$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft File: UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json) Hash identifier: 0QlCLDR+syrca0K6rt1yr1NSnnIXI6wgWDVqEbOByn4= Subject key identifier: AE:FD:61:7B:5A:BD:4E:D9:D0:75:F8:C5:30:7D:C9:AB:D1:F4:48:38 Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 07DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft Manifest number: 1ECB Signing time: Fri 22 Nov 2024 16:37:33 +0000 Manifest this update: Fri 22 Nov 2024 16:37:32 +0000 Manifest next update: Fri 29 Nov 2024 16:37:32 +0000 Files and hashes: 1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: dN7KjqTBOiwl5msFnsZ+L8jPCVd9msUq/69dCFB02ik=) 2: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: A9NER4RWLAzUHssj8hz2WdFFJOhX2P8OvSLz/oFPj9Y=) 3: B797228EC64E11EE939CA20CC4F9AE02.roa (hash: siSSx9lHP7D6IdchQxrvTKGXiqmq86MYM45+RonrTU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2011 (0x7db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Nov 22 16:37:32 2024 GMT Not After : Nov 29 16:37:32 2024 GMT Subject: CN=6740b34c-e521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:74:d8:43:85:04:04:8c:8c:09:b7:2b:6d:39: 0f:79:f7:66:72:4b:22:3f:22:70:fe:76:5a:f3:17: 5d:7d:70:54:05:bc:bb:61:65:01:c7:e6:8f:f4:d8: 6f:74:81:78:66:c4:ae:32:cc:5a:3a:5e:42:2d:15: 38:05:03:30:4f:22:6b:e1:76:67:5b:2f:05:9a:46: 81:53:7a:97:de:80:2a:4f:1f:a8:b9:25:fc:1f:3a: 7e:be:7c:6f:45:06:c7:91:b5:de:4e:1c:c0:1e:88: cc:ff:74:16:a5:44:2f:d8:43:75:77:cf:d9:96:36: 91:e2:d4:49:85:a3:6e:9e:b7:35:ce:71:f0:9a:06: eb:a7:d2:07:d8:a9:98:20:b7:ec:61:81:22:aa:33: 45:8f:de:62:5b:12:5f:9b:3f:dc:e9:d4:54:0e:73: ca:f6:3a:33:25:3a:a3:80:62:45:b6:bc:fb:0b:90: 8b:fa:2a:d1:79:17:2b:43:27:09:f1:2f:18:af:9c: 91:0f:19:09:24:cf:44:0b:16:da:b4:b2:4c:4a:09: 67:70:63:4e:19:c4:02:22:cf:69:85:b1:4c:fb:a0: a0:73:4b:b8:e2:0b:8b:a9:d3:66:1d:54:8e:93:eb: df:24:1d:64:c2:2c:c8:46:55:e1:e1:9a:9e:a1:3b: 86:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FD:61:7B:5A:BD:4E:D9:D0:75:F8:C5:30:7D:C9:AB:D1:F4:48:38 X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:8c:43:82:3b:d4:06:3e:69:45:40:61:4e:9c:4d:21:50:fa: 77:96:20:44:90:a8:3b:e7:df:05:75:bf:9d:7d:ee:83:7c:89: 83:20:1b:65:4b:d9:90:d9:de:df:39:97:31:a1:46:cc:fe:04: c5:52:57:99:15:98:1f:c4:21:ef:fc:67:a8:7c:bb:09:d9:63: 57:e2:fe:95:19:85:dd:6c:04:3f:54:92:c8:a6:89:73:a1:ca: 37:bb:c9:bf:79:c2:03:f2:cc:34:0d:9f:00:e9:17:89:26:77: cf:8d:1c:45:44:87:74:45:b1:1c:67:d8:a4:03:a9:74:5e:0b: af:9f:31:c6:1f:e6:70:82:4e:fc:34:85:49:37:c5:73:97:b4: 53:8d:17:ba:03:16:9d:c9:9f:70:a8:a0:ae:3b:d5:e4:0c:87: fb:18:f4:f9:57:b7:6d:60:dd:12:1b:37:16:3a:2b:2d:8e:d0: 1b:80:3d:a4:16:ac:77:56:13:b6:25:d7:d0:4f:1b:59:be:cf: f7:dc:d4:cc:24:78:b3:8d:61:5e:61:67:31:e4:a6:d0:5c:53: 2e:83:d0:26:93:40:cb:dd:e6:46:e6:9d:ef:d1:6e:b2:1d:73: 3a:9f:fd:af:bb:7d:3a:5e:3d:ac:5d:14:68:f5:39:7f:7f:74: 2b:b5:1c:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjQxMTIyMTYzNzMyWhcNMjQxMTI5MTYzNzMyWjAYMRYwFAYD VQQDEw02NzQwYjM0Yy1lNTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HTYQ4UEBIyMCbcrbTkPefdmcksiPyJw/nZa8xddfXBUBby7YWUBx+aP9Nhv dIF4ZsSuMsxaOl5CLRU4BQMwTyJr4XZnWy8FmkaBU3qX3oAqTx+ouSX8Hzp+vnxv RQbHkbXeThzAHojM/3QWpUQv2EN1d8/ZljaR4tRJhaNunrc1znHwmgbrp9IH2KmY ILfsYYEiqjNFj95iWxJfmz/c6dRUDnPK9jozJTqjgGJFtrz7C5CL+irReRcrQycJ 8S8Yr5yRDxkJJM9ECxbatLJMSglncGNOGcQCIs9phbFM+6Cgc0u44guLqdNmHVSO k+vfJB1kwizIRlXh4ZqeoTuGQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK79YXta vU7Z0HX4xTB9yavR9Eg4MB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAx ZVpLUnU2Ukg2aFFsR2sxZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFjEOCO9QGPmlFQGFOnE0hUPp3liBEkKg7598Fdb+dfe6DfImDIBtl S9mQ2d7fOZcxoUbM/gTFUleZFZgfxCHv/GeofLsJ2WNX4v6VGYXdbAQ/VJLIpolz oco3u8m/ecID8sw0DZ8A6ReJJnfPjRxFRId0RbEcZ9ikA6l0XguvnzHGH+Zwgk78 NIVJN8Vzl7RTjRe6AxadyZ9wqKCuO9XkDIf7GPT5V7dtYN0SGzcWOistjtAbgD2k Fqx3VhO2JdfQTxtZvs/33NTMJHizjWFeYWcx5KbQXFMug9Amk0DL3eZG5p3v0W6y HXM6n/2vu306Xj2sXRRo9Tl/f3QrtRw8 -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:46 2024 by rpki-client on console-fra.rpki-client.org