$ rpki-client -vvf rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft File: UuFqm4muyCoM8IXPWufcPrCPDJE.mft (raw, json) Hash identifier: fThK8yrZ+Gwnjqst5+ouCPa/JwTTF755+sIuxiuNo3w= Subject key identifier: 86:79:CD:F6:CA:8E:99:ED:5D:F5:37:70:C6:51:C5:15:6F:09:A5:73 Authority key identifier: 52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91 Certificate issuer: /CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91 Certificate serial: 0F69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft Manifest number: 0F61 Signing time: Fri 22 Nov 2024 17:32:35 +0000 Manifest this update: Fri 22 Nov 2024 17:32:35 +0000 Manifest next update: Fri 29 Nov 2024 17:32:35 +0000 Files and hashes: 1: UuFqm4muyCoM8IXPWufcPrCPDJE.crl (hash: 5rMHPDkAnxE4b8Un935g7ppg8Asg1yuptS7DJ/IeJpk=) 2: 63B80D12552011E9BA55007FC4F9AE02.roa (hash: fTPZgUpfkCrRNcsWrVhyFlyMxo5DlfFLB/9BRl5cziM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3945 (0xf69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91 Validity Not Before: Nov 22 17:32:35 2024 GMT Not After : Nov 29 17:32:35 2024 GMT Subject: CN=6740c033-ca40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:5e:10:1f:06:d9:aa:55:65:ff:be:6d:12: 2e:70:6e:31:70:28:23:0c:44:78:d8:10:68:72:d1: c9:ed:a7:20:11:f8:b4:44:22:11:06:d8:17:94:72: b9:bb:88:3d:07:e1:3e:df:09:5e:76:37:e5:9b:67: db:06:10:14:ec:10:a6:c4:83:d1:45:90:98:33:6e: bd:e4:34:70:56:3c:fd:84:57:fa:a9:11:a4:a6:84: 52:4c:85:fe:b7:c1:50:c6:8e:3b:a3:e4:31:ed:7e: b5:1c:85:be:7b:c2:7a:ff:ed:d5:b5:e8:fc:23:62: 5d:6d:ae:9b:54:48:d6:90:f9:7b:10:11:6d:46:c8: d9:f4:27:3b:50:c7:b6:98:a7:81:a0:05:1c:0b:6f: 34:1c:e1:ec:4a:78:76:7e:9b:94:80:da:4f:08:9c: 8d:79:c1:3e:c5:e9:34:b7:00:51:8c:00:d6:35:b0: dc:a8:df:ed:1a:03:9a:58:10:80:42:78:0f:81:d7: 8d:22:3f:5d:66:47:fa:4d:21:a0:e0:2e:c4:17:e6: 65:c6:2c:5a:7b:d4:01:65:4d:3b:cb:f0:a3:81:9d: 69:22:c3:db:69:cd:4a:cd:92:7a:e4:88:25:84:2e: 58:45:05:d8:bb:7a:60:5c:cb:3f:f0:52:ac:e7:8b: 2c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:79:CD:F6:CA:8E:99:ED:5D:F5:37:70:C6:51:C5:15:6F:09:A5:73 X509v3 Authority Key Identifier: keyid:52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:22:b1:65:8f:de:34:a1:8b:c2:80:9a:01:6b:25:09:fc:42: f2:26:d2:01:d5:54:d3:18:ae:fa:1b:42:d3:32:72:ca:59:2d: 0e:74:8b:a8:f8:e8:7f:a1:7a:b4:00:72:ba:00:48:03:c2:03: 37:47:bc:4c:de:e6:d2:bb:af:17:a9:48:9f:2f:e2:85:26:e7: a2:76:0d:5b:d0:cc:15:0d:37:7d:09:36:e9:d8:4b:9b:40:3a: 27:cc:4d:a6:43:70:93:f8:ed:8f:6a:4b:e4:85:02:da:0a:26: 60:5e:8e:88:1c:24:2f:b2:42:57:39:e8:d0:5e:67:25:72:b8: a0:83:49:9d:1b:a4:ca:eb:29:52:da:cf:03:2c:42:e5:9a:32: 66:04:ab:57:0e:19:0c:1a:a0:af:ec:3a:4f:ea:00:c1:8b:66: c9:f4:a3:1e:a9:ae:4b:01:12:91:03:a1:5e:5c:5a:37:86:10: 8a:73:b2:36:06:12:95:87:5b:72:50:2a:da:9f:da:9d:59:54: 9e:f4:c0:35:38:a2:ef:94:f4:22:8b:2c:f3:dd:a0:e9:90:4d: 96:ab:0f:8f:e9:70:f3:56:24:9d:de:1c:d8:c1:95:57:9d:5c: 38:ea:ee:66:be:0c:fc:4e:72:72:d3:04:cd:12:aa:b1:df:08: 84:32:f8:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNBMjAxMTAvBgNVBAUTKDUyRTE2QTlCODlBRUM4MkEwQ0YwODVDRjVBRTdEQzNF QjA4RjBDOTEwHhcNMjQxMTIyMTczMjM1WhcNMjQxMTI5MTczMjM1WjAYMRYwFAYD VQQDEw02NzQwYzAzMy1jYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgBeEB8G2apVZf++bRIucG4xcCgjDER42BBoctHJ7acgEfi0RCIRBtgXlHK5 u4g9B+E+3wledjflm2fbBhAU7BCmxIPRRZCYM2695DRwVjz9hFf6qRGkpoRSTIX+ t8FQxo47o+Qx7X61HIW+e8J6/+3Vtej8I2Jdba6bVEjWkPl7EBFtRsjZ9Cc7UMe2 mKeBoAUcC280HOHsSnh2fpuUgNpPCJyNecE+xek0twBRjADWNbDcqN/tGgOaWBCA QngPgdeNIj9dZkf6TSGg4C7EF+Zlxixae9QBZU07y/CjgZ1pIsPbac1KzZJ65Igl hC5YRQXYu3pgXMs/8FKs54ss9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZ5zfbK jpntXfU3cMZRxRVvCaVzMB8GA1UdIwQYMBaAFFLhapuJrsgqDPCFz1rn3D6wjwyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0EyMC8yMjY2QUUyMjU1 MUIxMUU5OEJBMEMwNzNDNEY5QUUwMi9VdUZxbTRtdXlDb004SVhQV3VmY1ByQ1BE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1RnFtNG11eUNvTThJWFBXdWZjUHJDUERKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0EyMC8yMjY2QUUyMjU1MUIxMUU5OEJBMEMwNzNDNEY5QUUwMi9VdUZxbTRtdXlD b004SVhQV3VmY1ByQ1BESkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJIrFlj940oYvCgJoBayUJ/ELyJtIB1VTTGK76G0LTMnLKWS0OdIuo +Oh/oXq0AHK6AEgDwgM3R7xM3ubSu68XqUifL+KFJueidg1b0MwVDTd9CTbp2Eub QDonzE2mQ3CT+O2PakvkhQLaCiZgXo6IHCQvskJXOejQXmclcrigg0mdG6TK6ylS 2s8DLELlmjJmBKtXDhkMGqCv7DpP6gDBi2bJ9KMeqa5LARKRA6FeXFo3hhCKc7I2 BhKVh1tyUCran9qdWVSe9MA1OKLvlPQiiyzz3aDpkE2Wqw+P6XDzViSd3hzYwZVX nVw46u5mvgz8TnJy0wTNEqqx3wiEMvi1 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org