$ rpki-client -vvf rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft File: uIPha7zTcVtWFzExa6Gw70BTwS4.mft (raw, json) Hash identifier: CT3YHrhPuSm9wMGGqWj7voHl6Uj+H7RKVGVJz2Xh3Go= Subject key identifier: AC:AD:D1:27:34:05:7B:64:7B:4A:88:C8:85:99:B5:97:C8:61:41:B5 Authority key identifier: B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E Certificate issuer: /CN=A914B05F/serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E Certificate serial: 17EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft Manifest number: 17E1 Signing time: Fri 22 Nov 2024 16:32:52 +0000 Manifest this update: Fri 22 Nov 2024 16:32:51 +0000 Manifest next update: Fri 29 Nov 2024 16:32:51 +0000 Files and hashes: 1: uIPha7zTcVtWFzExa6Gw70BTwS4.crl (hash: NEkVOxWxrEHT/pw9EfUu6VcmGNGUff+DIk9Cnxf5Vh4=) 2: 3482BB06AB3E11E7B15D1874C4F9AE02.roa (hash: f/iGCTTWKgyC6GDNoG48hLtnpOGko6TY6XeoD7uohtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6124 (0x17ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B05F/serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E Validity Not Before: Nov 22 16:32:51 2024 GMT Not After : Nov 29 16:32:51 2024 GMT Subject: CN=6740b233-bd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dd:1a:86:e8:c6:95:56:fd:70:2a:50:d3:0a: 0e:99:02:ea:e4:f5:bf:3a:e7:44:b5:7d:7e:e8:73: a6:c8:0d:f4:a6:92:eb:0e:55:56:80:17:4e:cb:e9: 6d:eb:45:96:94:36:96:63:56:31:57:20:06:6f:d9: f0:88:59:57:a1:7c:f5:88:ed:88:c8:9e:69:2a:b6: 5e:35:90:a1:6d:8e:1c:6d:d3:c1:e7:6a:23:06:a4: 71:fb:20:f5:c6:43:69:52:c1:07:11:9a:50:ab:db: 4b:a1:02:17:a6:57:11:23:e1:06:22:25:be:34:7d: 20:c8:ab:da:54:0a:e4:90:b0:b8:13:32:a2:cf:f8: 5d:d6:c1:e6:cd:aa:82:99:d8:b8:ef:d6:59:7b:78: bf:19:21:09:0e:0f:41:8f:4d:24:70:16:64:af:cd: b2:d1:c5:36:79:10:bc:6c:c9:0a:ba:fa:6b:11:4a: 94:08:50:c7:5b:d0:24:82:0f:16:a0:1e:81:c8:1d: e5:26:0e:2e:21:81:6d:72:49:9d:dd:00:b7:cd:9f: 9a:8c:c3:74:af:5d:7a:78:d2:69:9a:89:e1:41:09: 86:4a:9a:0f:71:f4:9b:70:0e:cc:63:a3:ae:54:b8: 4d:ec:fa:75:e4:d4:78:53:a9:b4:f5:29:96:55:56: 44:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AD:D1:27:34:05:7B:64:7B:4A:88:C8:85:99:B5:97:C8:61:41:B5 X509v3 Authority Key Identifier: keyid:B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ee:ca:76:66:49:04:02:64:da:6b:0f:68:30:27:12:d0:c7: 44:67:fc:e5:7f:ba:9a:13:06:57:f3:a7:ec:b6:dd:4f:8d:ac: 4a:64:4a:ff:ba:03:29:58:a9:1e:b9:b6:07:14:bd:12:0f:41: fb:99:f2:ed:e2:2a:18:d8:d8:32:2b:0f:f6:8e:00:d0:3c:6c: ab:09:1c:69:37:31:0a:d0:78:85:6a:65:3b:6b:7e:e2:ee:b2: 69:b0:71:d8:b3:53:60:bb:5f:81:cb:28:99:67:b5:bd:8a:42: ca:48:99:5b:6e:60:f4:38:fb:12:a6:15:9a:49:52:ce:7a:94: b5:d5:47:1c:c4:af:e1:ac:17:b2:22:66:b6:46:1c:5a:5c:1e: 59:33:bb:b8:26:26:7e:2b:cf:6b:3f:35:d5:98:74:eb:c4:c2: 33:b3:52:bf:9d:23:9c:28:0b:7d:ac:7e:fa:79:e8:9b:1f:e7: e5:58:53:1c:84:bc:44:a2:8c:9f:c7:d3:73:e8:61:a3:09:2e: 4a:17:fa:23:d5:38:97:cc:ac:53:0b:1a:6d:c8:50:96:30:31: 81:55:2d:6e:8f:6c:52:69:1a:6f:9a:d5:22:e3:e2:c4:dc:fa: c0:92:36:cb:c6:bf:bc:18:3d:17:fb:d9:4c:de:76:1d:90:b0: 31:9b:e5:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwNUYxMTAvBgNVBAUTKEI4ODNFMTZCQkNEMzcxNUI1NjE3MzEzMTZCQTFCMEVG NDA1M0MxMkUwHhcNMjQxMTIyMTYzMjUxWhcNMjQxMTI5MTYzMjUxWjAYMRYwFAYD VQQDEw02NzQwYjIzMy1iZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApt0ahujGlVb9cCpQ0woOmQLq5PW/OudEtX1+6HOmyA30ppLrDlVWgBdOy+lt 60WWlDaWY1YxVyAGb9nwiFlXoXz1iO2IyJ5pKrZeNZChbY4cbdPB52ojBqRx+yD1 xkNpUsEHEZpQq9tLoQIXplcRI+EGIiW+NH0gyKvaVArkkLC4EzKiz/hd1sHmzaqC mdi479ZZe3i/GSEJDg9Bj00kcBZkr82y0cU2eRC8bMkKuvprEUqUCFDHW9Akgg8W oB6ByB3lJg4uIYFtckmd3QC3zZ+ajMN0r116eNJpmonhQQmGSpoPcfSbcA7MY6Ou VLhN7Pp15NR4U6m09SmWVVZEfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyt0Sc0 BXtke0qIyIWZtZfIYUG1MB8GA1UdIwQYMBaAFLiD4Wu803FbVhcxMWuhsO9AU8Eu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA1Ri8zMzUxMjA0MEFC M0IxMUU3QkFBQjBENkJDNEY5QUUwMi91SVBoYTd6VGNWdFdGekV4YTZHdzcwQlR3 UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJUGhhN3pUY1Z0V0Z6RXhhNkd3NzBCVHdTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjA1Ri8zMzUxMjA0MEFCM0IxMUU3QkFBQjBENkJDNEY5QUUwMi91SVBoYTd6VGNW dFdGekV4YTZHdzcwQlR3UzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr7sp2ZkkEAmTaaw9oMCcS0MdEZ/zlf7qaEwZX86fstt1PjaxKZEr/ ugMpWKkeubYHFL0SD0H7mfLt4ioY2NgyKw/2jgDQPGyrCRxpNzEK0HiFamU7a37i 7rJpsHHYs1Ngu1+ByyiZZ7W9ikLKSJlbbmD0OPsSphWaSVLOepS11UccxK/hrBey Ima2RhxaXB5ZM7u4JiZ+K89rPzXVmHTrxMIzs1K/nSOcKAt9rH76eeibH+flWFMc hLxEooyfx9Nz6GGjCS5KF/oj1TiXzKxTCxptyFCWMDGBVS1uj2xSaRpvmtUi4+LE 3PrAkjbLxr+8GD0X+9lM3nYdkLAxm+Wd -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:01 2024 by rpki-client on console-ams.rpki-client.org