$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json) Hash identifier: Vy4d3ULC126rLXF49u04SbATAxEeSVcXNYK0oX5GBTM= Subject key identifier: DC:3A:08:D9:5F:65:C9:EC:F0:F2:62:27:84:3E:14:6C:E2:C7:EA:DB Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft Manifest number: 014F Signing time: Sat 23 Nov 2024 02:43:47 +0000 Manifest this update: Sat 23 Nov 2024 02:43:47 +0000 Manifest next update: Sat 30 Nov 2024 02:43:47 +0000 Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: 9HPMNauYx3okg6ucFj7gtYVo2zdjPaFORueDubuOFw4=) 2: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (hash: sUdZMd0Q+ciHznerisP4nkpWQvRZbfYqoJyi+8cz9Yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: Nov 23 02:43:47 2024 GMT Not After : Nov 30 02:43:47 2024 GMT Subject: CN=67414163-fd75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:7a:9e:48:32:15:78:39:51:ff:29:52:cf: 27:c2:95:81:c0:88:6a:35:b1:d1:c1:7d:f2:27:6d: 7f:b5:e1:35:aa:0e:c7:94:93:09:87:68:54:fe:d3: 48:22:de:3f:07:70:8c:40:bc:55:bc:54:ae:bf:cc: ed:d2:54:07:c7:53:7c:02:63:eb:07:c1:22:16:bb: c0:f6:25:e6:73:2e:d4:35:43:97:59:c9:e0:50:59: 30:ec:fd:1d:c6:d0:15:70:86:81:b2:a8:89:49:48: 4b:a0:70:91:7c:3b:dc:c0:c2:22:e6:ad:bc:39:d9: c1:01:70:d8:2a:2a:ba:c3:1a:7b:55:2d:01:f5:6d: b0:5c:5f:95:20:6d:bc:3b:c2:1e:d4:28:5e:64:18: 58:f3:c8:56:f3:44:09:fd:ed:a3:aa:60:45:37:3f: a0:e1:41:25:1f:dc:af:3f:13:3e:cd:56:b4:ed:75: 7c:ba:34:c1:49:7f:6c:a6:21:bf:91:e1:86:32:55: 27:52:80:ab:e7:e7:f3:5e:9e:fe:5a:6c:74:7e:23: 84:36:14:63:a9:f9:34:dd:2d:49:88:d8:a8:a9:a2: a1:61:53:85:c1:c6:20:68:af:00:f1:73:85:01:c9: 76:59:bc:d6:37:d1:b9:8f:37:a3:e4:2e:83:e6:c0: 68:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3A:08:D9:5F:65:C9:EC:F0:F2:62:27:84:3E:14:6C:E2:C7:EA:DB X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:16:5d:6a:59:47:ea:0d:73:c7:b4:92:e5:2e:4d:b3:22:06: 6f:49:7e:ad:f0:41:34:81:4c:d4:e2:cf:c3:8d:5c:63:29:c5: 11:43:c7:6d:e0:12:71:78:d2:f1:85:ef:93:31:68:bf:1a:1d: bc:ef:16:b5:93:bf:8b:4f:66:fe:e6:b9:a5:4e:7a:9a:2c:1c: db:18:a9:1a:f3:68:14:e0:f9:97:04:a0:fc:44:cf:94:7e:ab: 71:b8:07:84:6e:54:fa:29:e6:fc:35:c0:3e:4d:4e:6c:69:b5: bc:7b:11:1d:7d:ea:e5:a8:c9:41:6f:87:5b:1a:5c:03:45:8a: 38:c0:d3:7e:1a:7a:71:af:9f:0c:65:0f:17:34:03:19:b1:9c: a8:62:db:4c:4c:f5:30:81:bf:82:33:f1:29:94:60:85:8d:a5: 59:3e:ca:15:d6:09:17:aa:6e:09:fe:93:54:6c:7b:e0:73:2f: 44:23:73:b3:d6:d1:6c:41:90:89:1a:27:15:d8:2f:0c:b3:0e: c9:95:c1:d2:ba:8d:16:01:10:68:f8:31:ef:89:55:28:bb:47: 4d:41:c6:c2:ad:37:e2:19:db:ae:6e:ca:de:f0:8d:40:5d:55: 47:27:11:08:62:f3:be:8c:92:c9:97:da:c9:81:32:d6:30:6c: f8:fd:c5:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjQxMTIzMDI0MzQ3WhcNMjQxMTMwMDI0MzQ3WjAYMRYwFAYD VQQDEw02NzQxNDE2My1mZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwx6nkgyFXg5Uf8pUs8nwpWBwIhqNbHRwX3yJ21/teE1qg7HlJMJh2hU/tNI It4/B3CMQLxVvFSuv8zt0lQHx1N8AmPrB8EiFrvA9iXmcy7UNUOXWcngUFkw7P0d xtAVcIaBsqiJSUhLoHCRfDvcwMIi5q28OdnBAXDYKiq6wxp7VS0B9W2wXF+VIG28 O8Ie1CheZBhY88hW80QJ/e2jqmBFNz+g4UElH9yvPxM+zVa07XV8ujTBSX9spiG/ keGGMlUnUoCr5+fzXp7+Wmx0fiOENhRjqfk03S1JiNioqaKhYVOFwcYgaK8A8XOF Acl2WbzWN9G5jzej5C6D5sBoQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNw6CNlf Zcns8PJiJ4Q+FGzix+rbMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4 R09NQjRPYWl4amNiSmt3LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNFl1qWUfqDXPHtJLlLk2zIgZvSX6t8EE0gUzU4s/DjVxjKcURQ8dt 4BJxeNLxhe+TMWi/Gh287xa1k7+LT2b+5rmlTnqaLBzbGKka82gU4PmXBKD8RM+U fqtxuAeEblT6Keb8NcA+TU5sabW8exEdferlqMlBb4dbGlwDRYo4wNN+Gnpxr58M ZQ8XNAMZsZyoYttMTPUwgb+CM/EplGCFjaVZPsoV1gkXqm4J/pNUbHvgcy9EI3Oz 1tFsQZCJGicV2C8Msw7JlcHSuo0WARBo+DHviVUou0dNQcbCrTfiGduubsre8I1A XVVHJxEIYvO+jJLJl9rJgTLWMGz4/cUt -----END CERTIFICATE-----Generated at Sat Nov 23 05:03:00 2024 by rpki-client on console-fra.rpki-client.org