$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft File: UyhhbneUVH65zpK0qPBF5LLMwPw.mft (raw, json) Hash identifier: N5w0LXHPnq0PiJKLFwP1BRwV8k5R8TqJBjeCGTdfcxs= Subject key identifier: F0:56:B1:31:73:A7:36:CF:6F:FC:02:BC:A6:02:E7:04:B2:54:78:6C Authority key identifier: 53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC Certificate issuer: /CN=A91847A0/serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC Certificate serial: 1CAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft Manifest number: 1CA3 Signing time: Fri 22 Nov 2024 16:11:12 +0000 Manifest this update: Fri 22 Nov 2024 16:11:12 +0000 Manifest next update: Fri 29 Nov 2024 16:11:12 +0000 Files and hashes: 1: UyhhbneUVH65zpK0qPBF5LLMwPw.crl (hash: zwoR4RBMXXU++NFf9ib/ysG/8bvnFj35xyPgNNMm4Jc=) 2: 82E0D450BC5011E6B01A8D4CC4F9AE02.roa (hash: 0pFtdAh/nKnP5eoxsGxODsFcMEqhXHUTJ4P3f5IMFhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7343 (0x1caf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A0/serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC Validity Not Before: Nov 22 16:11:12 2024 GMT Not After : Nov 29 16:11:12 2024 GMT Subject: CN=6740ad20-fb39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bc:48:97:3c:36:f0:3d:c8:59:eb:64:fd:7e: de:de:cb:c6:b9:3c:d8:48:cc:c9:33:d4:5d:f7:fd: d9:65:2b:cf:0e:39:82:65:e7:d2:b6:bf:de:d1:fc: b3:62:4c:64:d0:ac:c8:f5:6a:f6:e3:6c:e8:46:8a: 0d:47:57:66:e6:75:59:fe:a9:d5:75:35:85:22:e9: f6:fb:ae:a6:4e:9f:26:46:b5:95:40:41:1c:41:a3: ec:b3:20:1e:d4:48:45:93:03:a5:3a:73:6e:80:26: c6:bd:06:c5:76:9a:44:06:60:2c:9b:55:54:02:1a: e1:1d:b4:aa:bc:00:32:45:0c:92:0d:d9:63:63:8c: b8:79:e4:93:bb:45:f8:09:a1:dc:fe:f6:2e:77:d6: 36:6b:49:ef:26:5c:1f:97:33:a5:45:66:6d:0f:fc: 47:13:43:b7:f8:d0:d7:93:fe:61:15:2f:66:99:5c: ca:f7:56:42:03:da:e7:9f:6c:ef:c8:46:98:87:ac: b7:e9:f1:c3:61:d2:d4:92:0e:52:4c:ad:ae:1b:74: 03:69:56:7c:fb:b6:ba:cf:80:44:7d:d9:9e:f8:01: 76:0a:47:b3:4d:3f:cb:f2:8b:3f:59:a9:50:f7:33: 7a:c0:83:cc:9a:dc:59:bd:42:a1:1a:04:6c:bb:9e: e6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:56:B1:31:73:A7:36:CF:6F:FC:02:BC:A6:02:E7:04:B2:54:78:6C X509v3 Authority Key Identifier: keyid:53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b7:70:85:af:0a:77:4f:cf:fd:3d:cc:bd:6e:ea:5e:eb:18: d6:22:1a:2f:d0:1c:5e:c4:88:d5:4b:54:4b:40:71:85:3d:82: b2:22:29:5e:0b:a5:36:59:8d:9b:24:33:85:41:e7:c3:7c:81: dc:69:91:c4:59:a3:21:50:d4:49:86:73:00:3e:9c:38:6b:a7: f2:d1:21:7a:e3:c9:0b:22:68:54:d7:81:13:21:7b:99:d9:6e: 09:a2:d0:be:f7:05:f4:5d:26:92:fe:92:06:f3:61:02:f9:b4: 76:3d:6a:12:3e:66:86:cb:d5:ec:65:a4:99:85:0c:a5:87:e6: 9b:82:80:5c:0d:3d:22:0d:10:29:ae:89:59:f1:ac:7f:8f:72: 63:5e:bc:eb:cb:6b:7a:1c:cd:bf:0a:52:a0:7b:50:41:6c:57: 9c:34:62:69:db:c0:61:93:e3:60:6e:cd:8c:4e:94:77:05:23: 2a:ce:73:e2:ae:62:f6:77:6c:60:40:5a:40:73:d4:a5:ee:0b: a2:59:87:c4:65:f7:24:51:16:51:6b:07:46:b3:b4:70:65:69: 97:87:4e:b7:eb:02:aa:e3:44:53:97:2b:4a:3f:35:59:74:2b: 37:d3:34:6e:1f:e2:c1:a9:9b:eb:64:95:02:f3:f6:77:9e:40: 0d:e3:90:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTAxMTAvBgNVBAUTKDUzMjg2MTZFNzc5NDU0N0VCOUNFOTJCNEE4RjA0NUU0 QjJDQ0MwRkMwHhcNMjQxMTIyMTYxMTEyWhcNMjQxMTI5MTYxMTEyWjAYMRYwFAYD VQQDEw02NzQwYWQyMC1mYjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bxIlzw28D3IWetk/X7e3svGuTzYSMzJM9Rd9/3ZZSvPDjmCZefStr/e0fyz Ykxk0KzI9Wr242zoRooNR1dm5nVZ/qnVdTWFIun2+66mTp8mRrWVQEEcQaPssyAe 1EhFkwOlOnNugCbGvQbFdppEBmAsm1VUAhrhHbSqvAAyRQySDdljY4y4eeSTu0X4 CaHc/vYud9Y2a0nvJlwflzOlRWZtD/xHE0O3+NDXk/5hFS9mmVzK91ZCA9rnn2zv yEaYh6y36fHDYdLUkg5STK2uG3QDaVZ8+7a6z4BEfdme+AF2CkezTT/L8os/WalQ 9zN6wIPMmtxZvUKhGgRsu57mWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBWsTFz pzbPb/wCvKYC5wSyVHhsMB8GA1UdIwQYMBaAFFMoYW53lFR+uc6StKjwReSyzMD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMC8wRTRBRDEyOEJD NEYxMUU2QkFGMUMyNEFDNEY5QUUwMi9VeWhoYm5lVVZINjV6cEswcVBCRjVMTE13 UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5aGhibmVVVkg2NXpwSzBxUEJGNUxMTXdQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMC8wRTRBRDEyOEJDNEYxMUU2QkFGMUMyNEFDNEY5QUUwMi9VeWhoYm5lVVZI NjV6cEswcVBCRjVMTE13UHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADt3CFrwp3T8/9Pcy9bupe6xjWIhov0BxexIjVS1RLQHGFPYKyIile C6U2WY2bJDOFQefDfIHcaZHEWaMhUNRJhnMAPpw4a6fy0SF648kLImhU14ETIXuZ 2W4JotC+9wX0XSaS/pIG82EC+bR2PWoSPmaGy9XsZaSZhQylh+abgoBcDT0iDRAp rolZ8ax/j3JjXrzry2t6HM2/ClKge1BBbFecNGJp28Bhk+Ngbs2MTpR3BSMqznPi rmL2d2xgQFpAc9Sl7guiWYfEZfckURZRawdGs7RwZWmXh0636wKq40RTlytKPzVZ dCs30zRuH+LBqZvrZJUC8/Z3nkAN45AT -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org