$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft File: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json) Hash identifier: 9XrJpvfxcwBs6ilwll71pLqR32muUNBoZng3I5V8opc= Subject key identifier: 1B:2E:1A:7F:01:C4:94:D3:3C:36:22:16:CE:43:06:AC:75:BC:79:58 Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 041A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft Manifest number: 0408 Signing time: Sat 23 Nov 2024 00:03:21 +0000 Manifest this update: Sat 23 Nov 2024 00:03:20 +0000 Manifest next update: Sat 30 Nov 2024 00:03:20 +0000 Files and hashes: 1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: AojzEcGccoNQKD9YrtTkJo9Y0XzJNsapQ+snrvHNPck=) 2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: SXmEoVAwCuv2S1VkQaBNQLi7h8OwZxPvKiz0YPbjYQg=) 3: 8120226CBEE111ECBFC4F882C4F9AE02.roa (hash: cKv5ZDuMTRB1GZ6qDVjyr/DKInN5ROhN7fMypCO2t9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: Nov 23 00:03:20 2024 GMT Not After : Nov 30 00:03:20 2024 GMT Subject: CN=67411bc9-5aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:10:f0:6a:d3:60:76:54:58:60:12:98:a5:cb: f0:e4:ed:0f:2c:e5:b4:b7:71:98:24:a2:4f:74:93: 3c:7c:1a:e4:b6:eb:a0:f5:ee:ce:48:d4:1a:0f:12: 16:1f:a8:c7:50:3c:a4:8c:81:89:d6:b7:39:07:eb: de:98:22:ba:83:c9:8a:2e:46:ce:8c:19:be:25:c2: df:77:e8:c4:c6:ec:9c:e1:f2:30:3a:a0:fd:78:1e: 6c:33:cf:3a:1a:11:82:33:51:01:7f:f9:b9:18:8d: ca:84:f4:e9:d9:09:ef:3a:d4:6e:68:c4:6e:2c:b9: 94:d6:c5:a8:5f:a8:b3:24:72:d2:bb:cc:b4:39:c4: f3:1a:bb:e6:32:5d:e8:03:11:00:e7:8a:4c:89:40: 68:f1:90:ff:5b:27:bf:7e:e6:5e:b8:8d:a9:12:5c: be:8d:76:ba:b9:7e:8b:0b:35:c7:f3:47:eb:90:d6: be:e6:e0:3f:36:d5:ea:04:5a:bb:07:9c:73:be:57: a5:9b:ab:b6:7e:73:f1:fb:d5:ec:18:4e:5c:ad:bd: 11:90:43:39:e4:b0:cd:a1:ae:0b:c3:f4:f0:8f:d6: 8d:90:3a:14:d5:b1:65:ed:2a:42:43:96:60:a1:b7: 1d:31:f5:b9:e5:33:ef:aa:4a:1a:b3:60:d3:ff:61: 4e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2E:1A:7F:01:C4:94:D3:3C:36:22:16:CE:43:06:AC:75:BC:79:58 X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:b2:83:8b:ca:59:4f:53:47:46:03:59:f4:18:ed:ce:6d:95: 8c:bc:41:44:be:ce:55:e5:25:eb:bf:97:44:85:11:7e:84:1c: ff:de:b0:4b:79:d5:8b:53:37:2a:02:34:64:e1:c9:08:43:ca: 36:7a:05:35:78:7c:2d:82:cd:32:76:e0:ce:b4:5b:30:24:e3: c1:83:38:9f:ea:3a:7a:1f:59:a6:fd:9d:cd:56:d1:5f:d2:b6: 63:fe:c9:b0:e0:73:cf:4f:73:b9:f0:96:be:bd:19:2f:fb:02: 8e:6e:f4:d7:f0:5d:0a:fd:c7:c7:50:eb:29:b3:eb:d1:c3:2b: 58:5f:fc:9b:3e:c0:0b:2d:ea:b8:2f:11:84:a6:cb:e5:ba:52: 50:15:a1:2e:44:8d:f3:dc:5b:cb:f9:5d:26:97:2e:2c:aa:c7: 48:85:32:21:34:e6:71:2c:f3:ac:8e:20:b3:a6:37:8f:2d:0d: fd:31:3a:59:32:87:b6:36:42:4b:8a:f8:9d:cd:1e:6e:c8:3f: 82:ee:02:2f:8c:84:53:97:59:c6:e4:c8:6d:1e:ce:55:dd:4a: fe:f1:e7:86:41:5d:61:fc:4a:25:b9:d9:ca:55:ab:58:7e:09: 9a:bf:cc:b7:5e:a7:ac:40:36:86:a4:8e:3a:ce:ec:a4:e4:6f: 08:53:c5:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjQxMTIzMDAwMzIwWhcNMjQxMTMwMDAwMzIwWjAYMRYwFAYD VQQDEw02NzQxMWJjOS01YWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxDwatNgdlRYYBKYpcvw5O0PLOW0t3GYJKJPdJM8fBrktuug9e7OSNQaDxIW H6jHUDykjIGJ1rc5B+vemCK6g8mKLkbOjBm+JcLfd+jExuyc4fIwOqD9eB5sM886 GhGCM1EBf/m5GI3KhPTp2QnvOtRuaMRuLLmU1sWoX6izJHLSu8y0OcTzGrvmMl3o AxEA54pMiUBo8ZD/Wye/fuZeuI2pEly+jXa6uX6LCzXH80frkNa+5uA/NtXqBFq7 B5xzvlelm6u2fnPx+9XsGE5crb0RkEM55LDNoa4Lw/Twj9aNkDoU1bFl7SpCQ5Zg obcdMfW55TPvqkoas2DT/2FO1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsuGn8B xJTTPDYiFs5DBqx1vHlYMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQ2Ny83NzBCNEYxQTUyNkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19r cmNvUE5GczJGNlk4TUhXRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjsoOLyllPU0dGA1n0GO3ObZWMvEFEvs5V5SXrv5dEhRF+hBz/3rBL edWLUzcqAjRk4ckIQ8o2egU1eHwtgs0yduDOtFswJOPBgzif6jp6H1mm/Z3NVtFf 0rZj/smw4HPPT3O58Ja+vRkv+wKObvTX8F0K/cfHUOsps+vRwytYX/ybPsALLeq4 LxGEpsvlulJQFaEuRI3z3FvL+V0mly4sqsdIhTIhNOZxLPOsjiCzpjePLQ39MTpZ Moe2NkJLividzR5uyD+C7gIvjIRTl1nG5MhtHs5V3Ur+8eeGQV1h/EoludnKVatY fgmav8y3XqesQDaGpI46zuyk5G8IU8WB -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org