$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft File: uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json) Hash identifier: J6ojVeDD21IGJdR0MqCfD4cYfPznX4k6zwqTIHPQ4Og= Subject key identifier: 9F:38:0E:90:09:BE:C7:6C:7D:48:04:1B:FB:A2:15:6D:59:67:99:80 Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA Certificate issuer: /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft Manifest number: 43 Signing time: Thu 21 Nov 2024 05:28:34 +0000 Manifest this update: Thu 21 Nov 2024 05:28:33 +0000 Manifest next update: Thu 28 Nov 2024 05:28:33 +0000 Files and hashes: 1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: FgtvXtU2Ot/8qTcIX195NWx8icO+TaCQ9TxzJ/fO2D4=) 2: C57D59A8457011EFA624C172C4F9AE02.roa (hash: ID73Pz3s55NAjs8USBhRX9L9yvmp5FUr9fdsYXFscuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA Validity Not Before: Nov 21 05:28:33 2024 GMT Not After : Nov 28 05:28:33 2024 GMT Subject: CN=673ec502-2821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0e:6b:e8:01:08:ff:83:5d:36:26:e6:e9:7e: 96:13:4c:d8:10:a4:81:7a:00:5e:04:eb:88:a0:29: 12:f7:92:f5:82:ac:e4:ed:7b:35:53:ad:a6:1a:70: c7:18:6e:73:3c:f6:c0:68:e0:70:e7:83:b0:14:45: c0:37:3f:bd:0e:fb:fb:a4:f4:7c:d5:5f:9b:0d:0f: 48:76:c4:8e:4f:2e:53:d3:31:f7:e6:86:8e:72:ae: c2:95:f7:23:a5:a1:2c:60:f3:ab:49:69:10:83:48: c4:e7:5f:36:89:d0:18:fc:f9:a0:78:7c:dc:d8:44: bf:f7:1f:42:35:ab:58:c8:80:fb:02:e5:75:35:79: f5:03:ec:8c:f3:cc:8b:d9:b6:18:94:f1:99:b6:bf: 46:5f:04:a9:6b:ff:39:4b:9f:2e:58:a2:0e:4d:bd: c7:30:47:ef:c0:18:92:7a:aa:43:a3:93:1d:33:0c: da:38:a2:90:75:b2:cb:07:b3:36:67:12:5a:af:f0: c0:9e:de:6e:5c:86:33:85:dc:2c:4b:72:74:eb:78: f6:f9:a7:e5:32:93:ac:44:e8:4b:f6:28:9b:2d:09: c6:47:dc:30:64:2e:c2:4a:3b:d1:d1:28:e6:67:14: af:c6:58:b2:93:ab:98:39:f9:22:60:fd:f2:04:57: df:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:38:0E:90:09:BE:C7:6C:7D:48:04:1B:FB:A2:15:6D:59:67:99:80 X509v3 Authority Key Identifier: keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:96:d5:e1:15:4a:2f:5f:69:39:d4:ab:b5:59:0d:8b:3b:fd: a6:fa:aa:3d:e5:bd:46:bf:93:54:74:f1:01:c9:27:48:2c:ba: 17:50:69:fa:27:fb:85:02:0c:43:fe:1b:15:95:ac:3d:df:42: dd:58:9c:d3:13:8d:2e:67:58:0c:3d:8f:82:10:bd:5e:61:d3: 3c:8c:5e:c5:7b:02:43:1a:14:7a:b1:82:a2:15:79:05:80:13: 02:71:02:3e:64:c9:0c:b0:b6:73:31:4e:a8:ba:03:fc:20:1a: 49:d6:0d:4c:59:84:0e:e6:04:9f:94:99:8c:11:f3:3f:4e:3e: c5:40:08:c1:13:55:8e:32:13:d9:17:8d:e0:46:6a:9f:fc:f2: 48:b7:a8:26:02:2f:5c:46:cb:a8:7d:52:44:6e:df:d2:20:9a: 3e:e6:dd:40:86:f0:15:64:75:fe:d7:7b:21:eb:e5:8f:7b:72: a3:eb:f4:0d:09:aa:2f:49:bd:f9:e4:73:4b:ad:a3:94:b5:6c: 5b:5d:a6:66:9e:e5:3f:be:28:f5:10:e2:f4:54:d3:0a:e0:12: 49:6b:ec:f1:a8:6f:c5:e3:8d:c5:88:eb:43:bd:c3:6c:73:6a: 4c:bf:3f:9e:c4:a0:54:a5:d9:6b:be:8e:2a:ce:f0:0d:3e:f5: 48:c2:5e:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzkxRjExMC8GA1UEBRMoQkE4NUQ5MUQyNEFDQTlFOUUwMzExRTU1MkRCRjM3NTk3 NjNBNjJCQTAeFw0yNDExMjEwNTI4MzNaFw0yNDExMjgwNTI4MzNaMBgxFjAUBgNV BAMTDTY3M2VjNTAyLTI4MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIDmvoAQj/g102JubpfpYTTNgQpIF6AF4E64igKRL3kvWCrOTtezVTraYacMcY bnM89sBo4HDng7AURcA3P70O+/uk9HzVX5sND0h2xI5PLlPTMffmho5yrsKV9yOl oSxg86tJaRCDSMTnXzaJ0Bj8+aB4fNzYRL/3H0I1q1jIgPsC5XU1efUD7IzzzIvZ thiU8Zm2v0ZfBKlr/zlLny5Yog5NvccwR+/AGJJ6qkOjkx0zDNo4opB1sssHszZn Elqv8MCe3m5chjOF3CxLcnTrePb5p+Uyk6xE6Ev2KJstCcZH3DBkLsJKO9HRKOZn FK/GWLKTq5g5+SJg/fIEV98rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnzgOkAm+ x2x9SAQb+6IVbVlnmYAwHwYDVR0jBBgwFoAUuoXZHSSsqengMR5VLb83WXY6Yrow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzOTFGLzUwODM1RTY4NDU3 MDExRUY5QzhCOEU3MUM0RjlBRTAyL3VvWFpIU1NzcWVuZ01SNVZMYjgzV1hZNlly by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdW9YWkhTU3NxZW5nTVI1VkxiODNXWFk2WXJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz OTFGLzUwODM1RTY4NDU3MDExRUY5QzhCOEU3MUM0RjlBRTAyL3VvWFpIU1NzcWVu Z01SNVZMYjgzV1hZNllyby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIWW1eEVSi9faTnUq7VZDYs7/ab6qj3lvUa/k1R08QHJJ0gsuhdQafon +4UCDEP+GxWVrD3fQt1YnNMTjS5nWAw9j4IQvV5h0zyMXsV7AkMaFHqxgqIVeQWA EwJxAj5kyQywtnMxTqi6A/wgGknWDUxZhA7mBJ+UmYwR8z9OPsVACMETVY4yE9kX jeBGap/88ki3qCYCL1xGy6h9UkRu39Igmj7m3UCG8BVkdf7XeyHr5Y97cqPr9A0J qi9Jvfnkc0uto5S1bFtdpmae5T++KPUQ4vRU0wrgEklr7PGob8XjjcWI60O9w2xz aky/P57EoFSl2Wu+jirO8A0+9UjCXtk= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:37 2024 by rpki-client on console-ams.rpki-client.org