$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json) Hash identifier: K6uPAhhKGorwY7lOxy9Rn9WV2y8ZGKonSlSxZaU9F4g= Subject key identifier: 12:B5:21:C1:54:65:00:D7:BC:16:B9:1E:46:4B:D3:4A:0D:DD:CD:E5 Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft Manifest number: A2 Signing time: Mon 25 Nov 2024 04:21:43 +0000 Manifest this update: Mon 25 Nov 2024 04:21:43 +0000 Manifest next update: Mon 02 Dec 2024 04:21:43 +0000 Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: +yXNCpUbsYhdO2r4Fx3y2khPBkD9TpBpYYh4SRBSHd8=) 2: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: RF60v/sSHyFBd9DX6rUeFztFrcMi4xrRDE9ajqiCa+o=) 3: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: thomwCIYBpdj/i2nFEktRoW9VovkGZnZpjW/Cmrpmfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Validity Not Before: Nov 25 04:21:43 2024 GMT Not After : Dec 2 04:21:43 2024 GMT Subject: CN=6743fb57-3a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ea:51:86:8b:7a:3e:e6:b0:b7:ac:a3:62:07: 37:60:0e:d5:50:c0:d0:f4:71:55:fa:24:64:24:c5: 75:92:1d:0c:36:7b:b0:c2:cf:8d:a8:21:fe:a4:68: e1:a0:df:f7:ad:32:93:6a:2f:34:c6:97:6b:a0:1b: 8e:2e:09:90:57:b7:d3:fb:d3:96:50:84:8a:a0:9d: b0:4c:cf:e1:5b:9f:68:7f:8e:80:8a:1f:e9:d6:97: 6c:f1:1e:7d:54:fc:aa:43:9f:63:50:1d:24:d1:4c: 6d:7f:5f:f2:43:ec:a4:95:9b:eb:6a:f7:79:cc:fb: dd:ea:55:7f:06:fd:b2:4f:bb:4d:46:ab:df:fe:85: cd:d6:ab:7c:de:13:3c:0a:a6:8e:e9:39:19:fa:db: f6:63:b4:26:da:dd:b4:09:11:89:78:98:b9:90:b1: 33:8f:11:f8:72:81:2a:08:d9:b0:3b:8e:57:8e:8e: 45:45:58:7a:32:cd:bf:8a:97:37:e2:2d:bb:dc:5a: 43:f4:7d:25:54:e4:3c:0f:e2:2e:df:1b:a0:15:6d: da:80:30:d4:6d:94:d8:07:18:d4:a4:da:16:2b:34: 4f:1c:b4:ac:14:88:e3:2e:fd:58:2c:b4:49:47:6f: 9a:9c:b4:9d:cd:95:d2:45:eb:25:ea:1c:af:a7:f0: 9f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B5:21:C1:54:65:00:D7:BC:16:B9:1E:46:4B:D3:4A:0D:DD:CD:E5 X509v3 Authority Key Identifier: keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:6a:e4:6c:9a:8a:85:01:d5:61:9f:3a:eb:6e:75:01:0a:0e: 84:fe:3c:3f:c5:69:97:25:93:7f:40:8f:db:26:62:a7:a1:24: 57:59:f2:9f:74:6b:c0:a7:39:d5:33:a7:b7:4a:f7:22:8b:66: 53:24:18:16:08:a5:5a:93:9e:c8:c3:65:59:77:74:d6:77:ef: 07:ae:a5:4f:35:51:08:d7:44:18:c0:42:03:68:cd:33:d3:8a: f9:50:7a:90:44:79:04:c7:f6:e1:c3:2f:31:61:7c:c8:4e:b7: 34:80:0f:cb:fb:bb:08:5e:fc:78:2a:85:15:ed:b8:7b:93:59: 88:d0:f6:b2:10:83:4c:5b:a7:a3:7f:99:d0:38:0e:09:92:4c: a6:58:5e:b5:73:75:9a:11:18:02:d2:80:20:d0:d1:07:f9:54: 4b:d7:27:5c:ed:b1:21:40:e3:ab:19:81:66:a8:d0:36:0e:3a: 06:e7:4f:b9:1c:0e:91:d7:97:9e:46:20:a8:ab:fa:16:5e:1e: 92:d7:6a:70:e4:a6:97:83:c3:8f:42:c2:cf:d6:ab:cd:6c:cd: 6d:ef:7a:9e:87:59:28:22:db:1d:69:73:ab:44:00:e8:a3:75: 8a:a8:37:9f:f5:05:31:7f:54:6a:f6:3a:71:79:50:50:a1:79: 93:1c:a4:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2 RjZDNTcyNEQwHhcNMjQxMTI1MDQyMTQzWhcNMjQxMjAyMDQyMTQzWjAYMRYwFAYD VQQDEw02NzQzZmI1Ny0zYTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7epRhot6Puawt6yjYgc3YA7VUMDQ9HFV+iRkJMV1kh0MNnuwws+NqCH+pGjh oN/3rTKTai80xpdroBuOLgmQV7fT+9OWUISKoJ2wTM/hW59of46Aih/p1pds8R59 VPyqQ59jUB0k0Uxtf1/yQ+yklZvravd5zPvd6lV/Bv2yT7tNRqvf/oXN1qt83hM8 CqaO6TkZ+tv2Y7Qm2t20CRGJeJi5kLEzjxH4coEqCNmwO45Xjo5FRVh6Ms2/ipc3 4i273FpD9H0lVOQ8D+Iu3xugFW3agDDUbZTYBxjUpNoWKzRPHLSsFIjjLv1YLLRJ R2+anLSdzZXSResl6hyvp/CfWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBK1IcFU ZQDXvBa5HkZL00oN3c3lMB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy Zjlpei1DNkxPTzl2YkZjazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAauRsmoqFAdVhnzrrbnUBCg6E/jw/xWmXJZN/QI/bJmKnoSRXWfKf dGvApznVM6e3Svcii2ZTJBgWCKVak57Iw2VZd3TWd+8HrqVPNVEI10QYwEIDaM0z 04r5UHqQRHkEx/bhwy8xYXzITrc0gA/L+7sIXvx4KoUV7bh7k1mI0PayEINMW6ej f5nQOA4JkkymWF61c3WaERgC0oAg0NEH+VRL1ydc7bEhQOOrGYFmqNA2DjoG50+5 HA6R15eeRiCoq/oWXh6S12pw5KaXg8OPQsLP1qvNbM1t73qeh1koItsdaXOrRADo o3WKqDef9QUxf1Rq9jpxeVBQoXmTHKSL -----END CERTIFICATE-----Generated at Mon Nov 25 06:04:15 2024 by rpki-client on console-ams.rpki-client.org