$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft File: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft (raw, json) Hash identifier: +Ple/n6CSJVmF7VY1oefSUIE0lW/29qAMheIj21wSX8= Subject key identifier: F4:37:4C:0F:E1:85:1E:61:D2:DE:97:5D:CB:6A:86:17:61:D3:2A:B8 Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E Certificate issuer: /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E Certificate serial: 0AC6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft Manifest number: 0ABE Signing time: Wed 20 Nov 2024 19:08:24 +0000 Manifest this update: Wed 20 Nov 2024 19:08:23 +0000 Manifest next update: Wed 27 Nov 2024 19:08:23 +0000 Files and hashes: 1: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl (hash: wV541tJK3oGI5nELocgqVcwuPWHBW7KdVbWuYgRGTMc=) 2: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (hash: wRvd5l9La3MSVA49dLn9S92nbQQvOi4LJr/5XnlTFpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2758 (0xac6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E Validity Not Before: Nov 20 19:08:23 2024 GMT Not After : Nov 27 19:08:23 2024 GMT Subject: CN=673e33a7-9b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:36:fc:df:54:a7:1a:58:bb:3a:f0:c1:73: e5:0b:62:07:3c:23:a7:7f:db:8e:2f:57:c8:87:16: fd:f4:1a:f2:78:c3:6d:9f:5b:34:16:63:ed:eb:5e: 4c:2a:e5:39:dd:6d:30:af:1f:bc:69:3f:e7:64:e5: a0:c1:fd:74:64:74:bf:c6:57:81:06:fa:8f:e2:2b: 0a:dc:19:bb:2f:c6:f4:35:4e:4b:0f:5c:b1:09:99: 3c:bb:a5:46:2a:bf:92:23:21:bc:d8:bc:04:57:ab: 61:98:bd:9c:69:29:ba:98:47:38:fb:6f:7c:13:29: 70:78:08:61:9d:d2:d6:2a:93:d4:ca:6a:66:0d:18: b0:b3:01:35:fa:df:31:db:0e:6a:be:74:81:45:93: 2b:3a:69:a4:67:4f:18:0b:b0:e7:8d:f9:42:05:a2: b9:25:96:39:57:e6:d2:38:f5:e3:04:27:d3:1f:47: 67:74:3b:fa:89:ed:b9:3c:30:7e:25:ac:14:1a:d9: b1:53:db:f6:80:9c:94:e2:68:24:9d:9f:e9:64:3b: e7:d9:1b:22:2a:c0:3f:ec:dc:d4:66:da:97:52:10: ed:d7:c1:ed:46:b0:71:24:c7:92:e0:03:c2:4b:bb: 99:65:b6:2f:aa:70:93:0a:15:41:5e:6a:c7:24:23: b6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:37:4C:0F:E1:85:1E:61:D2:DE:97:5D:CB:6A:86:17:61:D3:2A:B8 X509v3 Authority Key Identifier: keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d1:f3:09:e0:17:7f:4a:ff:a4:e2:4c:31:a7:bb:83:4f:b9: e5:1c:b5:94:70:a2:ad:30:cc:b3:77:f8:50:e3:a4:95:78:1f: f4:1a:33:14:48:92:00:35:c9:c8:db:14:e1:c6:d5:bb:50:1d: f5:9a:51:c6:2f:48:d6:c7:4a:a4:80:82:4a:23:34:f3:14:fe: c5:b4:8b:b6:b1:bd:7b:29:60:8b:24:06:5e:46:27:02:a0:0f: 0e:3d:c7:8f:be:88:73:9d:49:12:c2:83:fd:3f:84:e4:9b:38: 3a:ad:f9:8e:7a:89:39:11:82:9e:97:68:18:67:f8:17:11:3e: 1c:b3:e4:e8:ac:e6:7c:70:8c:a2:9c:5b:81:c9:f7:ac:fd:a6: cf:d4:6d:1d:9f:4f:d0:ee:d3:2b:df:47:35:ca:b1:15:d6:3e: 45:7e:1f:bd:a0:ed:3e:11:f1:e6:07:21:08:b3:77:10:42:20: fc:8a:a2:84:e6:ed:2b:af:ab:a1:c3:94:f5:c6:03:0d:2e:a4: ac:d9:b0:f2:87:cd:c0:aa:c1:e6:cb:cd:4b:f0:fa:07:56:b7: d7:df:df:53:40:0f:e1:5d:aa:a8:2e:40:c8:85:40:9f:e6:d6: 96:38:a4:da:cf:dc:6e:ac:0f:64:ce:49:47:68:c9:e8:9b:9d: 9b:10:df:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNTExMTAvBgNVBAUTKDUyRDY4MEUwNDVEQ0U5OTA3ODlFMEQ3NzcyNjE3QzYw QzM2RUQxOEUwHhcNMjQxMTIwMTkwODIzWhcNMjQxMTI3MTkwODIzWjAYMRYwFAYD VQQDEw02NzNlMzNhNy05YjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvk2/N9UpxpYuzrwwXPlC2IHPCOnf9uOL1fIhxb99BryeMNtn1s0FmPt615M KuU53W0wrx+8aT/nZOWgwf10ZHS/xleBBvqP4isK3Bm7L8b0NU5LD1yxCZk8u6VG Kr+SIyG82LwEV6thmL2caSm6mEc4+298EylweAhhndLWKpPUympmDRiwswE1+t8x 2w5qvnSBRZMrOmmkZ08YC7DnjflCBaK5JZY5V+bSOPXjBCfTH0dndDv6ie25PDB+ JawUGtmxU9v2gJyU4mgknZ/pZDvn2RsiKsA/7NzUZtqXUhDt18HtRrBxJMeS4APC S7uZZbYvqnCTChVBXmrHJCO2rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQ3TA/h hR5h0t6XXctqhhdh0yq4MB8GA1UdIwQYMBaAFFLWgOBF3OmQeJ4Nd3JhfGDDbtGO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9CQTNDRDRBNjNE ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZaQjRuZzEzY21GOFlNTnUw WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1V0YUE0RVhjNlpCNG5nMTNjbUY4WU1OdTBZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY1MS9CQTNDRDRBNjNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZa QjRuZzEzY21GOFlNTnUwWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq0fMJ4Bd/Sv+k4kwxp7uDT7nlHLWUcKKtMMyzd/hQ46SVeB/0GjMU SJIANcnI2xThxtW7UB31mlHGL0jWx0qkgIJKIzTzFP7FtIu2sb17KWCLJAZeRicC oA8OPcePvohznUkSwoP9P4Tkmzg6rfmOeok5EYKel2gYZ/gXET4cs+TorOZ8cIyi nFuByfes/abP1G0dn0/Q7tMr30c1yrEV1j5Ffh+9oO0+EfHmByEIs3cQQiD8iqKE 5u0rr6uhw5T1xgMNLqSs2bDyh83AqsHmy81L8PoHVrfX399TQA/hXaqoLkDIhUCf 5taWOKTaz9xurA9kzklHaMnom52bEN/A -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:56 2024 by rpki-client on console-ams.rpki-client.org