$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft File: uXgEM1AwWT1tlle8RdvRFLEpHSg.mft (raw, json) Hash identifier: z4VyOhxWbSLqgauFhlmZZnEYJB4llf2le1xQe4Y0Nm4= Subject key identifier: 14:C2:FC:15:9D:BD:1E:CD:AE:16:7A:DE:8C:E0:A5:2D:17:A3:55:B8 Authority key identifier: B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28 Certificate issuer: /CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28 Certificate serial: 03F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft Manifest number: 03EF Signing time: Sat 23 Nov 2024 00:04:42 +0000 Manifest this update: Sat 23 Nov 2024 00:04:42 +0000 Manifest next update: Sat 30 Nov 2024 00:04:42 +0000 Files and hashes: 1: uXgEM1AwWT1tlle8RdvRFLEpHSg.crl (hash: j2J+6Ang0tHol2/TSAfrYv5NlwcKUP9WocFym+5cfSA=) 2: E8E2B0AE546511EC8B4A436BC4F9AE02.roa (hash: 0phu+tJMxSS2dc3lXAV/zfhAZUkWDerNss4m8iV6lFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1010 (0x3f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28 Validity Not Before: Nov 23 00:04:42 2024 GMT Not After : Nov 30 00:04:42 2024 GMT Subject: CN=67411c1a-9328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1c:e7:d4:71:3a:44:df:9b:fc:34:d5:c5:da: 3d:73:cb:cf:a9:c8:a2:7f:ce:ed:81:93:ae:3d:38: d3:6a:ba:74:23:70:62:a4:a9:b5:7d:ed:18:68:27: dd:3d:00:03:5e:e3:6b:24:04:06:8b:25:90:61:c7: 34:4c:13:5f:ad:62:14:80:5a:c8:c8:cb:6c:bf:e1: 6e:4d:17:0f:ba:34:15:58:9b:b9:41:71:62:d1:04: 2f:7d:96:68:d6:6a:84:75:80:ba:9a:02:2a:58:09: e0:93:39:df:cd:4d:ce:4d:58:a0:38:63:89:44:96: 72:f6:3b:c1:b0:ce:70:a1:44:b0:58:24:61:92:3c: f2:f6:e9:b0:07:0d:ac:cf:7a:64:5f:0d:15:59:5f: 56:58:3b:f8:ed:25:1e:eb:a3:3f:89:6d:b3:f8:2e: 4b:38:54:7e:0e:8e:a6:90:75:ba:ee:e5:91:40:a5: 39:6b:04:7a:a9:60:6d:ba:92:fe:a5:ec:3b:ce:60: 96:f6:da:97:79:e1:1e:09:26:ca:9c:d8:c3:bd:88: 34:a1:26:ca:c3:a0:28:f3:fd:4d:91:5a:82:c0:9c: 47:88:ba:94:0e:40:b9:ee:a4:5d:14:c6:09:11:f3: dd:22:fa:a0:d1:a1:06:67:96:db:02:90:80:53:88: 35:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C2:FC:15:9D:BD:1E:CD:AE:16:7A:DE:8C:E0:A5:2D:17:A3:55:B8 X509v3 Authority Key Identifier: keyid:B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:e5:7e:9d:88:5c:eb:77:fa:6a:c3:9c:1e:ac:2b:02:8e:c0: 87:e2:74:fb:25:5f:11:51:3f:8c:1a:db:68:90:3a:7c:b7:d4: 7d:57:f3:dd:a9:dd:68:fa:cf:bc:57:3c:81:d5:0c:e0:14:c1: d8:25:87:aa:44:d0:0e:f9:01:4b:f7:8d:10:e1:be:bb:cf:ac: 9a:f5:cd:ec:51:f8:86:16:31:79:4a:72:79:d6:3d:99:cf:37: f6:93:d5:d1:f6:a6:18:d4:62:de:14:19:66:e4:34:aa:17:a0: d1:c9:eb:34:50:52:d6:21:95:4d:1a:c6:ce:de:87:d9:97:47: 12:dc:7d:61:e6:9d:3b:95:f7:9d:98:a8:09:fc:94:bf:43:47: ed:f6:b8:76:d4:4e:ab:d6:cf:f2:3d:a9:2d:2d:f0:11:a7:52: b3:51:4f:0a:71:17:22:c6:06:29:2e:7a:bd:88:6c:8f:5e:ed: 8c:57:65:41:d0:31:f1:e5:65:2a:6e:1d:9b:e1:f7:5b:4c:77: b2:b8:1e:55:a8:81:a7:c6:f4:c4:71:f4:6a:19:e8:17:a6:bf: 6a:21:b1:99:79:d3:27:22:6e:f0:3b:dd:01:8c:53:96:5e:5d: 60:f6:b5:91:b4:5e:d4:0f:14:a3:b2:85:9b:92:8a:1f:11:d7: 0f:3e:63:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkzMTAxMTAvBgNVBAUTKEI5NzgwNDMzNTAzMDU5M0Q2RDk2NTdCQzQ1REJEMTE0 QjEyOTFEMjgwHhcNMjQxMTIzMDAwNDQyWhcNMjQxMTMwMDAwNDQyWjAYMRYwFAYD VQQDEw02NzQxMWMxYS05MzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohzn1HE6RN+b/DTVxdo9c8vPqciif87tgZOuPTjTarp0I3BipKm1fe0YaCfd PQADXuNrJAQGiyWQYcc0TBNfrWIUgFrIyMtsv+FuTRcPujQVWJu5QXFi0QQvfZZo 1mqEdYC6mgIqWAngkznfzU3OTVigOGOJRJZy9jvBsM5woUSwWCRhkjzy9umwBw2s z3pkXw0VWV9WWDv47SUe66M/iW2z+C5LOFR+Do6mkHW67uWRQKU5awR6qWBtupL+ pew7zmCW9tqXeeEeCSbKnNjDvYg0oSbKw6Ao8/1NkVqCwJxHiLqUDkC57qRdFMYJ EfPdIvqg0aEGZ5bbApCAU4g1yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTC/BWd vR7NrhZ63ozgpS0Xo1W4MB8GA1UdIwQYMBaAFLl4BDNQMFk9bZZXvEXb0RSxKR0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTMxMC9EMUIxRDM0NDU0 NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dUMXRsbGU4UmR2UkZMRXBI U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYZ0VNMUF3V1QxdGxsZThSZHZSRkxFcEhTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTMxMC9EMUIxRDM0NDU0NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dU MXRsbGU4UmR2UkZMRXBIU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh5X6diFzrd/pqw5werCsCjsCH4nT7JV8RUT+MGttokDp8t9R9V/Pd qd1o+s+8VzyB1QzgFMHYJYeqRNAO+QFL940Q4b67z6ya9c3sUfiGFjF5SnJ51j2Z zzf2k9XR9qYY1GLeFBlm5DSqF6DRyes0UFLWIZVNGsbO3ofZl0cS3H1h5p07lfed mKgJ/JS/Q0ft9rh21E6r1s/yPaktLfARp1KzUU8KcRcixgYpLnq9iGyPXu2MV2VB 0DHx5WUqbh2b4fdbTHeyuB5VqIGnxvTEcfRqGegXpr9qIbGZedMnIm7wO90BjFOW Xl1g9rWRtF7UDxSjsoWbkoofEdcPPmM/ -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org