$ rpki-client -vvf rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft File: uEHIC-gYxhquhBeUDKPmnMFB348.mft (raw, json) Hash identifier: pSFiso4/tt1KbMmwrdDmzjtbbD1wrgIeYejnOdDSXFw= Subject key identifier: 7E:47:7A:9B:1A:36:87:CF:F8:A3:A9:C1:A5:83:EC:FC:31:5D:0D:F7 Authority key identifier: B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F Certificate issuer: /CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Certificate serial: 0F27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft Manifest number: 0F1B Signing time: Fri 22 Nov 2024 17:35:16 +0000 Manifest this update: Fri 22 Nov 2024 17:35:16 +0000 Manifest next update: Fri 29 Nov 2024 17:35:16 +0000 Files and hashes: 1: uEHIC-gYxhquhBeUDKPmnMFB348.crl (hash: /o3ZDPRD0oJTKW83zRbEh9HcQyWm8BMY0iOuheEjelc=) 2: FB45F610638211E9A58B4C45C4F9AE02.roa (hash: 0Ef45WOQtOuveGkONJNzk3PchAu2KhMz/NV4Wv3q7VU=) 3: 65EADA381A8011ECAD1E4B30C4F9AE02.roa (hash: swa1tXqn4jx39kN/76V0jPk/byrE4zjRHjVhK5jUeu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3879 (0xf27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Validity Not Before: Nov 22 17:35:16 2024 GMT Not After : Nov 29 17:35:16 2024 GMT Subject: CN=6740c0d4-21b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:62:fc:03:dc:12:33:32:4b:d2:da:a2:04:b5: 96:5e:8f:e3:da:4d:15:1c:3a:dc:5e:25:b8:fa:d4: 80:15:70:b1:84:45:10:4c:56:4d:ee:79:a8:07:44: a9:41:d4:21:3a:87:e9:d6:d8:01:eb:5b:82:fa:17: bc:c5:c4:16:c0:44:69:d1:17:cf:ef:99:5b:03:48: 76:69:9f:2b:05:b8:07:ee:8c:d6:f5:31:e1:c1:70: 14:70:b5:90:a3:18:2d:fd:af:93:93:8a:ff:ce:f0: 1f:e8:ce:de:a6:f4:2b:22:cb:f9:c1:b0:f4:82:6f: ab:58:1f:e6:c9:cb:5a:a1:7c:50:d7:d7:6b:5c:16: 3d:b6:36:32:e6:90:3c:3a:27:93:ea:5b:7d:a0:d3: fb:91:92:94:79:62:0d:ba:be:c5:2d:2b:82:7f:f9: 74:9e:6b:ae:80:70:a7:dc:b1:24:3c:79:57:e8:52: ac:6a:b2:1c:33:74:45:54:70:7c:b6:4f:92:99:f3: de:8b:9b:3a:09:2c:fd:09:5c:ec:b6:38:b9:9a:69: 69:f7:ad:94:5f:ee:d3:a9:4f:eb:e5:db:4e:69:ac: 92:df:9f:7e:68:31:43:09:cf:e2:3c:8d:bc:5a:20: a3:5b:b2:ee:6f:fb:d6:9a:60:e7:34:05:c9:e7:e5: b3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:47:7A:9B:1A:36:87:CF:F8:A3:A9:C1:A5:83:EC:FC:31:5D:0D:F7 X509v3 Authority Key Identifier: keyid:B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:0a:4c:23:42:63:37:de:54:a1:44:51:a6:b9:47:59:fd:d9: 92:fd:c8:f2:cd:0a:11:bd:c8:e1:24:a8:8d:da:6f:c2:d2:12: e4:73:04:71:ee:2a:fe:f7:06:c4:1a:71:33:83:06:a9:e5:dc: f0:2d:a3:23:00:54:c5:e8:1a:92:2d:59:b0:ab:21:4e:fc:38: e6:87:c7:f2:61:a4:7f:d6:b0:fd:0a:6a:19:e6:92:c9:11:b1: 7d:20:ad:f1:3c:a7:05:a9:93:41:70:0c:0a:03:1e:f6:6e:80: 96:8c:e8:24:5c:33:3f:56:43:48:6f:22:5b:44:40:53:b3:96: 22:aa:48:38:9b:a3:19:6d:57:62:f2:eb:ce:bc:a9:f9:b1:74: 61:66:ac:79:6c:49:19:3c:a2:d4:40:ef:20:b6:64:ac:95:fb: f4:9d:34:a5:38:fb:91:51:83:1b:f4:b5:11:80:c3:c5:af:11: 0f:38:64:79:78:fc:93:16:b7:d5:9f:51:1c:2c:18:f9:8e:2a: 18:da:ff:a6:67:a6:ea:23:e1:44:49:9d:ef:47:67:ef:e6:b1: 25:34:7c:46:de:cb:24:87:2b:bb:5d:ba:b8:05:ac:13:83:e8: 28:d2:25:7d:f5:1b:62:47:59:a0:65:b9:d8:7a:88:a3:15:0b: 30:ae:43:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU5QTMxMTAvBgNVBAUTKEI4NDFDODBCRTgxOEM2MUFBRTg0MTc5NDBDQTNFNjlD QzE0MURGOEYwHhcNMjQxMTIyMTczNTE2WhcNMjQxMTI5MTczNTE2WjAYMRYwFAYD VQQDEw02NzQwYzBkNC0yMWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2L8A9wSMzJL0tqiBLWWXo/j2k0VHDrcXiW4+tSAFXCxhEUQTFZN7nmoB0Sp QdQhOofp1tgB61uC+he8xcQWwERp0RfP75lbA0h2aZ8rBbgH7ozW9THhwXAUcLWQ oxgt/a+Tk4r/zvAf6M7epvQrIsv5wbD0gm+rWB/myctaoXxQ19drXBY9tjYy5pA8 OieT6lt9oNP7kZKUeWINur7FLSuCf/l0nmuugHCn3LEkPHlX6FKsarIcM3RFVHB8 tk+SmfPei5s6CSz9CVzstji5mmlp962UX+7TqU/r5dtOaayS359+aDFDCc/iPI28 WiCjW7Lub/vWmmDnNAXJ5+Wz/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5Hepsa NofP+KOpwaWD7PwxXQ33MB8GA1UdIwQYMBaAFLhByAvoGMYaroQXlAyj5pzBQd+P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlBMy83NjQzNUZFRTYz ODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXhocXVoQmVVREtQbW5NRkIz NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VFSElDLWdZeGhxdWhCZVVES1Btbk1GQjM0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTlBMy83NjQzNUZFRTYzODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXho cXVoQmVVREtQbW5NRkIzNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhCkwjQmM33lShRFGmuUdZ/dmS/cjyzQoRvcjhJKiN2m/C0hLkcwRx 7ir+9wbEGnEzgwap5dzwLaMjAFTF6BqSLVmwqyFO/Djmh8fyYaR/1rD9CmoZ5pLJ EbF9IK3xPKcFqZNBcAwKAx72boCWjOgkXDM/VkNIbyJbREBTs5Yiqkg4m6MZbVdi 8uvOvKn5sXRhZqx5bEkZPKLUQO8gtmSslfv0nTSlOPuRUYMb9LURgMPFrxEPOGR5 ePyTFrfVn1EcLBj5jioY2v+mZ6bqI+FESZ3vR2fv5rElNHxG3sskhyu7Xbq4BawT g+go0iV99RtiR1mgZbnYeoijFQswrkOK -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org