$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json) Hash identifier: EUpDx4QzSq3/gYiZfJlbX7eNym70Dm4qosU19yDgamU= Subject key identifier: 40:9B:90:4A:8E:13:2D:F0:A2:6E:FF:0C:57:F1:BF:F8:DE:E6:00:7B Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft Manifest number: 6D Signing time: Sat 23 Nov 2024 04:53:41 +0000 Manifest this update: Sat 23 Nov 2024 04:53:41 +0000 Manifest next update: Sat 30 Nov 2024 04:53:41 +0000 Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: ksqBQTBZ44f7+youEiovkIjMzVkJri2AYMAeD51BVSs=) 2: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: 182eUUJuaALloc84A+J3D6Vh35fJGaKCB5vaP7hNlQ8=) 3: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: uIjAF+/dfGNLo9aioNmk6DqLMsLqzamlKuhlvMcc2h8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Validity Not Before: Nov 23 04:53:41 2024 GMT Not After : Nov 30 04:53:41 2024 GMT Subject: CN=67415fd5-5c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:10:31:27:01:68:81:72:68:0b:ba:59:3b: 4a:f5:9e:b8:75:bc:9f:0d:30:22:46:ad:0d:bc:82: 99:26:08:f8:71:ab:d8:22:d6:6f:d2:7c:32:59:5b: cc:2f:15:82:27:f1:54:f4:4e:43:d4:6c:f4:3d:3e: ee:97:1a:ca:db:2c:0a:a0:f7:c8:02:84:a1:64:67: 87:d6:e2:51:47:bc:7e:1d:79:dd:49:e4:af:1f:3e: 3f:0c:d7:ff:9e:f5:2a:8f:ee:ff:e1:0a:d3:3b:a8: 6a:0f:c4:b3:7d:06:0d:43:25:5d:1e:86:5b:9d:f6: 97:e4:4a:df:e8:3f:fb:54:29:a8:00:a6:83:3d:0a: 03:f8:cf:23:8a:ed:fe:10:b5:37:ad:17:de:26:55: f0:1d:6f:41:7b:2e:13:8d:34:23:9f:9b:00:50:ca: 94:07:77:c0:3b:92:06:2d:ec:b2:73:26:22:5d:6b: 41:be:94:9b:fd:41:60:95:4a:ac:2f:5e:e9:8d:b7: 29:89:2a:f3:6b:76:ed:1a:23:bd:f0:4f:5f:4d:43: 30:20:b1:99:d5:dc:15:bb:5c:2a:03:66:78:55:2f: 5d:27:36:da:65:b8:4b:24:b3:73:cf:0e:e3:dc:c6: be:da:17:fd:a2:2e:d0:5c:e2:a6:42:13:6a:c8:95: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9B:90:4A:8E:13:2D:F0:A2:6E:FF:0C:57:F1:BF:F8:DE:E6:00:7B X509v3 Authority Key Identifier: keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:90:7d:fd:0a:1c:c5:6d:f9:ad:59:d4:3d:7a:cf:c6:dd:b9: f6:ea:4c:8b:ae:ec:79:a6:ff:43:c3:e2:3b:bc:e3:65:78:72: 92:07:f8:28:8a:3f:5f:3d:2b:83:a6:22:c2:a6:07:7d:ce:1e: 3f:58:e5:8b:e3:4d:18:5a:d6:bc:31:4f:8b:27:a0:19:09:b3: a6:4f:5b:7a:d3:8d:e6:eb:6c:21:1c:60:7c:a4:7f:92:34:18: 23:11:66:a7:f4:ed:60:c2:46:56:fc:96:16:07:37:e8:b1:0c: ec:82:9d:ba:34:d3:43:56:2b:46:c3:20:85:c7:1a:93:85:5f: 59:ca:e6:1f:45:f4:14:de:f3:75:31:68:94:ee:7b:bf:6e:b5: 8a:c0:bc:4c:13:73:fa:ac:3c:f3:e0:b9:6b:dc:08:69:c5:b0: aa:2a:1a:41:0d:e7:a8:59:2a:95:0b:65:c4:a8:f9:1d:99:2f: b6:4e:92:0c:49:77:80:ac:87:80:56:9c:6a:9b:76:fb:5c:a1: 94:6c:98:cd:89:9d:1f:da:a2:a5:07:d4:d6:a3:e9:a7:73:73: 50:54:7a:b6:cf:5d:dc:39:25:98:0c:94:29:a6:3f:eb:f4:ea: 85:02:c1:49:ef:80:78:3f:75:fa:72:29:9b:d8:da:3d:5e:45: db:c6:6f:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NTIxMzExMC8GA1UEBRMoQkE1RkI4NTkxQkZDMEM0NTBBNEU0NEQ2RkMzRTNCQzdC RTg2NTQxNjAeFw0yNDExMjMwNDUzNDFaFw0yNDExMzAwNDUzNDFaMBgxFjAUBgNV BAMTDTY3NDE1ZmQ1LTVjNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsfRAxJwFogXJoC7pZO0r1nrh1vJ8NMCJGrQ28gpkmCPhxq9gi1m/SfDJZW8wv FYIn8VT0TkPUbPQ9Pu6XGsrbLAqg98gChKFkZ4fW4lFHvH4ded1J5K8fPj8M1/+e 9SqP7v/hCtM7qGoPxLN9Bg1DJV0ehlud9pfkSt/oP/tUKagApoM9CgP4zyOK7f4Q tTetF94mVfAdb0F7LhONNCOfmwBQypQHd8A7kgYt7LJzJiJda0G+lJv9QWCVSqwv XumNtymJKvNrdu0aI73wT19NQzAgsZnV3BW7XCoDZnhVL10nNtpluEsks3PPDuPc xr7aF/2iLtBc4qZCE2rIlUhFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQJuQSo4T LfCibv8MV/G/+N7mAHswHwYDVR0jBBgwFoAUul+4WRv8DEUKTkTW/D47x76GVBYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1MjEzLzU1NDNCQ0M0MDVF NTExRUZBQjQ2MUMwOUM0RjlBRTAyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZC WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWwtNFdSdjhERVVLVGtUV19ENDd4NzZHVkJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 MjEzLzU1NDNCQ0M0MDVFNTExRUZBQjQ2MUMwOUM0RjlBRTAyL3VsLTRXUnY4REVV S1RrVFdfRDQ3eDc2R1ZCWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK+Qff0KHMVt+a1Z1D16z8bdufbqTIuu7Hmm/0PD4ju842V4cpIH+CiK P189K4OmIsKmB33OHj9Y5YvjTRha1rwxT4snoBkJs6ZPW3rTjebrbCEcYHykf5I0 GCMRZqf07WDCRlb8lhYHN+ixDOyCnbo000NWK0bDIIXHGpOFX1nK5h9F9BTe83Ux aJTue79utYrAvEwTc/qsPPPguWvcCGnFsKoqGkEN56hZKpULZcSo+R2ZL7ZOkgxJ d4Csh4BWnGqbdvtcoZRsmM2JnR/aoqUH1Naj6adzc1BUerbPXdw5JZgMlCmmP+v0 6oUCwUnvgHg/dfpyKZvY2j1eRdvGb7I= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org