$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft File: uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json) Hash identifier: t9QQg3hdKVcT8JQ0NsnHmVjzYgYfI0hH+X5hlElNxuk= Subject key identifier: BF:08:34:35:2E:A9:8A:8D:C8:93:2A:0C:8B:BE:CF:11:1C:5F:0D:A0 Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Certificate serial: 0930 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft Manifest number: 091A Signing time: Fri 22 Nov 2024 20:06:43 +0000 Manifest this update: Fri 22 Nov 2024 20:06:43 +0000 Manifest next update: Fri 29 Nov 2024 20:06:43 +0000 Files and hashes: 1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: aJRvvKne5l+5tO9qhc3Kz7S+pTQeeNyvwyFjkyFegnQ=) 2: 4B31BDC4B76911ED8A503224C4F9AE02.roa (hash: sdPPzpmeuTxfNXX+Z4y10OZ5FdPq847kLyXykC/LAkQ=) 3: 3A489388B4F511EC83B0B46AC4F9AE02.roa (hash: G/uDm13Bf6tJyVNQOP+pm5ESZ5VRhWW8Z+gH8Z0T6aw=) 4: 8EE044DC1AE511EB808D0174C4F9AE02.roa (hash: ENl2yiJNo4HybE8JTa1dxyxuRkYZ2eHoC1iJYvvJy04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2352 (0x930) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Validity Not Before: Nov 22 20:06:43 2024 GMT Not After : Nov 29 20:06:43 2024 GMT Subject: CN=6740e453-35ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:19:15:c1:31:e7:b7:d1:32:d1:69:a6:96: 2c:f3:d2:c2:39:24:54:30:2f:a1:8a:8c:9b:7d:36: 51:2b:e6:36:06:6b:76:19:59:81:4b:2d:9a:27:02: fc:9d:bd:09:2c:30:a8:e3:38:35:d2:6e:8a:67:b8: d6:91:07:9a:e7:c6:99:00:eb:eb:0e:5a:7e:1a:99: 66:9b:1b:76:16:47:12:87:f2:83:69:f2:eb:a2:4d: 43:49:37:35:32:79:5b:44:da:a0:65:f3:f9:dc:a0: 1e:87:b0:c0:0f:bd:57:ae:d9:77:a8:05:bd:47:02: 25:e5:da:fc:8b:e2:98:66:a0:bd:50:c4:22:11:00: f8:35:db:fc:0a:36:a6:d5:1a:91:5f:89:e3:8b:ab: 15:37:ac:cb:71:35:24:48:17:1b:16:59:82:0b:36: 99:cd:81:48:9a:b2:5e:d5:c3:f0:25:14:09:31:b0: c6:48:bd:aa:e9:4a:45:a9:b9:02:26:b8:1e:93:42: 1a:ad:d4:d5:d5:20:73:4e:cc:4a:60:18:cc:20:8e: 53:7c:de:35:2a:3b:65:aa:57:49:5c:f3:70:24:9b: 8e:fa:51:94:bd:c3:57:44:f4:4d:2a:03:42:c3:46: a2:0f:33:1d:97:72:65:cc:82:a4:19:20:df:d7:2a: 8c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:08:34:35:2E:A9:8A:8D:C8:93:2A:0C:8B:BE:CF:11:1C:5F:0D:A0 X509v3 Authority Key Identifier: keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:38:44:d6:da:96:ff:4f:82:92:52:ee:6d:f2:74:b5:8b:7d: 5c:4b:16:fb:6c:e2:f7:38:51:a7:1e:db:f8:e1:e2:83:45:5e: c3:9d:8f:8b:ec:5f:c4:85:bd:cf:07:c3:c2:4d:69:b0:b8:56: ce:af:52:e5:c9:a6:fa:de:8b:b1:10:a7:d0:f6:b5:a3:ec:c0: e6:50:77:95:c2:36:08:9a:72:06:bb:d5:e2:cb:a4:87:1d:00: 5f:3c:b7:f5:dc:1b:15:35:5d:49:7c:8e:9e:d3:9e:4a:94:06: bd:8b:30:a2:b1:7e:c4:1a:39:6a:ad:84:f7:a0:60:3f:3b:ed: 3d:01:f2:7b:c9:e2:85:76:55:4c:02:48:c3:59:f9:e5:ba:c2: d7:d4:c8:c4:c6:fb:aa:98:f5:e5:16:f0:87:f9:d5:2a:43:17: 9a:a9:ed:36:1c:ea:ed:ed:af:d2:fd:dc:b5:23:ba:02:66:f9: b6:6f:8e:2c:7a:69:79:9e:bc:fc:83:17:8c:ee:bc:5b:f0:13: f4:c3:31:e5:f6:5c:6a:75:1c:f1:bd:1c:15:b4:80:99:7b:b4: 1c:71:52:8b:fc:93:c1:49:ee:1b:27:15:5f:86:63:bf:41:1d: e2:21:7a:55:fc:2b:fb:06:84:d7:a6:fd:06:41:75:ed:6a:15: fa:fb:23:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB QzE3ODFBNUEwHhcNMjQxMTIyMjAwNjQzWhcNMjQxMTI5MjAwNjQzWjAYMRYwFAYD VQQDEw02NzQwZTQ1My0zNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+AZFcEx57fRMtFpppYs89LCOSRUMC+hioybfTZRK+Y2Bmt2GVmBSy2aJwL8 nb0JLDCo4zg10m6KZ7jWkQea58aZAOvrDlp+Gplmmxt2FkcSh/KDafLrok1DSTc1 MnlbRNqgZfP53KAeh7DAD71Xrtl3qAW9RwIl5dr8i+KYZqC9UMQiEQD4Ndv8Cjam 1RqRX4nji6sVN6zLcTUkSBcbFlmCCzaZzYFImrJe1cPwJRQJMbDGSL2q6UpFqbkC Jrgek0IardTV1SBzTsxKYBjMII5TfN41KjtlqldJXPNwJJuO+lGUvcNXRPRNKgNC w0aiDzMdl3JlzIKkGSDf1yqM1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8INDUu qYqNyJMqDIu+zxEcXw2gMB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUM3MC8yM0EwQUMwNjkxMDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDls NXgtNFMyMHpqQWlzRjRHbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkOETW2pb/T4KSUu5t8nS1i31cSxb7bOL3OFGnHtv44eKDRV7DnY+L 7F/Ehb3PB8PCTWmwuFbOr1Llyab63ouxEKfQ9rWj7MDmUHeVwjYImnIGu9Xiy6SH HQBfPLf13BsVNV1JfI6e055KlAa9izCisX7EGjlqrYT3oGA/O+09AfJ7yeKFdlVM AkjDWfnlusLX1MjExvuqmPXlFvCH+dUqQxeaqe02HOrt7a/S/dy1I7oCZvm2b44s eml5nrz8gxeM7rxb8BP0wzHl9lxqdRzxvRwVtICZe7QccVKL/JPBSe4bJxVfhmO/ QR3iIXpV/Cv7BoTXpv0GQXXtahX6+yPN -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org