$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft File: uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft (raw, json) Hash identifier: yakaXqpTcqLf3/R0UKB7NMtqzTXO3aLDl0Gl8nmiCy0= Subject key identifier: E5:EF:3C:60:C7:C7:6E:62:07:8E:DF:BF:D8:B0:A2:4B:C4:46:09:BB Authority key identifier: B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B Certificate issuer: /CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft Manifest number: 15 Signing time: Thu 21 Nov 2024 06:06:30 +0000 Manifest this update: Thu 21 Nov 2024 06:06:30 +0000 Manifest next update: Thu 28 Nov 2024 06:06:30 +0000 Files and hashes: 1: uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl (hash: wYYkp+h0o6afuHuUB0fA8xpz/uwtUO2dJi6o4VjIcug=) 2: 17613044905F11EF8B4BC46BC4F9AE02.roa (hash: NvjP/LYwW9l6MqSSpH5THMx2WmCXtMYC8PmhjmLmzIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B Validity Not Before: Nov 21 06:06:30 2024 GMT Not After : Nov 28 06:06:30 2024 GMT Subject: CN=673ecde6-24b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e2:c0:e8:4a:ea:cb:6a:4d:3a:c8:d4:1f:63: 71:a8:83:3b:2f:ee:89:19:01:be:5a:58:fb:ef:a2: 87:be:22:7b:23:53:fb:76:60:60:ea:86:5c:c1:e3: d4:c0:fc:cf:9d:29:be:64:cb:b1:b5:bf:1d:69:83: aa:d8:94:04:63:09:1c:68:f1:c0:32:d8:dd:9f:60: 1f:1e:85:66:b2:ca:e6:45:01:60:91:f3:3b:ea:95: 53:9e:bb:1d:58:17:93:5a:3f:fa:53:c0:19:03:22: d5:2c:48:fd:e5:76:1d:5b:12:96:0c:7e:22:59:08: 45:a1:03:5a:a9:a0:22:15:71:ae:0c:40:af:18:c7: 14:f5:0e:8e:7a:ba:cf:99:13:d8:01:0e:91:bf:b4: 63:79:b3:2a:1d:7c:32:10:29:f9:a4:0d:37:30:27: 55:67:25:24:fe:40:da:6e:11:48:3c:63:e4:2d:d9: c8:b3:63:46:c3:2a:f8:82:1b:a6:f3:00:7e:28:19: 9b:1e:90:56:31:34:a2:b4:48:b6:1e:cc:e1:e9:ea: e4:25:4b:e8:d7:d1:8a:b8:be:30:6c:7a:3f:c3:31: 5b:01:6b:d0:fe:a4:e9:57:41:ea:b4:fc:2e:51:aa: 20:5e:24:e6:ef:63:cc:c1:4f:81:75:e5:f4:70:c4: d3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EF:3C:60:C7:C7:6E:62:07:8E:DF:BF:D8:B0:A2:4B:C4:46:09:BB X509v3 Authority Key Identifier: keyid:B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:6c:3e:5f:dd:98:00:f3:12:ea:8d:b4:df:07:17:09:d7:39: 99:73:e8:ae:87:3c:61:d2:fc:18:e1:92:91:3c:f9:6a:65:ed: 22:be:54:dc:37:59:52:c9:1e:d4:71:60:cc:83:7f:7e:3f:91: 93:53:1d:7a:b6:11:b0:5c:b7:a1:a0:0a:09:7b:e7:78:3a:09: 24:9c:6a:fe:de:59:3f:ad:e4:ec:e3:fb:7b:b8:5f:cb:f2:b9: 83:9b:08:27:1f:a2:1b:d7:f6:19:01:2a:10:8b:8b:fe:b9:02: 44:ef:9c:01:b3:a0:8e:a9:bf:20:96:8b:b3:f2:ba:5d:dc:50: 32:a2:53:40:43:1a:d5:43:1b:85:c1:ba:5e:cc:d2:85:4d:22: 92:34:70:a1:1a:07:96:69:f0:89:c3:aa:a9:d2:f5:bd:e4:e3: 77:0d:e9:22:9b:c4:b3:ea:f6:ef:0e:e6:fd:d7:09:51:8c:bc: 15:ad:15:17:2f:49:48:8b:4b:a0:7c:d2:67:99:18:d5:c4:48: e6:2d:cb:6f:22:e1:f0:39:9a:d1:7f:05:87:0c:02:49:d1:5e: d6:1f:a3:a6:24:56:71:04:8d:78:b5:66:b2:4f:65:ee:9c:40: d3:8d:61:5e:5c:6a:91:e3:19:78:5d:65:6a:c9:5d:92:d1:53: 43:d5:bb:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDg4RjExMC8GA1UEBRMoQjgxNUNGODUwNTM2OEJBN0Y5NzY3NEU5QkIxQTE0MDA5 NUI0RkY5QjAeFw0yNDExMjEwNjA2MzBaFw0yNDExMjgwNjA2MzBaMBgxFjAUBgNV BAMTDTY3M2VjZGU2LTI0YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC74sDoSurLak06yNQfY3Gogzsv7okZAb5aWPvvooe+InsjU/t2YGDqhlzB49TA /M+dKb5ky7G1vx1pg6rYlARjCRxo8cAy2N2fYB8ehWayyuZFAWCR8zvqlVOeux1Y F5NaP/pTwBkDItUsSP3ldh1bEpYMfiJZCEWhA1qpoCIVca4MQK8YxxT1Do56us+Z E9gBDpG/tGN5syodfDIQKfmkDTcwJ1VnJST+QNpuEUg8Y+Qt2cizY0bDKviCG6bz AH4oGZsekFYxNKK0SLYezOHp6uQlS+jX0Yq4vjBsej/DMVsBa9D+pOlXQeq0/C5R qiBeJObvY8zBT4F15fRwxNN7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5e88YMfH bmIHjt+/2LCiS8RGCbswHwYDVR0jBBgwFoAUuBXPhQU2i6f5dnTpuxoUAJW0/5sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEODhGLzdCQjZGMjEwOTA1 RDExRUZBNEYzMUQyRUM0RjlBRTAyL3VCWFBoUVUyaTZmNWRuVHB1eG9VQUpXMF81 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdUJYUGhRVTJpNmY1ZG5UcHV4b1VBSlcwXzVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE ODhGLzdCQjZGMjEwOTA1RDExRUZBNEYzMUQyRUM0RjlBRTAyL3VCWFBoUVUyaTZm NWRuVHB1eG9VQUpXMF81cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABJsPl/dmADzEuqNtN8HFwnXOZlz6K6HPGHS/BjhkpE8+Wpl7SK+VNw3 WVLJHtRxYMyDf34/kZNTHXq2EbBct6GgCgl753g6CSScav7eWT+t5Ozj+3u4X8vy uYObCCcfohvX9hkBKhCLi/65AkTvnAGzoI6pvyCWi7Pyul3cUDKiU0BDGtVDG4XB ul7M0oVNIpI0cKEaB5Zp8InDqqnS9b3k43cN6SKbxLPq9u8O5v3XCVGMvBWtFRcv SUiLS6B80meZGNXESOYty28i4fA5mtF/BYcMAknRXtYfo6YkVnEEjXi1ZrJPZe6c QNONYV5capHjGXhdZWrJXZLRU0PVu6s= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:35 2024 by rpki-client on console-ams.rpki-client.org