$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft File: uRokzwRxERfIw7omSjM5Xad_kbQ.mft (raw, json) Hash identifier: EWNFZCq9OqHmv7e25IjnrOr50kC48c+LonvH9jJC8AU= Subject key identifier: 9D:1A:9C:53:B1:FA:15:FA:4B:98:AC:53:4B:66:31:16:44:72:12:9F Authority key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 Certificate issuer: /CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft Manifest number: 28 Signing time: Wed 23 Oct 2024 06:21:32 +0000 Manifest this update: Wed 23 Oct 2024 06:21:31 +0000 Manifest next update: Wed 30 Oct 2024 06:21:31 +0000 Files and hashes: 1: uRokzwRxERfIw7omSjM5Xad_kbQ.crl (hash: gC4w57HdX/prPFbOuZNCib3NRBAOa2hVKxQcTYfjo4E=) 2: 27995372566911EF9D53B517C4F9AE02.roa (hash: xq/tIHChRUQ/SVgEnorDvzsCIu9u4UcNJR+//ggbghs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Validity Not Before: Oct 23 06:21:31 2024 GMT Not After : Oct 30 06:21:31 2024 GMT Subject: CN=671895eb-70f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4a:fa:a6:45:fb:f3:b8:f1:1e:80:e5:c8:68: 4c:85:33:13:46:14:52:f8:f7:60:fd:33:7c:eb:3c: 69:35:f6:b5:6c:fb:78:cc:60:63:90:eb:2d:9a:c3: 17:74:50:a9:2f:bb:9f:4e:1f:83:91:3b:1c:2c:21: 3e:87:f0:17:1f:ea:0f:af:8a:80:a7:93:f3:98:68: 70:b8:d1:21:f9:08:4f:99:58:13:14:3a:c7:ba:80: 3c:8f:58:ad:b1:f3:71:57:86:a2:99:83:c9:42:7f: 49:09:d6:27:b6:78:db:dd:37:a3:10:70:11:d3:b9: 67:b4:73:08:dc:f8:cb:d7:8d:41:e9:d4:5d:da:71: d9:1a:fb:b4:f0:43:00:d6:4e:76:83:78:b1:47:b8: 2f:b4:19:aa:fe:be:07:1d:84:ed:58:aa:13:fb:03: 04:f4:ad:1e:2b:1d:54:b4:47:65:50:2f:98:b6:f3: 86:e3:d4:41:c9:ef:9e:3d:d7:3a:bd:aa:3c:c8:9d: 0d:b0:00:c8:e3:b2:6a:db:56:ae:b0:b6:af:39:af: aa:5a:15:2c:12:fd:90:2b:a6:ed:e9:b8:b9:03:88: ad:0b:59:d2:81:4d:1c:8c:1e:a5:f1:d5:56:1c:03: b4:5d:88:7d:36:40:70:02:42:ff:86:8f:17:b6:5a: 43:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1A:9C:53:B1:FA:15:FA:4B:98:AC:53:4B:66:31:16:44:72:12:9F X509v3 Authority Key Identifier: keyid:B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:29:ed:5d:27:18:c3:ff:60:29:49:9f:c0:9b:08:09:04:74: c8:38:32:88:99:88:81:68:de:c0:6d:2f:c1:45:b7:9b:ae:65: d2:27:75:e0:c2:41:10:16:9d:e2:aa:d2:bf:8b:9f:99:38:be: 79:aa:66:de:b0:31:89:a3:fa:25:dc:10:a8:e3:7e:83:8c:93: 41:92:d0:b8:8a:20:93:04:c1:cc:87:10:c4:e6:6e:bf:20:91: 76:be:87:dc:b5:e5:0f:fd:03:4b:44:6e:2a:35:4e:b2:96:fc: 1a:ca:3f:65:1a:9e:c8:36:dc:df:f3:07:be:a4:6a:72:5f:d9: 79:dd:51:bc:d2:e1:2a:7b:52:bc:f4:76:7d:08:40:cd:c2:e9: 87:e4:8c:33:6e:e6:ca:cb:ac:53:56:52:92:cb:40:b3:f9:c2: d5:51:39:ce:38:e3:f6:ce:be:3f:09:d3:60:b6:c6:fc:8e:90: 5a:48:d4:3d:72:9f:53:b9:ab:dd:a0:ea:e3:e0:dc:91:aa:3c: ec:cf:10:27:6d:54:6b:8e:2c:77:05:d7:50:be:94:70:55:88: 3a:1a:c8:a5:87:3f:a7:67:e0:3d:eb:6f:11:05:22:0d:bc:58: 11:c0:0b:28:ea:f2:de:99:62:df:59:78:76:15:32:b0:5b:fc: 32:7b:fc:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz M0JCMDExMC8GA1UEBRMoQjkxQTI0Q0YwNDcxMTExN0M4QzNCQTI2NEEzMzM5NURB NzdGOTFCNDAeFw0yNDEwMjMwNjIxMzFaFw0yNDEwMzAwNjIxMzFaMBgxFjAUBgNV BAMTDTY3MTg5NWViLTcwZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGSvqmRfvzuPEegOXIaEyFMxNGFFL492D9M3zrPGk19rVs+3jMYGOQ6y2awxd0 UKkvu59OH4OROxwsIT6H8Bcf6g+vioCnk/OYaHC40SH5CE+ZWBMUOse6gDyPWK2x 83FXhqKZg8lCf0kJ1ie2eNvdN6MQcBHTuWe0cwjc+MvXjUHp1F3acdka+7TwQwDW TnaDeLFHuC+0Gar+vgcdhO1YqhP7AwT0rR4rHVS0R2VQL5i284bj1EHJ75491zq9 qjzInQ2wAMjjsmrbVq6wtq85r6paFSwS/ZArpu3puLkDiK0LWdKBTRyMHqXx1VYc A7RdiH02QHACQv+Gjxe2WkMtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnRqcU7H6 FfpLmKxTS2YxFkRyEp8wHwYDVR0jBBgwFoAUuRokzwRxERfIw7omSjM5Xad/kbQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzQkIwL0I4NjVCMzdFNTY2 ODExRUY4RTZBNzc1REM0RjlBRTAyL3VSb2t6d1J4RVJmSXc3b21Tak01WGFkX2ti US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdVJva3p3UnhFUmZJdzdvbVNqTTVYYWRfa2JRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz QkIwL0I4NjVCMzdFNTY2ODExRUY4RTZBNzc1REM0RjlBRTAyL3VSb2t6d1J4RVJm SXc3b21Tak01WGFkX2tiUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG8p7V0nGMP/YClJn8CbCAkEdMg4MoiZiIFo3sBtL8FFt5uuZdIndeDC QRAWneKq0r+Ln5k4vnmqZt6wMYmj+iXcEKjjfoOMk0GS0LiKIJMEwcyHEMTmbr8g kXa+h9y15Q/9A0tEbio1TrKW/BrKP2Uansg23N/zB76kanJf2XndUbzS4Sp7Urz0 dn0IQM3C6YfkjDNu5srLrFNWUpLLQLP5wtVROc444/bOvj8J02C2xvyOkFpI1D1y n1O5q92g6uPg3JGqPOzPECdtVGuOLHcF11C+lHBViDoayKWHP6dn4D3rbxEFIg28 WBHACyjq8t6ZYt9ZeHYVMrBb/DJ7/Hg= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:48 2024 by rpki-client on console-ams.rpki-client.org