$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json) Hash identifier: jwCWmv8IUXshTDcNXVwJ8lOH/k+uoN7YNAkBiyvXYuk= Subject key identifier: 0F:E7:86:DB:08:44:DF:CA:A1:23:3A:7B:F1:40:C8:68:4F:05:3E:A6 Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Certificate serial: 301B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft Manifest number: 300D Signing time: Fri 22 Nov 2024 15:28:47 +0000 Manifest this update: Fri 22 Nov 2024 15:28:46 +0000 Manifest next update: Fri 29 Nov 2024 15:28:46 +0000 Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: UR9PTF0RsxY4ZpsRpRgu8Ho6v5eMZI6zgqgWIlgVTEo=) 2: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: 8yPXIp2srpOMXwXrVDBAhf+m6VYRXr2aEaNExsEirN4=) 3: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: WamiUU84cAcc5WGx4lslvANbP3TtO/lIaFT/y7zUmEY=) 4: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: WhKdctnJM8x/P3lLuqtSYgwShQQZa8r7EVnRQb0csbo=) 5: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: T37Xr3jND0OgDmWZSLZeRiJ8MSQ6+oBhyzh33K0Hddg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12315 (0x301b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Validity Not Before: Nov 22 15:28:46 2024 GMT Not After : Nov 29 15:28:46 2024 GMT Subject: CN=6740a32e-46a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d5:78:31:06:20:39:73:07:5b:33:ea:3f:40: ac:0b:e9:52:1f:fd:01:eb:5f:3d:f1:13:41:33:4c: 5e:59:d0:fb:06:68:fa:af:2e:dd:b0:1a:15:92:6c: cd:e8:26:ac:00:27:3c:b5:7a:d7:19:86:4c:73:41: e2:b1:c6:ef:4b:51:aa:71:c8:fc:6a:c0:16:99:a1: 54:2b:e7:9e:bd:61:ad:53:2a:c9:c6:d9:72:aa:b9: a8:e7:c5:30:b4:8e:05:1f:84:b7:52:0e:7e:2d:fb: 16:25:d9:47:5c:2f:24:27:25:fc:a9:49:e5:1b:ed: f5:a0:f9:57:f9:71:0a:f2:b8:56:1c:c1:e4:53:15: 5a:bb:11:b7:ed:41:cf:9a:8f:fd:51:d1:c7:bc:15: c8:e0:b9:5d:bb:e5:d4:ed:97:6b:80:a1:2c:fa:fd: 3c:2f:e9:e2:2c:2c:9f:48:67:93:92:ad:12:64:32: 2f:1b:ea:4a:bf:ec:3e:ee:f5:62:16:e7:9f:b6:25: 1f:20:86:7f:56:c6:5a:90:78:23:22:40:d4:1f:d6: d0:67:44:8d:c0:28:26:45:05:dc:8b:f3:50:f3:c0: 7c:1e:a9:6a:78:65:2d:e9:01:ed:4f:e3:32:dc:13: e3:69:3e:fd:fe:d5:39:22:17:86:a8:0c:8b:83:67: 2a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E7:86:DB:08:44:DF:CA:A1:23:3A:7B:F1:40:C8:68:4F:05:3E:A6 X509v3 Authority Key Identifier: keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:f3:2f:65:f1:41:19:e2:18:b1:9e:e1:ab:8e:7f:62:91:3c: d8:46:fb:30:61:3d:18:3a:5f:1a:76:52:ad:21:39:7a:f2:5c: cf:fe:1a:24:47:35:c5:ff:63:c0:1a:5f:c6:46:10:62:41:07: df:b6:65:78:ca:83:5b:2d:bc:8a:5b:7e:ca:ab:be:6e:aa:66: 6b:e2:25:17:4b:65:5a:fe:92:cf:ed:8a:50:6c:17:ce:2b:29: e5:ec:fe:fa:5e:03:4a:59:47:dd:be:f5:8d:74:98:81:84:97: 84:53:01:eb:8d:2c:60:e5:56:00:71:97:75:14:8e:58:88:71: cb:aa:44:b8:f0:55:f4:ee:67:16:c0:ca:a9:67:60:4a:ed:e3: fd:66:17:8f:73:64:80:31:21:4f:37:f7:bc:c2:58:dd:76:fd: ca:49:34:62:b1:ec:9a:27:69:58:24:7b:6b:cb:4e:7a:c7:cf: 00:f3:0d:68:57:36:61:8d:6c:61:ba:fe:a8:a0:17:12:15:26: fd:f4:57:d0:5a:35:55:f3:82:ba:e0:a0:74:7d:46:4b:70:8a: 25:da:c5:c8:9e:02:19:9e:5c:5d:a8:d1:ec:5b:f5:e9:b0:da: 75:61:99:45:f5:7e:e8:5c:59:15:18:34:ab:07:3a:d1:64:e7: f3:7e:a2:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1 QjMxMkMwNkYwHhcNMjQxMTIyMTUyODQ2WhcNMjQxMTI5MTUyODQ2WjAYMRYwFAYD VQQDEw02NzQwYTMyZS00NmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3tV4MQYgOXMHWzPqP0CsC+lSH/0B61898RNBM0xeWdD7Bmj6ry7dsBoVkmzN 6CasACc8tXrXGYZMc0HiscbvS1Gqccj8asAWmaFUK+eevWGtUyrJxtlyqrmo58Uw tI4FH4S3Ug5+LfsWJdlHXC8kJyX8qUnlG+31oPlX+XEK8rhWHMHkUxVauxG37UHP mo/9UdHHvBXI4Lldu+XU7ZdrgKEs+v08L+niLCyfSGeTkq0SZDIvG+pKv+w+7vVi FueftiUfIIZ/VsZakHgjIkDUH9bQZ0SNwCgmRQXci/NQ88B8HqlqeGUt6QHtT+My 3BPjaT79/tU5IheGqAyLg2cqxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/nhtsI RN/KoSM6e/FAyGhPBT6mMB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS8xNEI3NkJDOEVEMEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpF dG9vUndpMm44NlpiTVN3RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy8y9l8UEZ4hixnuGrjn9ikTzYRvswYT0YOl8adlKtITl68lzP/hok RzXF/2PAGl/GRhBiQQfftmV4yoNbLbyKW37Kq75uqmZr4iUXS2Va/pLP7YpQbBfO Kynl7P76XgNKWUfdvvWNdJiBhJeEUwHrjSxg5VYAcZd1FI5YiHHLqkS48FX07mcW wMqpZ2BK7eP9ZhePc2SAMSFPN/e8wljddv3KSTRiseyaJ2lYJHtry056x88A8w1o VzZhjWxhuv6ooBcSFSb99FfQWjVV84K64KB0fUZLcIol2sXIngIZnlxdqNHsW/Xp sNp1YZlF9X7oXFkVGDSrBzrRZOfzfqJW -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:41 2024 by rpki-client on console-fra.rpki-client.org