$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft File: UgGonTDEgplFBBjJVrh3JJcG6Vc.mft (raw, json) Hash identifier: UV9gI+UqA/8MnKj+l/IF5BFjJFQHoMY951w/SMXIHN8= Subject key identifier: D2:A8:8E:18:10:CD:36:74:6A:97:2D:46:79:97:A0:9C:EB:B6:24:52 Authority key identifier: 52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57 Certificate issuer: /CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957 Certificate serial: 04D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft Manifest number: 04CD Signing time: Fri 22 Nov 2024 23:21:39 +0000 Manifest this update: Fri 22 Nov 2024 23:21:38 +0000 Manifest next update: Fri 29 Nov 2024 23:21:38 +0000 Files and hashes: 1: UgGonTDEgplFBBjJVrh3JJcG6Vc.crl (hash: +9Jmoct7RoeaXyrVWUnXECqIEMzj6cnRr3s4AHGxnF4=) 2: FAF4A0E0FB3211EB967B1759C4F9AE02.roa (hash: 8p1P4mNUhhk/yC7+ElhDZdRf1VN2ly1Yqll2ITw0L78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1233 (0x4d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957 Validity Not Before: Nov 22 23:21:38 2024 GMT Not After : Nov 29 23:21:38 2024 GMT Subject: CN=67411202-2661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3a:97:79:21:a7:d8:33:e8:e0:0a:7d:5c:9e: ed:b6:a9:04:cc:f3:9e:4e:01:18:59:9c:e7:2d:01: 71:56:11:6c:00:2d:f4:62:52:d1:ac:f8:db:16:a9: 19:ad:c6:00:14:63:72:8f:ef:78:c9:90:97:c3:07: 6e:b3:f7:11:ca:f3:4c:7d:d4:f6:11:f7:8a:a7:ec: 85:28:88:22:88:3f:aa:b8:b9:17:6f:9d:d7:e1:14: 30:0f:4e:6e:1b:44:71:69:c3:ec:4c:b0:63:ff:2c: 98:f9:b6:5c:47:1c:9b:36:92:3a:07:95:eb:7a:c1: 83:50:c4:47:15:a6:e9:e8:54:4a:6f:e0:5d:32:a5: d1:d4:04:af:db:ba:5c:f6:80:6c:88:cb:40:45:1b: 59:02:77:ab:f0:f2:3c:44:82:5c:a3:05:7d:9a:02: 1a:81:6b:32:3f:57:a4:00:36:e7:f6:6f:b7:ab:17: a5:92:71:67:51:bc:46:39:8d:52:cd:df:24:89:28: 06:61:bd:3f:2a:05:85:f4:bd:5f:9e:9f:85:ae:99: 61:9c:14:36:ce:4a:b7:51:01:5c:e3:4b:c4:56:84: 70:03:b5:9f:3e:bb:97:61:0e:ee:b9:68:61:1e:55: 25:e0:ee:27:b8:73:53:5e:68:27:de:17:28:d2:3f: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A8:8E:18:10:CD:36:74:6A:97:2D:46:79:97:A0:9C:EB:B6:24:52 X509v3 Authority Key Identifier: keyid:52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:55:fa:1d:bc:58:a8:6c:30:e2:c0:96:ec:19:29:b7:2a:63: 5f:d2:1f:08:31:84:45:27:23:f5:69:ce:5f:77:6b:69:4e:26: 75:ff:7b:68:eb:bf:55:69:13:f1:c1:4c:bb:1f:73:81:4f:d4: 17:33:2f:21:52:f6:b3:69:8a:68:dd:20:4b:26:77:4b:62:65: 6b:28:48:9d:d1:a4:70:eb:3f:bb:b1:4a:66:22:c4:dd:7b:fe: 8b:e9:f1:b4:fc:a3:df:20:6d:d1:47:fa:e9:2b:09:92:f5:b3: 2b:8e:a7:79:13:38:22:89:80:7f:e5:06:85:3a:89:7d:47:cd: 4c:5a:2d:8a:a4:5c:d4:b2:f3:a9:3b:c2:26:02:9a:aa:78:c0: 71:5d:f2:44:4a:3f:99:13:6d:0c:83:25:b1:9e:45:bb:cc:e0: 0c:58:97:db:60:5c:05:c3:66:b9:76:79:99:ab:4c:07:bb:fa: 6b:f2:54:54:7d:43:49:b9:5a:59:d0:96:74:82:a6:7f:0b:2b: 53:6a:09:d1:4a:7c:2b:0a:d8:96:2a:02:e2:4e:02:e3:0d:73: d9:05:ca:b5:08:f2:50:78:66:60:50:7c:62:3e:68:99:a8:16: 75:30:c2:59:58:db:2c:79:13:04:d0:b0:75:da:e7:3a:51:f8: fe:ea:0a:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFOTQxMTAvBgNVBAUTKDUyMDFBODlEMzBDNDgyOTk0NTA0MThDOTU2Qjg3NzI0 OTcwNkU5NTcwHhcNMjQxMTIyMjMyMTM4WhcNMjQxMTI5MjMyMTM4WjAYMRYwFAYD VQQDEw02NzQxMTIwMi0yNjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zqXeSGn2DPo4Ap9XJ7ttqkEzPOeTgEYWZznLQFxVhFsAC30YlLRrPjbFqkZ rcYAFGNyj+94yZCXwwdus/cRyvNMfdT2EfeKp+yFKIgiiD+quLkXb53X4RQwD05u G0RxacPsTLBj/yyY+bZcRxybNpI6B5XresGDUMRHFabp6FRKb+BdMqXR1ASv27pc 9oBsiMtARRtZAner8PI8RIJcowV9mgIagWsyP1ekADbn9m+3qxelknFnUbxGOY1S zd8kiSgGYb0/KgWF9L1fnp+FrplhnBQ2zkq3UQFc40vEVoRwA7WfPruXYQ7uuWhh HlUl4O4nuHNTXmgn3hco0j9+fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKojhgQ zTZ0apctRnmXoJzrtiRSMB8GA1UdIwQYMBaAFFIBqJ0wxIKZRQQYyVa4dySXBulX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U5NC9BMkE3MEM1QUZC MkYxMUVCQTg0MDlFNTRDNEY5QUUwMi9VZ0dvblRERWdwbEZCQmpKVnJoM0pKY0c2 VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VnR29uVERFZ3BsRkJCakpWcmgzSkpjRzZWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U5NC9BMkE3MEM1QUZCMkYxMUVCQTg0MDlFNTRDNEY5QUUwMi9VZ0dvblRERWdw bEZCQmpKVnJoM0pKY0c2VmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqVfodvFiobDDiwJbsGSm3KmNf0h8IMYRFJyP1ac5fd2tpTiZ1/3to 679VaRPxwUy7H3OBT9QXMy8hUvazaYpo3SBLJndLYmVrKEid0aRw6z+7sUpmIsTd e/6L6fG0/KPfIG3RR/rpKwmS9bMrjqd5EzgiiYB/5QaFOol9R81MWi2KpFzUsvOp O8ImApqqeMBxXfJESj+ZE20MgyWxnkW7zOAMWJfbYFwFw2a5dnmZq0wHu/pr8lRU fUNJuVpZ0JZ0gqZ/CytTagnRSnwrCtiWKgLiTgLjDXPZBcq1CPJQeGZgUHxiPmiZ qBZ1MMJZWNsseRME0LB12uc6Ufj+6goY -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org