$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft File: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft (raw, json) Hash identifier: NBk2KXYI2qNXYJDyVFteEwYAazwFIrtcYw1K7bFS1oM= Subject key identifier: 12:6A:13:A1:7B:55:78:53:91:A5:53:2E:EF:11:81:18:6E:85:DE:4C Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 Certificate issuer: /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft Manifest number: 2D Signing time: Thu 19 Sep 2024 05:57:56 +0000 Manifest this update: Thu 19 Sep 2024 05:57:55 +0000 Manifest next update: Thu 26 Sep 2024 05:57:55 +0000 Files and hashes: 1: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl (hash: c+3OliCMuhtGJcypjxURlkphS9QS9nlrMG3ErazNiOQ=) 2: 24142938343C11EFA0165876C4F9AE02.roa (hash: IdxIHC09tqUl/qL5Re/ky1cTF3HFezxRLbNar6MjEZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324 Validity Not Before: Sep 19 05:57:55 2024 GMT Not After : Sep 26 05:57:55 2024 GMT Subject: CN=66ebbd64-46c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:57:bd:e0:6d:d7:8a:8e:f2:54:76:1c:cd:67: 70:f5:8a:5e:bd:8b:48:f4:7f:0a:0f:45:fa:0a:2f: 4f:2e:50:e9:06:82:60:06:c9:af:4a:8f:3e:18:b1: a7:c6:41:1c:00:d5:0e:36:a5:c1:56:ba:71:68:84: 52:5e:27:5e:0a:e9:f4:86:ea:e7:2f:17:71:8e:b0: 07:c0:02:5c:5e:42:94:99:43:19:f1:b0:d0:ff:30: e1:af:c1:eb:c9:d7:aa:9f:a4:9d:d0:62:dc:48:91: 92:0b:75:ab:1f:ab:56:9a:ed:ea:4d:fd:6f:86:65: 34:aa:cb:00:fa:be:35:bd:d1:b3:2f:cd:ac:ee:d5: 99:b1:87:66:92:e6:f8:f3:50:7f:6d:d1:2d:79:02: b4:f5:85:f6:ee:4b:91:76:d8:16:a2:4c:95:e0:1f: 70:69:fd:fd:0e:ff:7c:d9:c7:3b:db:27:31:78:a7: 84:8f:8c:18:9b:b0:ab:da:c0:32:ea:a3:42:62:f0: b3:c9:20:4f:c0:8e:07:53:ee:16:d4:eb:cb:4b:ea: 65:4c:14:56:af:a9:ac:6e:92:2f:f0:70:33:d7:23: 99:1e:89:f5:1e:ff:c9:d3:76:a5:b1:d7:9c:82:6f: ac:48:c9:bb:5c:34:34:8e:68:fb:ba:c5:16:6d:75: 60:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6A:13:A1:7B:55:78:53:91:A5:53:2E:EF:11:81:18:6E:85:DE:4C X509v3 Authority Key Identifier: keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4b:25:52:45:54:1e:a1:29:27:14:80:80:1a:07:21:f8:ee: d1:36:bf:e8:a9:fb:e8:6d:0d:3d:81:23:fa:a1:e0:f5:30:87: f7:75:3d:04:4f:58:2c:d0:d7:ee:82:fd:95:37:8c:92:b1:1e: 88:a3:76:f6:cc:08:bd:bc:6f:da:fb:30:e7:5d:76:55:ab:8c: ed:0d:f4:26:66:63:87:db:b2:f7:f9:7e:2e:e2:f7:34:f8:17: 37:1c:57:d6:4c:00:ac:a8:65:de:43:2c:d4:4b:ba:d0:27:6b: 0a:d5:bf:32:00:ae:82:d3:37:aa:51:18:4b:9c:65:88:3c:f6: e2:f6:86:8c:61:0e:29:9e:94:b2:5b:9a:ac:01:c0:fb:fa:c8: 62:e7:ce:36:c5:3c:d7:09:b2:97:3f:a7:9a:98:a2:e3:43:11: 1c:21:59:02:51:0f:36:3a:3a:85:a0:cc:ea:3c:f1:cc:a5:5f: 54:2e:45:c9:d9:40:78:cb:98:38:25:df:3f:74:6b:93:71:8d: 6f:8b:7e:87:3c:7e:25:ef:47:19:88:8e:dc:b2:9a:eb:15:c7: 77:e8:04:38:76:d4:b4:ea:e0:be:15:99:99:63:4f:7b:79:d1: 37:d7:06:7e:4c:fc:b4:ba:48:6e:cd:16:86:e1:39:c6:53:dd: a1:a2:35:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NzRGQjExMC8GA1UEBRMoNTI5NkJDODAxNDAyQzczOTA5RjU5MUUxOTA5NUYyMjQ2 NTQxNDMyNDAeFw0yNDA5MTkwNTU3NTVaFw0yNDA5MjYwNTU3NTVaMBgxFjAUBgNV BAMTDTY2ZWJiZDY0LTQ2YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaV73gbdeKjvJUdhzNZ3D1il69i0j0fwoPRfoKL08uUOkGgmAGya9Kjz4YsafG QRwA1Q42pcFWunFohFJeJ14K6fSG6ucvF3GOsAfAAlxeQpSZQxnxsND/MOGvwevJ 16qfpJ3QYtxIkZILdasfq1aa7epN/W+GZTSqywD6vjW90bMvzazu1Zmxh2aS5vjz UH9t0S15ArT1hfbuS5F22BaiTJXgH3Bp/f0O/3zZxzvbJzF4p4SPjBibsKvawDLq o0Ji8LPJIE/AjgdT7hbU68tL6mVMFFavqaxuki/wcDPXI5keifUe/8nTdqWx15yC b6xIybtcNDSOaPu6xRZtdWD9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEmoToXtV eFORpVMu7xGBGG6F3kwwHwYDVR0jBBgwFoAUUpa8gBQCxzkJ9ZHhkJXyJGVBQyQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3NEZCLzc4OTdGODE2MzQz OTExRUY5QzNEMjEzRUM0RjlBRTAyL1VwYThnQlFDeHprSjlaSGhrSlh5SkdWQlF5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVXBhOGdCUUN4emtKOVpIaGtKWHlKR1ZCUXlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 NEZCLzc4OTdGODE2MzQzOTExRUY5QzNEMjEzRUM0RjlBRTAyL1VwYThnQlFDeHpr SjlaSGhrSlh5SkdWQlF5US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG5LJVJFVB6hKScUgIAaByH47tE2v+ip++htDT2BI/qh4PUwh/d1PQRP WCzQ1+6C/ZU3jJKxHoijdvbMCL28b9r7MOdddlWrjO0N9CZmY4fbsvf5fi7i9zT4 FzccV9ZMAKyoZd5DLNRLutAnawrVvzIAroLTN6pRGEucZYg89uL2hoxhDimelLJb mqwBwPv6yGLnzjbFPNcJspc/p5qYouNDERwhWQJRDzY6OoWgzOo88cylX1QuRcnZ QHjLmDgl3z90a5NxjW+Lfoc8fiXvRxmIjtyymusVx3foBDh21LTq4L4VmZljT3t5 0TfXBn5M/LS6SG7NFobhOcZT3aGiNbM= -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:13 2024 by rpki-client on console-ams.rpki-client.org