d5RXlUam9pdlBHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0YzRC9ERTI5RDUwQzEzRjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dm WklZdENXeUV5VGpvaXZQR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALdMtYqWjX7KQH9duvGb8OJ0DvalC62PeZb8uL43pzOHR6rKDgBh1Z pxKHtniv1Q7rPeidrFJ+RuPAIRmLaS7F4RPbHtyc1nZGQTXLTIO3Mkrw+gn397i/ /xfuRKV3aaneg/9RC7wzOibs3yh+OszmX2HuoyIobP/8KSI8bZk6VrHP2WWZdJDB Bda6nMHxXOiNTxkUrH43HW+dyNklFa2ZVeXqtwjas7j/T97J30317zdDoP8eNmI5 EfxBvL/bPmc+XBChRGylDaMc4Uq2Jxz7r1XhIZ+3ed/Ia7LiXZz389Y29sxSzSdp UeM36WK/2r4hvg6fUwdpq+V3Y150Z3gx -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org