$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft File: uzvV1-GZJNhitqQb80x_27vpHG0.mft (raw, json) Hash identifier: G8dnOnJBTTLj2ed0Td7j8dRm/ANKdNJiseeyhzoFO1k= Subject key identifier: 85:CB:74:23:7E:6A:18:94:11:A2:F1:F5:20:D0:F5:D5:C5:82:D0:4A Authority key identifier: BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D Certificate issuer: /CN=A91CA735/serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft Manifest number: 22 Signing time: Wed 23 Oct 2024 06:31:32 +0000 Manifest this update: Wed 23 Oct 2024 06:31:32 +0000 Manifest next update: Wed 30 Oct 2024 06:31:32 +0000 Files and hashes: 1: uzvV1-GZJNhitqQb80x_27vpHG0.crl (hash: OfcpIPeJ6xJ8tXxae7F/fmb0zr9ZYAifrPeSqu4+PoU=) 2: 385E3308639D11EFB668775FC4F9AE02.roa (hash: LXvvIFvrSNuKdk49zG4/lilXd1uzEXFwF73jkXgbGks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.crl rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA735/serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D Validity Not Before: Oct 23 06:31:32 2024 GMT Not After : Oct 30 06:31:32 2024 GMT Subject: CN=67189844-3bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:a8:45:ab:8c:81:66:db:26:16:50:07:1c: 8b:55:4c:54:1d:4a:59:db:32:4e:0f:7a:21:c9:c2: 04:ad:9b:93:5d:30:21:97:7a:58:0b:74:a8:c7:1e: ae:35:88:84:b0:fd:41:6d:49:d4:2c:6d:26:7a:7e: 5c:0a:68:de:ff:1c:61:09:54:50:9a:ca:9c:b6:9b: c2:a0:2d:71:9c:4e:ef:36:12:2c:c2:3a:9f:a0:0d: 87:f7:94:dc:db:53:91:70:70:05:ae:99:be:4d:f5: bf:81:25:ec:2b:83:10:6d:8a:f1:9c:8f:05:83:33: 0a:d4:4e:33:7c:dd:4a:5d:09:3e:d2:15:d1:55:a4: f4:95:8f:50:c8:f5:eb:1f:83:3e:aa:07:2d:3b:e9: a2:d1:41:94:ab:4f:13:f6:c1:0e:bb:36:b3:81:1c: c2:5d:34:01:f2:ef:56:46:d3:8d:58:f1:21:24:cd: 91:19:77:7b:af:61:54:91:e2:e9:49:cc:c0:81:6a: 87:97:65:aa:30:4f:b5:75:c5:da:bc:fe:83:bf:c5: 32:bf:bc:d3:cc:9c:5a:15:47:f5:04:1a:c0:c8:3b: 1a:cb:35:76:72:43:39:18:a7:f4:6e:d8:1b:fc:3a: 12:f6:b2:2c:21:bb:b4:fe:85:87:bb:31:51:5b:83: 12:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CB:74:23:7E:6A:18:94:11:A2:F1:F5:20:D0:F5:D5:C5:82:D0:4A X509v3 Authority Key Identifier: keyid:BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b7:91:88:cf:60:f9:59:f8:4c:40:1d:89:1c:d7:bc:8a:18: 6d:2f:fb:3d:de:1a:93:81:b1:ef:74:f0:74:b8:63:50:a9:1c: dc:b8:bb:8c:cc:95:2a:19:3c:c5:33:e4:49:5a:19:6f:30:82: 7d:b5:60:e3:3f:d3:bb:3a:f0:60:c0:0b:8e:55:7e:7e:0d:0b: 34:62:92:1a:68:83:ea:ce:3c:a6:0b:42:08:0f:db:f3:72:77: 01:a0:d2:6e:62:97:7c:82:97:9b:cf:b6:99:73:80:40:9f:37: 96:4b:56:e4:b6:44:66:94:e5:9e:6f:7e:99:31:a5:dd:db:8e: 80:3e:4d:08:2d:6f:99:d6:16:88:55:f8:68:bf:26:e0:69:0f: 88:24:cf:34:62:5f:af:f7:bf:e0:86:89:77:c6:95:91:48:6f: 9f:b7:b3:0b:8f:ef:f2:62:4e:74:3e:94:f6:99:10:e1:2c:45: ed:10:1a:ef:c9:58:cb:18:4d:ee:f3:68:e0:0b:b6:cf:71:69: f2:2a:a2:11:ce:2c:b8:96:35:ba:bf:a3:f9:48:0d:78:6a:08: 64:04:ae:42:3b:93:f4:d3:13:8b:ad:dd:2a:22:39:3e:ce:35: 6d:86:59:40:92:5b:19:5f:42:fe:e1:9b:db:c5:0c:50:32:c9: f3:d6:f1:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTczNTExMC8GA1UEBRMoQkIzQkQ1RDdFMTk5MjREODYyQjZBNDFCRjM0QzdGREJC QkU5MUM2RDAeFw0yNDEwMjMwNjMxMzJaFw0yNDEwMzAwNjMxMzJaMBgxFjAUBgNV BAMTDTY3MTg5ODQ0LTNiZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+46hFq4yBZtsmFlAHHItVTFQdSlnbMk4PeiHJwgStm5NdMCGXelgLdKjHHq41 iISw/UFtSdQsbSZ6flwKaN7/HGEJVFCaypy2m8KgLXGcTu82EizCOp+gDYf3lNzb U5FwcAWumb5N9b+BJewrgxBtivGcjwWDMwrUTjN83UpdCT7SFdFVpPSVj1DI9esf gz6qBy076aLRQZSrTxP2wQ67NrOBHMJdNAHy71ZG041Y8SEkzZEZd3uvYVSR4ulJ zMCBaoeXZaowT7V1xdq8/oO/xTK/vNPMnFoVR/UEGsDIOxrLNXZyQzkYp/Ru2Bv8 OhL2siwhu7T+hYe7MVFbgxLRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhct0I35q GJQRovH1IND11cWC0EowHwYDVR0jBBgwFoAUuzvV1+GZJNhitqQb80x/27vpHG0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBNzM1L0M3RjQ0MUM2NjM5 QjExRUY5QjREMkE1REM0RjlBRTAyL3V6dlYxLUdaSk5oaXRxUWI4MHhfMjd2cEhH MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdXp2VjEtR1pKTmhpdHFRYjgweF8yN3ZwSEcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB NzM1L0M3RjQ0MUM2NjM5QjExRUY5QjREMkE1REM0RjlBRTAyL3V6dlYxLUdaSk5o aXRxUWI4MHhfMjd2cEhHMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE63kYjPYPlZ+ExAHYkc17yKGG0v+z3eGpOBse908HS4Y1CpHNy4u4zM lSoZPMUz5ElaGW8wgn21YOM/07s68GDAC45Vfn4NCzRikhpog+rOPKYLQggP2/Ny dwGg0m5il3yCl5vPtplzgECfN5ZLVuS2RGaU5Z5vfpkxpd3bjoA+TQgtb5nWFohV +Gi/JuBpD4gkzzRiX6/3v+CGiXfGlZFIb5+3swuP7/JiTnQ+lPaZEOEsRe0QGu/J WMsYTe7zaOALts9xafIqohHOLLiWNbq/o/lIDXhqCGQErkI7k/TTE4ut3SoiOT7O NW2GWUCSWxlfQv7hm9vFDFAyyfPW8RU= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:25 2024 by rpki-client on console-fra.rpki-client.org