$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json) Hash identifier: 2946jpnbEkwOnZrfSDGp0QKWGiMLbVtoKH6RDeXEPYg= Subject key identifier: 3A:7D:E0:C0:4E:51:84:CA:CC:BF:AC:08:91:8C:BE:67:D2:CA:12:EE Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Certificate serial: 09EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft Manifest number: 09E9 Signing time: Fri 22 Nov 2024 19:40:19 +0000 Manifest this update: Fri 22 Nov 2024 19:40:19 +0000 Manifest next update: Fri 29 Nov 2024 19:40:19 +0000 Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: AIIC0oAVBW7+94uXXyNHx+zmkamsZPbQcghbUW/4p1g=) 2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: nyOJoLIDGp7/wafl1yH4CbKrruUiB3iOpUkQ72n7ZjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2543 (0x9ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Validity Not Before: Nov 22 19:40:19 2024 GMT Not After : Nov 29 19:40:19 2024 GMT Subject: CN=6740de23-e3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:c5:b4:20:ba:05:af:2e:39:27:2e:74:ec: 48:e9:58:f0:1b:1d:36:7a:c5:e6:08:1a:c2:d3:40: 89:d9:f1:01:24:6a:5c:b5:8c:f1:7b:c3:17:08:fa: fd:ce:fb:89:3d:1f:a1:16:84:6e:bd:94:97:f0:82: 71:e0:47:88:4e:a9:21:d9:10:5c:f5:ec:f1:e1:02: 2e:d3:3c:d1:db:82:16:03:7b:4a:66:d5:98:fc:8b: d3:21:ed:f5:12:60:05:c9:4a:b2:92:70:67:c0:86: 95:37:b9:4a:e8:5d:88:17:e5:5c:af:85:f9:31:4b: 62:30:c6:df:0e:7f:77:83:66:09:d7:d2:89:39:6a: 2d:c2:e4:c0:57:10:4e:00:96:19:55:f3:b7:dd:1b: 19:6f:cc:3f:2f:c1:e2:73:16:96:e9:ce:fe:be:d2: ec:8e:c0:b7:f0:13:9c:5b:0f:6c:2d:f3:4b:a2:d6: 0e:32:06:0d:29:12:57:5e:d8:be:c8:79:fc:c0:63: 15:e4:43:aa:56:af:c8:b9:01:c3:e2:b6:35:fd:86: f2:4f:a0:9d:24:38:ab:21:ed:7a:f3:61:e1:46:ee: e5:5e:6c:c0:18:f8:31:a0:f5:04:e2:d6:e1:17:c1: 9a:78:db:9e:53:b3:d0:d3:9a:6d:cd:26:6d:d7:dd: 2f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7D:E0:C0:4E:51:84:CA:CC:BF:AC:08:91:8C:BE:67:D2:CA:12:EE X509v3 Authority Key Identifier: keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:1c:c6:7a:17:16:31:5a:db:4c:ae:f7:14:71:03:36:fb:4a: 79:5c:c0:37:d7:26:6b:37:53:29:91:a5:21:3f:47:ed:a0:b2: 83:17:5f:65:84:49:2e:cd:59:b1:e0:e2:4f:aa:b5:e5:72:98: 31:f2:51:c4:f5:d0:f2:4a:81:2a:a2:c9:01:02:b3:79:d1:85: 28:bc:64:20:46:bf:7b:0f:11:13:b9:5a:09:1a:5a:e3:d7:fb: ab:e5:5b:e9:15:b6:d2:7c:f6:e3:96:83:8c:c3:f8:2c:4c:e4: e1:9b:81:10:77:20:50:16:3c:ff:27:d0:39:b2:a2:1e:ff:91: b3:e6:85:18:a7:11:3d:6c:40:cc:9d:f5:a8:5e:83:17:c0:77: 2e:3d:70:fb:38:41:0d:cc:9b:59:df:4e:11:22:6b:27:e0:35: fa:18:62:ca:09:6c:7b:e0:87:a3:a4:35:60:64:aa:85:fc:6f: 91:6a:43:97:7b:32:2d:e4:52:a5:e4:0a:e2:64:90:49:ce:f2: e8:97:0d:f8:23:56:c0:8a:5d:df:c3:56:0b:b1:8b:c3:e9:9f: 19:84:b9:97:a2:de:80:21:fd:bc:63:98:71:c2:72:fa:07:4e: 49:a3:07:98:ee:74:48:4b:2a:fb:67:8f:c4:ce:7d:56:02:ab: 49:61:3a:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF QUUzRUYzQzAwHhcNMjQxMTIyMTk0MDE5WhcNMjQxMTI5MTk0MDE5WjAYMRYwFAYD VQQDEw02NzQwZGUyMy1lM2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5PFtCC6Ba8uOScudOxI6VjwGx02esXmCBrC00CJ2fEBJGpctYzxe8MXCPr9 zvuJPR+hFoRuvZSX8IJx4EeITqkh2RBc9ezx4QIu0zzR24IWA3tKZtWY/IvTIe31 EmAFyUqyknBnwIaVN7lK6F2IF+Vcr4X5MUtiMMbfDn93g2YJ19KJOWotwuTAVxBO AJYZVfO33RsZb8w/L8HicxaW6c7+vtLsjsC38BOcWw9sLfNLotYOMgYNKRJXXti+ yHn8wGMV5EOqVq/IuQHD4rY1/YbyT6CdJDirIe1682HhRu7lXmzAGPgxoPUE4tbh F8GaeNueU7PQ05ptzSZt190vwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDp94MBO UYTKzL+sCJGMvmfSyhLuMB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3 OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OURGMi85OTk4RjFDNDY3OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0 TTJIYlZadGJhNFBxNC04OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2HMZ6FxYxWttMrvcUcQM2+0p5XMA31yZrN1MpkaUhP0ftoLKDF19l hEkuzVmx4OJPqrXlcpgx8lHE9dDySoEqoskBArN50YUovGQgRr97DxETuVoJGlrj 1/ur5VvpFbbSfPbjloOMw/gsTOThm4EQdyBQFjz/J9A5sqIe/5Gz5oUYpxE9bEDM nfWoXoMXwHcuPXD7OEENzJtZ304RImsn4DX6GGLKCWx74IejpDVgZKqF/G+RakOX ezIt5FKl5AriZJBJzvLolw34I1bAil3fw1YLsYvD6Z8ZhLmXot6AIf28Y5hxwnL6 B05JoweY7nRISyr7Z4/Ezn1WAqtJYTo4 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:26 2024 by rpki-client on console-ams.rpki-client.org