$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft File: UjNwqBpuUUYYrnypeV_dEQs1Djc.mft (raw, json) Hash identifier: bzrSFME//oCV3bBSg3/fhfKKRUZN5n/lbH3lZLI3hgc= Subject key identifier: D2:9D:91:C3:D6:BD:9C:3D:31:F2:F6:79:CC:FF:46:EA:48:76:7A:3E Authority key identifier: 52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 Certificate issuer: /CN=A91C6CB6/serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Certificate serial: 0C27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft Manifest number: 0C13 Signing time: Fri 22 Nov 2024 18:16:49 +0000 Manifest this update: Fri 22 Nov 2024 18:16:48 +0000 Manifest next update: Fri 29 Nov 2024 18:16:48 +0000 Files and hashes: 1: UjNwqBpuUUYYrnypeV_dEQs1Djc.crl (hash: BDT9zEbNginFZbdVGLH8RtWEovwtuTjzeKtCJwil82w=) 2: 04E274DA27CB11EE8FA6F46CC4F9AE02.roa (hash: VoraQaRToiaz1cMm7sY7kICzC6ot7xJ2suKRw+BDkMM=) 3: E683FA78277E11EE9D54C13AC4F9AE02.roa (hash: SyrcGYnJhAxiFA+KtOpGoRtkM7b9j7M31bkMiOn1jfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3111 (0xc27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CB6/serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Validity Not Before: Nov 22 18:16:48 2024 GMT Not After : Nov 29 18:16:48 2024 GMT Subject: CN=6740ca90-9fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d5:df:11:b4:ec:a0:57:1e:cf:a4:c7:39:06: 74:82:49:5c:bc:82:99:eb:5b:d9:9e:2f:4c:5a:ed: c6:08:33:e0:a3:80:72:9b:62:43:f7:9b:52:f3:b4: 8d:4b:0d:e6:de:b4:fd:c1:f6:13:56:aa:b2:21:2a: 2d:13:fc:b5:04:0e:7e:94:c4:29:98:27:9c:de:57: d3:b9:94:e6:83:84:1a:71:e6:07:e4:27:bc:5b:9c: 2d:d5:c1:9c:9d:af:00:84:8b:e9:fe:02:fd:45:52: 35:82:d8:67:12:8b:a5:cd:05:69:73:53:bb:11:83: f0:27:8d:a3:7d:11:92:c0:86:78:7c:6b:52:fb:4d: 02:fa:c7:5a:07:e9:65:3b:54:2f:a0:96:39:47:49: d6:cf:36:55:25:95:fd:cd:0a:10:92:d1:a5:cf:46: cb:45:62:8b:4d:bb:f5:63:00:c0:89:b4:a9:a9:50: 86:78:8a:39:65:16:5a:26:e5:95:e7:10:d7:9f:22: e3:13:41:9a:97:f1:3d:60:88:b0:87:57:01:fd:f8: e8:24:11:d0:b0:80:76:29:be:70:53:03:ab:bc:2f: b5:6d:8a:9e:28:58:b1:5b:04:28:a8:97:6f:c1:88: 7d:ae:57:ca:38:8a:27:6d:71:dc:dc:26:a4:55:9c: c4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9D:91:C3:D6:BD:9C:3D:31:F2:F6:79:CC:FF:46:EA:48:76:7A:3E X509v3 Authority Key Identifier: keyid:52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:74:24:4a:95:74:c7:56:60:60:03:1f:69:d7:74:f9:30:29: b9:c7:cd:d9:0f:e9:98:e7:f3:fa:fb:c4:80:a2:d9:3c:c2:39: 0f:c8:0f:ee:43:b8:9a:b8:4e:d6:f3:7c:c0:a8:f4:4d:9e:fa: fc:d0:a5:98:8e:27:e4:7a:45:11:bf:9a:c8:f4:e9:77:6f:af: 8d:54:d2:6c:a7:86:fd:50:eb:97:67:34:3a:7e:27:c2:b6:e9: 04:6c:f0:3f:1b:3e:57:41:23:af:cd:7c:2f:3a:2e:d4:01:81: be:88:cb:dc:f2:d5:e5:39:be:bf:b3:0c:e6:d1:e6:7e:f8:e3: b5:d0:c0:96:83:b1:96:c4:67:21:c1:e7:f9:6b:0a:dc:80:6b: c4:49:3d:1d:78:d7:3d:1b:25:a7:bb:5c:09:52:1c:17:c9:46: 2a:b8:27:84:37:63:f6:47:bb:a0:a5:82:0e:43:5a:ef:90:eb: f7:37:0b:19:38:77:23:d2:7f:ab:45:90:45:31:65:d0:71:bf: e2:67:06:aa:33:54:71:a0:09:89:97:3f:f9:05:d9:1d:f4:c4: 8b:fb:22:66:57:40:8a:7d:b8:af:8a:90:b8:71:aa:fd:1b:e5: a7:e8:2b:2e:96:bd:46:c2:74:f7:5b:22:0e:2f:8b:51:a5:20: 6c:63:48:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQjYxMTAvBgNVBAUTKDUyMzM3MEE4MUE2RTUxNDYxOEFFN0NBOTc5NUZERDEx MEIzNTBFMzcwHhcNMjQxMTIyMTgxNjQ4WhcNMjQxMTI5MTgxNjQ4WjAYMRYwFAYD VQQDEw02NzQwY2E5MC05ZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NXfEbTsoFcez6THOQZ0gklcvIKZ61vZni9MWu3GCDPgo4Bym2JD95tS87SN Sw3m3rT9wfYTVqqyISotE/y1BA5+lMQpmCec3lfTuZTmg4QaceYH5Ce8W5wt1cGc na8AhIvp/gL9RVI1gthnEoulzQVpc1O7EYPwJ42jfRGSwIZ4fGtS+00C+sdaB+ll O1QvoJY5R0nWzzZVJZX9zQoQktGlz0bLRWKLTbv1YwDAibSpqVCGeIo5ZRZaJuWV 5xDXnyLjE0Gal/E9YIiwh1cB/fjoJBHQsIB2Kb5wUwOrvC+1bYqeKFixWwQoqJdv wYh9rlfKOIonbXHc3CakVZzEKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKdkcPW vZw9MfL2ecz/RupIdno+MB8GA1UdIwQYMBaAFFIzcKgablFGGK58qXlf3RELNQ43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNCNi8yQTRGNTc1RUZF MTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVVWVlybnlwZVZfZEVRczFE amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VqTndxQnB1VVVZWXJueXBlVl9kRVFzMURqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNCNi8yQTRGNTc1RUZFMTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVV WVlybnlwZVZfZEVRczFEamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHdCRKlXTHVmBgAx9p13T5MCm5x83ZD+mY5/P6+8SAotk8wjkPyA/u Q7iauE7W83zAqPRNnvr80KWYjifkekURv5rI9Ol3b6+NVNJsp4b9UOuXZzQ6fifC tukEbPA/Gz5XQSOvzXwvOi7UAYG+iMvc8tXlOb6/swzm0eZ++OO10MCWg7GWxGch wef5awrcgGvEST0deNc9GyWnu1wJUhwXyUYquCeEN2P2R7ugpYIOQ1rvkOv3NwsZ OHcj0n+rRZBFMWXQcb/iZwaqM1RxoAmJlz/5Bdkd9MSL+yJmV0CKfbivipC4car9 G+Wn6Csulr1GwnT3WyIOL4tRpSBsY0gm -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org