$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft File: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft (raw, json) Hash identifier: tNwMTlODK8NhNwD3j7UuDODzchshphW4TCVAH9B9WlY= Subject key identifier: 87:03:0C:A5:5A:FC:3B:7B:AC:53:A1:E6:3B:EE:19:6F:F8:5B:AA:0E Authority key identifier: 51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB Certificate issuer: /CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft Manifest number: 0183 Signing time: Sat 23 Nov 2024 02:02:10 +0000 Manifest this update: Sat 23 Nov 2024 02:02:10 +0000 Manifest next update: Sat 30 Nov 2024 02:02:10 +0000 Files and hashes: 1: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl (hash: 1WeKstGWbie9tEd6jqlOoJLd/5m5FYme/s4DleGFVJY=) 2: F23AE0AE632D11ED8C102087C4F9AE02.roa (hash: ALMLm78gllLBfFwEbfYMxy6G6W9jUB1EmmnPpTHelsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB Validity Not Before: Nov 23 02:02:10 2024 GMT Not After : Nov 30 02:02:10 2024 GMT Subject: CN=674137a2-1494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:db:77:63:1a:9a:21:be:82:46:a0:05:a8:35: 2a:d4:ba:22:c4:26:2e:94:fa:8c:20:72:30:d8:f7: a2:8f:22:19:32:2a:15:2b:e8:19:de:6b:dc:c5:3f: 2f:5b:4f:1f:a5:85:87:da:c2:cb:62:41:35:6d:1a: c6:ae:e1:a7:3e:f7:3a:b1:6c:2b:fc:33:b8:f1:b4: 37:e3:3c:b6:a0:39:a3:6f:54:64:c9:03:8b:58:19: b4:08:9f:ef:4d:67:91:5b:58:e8:0c:d4:03:3f:9d: 67:89:e3:c3:0a:4f:f2:87:48:11:d0:05:e3:26:90: e3:11:d9:13:f1:1c:fa:13:76:04:76:7c:e2:6e:07: 0c:5d:04:ff:e6:d7:77:08:ec:8c:ca:c6:3d:8a:ab: 23:8e:68:46:59:98:e8:59:23:08:c0:0d:39:00:6b: 38:9a:3f:80:4d:18:15:e4:7e:08:76:30:c2:7a:98: ed:e8:d8:68:66:b4:55:8b:94:8f:d0:0e:35:87:ce: 8f:08:8e:f0:55:5e:d5:fb:2c:cb:06:fd:ba:0f:60: 70:fa:d2:d5:4c:15:11:10:c6:21:24:9e:b1:fd:18: 21:ee:a3:5c:11:f9:7b:b5:1d:69:6b:20:3b:cc:52: b3:5f:e4:96:00:bb:22:43:9f:56:93:31:77:50:0f: 39:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:03:0C:A5:5A:FC:3B:7B:AC:53:A1:E6:3B:EE:19:6F:F8:5B:AA:0E X509v3 Authority Key Identifier: keyid:51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:d6:0c:af:8d:69:62:58:e5:22:53:47:ec:4d:22:53:87:4c: 87:ad:ee:cd:26:78:2b:75:cb:12:ee:97:6e:06:d7:52:0c:c2: ed:ec:e8:86:f2:e3:0d:c8:62:8e:6c:e4:5b:c1:0a:3c:10:aa: 55:46:7a:1f:be:33:e3:f3:3f:1f:09:dd:f5:87:17:ba:63:e2: af:99:f3:64:a7:5d:f6:a3:fe:3a:f1:63:79:df:f4:1e:3e:06: db:cf:42:27:6c:5d:aa:a1:64:fc:bb:ee:f2:6f:94:24:a7:f3: 06:49:be:67:93:1d:a7:13:fd:8b:16:81:37:b0:65:e4:dc:94: 74:71:5f:51:97:10:4c:45:e8:e1:86:0c:ea:11:f8:c2:6e:9f: a5:86:22:81:b9:e3:14:b5:9c:26:37:b5:fd:07:42:ba:7e:72: 8f:e3:cf:45:b7:dd:80:8c:13:45:bb:be:1f:39:25:de:b9:9b: 64:63:14:b1:0d:c9:0f:25:a7:89:56:db:a8:cd:38:02:4e:c2: 1b:f5:20:87:d8:7a:e5:f7:e1:e1:06:27:19:cb:e6:f1:5e:45: 5e:58:5b:ae:58:39:8f:81:56:7d:f7:97:d1:e4:a8:aa:7a:31: 81:e3:17:19:3a:fc:fc:51:c9:56:3d:c3:5c:c6:8e:11:31:60: 55:21:cc:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1MDkxMTAvBgNVBAUTKDUxQkVBMzYwOTQyOUQ5MUIxQzRFNDAyMkRBNjhCRDY0 M0MzM0MzRkIwHhcNMjQxMTIzMDIwMjEwWhcNMjQxMTMwMDIwMjEwWjAYMRYwFAYD VQQDEw02NzQxMzdhMi0xNDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNt3YxqaIb6CRqAFqDUq1LoixCYulPqMIHIw2PeijyIZMioVK+gZ3mvcxT8v W08fpYWH2sLLYkE1bRrGruGnPvc6sWwr/DO48bQ34zy2oDmjb1RkyQOLWBm0CJ/v TWeRW1joDNQDP51niePDCk/yh0gR0AXjJpDjEdkT8Rz6E3YEdnzibgcMXQT/5td3 COyMysY9iqsjjmhGWZjoWSMIwA05AGs4mj+ATRgV5H4IdjDCepjt6NhoZrRVi5SP 0A41h86PCI7wVV7V+yzLBv26D2Bw+tLVTBUREMYhJJ6x/Rgh7qNcEfl7tR1payA7 zFKzX+SWALsiQ59WkzF3UA85YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcDDKVa /Dt7rFOh5jvuGW/4W6oOMB8GA1UdIwQYMBaAFFG+o2CUKdkbHE5AItpovWQ8M8P7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUwOS8yNzRFRDE1RTYw MUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJSc2NUa0FpMm1pOVpEd3p3 X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ViNmpZSlFwMlJzY1RrQWkybWk5WkR3endfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTUwOS8yNzRFRDE1RTYwMUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJS c2NUa0FpMm1pOVpEd3p3X3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA11gyvjWliWOUiU0fsTSJTh0yHre7NJngrdcsS7pduBtdSDMLt7OiG 8uMNyGKObORbwQo8EKpVRnofvjPj8z8fCd31hxe6Y+KvmfNkp132o/468WN53/Qe Pgbbz0InbF2qoWT8u+7yb5Qkp/MGSb5nkx2nE/2LFoE3sGXk3JR0cV9RlxBMRejh hgzqEfjCbp+lhiKBueMUtZwmN7X9B0K6fnKP489Ft92AjBNFu74fOSXeuZtkYxSx DckPJaeJVtuozTgCTsIb9SCH2Hrl9+HhBicZy+bxXkVeWFuuWDmPgVZ995fR5Kiq ejGB4xcZOvz8UclWPcNcxo4RMWBVIcyW -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org