$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft File: vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft (raw, json) Hash identifier: 0dv0ITLDZ8KBZFWLNjdD2fvJZG+DgT4Jd2J7wWCwt7g= Subject key identifier: 8D:99:7E:00:9C:E8:B9:47:A5:2E:E1:7D:37:52:D6:8D:96:FC:11:AC Authority key identifier: BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12 Certificate issuer: /CN=A9181EBC/serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312 Certificate serial: 062F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft Manifest number: 0623 Signing time: Wed 20 Nov 2024 22:07:14 +0000 Manifest this update: Wed 20 Nov 2024 22:07:14 +0000 Manifest next update: Wed 27 Nov 2024 22:07:14 +0000 Files and hashes: 1: vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl (hash: 67Dlh6cqi+wlfdOImmDxXGb48PYf25OEuGM7SBuYhYg=) 2: 62D6FB5474D811EB99569279C4F9AE02.roa (hash: d5GYDhOIlD2Y6V3aPBFRagLvqFIYFYSveCQyFaynEfU=) 3: 625827FC74D811EB99569279C4F9AE02.roa (hash: nuHbMZ7jdYXMsw/8MYqt1N+pl2yGg3LZQWJTXeLOE+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EBC/serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312 Validity Not Before: Nov 20 22:07:14 2024 GMT Not After : Nov 27 22:07:14 2024 GMT Subject: CN=673e5d92-daed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c3:1e:e8:04:07:1d:28:27:09:2e:db:ed:9e: 4d:6b:92:47:f0:e8:50:be:b2:a7:32:46:f3:6c:38: ec:cf:ce:39:32:93:a6:ea:9d:40:ac:d8:d5:96:79: ba:38:41:3a:c9:43:a7:f8:6a:76:c1:7e:67:8e:23: b2:ab:06:78:a9:cc:84:7e:85:57:92:06:3b:1b:f0: 3f:e0:79:83:b2:c2:39:f3:eb:ca:a8:62:31:b9:e6: 52:c1:ee:20:99:f4:e0:95:f7:6d:dc:71:7d:27:84: c6:29:8d:33:58:43:cd:a7:fd:c3:eb:03:63:73:2b: 3d:64:28:4e:0a:d1:a9:f4:55:15:ea:f9:aa:90:c0: db:69:45:5c:db:28:d8:20:fe:20:32:44:59:eb:a1: 22:cc:ac:fa:47:d6:50:af:81:7b:2b:8a:72:49:12: 65:e5:bc:6e:a3:3d:ec:e1:37:b3:f7:75:71:02:de: 1f:9c:cd:25:48:f5:6c:14:91:23:5b:59:6e:bb:33: 22:94:07:13:17:70:55:81:45:93:79:fa:b3:c7:4b: a8:3a:2e:da:20:72:4e:c3:cf:c0:ca:e5:6d:6e:0a: 22:bf:3f:95:0e:f3:0b:d9:78:0b:d8:81:e2:71:68: 4c:79:43:45:06:6c:f4:b9:51:44:d4:70:be:b1:1a: 33:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:99:7E:00:9C:E8:B9:47:A5:2E:E1:7D:37:52:D6:8D:96:FC:11:AC X509v3 Authority Key Identifier: keyid:BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:11:55:0b:7f:02:55:f0:58:7f:82:bd:0e:30:f1:d7:bf:ec: 0a:b7:29:d5:26:52:a7:15:49:6b:48:8c:08:cc:3b:0e:68:5d: cf:8f:74:3b:cc:40:a4:85:24:d7:d8:6a:68:ed:78:1a:80:58: 5e:b3:39:fd:f4:cc:18:f9:d6:03:a4:72:08:2d:38:d5:4f:94: 12:3e:f5:88:07:e7:a7:4a:b8:8d:b8:a7:42:bd:a9:6e:94:9c: b7:7f:c8:41:a4:0f:76:69:1b:e5:05:f8:cb:46:c4:71:c8:2b: c3:32:cb:14:86:7e:1b:0f:f0:b0:41:71:79:4f:58:be:d9:90: 98:56:67:86:3b:3d:1a:5c:84:8c:58:e7:9f:2c:9e:61:67:61: 36:1d:15:15:cd:1f:38:23:75:45:23:d8:a4:58:9b:a2:a8:12: b4:47:50:1e:09:68:a4:38:b8:dc:f6:d5:38:96:39:6a:b3:8c: bf:cc:6c:ba:16:1c:52:e7:7b:e9:d6:36:fc:f7:03:81:1e:2d: e4:cc:72:e1:40:54:ea:2c:e7:5d:fc:47:c4:78:22:5e:44:1c: 1a:45:14:1d:8e:f2:f6:f4:9c:ee:9e:3c:62:aa:06:5f:a3:3f: 4d:ed:8d:81:88:d1:ff:68:83:80:4a:f2:e0:37:a5:4e:7a:44: 30:f5:8e:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQkMxMTAvBgNVBAUTKEJENDhCQUZBMzJBRDJFOTNCODg5Q0YzRTM4NjlBQzAz NEExNzIzMTIwHhcNMjQxMTIwMjIwNzE0WhcNMjQxMTI3MjIwNzE0WjAYMRYwFAYD VQQDEw02NzNlNWQ5Mi1kYWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08Me6AQHHSgnCS7b7Z5Na5JH8OhQvrKnMkbzbDjsz845MpOm6p1ArNjVlnm6 OEE6yUOn+Gp2wX5njiOyqwZ4qcyEfoVXkgY7G/A/4HmDssI58+vKqGIxueZSwe4g mfTglfdt3HF9J4TGKY0zWEPNp/3D6wNjcys9ZChOCtGp9FUV6vmqkMDbaUVc2yjY IP4gMkRZ66EizKz6R9ZQr4F7K4pySRJl5bxuoz3s4Tez93VxAt4fnM0lSPVsFJEj W1luuzMilAcTF3BVgUWTefqzx0uoOi7aIHJOw8/AyuVtbgoivz+VDvML2XgL2IHi cWhMeUNFBmz0uVFE1HC+sRozyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2ZfgCc 6LlHpS7hfTdS1o2W/BGsMB8GA1UdIwQYMBaAFL1IuvoyrS6TuInPPjhprANKFyMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVCQy8zODgzNDE0ODc0 RDYxMUVCQkNCREZBNzNDNEY5QUUwMi92VWk2LWpLdExwTzRpYzgtT0dtc0Ewb1hJ eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZVaTYtakt0THBPNGljOC1PR21zQTBvWEl4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVCQy8zODgzNDE0ODc0RDYxMUVCQkNCREZBNzNDNEY5QUUwMi92VWk2LWpLdExw TzRpYzgtT0dtc0Ewb1hJeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXEVULfwJV8Fh/gr0OMPHXv+wKtynVJlKnFUlrSIwIzDsOaF3Pj3Q7 zECkhSTX2Gpo7XgagFheszn99MwY+dYDpHIILTjVT5QSPvWIB+enSriNuKdCvalu lJy3f8hBpA92aRvlBfjLRsRxyCvDMssUhn4bD/CwQXF5T1i+2ZCYVmeGOz0aXISM WOefLJ5hZ2E2HRUVzR84I3VFI9ikWJuiqBK0R1AeCWikOLjc9tU4ljlqs4y/zGy6 FhxS53vp1jb89wOBHi3kzHLhQFTqLOdd/EfEeCJeRBwaRRQdjvL29JzunjxiqgZf oz9N7Y2BiNH/aIOASvLgN6VOekQw9Y7j -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:46 2024 by rpki-client on console-fra.rpki-client.org