$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft File: UHztrU5Y_M0K4JOTmGWG21g_B6I.mft (raw, json) Hash identifier: 2pAmFr+0Nc4VMt9qlEoxBaq4Fh9OsMiiaKNT01KaqHQ= Subject key identifier: 9E:8F:0D:F8:6E:5B:B9:28:5A:59:90:9C:66:0A:A1:45:D7:87:98:2B Authority key identifier: 50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 Certificate issuer: /CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Certificate serial: 0B49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft Manifest number: 0B49 Signing time: Fri 22 Nov 2024 18:55:15 +0000 Manifest this update: Fri 22 Nov 2024 18:55:15 +0000 Manifest next update: Fri 29 Nov 2024 18:55:15 +0000 Files and hashes: 1: UHztrU5Y_M0K4JOTmGWG21g_B6I.crl (hash: TK8yTgIt638jhNX02HV/fdN7Sbi7iH/uIMuUPAG3X8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2889 (0xb49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Validity Not Before: Nov 22 18:55:15 2024 GMT Not After : Nov 29 18:55:15 2024 GMT Subject: CN=6740d393-ae35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:25:38:4b:a4:d0:63:22:c8:41:46:f9:aa: 0c:de:36:4b:cc:cc:35:03:1a:ae:be:e2:3e:6e:77: 7a:ae:1a:e8:7a:27:0a:88:8d:9b:6b:9f:d2:ca:7c: 36:ce:bc:a6:d5:c6:1f:3f:4a:c7:04:c0:67:7d:28: b4:02:0d:e5:45:c8:35:77:ec:c5:59:41:0c:63:29: d5:23:60:38:de:aa:76:12:e6:53:69:a3:24:b0:9b: 51:da:e3:15:74:f1:89:f3:f1:86:67:87:4d:57:a8: 19:1b:81:40:d8:93:cc:fa:aa:cd:41:19:03:8e:87: d1:a6:75:25:a1:2e:cd:34:83:80:aa:a2:eb:33:f8: ba:6f:6e:b9:de:ce:3c:1f:3c:4d:39:7f:0b:6a:07: 7e:77:57:41:e7:03:5b:89:8a:b0:1c:f7:ff:54:cb: 1e:f7:52:b9:e0:c4:22:2d:29:02:56:bc:fb:f5:e8: 3c:bf:d2:fd:62:34:52:8a:1e:54:64:ce:ad:38:b8: 49:2e:9d:25:d5:6c:20:01:77:6c:ff:14:5b:32:b4: dd:d9:6f:d6:6f:3b:0e:4a:5a:c2:57:f6:9d:b0:47: ef:6b:a2:6c:49:1c:4f:d4:c7:a7:e6:d5:3d:cf:a8: ce:bf:b0:d8:b2:8b:b9:c1:b1:b7:6f:48:e5:de:c2: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8F:0D:F8:6E:5B:B9:28:5A:59:90:9C:66:0A:A1:45:D7:87:98:2B X509v3 Authority Key Identifier: keyid:50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:18:75:b8:d3:95:04:cd:3b:49:bf:0c:9f:bb:28:0f:2f:e9: ec:e5:89:fb:bc:a6:e7:6d:f9:cc:f1:e3:3d:ed:39:30:ff:37: 49:56:d0:30:06:ff:13:c5:18:ac:5d:b1:08:25:25:0f:47:aa: 4a:05:53:47:c5:41:fd:7f:ab:86:ed:18:a2:bc:ff:00:04:b4: b9:2d:ac:a2:be:b1:00:9f:87:5f:5c:00:b1:7f:c6:49:ba:05: 72:9a:b8:1d:cd:b2:cd:67:bb:99:2f:5e:d9:64:66:32:b2:9b: ae:0e:56:c5:9b:1c:92:cf:f8:fc:00:42:63:bc:e5:69:54:76: fa:f0:07:c9:22:e4:e9:76:81:26:b4:eb:9b:65:c2:ba:74:e8: 7c:27:ed:d4:a3:cb:1e:b0:69:ce:4d:63:e8:3a:73:04:d2:44: e3:13:50:85:fd:ef:6a:1a:9e:fe:43:06:6d:05:86:75:37:52: 0c:75:bd:ce:04:88:21:02:d3:0a:12:04:f4:02:11:22:62:c5: 26:30:10:fa:60:01:64:70:b1:a9:32:a2:cb:25:78:6c:ee:44: c4:68:7c:34:08:4d:54:6c:38:3f:bf:30:9b:1e:bb:bf:d8:12: 1d:67:60:91:0d:1b:0f:46:2c:0f:e4:27:4d:bf:57:2f:2d:29: 3c:3d:a7:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkQxMTAvBgNVBAUTKDUwN0NFREFENEU1OEZDQ0QwQUUwOTM5Mzk4NjU4NkRC NTgzRjA3QTIwHhcNMjQxMTIyMTg1NTE1WhcNMjQxMTI5MTg1NTE1WjAYMRYwFAYD VQQDEw02NzQwZDM5My1hZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucglOEuk0GMiyEFG+aoM3jZLzMw1AxquvuI+bnd6rhroeicKiI2ba5/Synw2 zrym1cYfP0rHBMBnfSi0Ag3lRcg1d+zFWUEMYynVI2A43qp2EuZTaaMksJtR2uMV dPGJ8/GGZ4dNV6gZG4FA2JPM+qrNQRkDjofRpnUloS7NNIOAqqLrM/i6b2653s48 HzxNOX8Lagd+d1dB5wNbiYqwHPf/VMse91K54MQiLSkCVrz79eg8v9L9YjRSih5U ZM6tOLhJLp0l1WwgAXds/xRbMrTd2W/WbzsOSlrCV/adsEfva6JsSRxP1Men5tU9 z6jOv7DYsou5wbG3b0jl3sK1CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6PDfhu W7koWlmQnGYKoUXXh5grMB8GA1UdIwQYMBaAFFB87a1OWPzNCuCTk5hlhttYPwei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGRC82NzRDRTJGMDIx NjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9NMEs0Sk9UbUdXRzIxZ19C NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIenRyVTVZX00wSzRKT1RtR1dHMjFnX0I2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGRC82NzRDRTJGMDIxNjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9N MEs0Sk9UbUdXRzIxZ19CNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLGHW405UEzTtJvwyfuygPL+ns5Yn7vKbnbfnM8eM97Tkw/zdJVtAw Bv8TxRisXbEIJSUPR6pKBVNHxUH9f6uG7RiivP8ABLS5LayivrEAn4dfXACxf8ZJ ugVymrgdzbLNZ7uZL17ZZGYyspuuDlbFmxySz/j8AEJjvOVpVHb68AfJIuTpdoEm tOubZcK6dOh8J+3Uo8sesGnOTWPoOnME0kTjE1CF/e9qGp7+QwZtBYZ1N1IMdb3O BIghAtMKEgT0AhEiYsUmMBD6YAFkcLGpMqLLJXhs7kTEaHw0CE1UbDg/vzCbHru/ 2BIdZ2CRDRsPRiwP5CdNv1cvLSk8PaeH -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org