$ rpki-client -vvf rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft File: UKsTEAVD9kbAxVN13vhQXRTzZrg.mft (raw, json) Hash identifier: FpxpA757uNXakaiXEydIJp6iBt0aVdwgQm9VHAaSzuo= Subject key identifier: 42:07:31:AD:76:DA:B2:29:FF:86:BC:12:64:C2:B4:0A:5E:55:89:27 Authority key identifier: 50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8 Certificate issuer: /CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8 Certificate serial: 0AD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft Manifest number: 0AD0 Signing time: Fri 22 Nov 2024 19:08:28 +0000 Manifest this update: Fri 22 Nov 2024 19:08:28 +0000 Manifest next update: Fri 29 Nov 2024 19:08:27 +0000 Files and hashes: 1: UKsTEAVD9kbAxVN13vhQXRTzZrg.crl (hash: OTIbwg537AhfM6YBMBOO1ybhgIx0gDOKF9EJfk+01v4=) 2: 74D2ABEE39F811EAA4343534C4F9AE02.roa (hash: iihbxxzXFJmHmXitRWziyO9onMcMt6rFaPwqQf4Yb9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2773 (0xad5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8 Validity Not Before: Nov 22 19:08:28 2024 GMT Not After : Nov 29 19:08:27 2024 GMT Subject: CN=6740d6ac-cc24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a9:e3:72:1e:b6:2b:84:24:00:a3:66:62:4d: d4:bc:73:a3:63:8b:8c:ee:3d:8a:b9:42:6a:6d:52: a9:24:ee:78:8f:3e:d3:ac:68:4c:e9:f4:ad:55:82: 27:48:13:b2:ae:8e:a6:e3:d7:8d:ba:4b:b6:74:eb: 9c:b8:ec:08:69:2c:4c:7f:79:f7:a5:86:20:c8:f0: 01:c0:0f:09:b0:91:18:56:52:c2:f0:49:33:fc:38: f9:ff:a9:c2:f2:6b:c6:1a:2f:e7:e3:47:ea:bb:61: 6b:18:fd:fe:c3:80:0b:91:c0:be:b5:c5:d8:bf:99: 96:d9:e8:03:e0:88:cd:ba:e4:98:7b:16:3d:de:72: 36:d3:a7:fc:4f:7c:f3:11:47:d1:16:e7:fc:51:4d: 9e:ff:d2:68:00:a4:6d:f0:7a:28:53:64:52:74:cd: ab:ce:21:da:ea:51:59:6e:f2:f6:1c:2f:8d:8c:88: c9:f2:f4:9a:d9:ff:f7:7c:9c:db:23:ef:23:f8:7b: 8f:66:0c:49:7a:18:f2:e7:3e:aa:63:76:81:27:a2: 64:6b:b9:31:12:03:65:22:11:60:fb:31:91:8c:20: 4d:f3:4d:59:00:82:03:15:1d:0b:66:2a:81:27:2c: 64:9b:90:e1:ca:93:e9:18:6b:57:a7:08:cd:47:e6: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:07:31:AD:76:DA:B2:29:FF:86:BC:12:64:C2:B4:0A:5E:55:89:27 X509v3 Authority Key Identifier: keyid:50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a9:4d:ca:6f:ae:23:72:4c:4f:af:7c:3d:e2:03:27:bf:b6: 4f:ac:37:27:16:82:a2:1e:7d:d6:26:27:15:e2:00:be:40:d1: 36:31:14:b1:00:99:0d:79:e6:26:4c:0d:c1:11:6b:ca:57:cc: a1:be:48:a3:17:fa:65:02:4b:2b:ff:ed:c3:83:47:85:4c:9f: 02:4f:98:12:dd:7b:c1:e1:11:3f:6b:e5:6f:58:91:0e:fb:26: 03:23:28:6f:1c:64:83:f5:7c:84:57:5e:ef:8f:65:e7:e1:a6: ee:cf:7b:47:20:08:59:d0:01:4c:71:d4:fe:77:a2:0e:74:66: 14:cc:de:0b:fd:ec:04:ef:61:85:02:84:60:59:ab:c4:f0:3b: 15:b1:84:fa:6a:9b:3e:3a:08:d8:ce:60:03:b5:4c:2f:ce:4f: b5:aa:d1:c9:2b:b6:1c:a5:ac:ec:71:7f:9e:47:f7:bd:60:38: cc:5a:88:78:59:6e:8b:06:67:01:52:84:fc:e9:8f:37:fc:49: 3a:17:6f:71:36:6b:9e:81:86:b1:dd:7d:f8:70:22:53:43:93: 34:b4:72:23:2c:6b:6c:a3:9f:77:a0:56:3a:98:95:15:13:70: 08:8d:d2:33:06:a5:76:a2:3e:c9:a2:54:17:a0:d2:cc:a5:b7: ef:c8:b1:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3MEYxMTAvBgNVBAUTKDUwQUIxMzEwMDU0M0Y2NDZDMEM1NTM3NURFRjg1MDVE MTRGMzY2QjgwHhcNMjQxMTIyMTkwODI4WhcNMjQxMTI5MTkwODI3WjAYMRYwFAYD VQQDEw02NzQwZDZhYy1jYzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKnjch62K4QkAKNmYk3UvHOjY4uM7j2KuUJqbVKpJO54jz7TrGhM6fStVYIn SBOyro6m49eNuku2dOucuOwIaSxMf3n3pYYgyPABwA8JsJEYVlLC8Ekz/Dj5/6nC 8mvGGi/n40fqu2FrGP3+w4ALkcC+tcXYv5mW2egD4IjNuuSYexY93nI206f8T3zz EUfRFuf8UU2e/9JoAKRt8HooU2RSdM2rziHa6lFZbvL2HC+NjIjJ8vSa2f/3fJzb I+8j+HuPZgxJehjy5z6qY3aBJ6Jka7kxEgNlIhFg+zGRjCBN801ZAIIDFR0LZiqB Jyxkm5DhypPpGGtXpwjNR+ag1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIHMa12 2rIp/4a8EmTCtApeVYknMB8GA1UdIwQYMBaAFFCrExAFQ/ZGwMVTdd74UF0U82a4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwRi8wNUQ4MkVFMDM5 RjcxMUVBOTY3RUJBMkVDNEY5QUUwMi9VS3NURUFWRDlrYkF4Vk4xM3ZoUVhSVHpa cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLc1RFQVZEOWtiQXhWTjEzdmhRWFJUelpyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjcwRi8wNUQ4MkVFMDM5RjcxMUVBOTY3RUJBMkVDNEY5QUUwMi9VS3NURUFWRDlr YkF4Vk4xM3ZoUVhSVHpacmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjqU3Kb64jckxPr3w94gMnv7ZPrDcnFoKiHn3WJicV4gC+QNE2MRSx AJkNeeYmTA3BEWvKV8yhvkijF/plAksr/+3Dg0eFTJ8CT5gS3XvB4RE/a+VvWJEO +yYDIyhvHGSD9XyEV17vj2Xn4abuz3tHIAhZ0AFMcdT+d6IOdGYUzN4L/ewE72GF AoRgWavE8DsVsYT6aps+OgjYzmADtUwvzk+1qtHJK7YcpazscX+eR/e9YDjMWoh4 WW6LBmcBUoT86Y83/Ek6F29xNmuegYax3X34cCJTQ5M0tHIjLGtso593oFY6mJUV E3AIjdIzBqV2oj7JolQXoNLMpbfvyLFT -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:20 2024 by rpki-client on console-ams.rpki-client.org