$ rpki-client -vvf rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft File: rUk9yaPSQDSDYoWHBR93lRWJFnk.mft (raw, json) Hash identifier: HlfNUc0ngzF+RqtMHQ4VVEQCtJTihClT8ZtsSOCFkek= Subject key identifier: 7C:51:0D:7C:BE:B8:36:15:F1:69:F4:74:1B:54:34:A9:2B:0A:E8:F9 Authority key identifier: AD:49:3D:C9:A3:D2:40:34:83:62:85:87:05:1F:77:95:15:89:16:79 Certificate issuer: /CN=A918B418/serialNumber=AD493DC9A3D2403483628587051F779515891679 Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft Manifest number: 01F1 Signing time: Sat 23 Nov 2024 01:39:23 +0000 Manifest this update: Sat 23 Nov 2024 01:39:23 +0000 Manifest next update: Sat 30 Nov 2024 01:39:23 +0000 Files and hashes: 1: rUk9yaPSQDSDYoWHBR93lRWJFnk.crl (hash: pLszo6gYqNjVy3XgcYXgBm0HKSG1hjp6tD6wTTaBnhQ=) 2: 8275E1721C5311EDA75CF137C4F9AE02.roa (hash: ylAjtSurS2AriNqYAWDXwI4mJ+u3ceX6ZX3mIJq8z+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.crl rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B418/serialNumber=AD493DC9A3D2403483628587051F779515891679 Validity Not Before: Nov 23 01:39:23 2024 GMT Not After : Nov 30 01:39:23 2024 GMT Subject: CN=6741324b-312c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8e:31:fe:26:83:27:eb:4e:89:4a:50:ed:84: ba:4c:65:82:a5:3b:27:9b:4d:0c:47:6f:23:e7:8f: 25:b9:d1:e7:3d:c5:64:82:46:9a:dd:ed:ef:3c:9e: 5b:d8:1c:b8:ec:15:b4:2b:63:3a:ba:41:30:4b:7a: 0b:fa:c7:19:7e:51:99:a8:c5:9e:5a:9e:71:96:a0: 02:3f:c0:da:c5:1d:b1:bc:63:8f:f1:8f:f9:72:a0: e0:4c:0a:75:22:b1:a2:dc:59:00:72:3e:a7:58:16: 86:7f:b2:a8:6b:18:71:27:47:90:22:91:34:3b:48: 6b:f8:c3:34:ba:cf:ea:a2:dc:c1:9f:e1:cc:33:d8: 1b:da:7d:dd:bd:e1:cb:d6:28:85:d4:43:35:ee:ba: 0b:50:6c:f2:ff:c8:a2:7b:aa:6f:bb:47:31:03:76: d4:7d:b6:f0:79:d3:e9:52:c2:6b:69:37:4e:55:d7: 2c:70:65:0e:aa:f3:3c:f5:42:15:cd:b8:25:2c:f4: c8:8a:88:fc:c1:3f:4d:9d:cb:7a:59:89:f0:58:00: 4f:6c:23:00:3f:a6:c3:a0:52:45:c3:09:8a:a7:67: 96:aa:e2:1a:69:46:70:82:93:14:cd:9f:0b:53:14: d2:a2:46:d3:14:b2:da:e7:cd:c7:e7:a9:0c:46:a3: 99:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:51:0D:7C:BE:B8:36:15:F1:69:F4:74:1B:54:34:A9:2B:0A:E8:F9 X509v3 Authority Key Identifier: keyid:AD:49:3D:C9:A3:D2:40:34:83:62:85:87:05:1F:77:95:15:89:16:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:dd:7d:d8:28:0c:1b:76:d4:8f:61:eb:f0:8c:41:3c:d7:af: b7:c1:b8:ab:ed:85:06:0d:7c:2e:ab:56:b3:63:81:ae:37:f3: 98:46:57:a0:1b:ca:51:eb:50:52:59:a4:ac:d9:76:fb:cb:73: 8f:63:26:3e:75:66:de:f0:a6:db:fc:ac:be:a0:2c:4c:bf:90: 19:14:13:a2:03:eb:76:5d:b0:99:19:67:94:0e:a0:27:5f:a2: 07:eb:05:67:71:fd:e8:ee:5c:ec:7b:69:af:52:d7:8a:50:32: d0:77:c6:18:f2:24:e1:57:05:ec:b6:b7:ed:0b:e5:40:0b:7b: e9:4d:90:e7:34:b5:26:49:5e:a6:ec:ab:16:1b:23:3d:16:b4: a7:4a:02:b8:64:ea:e1:f0:5f:1f:4b:8a:f7:ce:d6:50:96:a4: 3c:f1:f4:55:13:20:0b:d3:71:7a:28:a8:39:cf:fb:25:de:84: b2:13:4f:29:35:f6:cc:18:88:f1:1d:56:de:da:01:05:5f:0f: e1:18:f9:0e:81:64:a9:72:16:87:c1:c9:ef:61:c4:7e:3c:b4: 5a:b2:72:12:62:06:79:68:f2:b6:0e:37:09:f3:71:45:7b:f7: 71:ed:12:10:9c:d9:fa:45:1d:a7:e0:79:b5:86:85:a0:2e:d5: 4b:c2:4e:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI0MTgxMTAvBgNVBAUTKEFENDkzREM5QTNEMjQwMzQ4MzYyODU4NzA1MUY3Nzk1 MTU4OTE2NzkwHhcNMjQxMTIzMDEzOTIzWhcNMjQxMTMwMDEzOTIzWjAYMRYwFAYD VQQDEw02NzQxMzI0Yi0zMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5I4x/iaDJ+tOiUpQ7YS6TGWCpTsnm00MR28j548ludHnPcVkgkaa3e3vPJ5b 2By47BW0K2M6ukEwS3oL+scZflGZqMWeWp5xlqACP8DaxR2xvGOP8Y/5cqDgTAp1 IrGi3FkAcj6nWBaGf7KoaxhxJ0eQIpE0O0hr+MM0us/qotzBn+HMM9gb2n3dveHL 1iiF1EM17roLUGzy/8iie6pvu0cxA3bUfbbwedPpUsJraTdOVdcscGUOqvM89UIV zbglLPTIioj8wT9Nnct6WYnwWABPbCMAP6bDoFJFwwmKp2eWquIaaUZwgpMUzZ8L UxTSokbTFLLa583H56kMRqOZLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxRDXy+ uDYV8Wn0dBtUNKkrCuj5MB8GA1UdIwQYMBaAFK1JPcmj0kA0g2KFhwUfd5UViRZ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjQxOC9BRDBEQzQ4MDFD NEYxMUVEQUFEMzEzODZDNEY5QUUwMi9yVWs5eWFQU1FEU0RZb1dIQlI5M2xSV0pG bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVazl5YVBTUURTRFlvV0hCUjkzbFJXSkZuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjQxOC9BRDBEQzQ4MDFDNEYxMUVEQUFEMzEzODZDNEY5QUUwMi9yVWs5eWFQU1FE U0RZb1dIQlI5M2xSV0pGbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC3X3YKAwbdtSPYevwjEE816+3wbir7YUGDXwuq1azY4GuN/OYRleg G8pR61BSWaSs2Xb7y3OPYyY+dWbe8Kbb/Ky+oCxMv5AZFBOiA+t2XbCZGWeUDqAn X6IH6wVncf3o7lzse2mvUteKUDLQd8YY8iThVwXstrftC+VAC3vpTZDnNLUmSV6m 7KsWGyM9FrSnSgK4ZOrh8F8fS4r3ztZQlqQ88fRVEyAL03F6KKg5z/sl3oSyE08p NfbMGIjxHVbe2gEFXw/hGPkOgWSpchaHwcnvYcR+PLRasnISYgZ5aPK2DjcJ83FF e/dx7RIQnNn6RR2n4Hm1hoWgLtVLwk4Z -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org