$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft File: U05nXomsmsMC9TCid1KM-Bo8UwY.mft (raw, json) Hash identifier: cml+as87Dp9SHOiAPDOFGk60SliVrX0U0+nTd7a0Vdw= Subject key identifier: 5D:BF:85:E7:B5:33:D4:1D:7A:BB:D0:A3:F6:1A:CF:A0:E1:D3:0B:F1 Authority key identifier: 53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06 Certificate issuer: /CN=A91CC1EB/serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306 Certificate serial: 0546 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft Manifest number: 0534 Signing time: Fri 22 Nov 2024 23:09:13 +0000 Manifest this update: Fri 22 Nov 2024 23:09:12 +0000 Manifest next update: Fri 29 Nov 2024 23:09:12 +0000 Files and hashes: 1: U05nXomsmsMC9TCid1KM-Bo8UwY.crl (hash: BT80LP19exx2LDHxaAygmyFrWAMTMNQA0D91u75AK9Y=) 2: 5C0006B4E1B711EEA6D7F740C4F9AE02.roa (hash: uD0SlFN84GC2MoE4vVvfp4yng005Xq5iK1CMSLwmVKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1350 (0x546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1EB/serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306 Validity Not Before: Nov 22 23:09:12 2024 GMT Not After : Nov 29 23:09:12 2024 GMT Subject: CN=67410f19-a714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:c6:ad:c2:7b:40:e9:94:c6:81:4d:7e:75: 2f:f2:d0:23:86:38:7a:cd:2c:c4:0f:12:f0:34:a1: bb:1d:43:50:cb:b7:38:20:8a:05:ba:bc:1b:28:a0: f6:c0:01:71:29:3c:fa:da:e6:d5:bc:48:6e:06:9d: c2:59:9e:55:92:b8:23:6d:44:d4:df:5c:fd:8c:fe: fd:5b:9e:7d:e8:97:e7:8f:85:c8:60:85:cc:89:91: 1c:00:d1:71:5d:d4:f3:ac:8c:95:df:2a:78:10:b0: bd:2d:4a:d6:c5:77:9c:24:cc:9f:0d:e4:10:93:7c: f5:42:b3:78:52:a9:e3:b5:42:de:a0:c1:89:d8:c5: 36:15:4c:12:3e:74:7c:44:9d:2a:be:f9:82:e3:ce: 84:07:73:6a:53:1c:05:d4:b3:56:eb:a1:99:3e:55: 47:b8:c5:06:e2:25:84:47:ab:a8:ac:85:35:b9:4b: 0f:8a:bf:c2:ac:26:d8:58:b0:3e:ee:f5:ac:88:d3: 53:89:08:34:4e:ca:5a:a4:3f:fc:b8:60:89:b7:a4: 85:41:94:f7:c5:37:cb:0d:19:33:6e:7f:ed:76:17: cb:35:76:60:25:da:37:ce:5c:1b:c5:b1:16:ee:90: 16:4b:a5:39:ac:03:3e:09:a7:64:d0:7d:63:ca:cb: d4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BF:85:E7:B5:33:D4:1D:7A:BB:D0:A3:F6:1A:CF:A0:E1:D3:0B:F1 X509v3 Authority Key Identifier: keyid:53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:24:6c:1b:d0:7b:84:2c:b4:ce:11:26:18:de:3b:6e:fa:99: 44:b3:f3:3c:4b:69:d1:c0:3a:fc:fd:e0:09:04:01:14:53:d1: 8c:bf:5e:97:4b:c4:eb:26:51:96:bf:b4:18:12:7f:95:54:96: 94:28:0b:25:95:6a:78:95:06:b9:a5:eb:df:d3:14:66:98:6b: cb:42:6d:d7:95:d8:00:79:1c:2f:fe:5a:3f:48:51:89:3f:74: b2:14:af:64:55:bd:dd:fc:3b:46:c5:ea:1e:02:a5:cb:08:94: dc:4c:96:89:a1:65:0d:15:3f:00:0d:e3:7a:eb:b6:c4:05:7d: 98:29:08:c3:eb:76:19:a4:34:98:d4:3a:fd:5f:2f:4d:1a:51: a9:a3:74:67:bf:68:9f:34:29:73:0b:2a:5d:ca:34:f2:33:0b: 33:d7:0d:ea:3a:d7:77:cd:35:70:c4:20:7e:c5:c7:9f:cf:7b: dc:a7:c8:bf:b8:e2:f1:cc:55:56:69:0f:cd:69:b0:69:e2:e2: 99:d1:e5:0b:f1:03:5b:13:54:ca:33:3f:8e:8b:89:f5:d1:9a: 61:db:b8:47:f3:dd:e1:c5:b0:4f:f5:af:59:04:5b:69:c7:06: 1f:10:c5:cb:d8:6d:5f:9f:95:35:97:6d:77:6a:77:a9:de:1e: f9:61:c4:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxRUIxMTAvBgNVBAUTKDUzNEU2NzVFODlBQzlBQzMwMkY1MzBBMjc3NTI4Q0Y4 MUEzQzUzMDYwHhcNMjQxMTIyMjMwOTEyWhcNMjQxMTI5MjMwOTEyWjAYMRYwFAYD VQQDEw02NzQxMGYxOS1hNzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApj3GrcJ7QOmUxoFNfnUv8tAjhjh6zSzEDxLwNKG7HUNQy7c4IIoFurwbKKD2 wAFxKTz62ubVvEhuBp3CWZ5VkrgjbUTU31z9jP79W5596Jfnj4XIYIXMiZEcANFx XdTzrIyV3yp4ELC9LUrWxXecJMyfDeQQk3z1QrN4UqnjtULeoMGJ2MU2FUwSPnR8 RJ0qvvmC486EB3NqUxwF1LNW66GZPlVHuMUG4iWER6uorIU1uUsPir/CrCbYWLA+ 7vWsiNNTiQg0TspapD/8uGCJt6SFQZT3xTfLDRkzbn/tdhfLNXZgJdo3zlwbxbEW 7pAWS6U5rAM+Cadk0H1jysvUOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2/hee1 M9QdervQo/Yaz6Dh0wvxMB8GA1UdIwQYMBaAFFNOZ16JrJrDAvUwondSjPgaPFMG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFFQi9BQzM4NEFBNkRE ODIxMUVCOTU4RDFDMzBDNEY5QUUwMi9VMDVuWG9tc21zTUM5VENpZDFLTS1CbzhV d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UwNW5Yb21zbXNNQzlUQ2lkMUtNLUJvOFV3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFFQi9BQzM4NEFBNkREODIxMUVCOTU4RDFDMzBDNEY5QUUwMi9VMDVuWG9tc21z TUM5VENpZDFLTS1CbzhVd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNJGwb0HuELLTOESYY3jtu+plEs/M8S2nRwDr8/eAJBAEUU9GMv16X S8TrJlGWv7QYEn+VVJaUKAsllWp4lQa5pevf0xRmmGvLQm3XldgAeRwv/lo/SFGJ P3SyFK9kVb3d/DtGxeoeAqXLCJTcTJaJoWUNFT8ADeN667bEBX2YKQjD63YZpDSY 1Dr9Xy9NGlGpo3Rnv2ifNClzCypdyjTyMwsz1w3qOtd3zTVwxCB+xcefz3vcp8i/ uOLxzFVWaQ/NabBp4uKZ0eUL8QNbE1TKMz+Oi4n10Zph27hH893hxbBP9a9ZBFtp xwYfEMXL2G1fn5U1l213anep3h75YcRY -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:50 2024 by rpki-client on console-ams.rpki-client.org