$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft File: UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft (raw, json) Hash identifier: us1J9kOniWuTnreh50lZGS6zSCqTUHnibW6mSoo2svM= Subject key identifier: A6:E8:0F:58:05:9A:38:3D:98:54:C6:29:F8:D4:B5:B3:87:91:FB:83 Authority key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74 Certificate issuer: /CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft Manifest number: 1C Signing time: Wed 23 Oct 2024 06:33:25 +0000 Manifest this update: Wed 23 Oct 2024 06:33:25 +0000 Manifest next update: Wed 30 Oct 2024 06:33:25 +0000 Files and hashes: 1: UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl (hash: caSYvKUnmoKfWz983d+ekn/BgzKhvHQr6bpXs6SO4B4=) 2: 2895D9E667AB11EF82EC0929C4F9AE02.roa (hash: gwD5ZrkmQlo4Co/1BvzwR+ImrO+KReOWGQUcQAVYxug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74 Validity Not Before: Oct 23 06:33:25 2024 GMT Not After : Oct 30 06:33:25 2024 GMT Subject: CN=671898b5-40ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:91:b9:d2:50:ab:05:c2:c8:07:d8:96:6c: 98:1a:00:7e:ae:33:72:97:c5:fb:51:14:88:7b:1d: 0c:1d:f3:2d:12:1f:ad:fa:e0:07:26:4b:49:5d:a1: 66:d5:c6:95:ea:a1:c6:9d:75:67:76:14:b3:48:68: ad:49:f8:c5:a4:b5:94:14:b6:b5:43:67:87:4b:aa: 2e:0b:31:f3:6f:36:35:bf:fa:71:22:3c:e1:47:ff: 9a:c3:de:43:37:33:8d:be:0e:0d:dc:72:fd:4c:0b: ae:54:1f:3a:a7:c6:f4:db:26:65:49:2c:22:cc:0b: ba:b0:b4:1d:07:a9:dc:4a:13:ba:23:ce:92:bd:d6: cf:a0:a5:32:d9:fe:5a:d5:d4:e9:29:9f:74:2a:a0: 44:41:85:70:eb:d5:1e:34:bc:98:be:b5:c8:d6:22: 6d:ae:9a:93:19:87:83:65:e1:d5:84:8e:02:15:6b: 91:a7:21:49:08:97:62:8b:8f:72:3c:2a:f9:cb:b9: c9:06:2f:84:2c:2a:14:ec:a6:93:d7:70:9a:e2:ae: ae:b1:e5:be:a3:b7:f9:d8:6e:92:27:4d:7c:f5:8e: 15:71:b9:f4:53:36:bc:95:c4:62:b0:3f:00:2f:b0: 75:97:74:c3:87:d9:f8:bb:ae:99:7e:09:85:37:ea: 5c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E8:0F:58:05:9A:38:3D:98:54:C6:29:F8:D4:B5:B3:87:91:FB:83 X509v3 Authority Key Identifier: keyid:50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:bf:03:e4:62:78:07:a7:55:13:03:d0:3c:89:db:2b:64:d1: 83:e4:e0:42:b1:86:36:80:92:96:90:21:af:fd:04:64:db:c6: b7:e2:5b:07:93:41:99:92:58:87:4d:26:54:10:8b:4f:ec:be: 6d:96:04:3b:79:30:e7:a1:76:6b:ad:8c:07:30:d4:b7:82:40: e8:1d:b5:89:48:9b:72:5b:33:cb:08:e1:68:73:07:8d:13:aa: 13:3d:64:ec:c1:8f:38:7d:4e:30:1b:d1:fc:3c:03:84:e3:95: 02:26:37:c8:74:7c:e2:ee:e9:b1:a5:ef:89:b7:f6:65:6e:b9: 63:c4:80:c9:48:3a:1c:97:a4:87:b4:b2:d4:03:df:78:96:61: b8:2f:13:fc:61:7a:4d:c8:d0:d7:77:94:85:47:85:ba:35:63: 79:1d:a2:47:86:ea:31:d0:ef:d1:8a:4f:e5:52:2b:91:8d:9f: 17:cd:20:a3:1d:e9:66:a9:a9:b8:9f:a3:0f:2a:51:1d:ba:3c: c4:d7:01:b5:ea:d8:32:e4:ae:77:76:9a:6a:1e:cc:d4:bd:71: e6:83:b3:41:e3:35:51:1a:f1:36:f0:42:0a:46:10:ce:4a:2e: 19:ae:29:e7:47:a0:c0:e2:36:29:80:81:0d:92:09:1a:b9:29: 4e:0a:1a:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjJEOTExMC8GA1UEBRMoNTBEMjQwNDJBNEE2NUVFRTY3QTdFQTREM0ZDNDg5NDQz QTM5QUE3NDAeFw0yNDEwMjMwNjMzMjVaFw0yNDEwMzAwNjMzMjVaMBgxFjAUBgNV BAMTDTY3MTg5OGI1LTQwYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIUZG50lCrBcLIB9iWbJgaAH6uM3KXxftRFIh7HQwd8y0SH6364AcmS0ldoWbV xpXqocaddWd2FLNIaK1J+MWktZQUtrVDZ4dLqi4LMfNvNjW/+nEiPOFH/5rD3kM3 M42+Dg3ccv1MC65UHzqnxvTbJmVJLCLMC7qwtB0HqdxKE7ojzpK91s+gpTLZ/lrV 1Okpn3QqoERBhXDr1R40vJi+tcjWIm2umpMZh4Nl4dWEjgIVa5GnIUkIl2KLj3I8 KvnLuckGL4QsKhTsppPXcJrirq6x5b6jt/nYbpInTXz1jhVxufRTNryVxGKwPwAv sHWXdMOH2fi7rpl+CYU36lyXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpugPWAWa OD2YVMYp+NS1s4eR+4MwHwYDVR0jBBgwFoAUUNJAQqSmXu5np+pNP8SJRDo5qnQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGMkQ5L0E5OUMxNjI4NjdB QTExRUY4RjQ5OEEyN0M0RjlBRTAyL1VOSkFRcVNtWHU1bnAtcE5QOFNKUkRvNXFu US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVU5KQVFxU21YdTVucC1wTlA4U0pSRG81cW5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG MkQ5L0E5OUMxNjI4NjdBQTExRUY4RjQ5OEEyN0M0RjlBRTAyL1VOSkFRcVNtWHU1 bnAtcE5QOFNKUkRvNXFuUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABi/A+RieAenVRMD0DyJ2ytk0YPk4EKxhjaAkpaQIa/9BGTbxrfiWweT QZmSWIdNJlQQi0/svm2WBDt5MOehdmutjAcw1LeCQOgdtYlIm3JbM8sI4WhzB40T qhM9ZOzBjzh9TjAb0fw8A4TjlQImN8h0fOLu6bGl74m39mVuuWPEgMlIOhyXpIe0 stQD33iWYbgvE/xhek3I0Nd3lIVHhbo1Y3kdokeG6jHQ79GKT+VSK5GNnxfNIKMd 6Wapqbifow8qUR26PMTXAbXq2DLkrnd2mmoezNS9ceaDs0HjNVEa8TbwQgpGEM5K LhmuKedHoMDiNimAgQ2SCRq5KU4KGtc= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:24 2024 by rpki-client on console-fra.rpki-client.org