$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft File: uf67oJzxCyh-7SzlZyKzyaDvEv8.mft (raw, json) Hash identifier: vu6p+arpdcJlhg3NPFv2xL2LWDFlFHPU39+cVfCxx3g= Subject key identifier: A7:5E:D4:16:B8:F3:FF:BC:1D:08:6A:2D:D1:DA:77:BC:6F:F5:1C:43 Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF Certificate issuer: /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Certificate serial: 0922 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft Manifest number: 091D Signing time: Fri 22 Nov 2024 20:04:45 +0000 Manifest this update: Fri 22 Nov 2024 20:04:45 +0000 Manifest next update: Fri 29 Nov 2024 20:04:45 +0000 Files and hashes: 1: uf67oJzxCyh-7SzlZyKzyaDvEv8.crl (hash: 3FFUVCdXgqdcVNhax7azqNzGTalRI1IyP3g16SBrsAc=) 2: 27030ADA8EB211EA9D09090FC4F9AE02.roa (hash: gLuoJW8vJX9f9pGeIxuvpKdQoZyIHfDvjf5EmSyhTPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2338 (0x922) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Validity Not Before: Nov 22 20:04:45 2024 GMT Not After : Nov 29 20:04:45 2024 GMT Subject: CN=6740e3dd-da62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:2d:f8:26:d9:a1:af:d6:81:98:19:5d:89: e5:90:70:d8:62:ba:7b:e2:f9:46:81:3f:17:e6:dc: 41:d7:72:2e:82:a9:0a:06:f1:6f:43:9f:93:13:cd: b4:7e:a4:1d:11:ee:12:4b:50:28:f1:b4:d4:00:22: cd:ed:61:8e:e5:42:a3:22:65:c3:3e:f9:32:46:c4: e6:e3:2e:53:f1:93:5c:67:72:38:a4:05:1c:8f:8b: ca:0f:a8:0a:4e:04:b4:41:b0:5b:d2:81:4b:dc:7e: 34:cf:f9:04:65:3b:4f:48:5d:b2:19:60:26:51:9d: 12:d5:4d:d0:17:ab:d0:90:fd:2c:0d:d3:5b:78:28: 61:60:d6:a0:e5:94:f7:ef:c2:fc:5b:3c:0f:33:1b: 9d:dc:95:55:2e:f0:5b:36:92:20:c6:80:d6:68:88: f7:4e:7f:22:af:64:a3:fe:07:07:78:8b:ab:ae:74: 51:21:cc:8b:73:fc:96:74:b6:a5:a5:f7:c1:52:dd: c4:28:0f:be:41:c6:77:8c:4d:44:49:e4:89:46:e4: f4:e0:da:04:76:c0:a3:a5:cc:eb:d6:e8:c6:90:5f: 69:93:54:a8:f7:02:e3:f7:45:f5:f3:48:e1:28:38: 86:80:4b:cb:09:42:9a:ec:04:66:08:16:43:3a:f1: 2e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5E:D4:16:B8:F3:FF:BC:1D:08:6A:2D:D1:DA:77:BC:6F:F5:1C:43 X509v3 Authority Key Identifier: keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:0c:ce:14:18:39:0c:da:71:c8:85:42:ff:24:c3:74:68:45: 5c:40:d8:d3:d6:4c:2f:f5:bd:2a:65:78:48:83:a8:1c:92:5f: 12:ff:b0:43:76:0e:8d:23:00:a4:e1:dc:e0:03:ce:2e:e2:c2: 6a:fe:1c:35:7c:ed:8e:4a:09:b4:1c:38:2b:e5:08:b5:58:54: 1e:cc:b3:be:52:1a:75:bf:e8:08:34:17:0f:c4:99:93:12:eb: 00:74:bd:53:1a:c3:03:8d:b6:13:d7:bd:d2:e1:f7:83:c1:7b: 3e:2f:66:cb:a7:bd:47:f3:96:b6:44:ff:f5:fa:4e:e8:da:c2: d2:20:54:1f:e0:13:49:c0:be:bf:9d:b1:02:70:c0:13:f7:9f: f1:c1:c3:5e:23:0e:8d:97:c1:36:d5:ea:89:29:15:9d:f1:b9: f5:cd:7d:4a:c3:d9:f1:a4:13:86:a5:6e:d7:a3:33:94:f5:3e: b4:3f:2b:3c:d5:a0:33:b8:2c:ba:b7:80:d4:fb:2d:be:02:41: 5f:f3:cf:55:77:ef:86:c7:b3:5e:7a:d1:65:7f:d7:f8:4f:55: 04:14:ed:b3:e3:17:38:47:bb:e7:09:26:49:04:fd:e5:f7:4b: 5e:6d:7e:c3:03:8b:98:01:e1:ad:47:7a:29:53:34:c2:9c:71: eb:30:dd:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCN0ExMTAvBgNVBAUTKEI5RkVCQkEwOUNGMTBCMjg3RUVEMkNFNTY3MjJCM0M5 QTBFRjEyRkYwHhcNMjQxMTIyMjAwNDQ1WhcNMjQxMTI5MjAwNDQ1WjAYMRYwFAYD VQQDEw02NzQwZTNkZC1kYTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKEt+CbZoa/WgZgZXYnlkHDYYrp74vlGgT8X5txB13IugqkKBvFvQ5+TE820 fqQdEe4SS1Ao8bTUACLN7WGO5UKjImXDPvkyRsTm4y5T8ZNcZ3I4pAUcj4vKD6gK TgS0QbBb0oFL3H40z/kEZTtPSF2yGWAmUZ0S1U3QF6vQkP0sDdNbeChhYNag5ZT3 78L8WzwPMxud3JVVLvBbNpIgxoDWaIj3Tn8ir2Sj/gcHeIurrnRRIcyLc/yWdLal pffBUt3EKA++QcZ3jE1ESeSJRuT04NoEdsCjpczr1ujGkF9pk1So9wLj90X180jh KDiGgEvLCUKa7ARmCBZDOvEunQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKde1Ba4 8/+8HQhqLdHad7xv9RxDMB8GA1UdIwQYMBaAFLn+u6Cc8Qsofu0s5Wcis8mg7xL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI3QS81RDIxMTg0QzhF QjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5aC03U3psWnlLenlhRHZF djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmNjdvSnp4Q3loLTdTemxaeUt6eWFEdkV2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI3QS81RDIxMTg0QzhFQjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5 aC03U3psWnlLenlhRHZFdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZDM4UGDkM2nHIhUL/JMN0aEVcQNjT1kwv9b0qZXhIg6gckl8S/7BD dg6NIwCk4dzgA84u4sJq/hw1fO2OSgm0HDgr5Qi1WFQezLO+Uhp1v+gINBcPxJmT EusAdL1TGsMDjbYT173S4feDwXs+L2bLp71H85a2RP/1+k7o2sLSIFQf4BNJwL6/ nbECcMAT95/xwcNeIw6Nl8E21eqJKRWd8bn1zX1Kw9nxpBOGpW7XozOU9T60Pys8 1aAzuCy6t4DU+y2+AkFf889Vd++Gx7NeetFlf9f4T1UEFO2z4xc4R7vnCSZJBP3l 90tebX7DA4uYAeGtR3opUzTCnHHrMN1+ -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:34 2024 by rpki-client on console-ams.rpki-client.org