$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft File: UEMacUvIutzoUZ5LmRR-FR7fd5c.mft (raw, json) Hash identifier: OtVbsI8nJvpu7IApJzVlgxnJGjJ5WEF+K+Tk56fOb28= Subject key identifier: 91:5F:C3:1B:A9:3C:18:B2:B8:C1:08:C4:1E:60:8F:EC:46:8F:58:A6 Authority key identifier: 50:43:1A:71:4B:C8:BA:DC:E8:51:9E:4B:99:14:7E:15:1E:DF:77:97 Certificate issuer: /CN=A91DA289/serialNumber=50431A714BC8BADCE8519E4B99147E151EDF7797 Certificate serial: 05C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UEMacUvIutzoUZ5LmRR-FR7fd5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft Manifest number: 05C1 Signing time: Fri 22 Nov 2024 22:37:43 +0000 Manifest this update: Fri 22 Nov 2024 22:37:42 +0000 Manifest next update: Fri 29 Nov 2024 22:37:42 +0000 Files and hashes: 1: UEMacUvIutzoUZ5LmRR-FR7fd5c.crl (hash: 3pmBHr/OB1EA5/QjoSAYgHpnfzExDdeHj4Ta0NsDsZ8=) 2: 0BE0F63C9CBB11EBA4731E19C4F9AE02.roa (hash: hBTRSytSe1zQK+JfmmwMK7JzzL8G3LzRO3qadHU8r7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.crl rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UEMacUvIutzoUZ5LmRR-FR7fd5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1478 (0x5c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA289/serialNumber=50431A714BC8BADCE8519E4B99147E151EDF7797 Validity Not Before: Nov 22 22:37:42 2024 GMT Not After : Nov 29 22:37:42 2024 GMT Subject: CN=674107b6-3fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d2:04:5e:51:23:b9:16:e1:db:7f:1f:ea:ec: b3:ae:a7:3d:d0:36:9c:46:60:00:2d:3b:26:ee:f4: 84:00:2c:a4:3d:80:19:43:5f:4f:5a:79:21:da:85: 1b:2b:44:78:62:13:ff:61:83:a6:7e:28:07:b4:e9: 62:02:d4:6f:db:e5:cc:50:6e:75:57:9c:e5:07:24: 2f:bb:7c:c8:6a:5e:ff:3c:d0:38:a2:ed:93:5b:f8: ec:f1:9d:75:0e:c8:55:69:68:e3:31:d6:fd:bf:fc: 01:1d:18:04:be:91:56:62:1d:da:1e:29:1a:ff:b4: f0:42:c5:bd:07:33:d0:0f:92:83:de:97:0e:5c:f8: fc:6d:5e:e8:e1:08:fe:6d:7d:dc:ff:bd:e6:37:54: a4:46:52:b1:a0:0c:8c:0e:7e:01:ae:b1:be:87:bd: d8:24:18:89:3b:3c:66:02:8d:3a:73:6e:24:f6:f8: 42:4c:ee:10:37:41:3e:56:96:81:44:7a:f6:ff:f3: 2d:06:45:da:b4:f6:49:6d:d8:65:b4:10:7b:01:29: 06:30:6f:65:00:64:45:e4:23:01:d8:21:e1:41:64: df:57:5b:08:54:ac:89:a0:dc:97:84:58:ab:76:75: 3e:2d:2b:c6:d2:b9:d0:c7:bc:84:1e:7c:a9:56:03: 70:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5F:C3:1B:A9:3C:18:B2:B8:C1:08:C4:1E:60:8F:EC:46:8F:58:A6 X509v3 Authority Key Identifier: keyid:50:43:1A:71:4B:C8:BA:DC:E8:51:9E:4B:99:14:7E:15:1E:DF:77:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UEMacUvIutzoUZ5LmRR-FR7fd5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f9:6f:a1:ac:22:4d:a5:14:c8:51:89:c5:d7:5e:7b:f8:61: 78:fd:d8:ad:f5:d8:9d:e3:90:fb:be:8e:18:25:9b:c0:d7:1f: 07:36:e3:83:d3:a0:ac:74:db:f0:db:6b:25:cd:bc:e7:38:a3: 22:e2:46:b4:91:97:be:54:46:72:63:f8:00:a9:75:b5:8f:ce: 09:1a:3c:27:fb:fa:be:3a:06:d0:3a:f2:4d:93:1e:1d:bc:1d: 03:38:4f:c6:3d:eb:f7:f1:f1:a8:fe:ee:0c:ec:a4:ce:52:29: ad:18:4b:03:43:84:c6:67:16:5f:b7:a5:c6:d8:a3:25:ad:ec: 2b:7e:3a:b9:83:c0:ac:df:7c:07:89:0d:d9:e5:27:8c:7c:a2: 29:a8:e1:c0:02:eb:98:b4:66:08:f8:c1:74:0a:c8:85:dd:fb: bd:3b:c9:e4:08:7e:9b:ff:a5:79:2c:c2:b8:9a:40:b2:47:02: 83:49:cc:87:e2:5a:25:8e:e8:f1:80:7e:50:bb:e5:d9:74:d3: db:a9:7c:6f:c3:f1:08:fa:71:95:39:72:48:96:ab:99:94:b7: 61:49:71:91:92:ee:1c:7e:37:26:f9:7d:80:12:d7:be:b3:6f: 79:6c:67:ed:b1:fe:41:88:3d:a5:b5:68:a3:cc:1f:6e:4d:19: da:0f:6a:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyODkxMTAvBgNVBAUTKDUwNDMxQTcxNEJDOEJBRENFODUxOUU0Qjk5MTQ3RTE1 MUVERjc3OTcwHhcNMjQxMTIyMjIzNzQyWhcNMjQxMTI5MjIzNzQyWjAYMRYwFAYD VQQDEw02NzQxMDdiNi0zZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnNIEXlEjuRbh238f6uyzrqc90DacRmAALTsm7vSEACykPYAZQ19PWnkh2oUb K0R4YhP/YYOmfigHtOliAtRv2+XMUG51V5zlByQvu3zIal7/PNA4ou2TW/js8Z11 DshVaWjjMdb9v/wBHRgEvpFWYh3aHika/7TwQsW9BzPQD5KD3pcOXPj8bV7o4Qj+ bX3c/73mN1SkRlKxoAyMDn4BrrG+h73YJBiJOzxmAo06c24k9vhCTO4QN0E+VpaB RHr2//MtBkXatPZJbdhltBB7ASkGMG9lAGRF5CMB2CHhQWTfV1sIVKyJoNyXhFir dnU+LSvG0rnQx7yEHnypVgNwBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFfwxup PBiyuMEIxB5gj+xGj1imMB8GA1UdIwQYMBaAFFBDGnFLyLrc6FGeS5kUfhUe33eX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTI4OS9FMDFCMDU0NDlD QjgxMUVCQUYxQkEzMTVDNEY5QUUwMi9VRU1hY1V2SXV0em9VWjVMbVJSLUZSN2Zk NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VFTWFjVXZJdXR6b1VaNUxtUlItRlI3ZmQ1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTI4OS9FMDFCMDU0NDlDQjgxMUVCQUYxQkEzMTVDNEY5QUUwMi9VRU1hY1V2SXV0 em9VWjVMbVJSLUZSN2ZkNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe+W+hrCJNpRTIUYnF1157+GF4/dit9did45D7vo4YJZvA1x8HNuOD 06CsdNvw22slzbznOKMi4ka0kZe+VEZyY/gAqXW1j84JGjwn+/q+OgbQOvJNkx4d vB0DOE/GPev38fGo/u4M7KTOUimtGEsDQ4TGZxZft6XG2KMlrewrfjq5g8Cs33wH iQ3Z5SeMfKIpqOHAAuuYtGYI+MF0CsiF3fu9O8nkCH6b/6V5LMK4mkCyRwKDScyH 4loljujxgH5Qu+XZdNPbqXxvw/EI+nGVOXJIlquZlLdhSXGRku4cfjcm+X2AEte+ s295bGftsf5BiD2ltWijzB9uTRnaD2qm -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:51 2024 by rpki-client on console-ams.rpki-client.org