$ rpki-client -vvf rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft File: V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft (raw, json) Hash identifier: UqSDb1f4L06vyR6hjv+0TC6tWLOR4PQAeEvbV8vxWqk= Subject key identifier: 9C:74:1F:3B:4A:5A:82:FA:04:FA:E8:D8:6A:6D:7D:63:0F:C9:A0:61 Authority key identifier: 57:FB:89:39:53:89:64:0B:68:69:A5:E2:40:74:B4:2E:42:1E:2B:D7 Certificate issuer: /CN=A9132DF5/serialNumber=57FB89395389640B6869A5E24074B42E421E2BD7 Certificate serial: 0EA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft Manifest number: 0E99 Signing time: Fri 22 Nov 2024 17:41:17 +0000 Manifest this update: Fri 22 Nov 2024 17:41:17 +0000 Manifest next update: Fri 29 Nov 2024 17:41:17 +0000 Files and hashes: 1: V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl (hash: wP11QvNdZNZbXU/pVWYWDAdBmf7eWHQYdBq0J2Xz7SU=) 2: 3058390A7C4511E984DEA431C4F9AE02.roa (hash: 4/YtE2E7cZOvCsQDJx5zxuAVDUTir907xX3hoJmimmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3744 (0xea0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132DF5/serialNumber=57FB89395389640B6869A5E24074B42E421E2BD7 Validity Not Before: Nov 22 17:41:17 2024 GMT Not After : Nov 29 17:41:17 2024 GMT Subject: CN=6740c23d-4565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:54:dd:14:7a:f9:df:21:ce:ae:0a:32:94:0b: b5:3f:d4:71:c9:da:d1:68:3e:f4:54:aa:c1:99:ee: 67:bc:d2:a9:98:15:3f:d9:72:8b:84:50:90:e2:43: 39:64:75:41:1c:4c:5e:f8:d4:f0:56:9a:c0:b9:f7: 9a:24:99:d5:14:02:b9:36:e9:68:7b:b1:00:51:9b: 2f:bd:38:49:bb:49:e3:1d:81:16:cb:9a:e7:b9:0b: 8b:ce:8b:18:38:30:99:e5:33:11:7d:35:af:fe:b9: 08:7d:c2:00:5a:10:96:99:06:0e:4e:59:d5:90:bb: 83:d0:0f:83:d4:5f:32:be:05:87:2c:64:b6:a5:cb: d7:4d:27:69:5c:c0:05:cd:12:90:e8:1b:af:f4:fb: 21:bf:87:87:5e:ed:ad:1d:34:0d:bd:40:f9:d0:39: 08:38:f7:f4:79:9d:af:d9:97:81:35:49:50:a0:c9: 7e:35:b5:da:d0:83:f9:db:ae:d0:9b:ad:4a:13:18: 53:35:d1:6b:85:16:75:90:29:a1:d7:e5:a7:af:2a: 97:a3:20:21:76:aa:23:26:67:85:8b:dc:a3:21:8c: bd:09:aa:35:9e:2d:17:c3:60:d4:45:9f:fe:bb:a8: fd:69:1c:a6:cb:da:fc:5f:49:8a:e4:f5:f6:01:25: db:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:74:1F:3B:4A:5A:82:FA:04:FA:E8:D8:6A:6D:7D:63:0F:C9:A0:61 X509v3 Authority Key Identifier: keyid:57:FB:89:39:53:89:64:0B:68:69:A5:E2:40:74:B4:2E:42:1E:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:65:e1:82:78:f4:5a:05:81:0e:96:25:3e:89:a2:04:e2:97: 83:26:86:21:94:24:46:a0:0e:1d:75:63:99:01:8b:83:63:d1: 62:8d:bc:79:48:01:ef:f8:02:60:78:ce:ee:45:80:a2:bf:a8: a1:c6:b8:89:5d:53:6a:91:c5:2e:d5:de:c1:fa:4e:f7:9c:33: 4e:74:d3:de:8d:cc:03:2e:8f:cc:61:e0:a7:d4:d9:0a:dc:8a: 8e:7b:13:a5:13:76:74:88:7d:ab:f6:4d:89:da:aa:19:39:dc: 78:55:48:2e:3c:44:21:de:0d:12:1d:f5:aa:52:56:a4:de:5d: 47:e3:18:f4:df:8f:ee:df:3e:55:fd:47:69:55:d0:93:87:6e: 73:48:34:8a:bc:ea:28:76:9b:11:0d:1b:d4:7e:5a:44:c0:73: 06:76:eb:44:9e:67:f0:8d:d1:e5:af:d5:8a:b5:a7:f9:d4:17: 95:bf:bf:7e:e3:76:e2:b7:10:80:28:20:8a:ee:5c:43:fa:b4: fe:03:fe:5d:ef:13:19:32:d0:f4:e0:9c:ca:83:d5:90:bb:eb: 71:29:d2:6b:60:5c:fd:a6:df:b5:45:26:91:b4:85:90:27:c1: c1:32:37:9b:3b:50:2b:99:0d:71:26:9b:59:ee:a6:50:fb:86: a3:5b:ce:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJERjUxMTAvBgNVBAUTKDU3RkI4OTM5NTM4OTY0MEI2ODY5QTVFMjQwNzRCNDJF NDIxRTJCRDcwHhcNMjQxMTIyMTc0MTE3WhcNMjQxMTI5MTc0MTE3WjAYMRYwFAYD VQQDEw02NzQwYzIzZC00NTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VTdFHr53yHOrgoylAu1P9RxydrRaD70VKrBme5nvNKpmBU/2XKLhFCQ4kM5 ZHVBHExe+NTwVprAufeaJJnVFAK5Nuloe7EAUZsvvThJu0njHYEWy5rnuQuLzosY ODCZ5TMRfTWv/rkIfcIAWhCWmQYOTlnVkLuD0A+D1F8yvgWHLGS2pcvXTSdpXMAF zRKQ6Buv9Pshv4eHXu2tHTQNvUD50DkIOPf0eZ2v2ZeBNUlQoMl+NbXa0IP5267Q m61KExhTNdFrhRZ1kCmh1+WnryqXoyAhdqojJmeFi9yjIYy9Cao1ni0Xw2DURZ/+ u6j9aRymy9r8X0mK5PX2ASXb0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJx0HztK WoL6BPro2GptfWMPyaBhMB8GA1UdIwQYMBaAFFf7iTlTiWQLaGml4kB0tC5CHivX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkRGNS84MjA3MkU3QTdD NDMxMUU5ODI4NjUxMkNDNEY5QUUwMi9WX3VKT1ZPSlpBdG9hYVhpUUhTMExrSWVL OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZfdUpPVk9KWkF0b2FhWGlRSFMwTGtJZUs5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkRGNS84MjA3MkU3QTdDNDMxMUU5ODI4NjUxMkNDNEY5QUUwMi9WX3VKT1ZPSlpB dG9hYVhpUUhTMExrSWVLOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYZeGCePRaBYEOliU+iaIE4peDJoYhlCRGoA4ddWOZAYuDY9Fijbx5 SAHv+AJgeM7uRYCiv6ihxriJXVNqkcUu1d7B+k73nDNOdNPejcwDLo/MYeCn1NkK 3IqOexOlE3Z0iH2r9k2J2qoZOdx4VUguPEQh3g0SHfWqUlak3l1H4xj034/u3z5V /UdpVdCTh25zSDSKvOoodpsRDRvUflpEwHMGdutEnmfwjdHlr9WKtaf51BeVv79+ 43bitxCAKCCK7lxD+rT+A/5d7xMZMtD04JzKg9WQu+txKdJrYFz9pt+1RSaRtIWQ J8HBMjebO1ArmQ1xJptZ7qZQ+4ajW87R -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:59 2024 by rpki-client on console-ams.rpki-client.org