$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json) Hash identifier: VlRITe/g8OK/MgGGEbGd6rY3425hPKnoMBTFwMtNc7E= Subject key identifier: 65:17:74:87:E9:1D:EC:6C:7D:28:BD:87:41:6A:F8:86:A2:BE:D5:80 Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft Manifest number: A6 Signing time: Thu 21 Nov 2024 04:24:11 +0000 Manifest this update: Thu 21 Nov 2024 04:24:11 +0000 Manifest next update: Thu 28 Nov 2024 04:24:11 +0000 Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: T0gGElc0W21iGFDdioWh/SGY8Ly1WQU2bj4VI3IdSJ0=) 2: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: 0bfhohRWkw+mHnMOok0JegQjrp5R3WBkt6xVLjqYhaM=) 3: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: 2gGgqONwnX64brWTCvyDQtAM9YLsZFvnALg6fNykXqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Validity Not Before: Nov 21 04:24:11 2024 GMT Not After : Nov 28 04:24:11 2024 GMT Subject: CN=673eb5eb-3ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:b3:5e:20:31:d1:2a:c9:5c:7c:d0:e7:e0: e9:53:72:d6:82:97:b5:02:43:27:d1:12:51:50:13: fc:a5:8e:dc:0d:d9:80:f3:ce:6c:54:3d:8e:8a:0f: 2c:3b:31:9d:2c:11:d5:73:34:4b:ae:82:c1:0d:53: cf:d1:ec:a7:0f:c3:ca:95:77:4c:d6:69:f1:8d:98: 89:e2:bc:b7:00:72:5d:aa:7f:b3:1e:7f:25:66:e7: be:27:87:4f:aa:e1:c2:f9:1d:b9:db:08:a0:50:01: df:14:90:3f:d0:87:43:4f:83:ad:0a:83:b0:d1:7c: a6:c4:9e:b8:b7:f4:98:40:2f:39:26:ea:e0:56:00: b9:41:ea:4f:e8:c5:1c:25:1b:d4:50:3f:0f:42:f4: fb:fb:eb:26:c1:3c:a5:b7:27:f1:be:ef:f1:cf:60: c1:51:bb:69:04:ec:48:60:78:45:35:2b:4c:e9:f1: 9b:ae:1d:c5:35:36:9f:3c:21:b8:0e:c1:54:f9:0a: 1d:bd:fe:24:f3:55:b0:8f:a8:74:96:43:30:2f:93: 48:cd:6e:8f:39:5c:66:fe:b9:ae:ff:c7:00:e5:f1: da:e3:3d:46:2d:5f:a0:c2:74:80:4e:e2:6b:da:07: bb:3f:bb:66:b3:00:35:ea:62:2b:d7:82:bd:50:c9: 81:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:17:74:87:E9:1D:EC:6C:7D:28:BD:87:41:6A:F8:86:A2:BE:D5:80 X509v3 Authority Key Identifier: keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ba:b2:49:02:cd:bb:d8:27:02:58:7c:85:35:d8:c3:d7:c6: 19:b8:bc:81:6a:24:7f:5e:b7:ff:5e:0a:66:91:d9:56:3a:43: 19:90:4a:1e:94:1d:d6:5a:43:fb:81:67:73:59:4b:53:6d:62: c5:d3:d9:a1:c5:52:45:b0:85:52:bf:3e:ee:9e:12:66:b3:db: 3a:6a:38:a4:72:ad:d3:a6:6b:07:16:98:40:37:75:8b:bb:88: 6d:1b:19:75:b2:60:91:78:6c:bb:2e:aa:da:e7:69:bf:53:43: 3a:1a:8c:e8:39:8f:c2:0a:1f:fa:9f:df:2e:a8:94:06:85:71: 61:ca:25:69:ab:0d:ce:92:d0:28:d1:45:17:e5:00:20:e5:ef: 77:b1:27:c1:f1:09:85:01:b2:62:4e:04:91:62:c3:63:71:7e: 56:21:9e:60:b3:73:0e:0e:05:fd:f9:44:e1:8d:7a:a1:8e:99: 28:f9:df:49:de:86:37:93:35:c5:3f:7b:d4:10:74:82:e2:c0: 89:ca:e1:b5:4e:72:c1:c2:51:68:45:ec:82:16:41:00:e0:ba: 1e:a5:44:db:fb:30:a5:a1:55:52:79:9a:ac:2d:69:89:95:c1: c0:57:36:69:a5:87:e5:3b:54:bf:1a:e5:0b:87:08:44:0f:2b: a7:27:9f:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDRCRTUwNjhCMzdCMTYzMjUzMEZGNTIyMzg2RTdCN0ZC MDE4OEU5RUEwHhcNMjQxMTIxMDQyNDExWhcNMjQxMTI4MDQyNDExWjAYMRYwFAYD VQQDEw02NzNlYjVlYi0zYWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7yzXiAx0SrJXHzQ5+DpU3LWgpe1AkMn0RJRUBP8pY7cDdmA885sVD2Oig8s OzGdLBHVczRLroLBDVPP0eynD8PKlXdM1mnxjZiJ4ry3AHJdqn+zHn8lZue+J4dP quHC+R252wigUAHfFJA/0IdDT4OtCoOw0XymxJ64t/SYQC85JurgVgC5QepP6MUc JRvUUD8PQvT7++smwTyltyfxvu/xz2DBUbtpBOxIYHhFNStM6fGbrh3FNTafPCG4 DsFU+Qodvf4k81Wwj6h0lkMwL5NIzW6POVxm/rmu/8cA5fHa4z1GLV+gwnSATuJr 2ge7P7tmswA16mIr14K9UMmBswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUXdIfp HexsfSi9h0Fq+IaivtWAMB8GA1UdIwQYMBaAFEvlBos3sWMlMP9SI4bnt/sBiOnq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy9FODBGMTM3Q0I5 OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5VXdfMUlqaHVlMy13R0k2 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1MtVUdpemV4WXlVd18xSWpodWUzLXdHSTZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy9FODBGMTM3Q0I5OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5 VXdfMUlqaHVlMy13R0k2ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2urJJAs272CcCWHyFNdjD18YZuLyBaiR/Xrf/XgpmkdlWOkMZkEoe lB3WWkP7gWdzWUtTbWLF09mhxVJFsIVSvz7unhJms9s6ajikcq3TpmsHFphAN3WL u4htGxl1smCReGy7Lqra52m/U0M6GozoOY/CCh/6n98uqJQGhXFhyiVpqw3OktAo 0UUX5QAg5e93sSfB8QmFAbJiTgSRYsNjcX5WIZ5gs3MODgX9+UThjXqhjpko+d9J 3oY3kzXFP3vUEHSC4sCJyuG1TnLBwlFoReyCFkEA4LoepUTb+zCloVVSeZqsLWmJ lcHAVzZppYflO1S/GuULhwhEDyunJ5+i -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:07 2024 by rpki-client on console-ams.rpki-client.org