$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft File: UzSpQuM2kLKBJhu645cTXb6kE5c.mft (raw, json) Hash identifier: o9/40x9IAVIN/WDx8lQVcYZGDb3mUZDNi6vHttKrqwE= Subject key identifier: A3:00:36:DC:8C:B2:39:F6:D8:18:EF:0F:B7:AE:A0:4E:2F:10:D5:DB Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 Certificate issuer: /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft Manifest number: 07D2 Signing time: Fri 22 Nov 2024 20:41:43 +0000 Manifest this update: Fri 22 Nov 2024 20:41:42 +0000 Manifest next update: Fri 29 Nov 2024 20:41:42 +0000 Files and hashes: 1: UzSpQuM2kLKBJhu645cTXb6kE5c.crl (hash: GjOT2SZZn0Llu3ITBXkBZjX0OTiYGxfTr6l5pvizodw=) 2: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (hash: P441cSLHyLoUjwh77ci4OGTBUeTeIRb4uG1co2Vb+f8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Validity Not Before: Nov 22 20:41:42 2024 GMT Not After : Nov 29 20:41:42 2024 GMT Subject: CN=6740ec86-6bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:78:8a:59:88:ab:97:d4:5f:5b:ca:e5:d5: 4b:96:85:63:5e:52:fd:14:35:f3:14:fb:69:23:77: a0:a5:e6:ef:98:e0:9b:92:83:7d:30:2d:e1:3a:5e: 97:0e:23:e7:69:bf:c5:7c:50:9b:26:4d:34:2e:00: 8a:a0:f1:0d:f6:59:3a:d5:7f:f9:53:2b:5c:99:87: 21:fe:2f:99:77:85:a5:ea:b3:3e:54:82:55:b9:1f: 5f:f9:cc:d9:dc:e2:48:99:17:88:c9:59:fc:55:4c: 1b:82:a6:a4:b0:6f:e1:09:52:b5:bf:20:ca:1c:9f: 76:19:b5:6c:f1:ad:2a:5e:03:9c:4a:05:c1:f6:be: 52:e6:8f:1e:92:6d:11:1a:03:52:f6:4f:02:2a:74: d4:b9:77:84:e0:b9:d7:59:e4:41:73:d8:c7:75:cd: a6:69:71:8f:94:bd:22:ab:6e:0d:6b:db:dd:16:b7: a6:c2:b2:3e:62:84:5f:4f:d6:dd:88:30:4e:78:7d: 13:46:ea:34:79:43:ac:40:0b:d4:7c:6f:2e:ae:4f: 08:e4:5c:b1:1b:12:0f:3e:63:6b:2e:74:90:88:6e: b1:ba:98:f8:64:44:21:d3:54:de:e0:da:80:89:2a: 87:f8:71:d3:8e:40:f7:94:4b:76:bf:4a:20:7e:09: 68:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:00:36:DC:8C:B2:39:F6:D8:18:EF:0F:B7:AE:A0:4E:2F:10:D5:DB X509v3 Authority Key Identifier: keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4c:2b:fc:cc:6f:3a:28:71:e1:9d:9a:09:3d:94:d8:22:23: 73:c3:6f:c0:06:69:7a:79:43:9f:98:ae:63:c8:e8:f2:55:ff: 9d:1a:3c:55:54:8d:65:38:fa:2a:76:c0:37:22:28:5d:37:bc: a3:06:96:f3:12:94:8f:e0:15:1f:b1:76:97:4a:11:96:74:ea: 89:6a:8c:80:ae:a0:9e:f6:6c:a2:c6:a1:43:fa:3a:d3:52:b2: 16:28:08:de:be:da:0b:bd:47:b6:60:ed:30:2f:f0:79:0d:35: a9:4f:06:01:da:20:d2:01:8f:18:f8:11:70:e9:00:b3:53:68: db:97:b6:04:10:02:c3:77:19:f1:b8:6f:f4:87:a3:08:d1:4c: 27:2f:95:b4:30:bd:f5:3d:45:f2:1e:f5:3f:91:17:42:31:18: 60:28:5c:82:01:cd:a7:fe:2f:3c:79:a4:bb:c7:aa:3b:66:36: 18:fb:15:36:20:ce:68:50:0f:a0:7a:ba:48:9f:b6:7a:5f:02: 9a:45:fb:2e:cd:b2:90:9a:8e:6b:ec:18:b0:e2:12:14:76:ad: 1f:79:8c:34:ad:a0:6a:79:93:ce:d2:f7:f2:27:5b:17:ea:8a: 45:31:4c:8b:59:98:8a:9f:e7:ba:ca:1e:1f:ae:dc:a1:b0:50: 06:78:3d:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwMjIxMTAvBgNVBAUTKDUzMzRBOTQyRTMzNjkwQjI4MTI2MUJCQUUzOTcxMzVE QkVBNDEzOTcwHhcNMjQxMTIyMjA0MTQyWhcNMjQxMTI5MjA0MTQyWjAYMRYwFAYD VQQDEw02NzQwZWM4Ni02YmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNp4ilmIq5fUX1vK5dVLloVjXlL9FDXzFPtpI3egpebvmOCbkoN9MC3hOl6X DiPnab/FfFCbJk00LgCKoPEN9lk61X/5UytcmYch/i+Zd4Wl6rM+VIJVuR9f+czZ 3OJImReIyVn8VUwbgqaksG/hCVK1vyDKHJ92GbVs8a0qXgOcSgXB9r5S5o8ekm0R GgNS9k8CKnTUuXeE4LnXWeRBc9jHdc2maXGPlL0iq24Na9vdFremwrI+YoRfT9bd iDBOeH0TRuo0eUOsQAvUfG8urk8I5FyxGxIPPmNrLnSQiG6xupj4ZEQh01Te4NqA iSqH+HHTjkD3lEt2v0ogfgloywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMANtyM sjn22BjvD7euoE4vENXbMB8GA1UdIwQYMBaAFFM0qULjNpCygSYbuuOXE12+pBOX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMi85RDhEOTQ1OENG RUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtMS0JKaHU2NDVjVFhiNmtF NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6U3BRdU0ya0xLQkpodTY0NWNUWGI2a0U1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTAyMi85RDhEOTQ1OENGRUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtM S0JKaHU2NDVjVFhiNmtFNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7TCv8zG86KHHhnZoJPZTYIiNzw2/ABml6eUOfmK5jyOjyVf+dGjxV VI1lOPoqdsA3IihdN7yjBpbzEpSP4BUfsXaXShGWdOqJaoyArqCe9myixqFD+jrT UrIWKAjevtoLvUe2YO0wL/B5DTWpTwYB2iDSAY8Y+BFw6QCzU2jbl7YEEALDdxnx uG/0h6MI0UwnL5W0ML31PUXyHvU/kRdCMRhgKFyCAc2n/i88eaS7x6o7ZjYY+xU2 IM5oUA+gerpIn7Z6XwKaRfsuzbKQmo5r7Biw4hIUdq0feYw0raBqeZPO0vfyJ1sX 6opFMUyLWZiKn+e6yh4frtyhsFAGeD19 -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:13 2024 by rpki-client on console-fra.rpki-client.org