$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft File: UkWN1qz9QNreWs3IL01ZLaUp58c.mft (raw, json) Hash identifier: 15ALTpHsNc85TirYGgsAC9RJCpOKyB4b4RxbcsxDoSk= Subject key identifier: 4F:01:F7:1C:8B:FD:FC:8A:BA:CD:C9:53:AF:54:6B:47:0D:CA:60:2F Authority key identifier: 52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 Certificate issuer: /CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Certificate serial: 08AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft Manifest number: 08AB Signing time: Fri 22 Nov 2024 20:15:04 +0000 Manifest this update: Fri 22 Nov 2024 20:15:03 +0000 Manifest next update: Fri 29 Nov 2024 20:15:03 +0000 Files and hashes: 1: UkWN1qz9QNreWs3IL01ZLaUp58c.crl (hash: xsLd0SVpyoxFYYeHm6mw7CfXiRp+9IhG5FNk3eK3gwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Validity Not Before: Nov 22 20:15:03 2024 GMT Not After : Nov 29 20:15:03 2024 GMT Subject: CN=6740e647-8256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:e2:b4:2e:68:6f:d2:d1:33:dc:e9:d2:34: 01:67:1e:30:59:07:cd:dd:1c:fd:33:9c:d1:3b:81: 9f:2c:06:b8:de:7a:4f:a6:ef:4d:d8:18:2b:9c:d4: c9:49:92:59:a5:5d:15:e2:55:fb:1b:7a:f2:63:49: 34:b9:74:63:a5:d4:b1:b4:90:d7:a6:19:7c:9d:06: dd:63:49:c3:bc:7e:78:d4:a1:94:93:c8:d6:0e:73: 29:ac:e1:a0:53:0d:a4:35:62:32:e1:1c:0d:14:ff: 1c:8c:f3:c8:4f:79:b5:54:28:a3:ff:e6:9e:40:bb: 86:c9:03:05:0a:91:27:aa:63:ed:dd:64:d5:f4:03: 19:4f:54:4e:8b:31:3a:53:b6:f0:a5:09:8e:42:c0: ef:40:21:12:05:13:fb:aa:0b:c1:01:a1:24:a2:9c: c2:f8:fc:e3:db:15:f7:37:86:23:d6:5d:a0:be:af: 54:d1:f2:8e:61:17:84:b9:71:b1:27:ec:55:60:74: 7e:41:d4:df:4e:92:e0:85:c9:1b:da:4c:4e:70:6b: 13:85:1e:40:49:08:87:b6:f6:c1:6a:f6:93:47:b3: 12:4b:8b:f4:3c:f8:72:43:0e:89:87:2c:34:a1:e7: 14:24:5b:93:58:e9:d3:4b:92:08:80:19:6e:f6:8e: 4d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:01:F7:1C:8B:FD:FC:8A:BA:CD:C9:53:AF:54:6B:47:0D:CA:60:2F X509v3 Authority Key Identifier: keyid:52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3c:16:5c:08:21:ec:bb:4a:d7:6c:28:ea:07:95:7c:24:0e: 9a:40:13:3e:28:c5:12:b2:97:7a:ad:90:ae:c4:09:87:48:5e: 73:2c:4b:9a:6f:2d:e9:29:e4:07:7e:39:e6:b2:35:87:18:9e: e2:9e:8e:ba:84:cf:87:5d:fd:33:f3:8f:48:0a:82:56:34:e0: c2:98:27:dd:da:df:cf:ea:79:86:62:ab:d9:45:28:77:6f:5c: f6:45:ad:92:00:ea:3f:e7:60:a7:42:00:07:ae:fe:5f:3b:23: 65:83:82:06:10:a5:49:b2:61:b2:e6:97:5d:8d:8d:0b:69:29: e0:f7:a8:47:21:f1:f3:df:6a:96:fb:fb:0c:04:06:2a:78:62: ce:e9:b3:b5:f5:b3:cc:62:32:ee:fc:c0:e2:23:68:e2:30:5e: 66:ed:d5:c6:ab:90:38:8b:71:06:f8:35:bc:63:81:eb:31:ed: 48:1b:2a:21:a8:51:41:4e:01:c6:e5:f1:c8:85:e0:61:5e:c1: 58:79:bb:53:15:82:71:01:dd:61:ee:ce:d5:ce:92:fc:0c:02: 9f:69:65:d8:65:7c:85:88:f9:e3:01:d4:72:6b:60:ee:22:a1: 65:f1:29:f1:d1:06:62:4d:9c:ee:9f:5e:16:b6:51:d7:0b:19: c8:6f:c7:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDUyNDU4REQ2QUNGRDQwREFERTVBQ0RDODJGNEQ1OTJE QTUyOUU3QzcwHhcNMjQxMTIyMjAxNTAzWhcNMjQxMTI5MjAxNTAzWjAYMRYwFAYD VQQDEw02NzQwZTY0Ny04MjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTjitC5ob9LRM9zp0jQBZx4wWQfN3Rz9M5zRO4GfLAa43npPpu9N2BgrnNTJ SZJZpV0V4lX7G3ryY0k0uXRjpdSxtJDXphl8nQbdY0nDvH541KGUk8jWDnMprOGg Uw2kNWIy4RwNFP8cjPPIT3m1VCij/+aeQLuGyQMFCpEnqmPt3WTV9AMZT1ROizE6 U7bwpQmOQsDvQCESBRP7qgvBAaEkopzC+Pzj2xX3N4Yj1l2gvq9U0fKOYReEuXGx J+xVYHR+QdTfTpLghckb2kxOcGsThR5ASQiHtvbBavaTR7MSS4v0PPhyQw6Jhyw0 oecUJFuTWOnTS5IIgBlu9o5NQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8B9xyL /fyKus3JU69Ua0cNymAvMB8GA1UdIwQYMBaAFFJFjdas/UDa3lrNyC9NWS2lKefH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8xQ0JGRTY0NEE1 MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFOcmVXczNJTDAxWkxhVXA1 OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VrV04xcXo5UU5yZVdzM0lMMDFaTGFVcDU4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8xQ0JGRTY0NEE1MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFO cmVXczNJTDAxWkxhVXA1OGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvPBZcCCHsu0rXbCjqB5V8JA6aQBM+KMUSspd6rZCuxAmHSF5zLEua by3pKeQHfjnmsjWHGJ7ino66hM+HXf0z849ICoJWNODCmCfd2t/P6nmGYqvZRSh3 b1z2Ra2SAOo/52CnQgAHrv5fOyNlg4IGEKVJsmGy5pddjY0LaSng96hHIfHz32qW +/sMBAYqeGLO6bO19bPMYjLu/MDiI2jiMF5m7dXGq5A4i3EG+DW8Y4HrMe1IGyoh qFFBTgHG5fHIheBhXsFYebtTFYJxAd1h7s7VzpL8DAKfaWXYZXyFiPnjAdRya2Du IqFl8Snx0QZiTZzun14WtlHXCxnIb8cg -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org