$ rpki-client -vvf rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft File: c-uK0qOl84q_4a4oB08oMcJzG6k.mft (raw, json) Hash identifier: elF2ZBVJmuCpWvh29/MindXmiR7B+xDEcLgKN+cybAI= Subject key identifier: 28:E9:CB:C9:0C:DA:AD:4A:A2:07:70:97:B6:6E:C1:39:1A:D9:79:58 Authority key identifier: 73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9 Certificate issuer: /CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft Manifest number: 27 Signing time: Sat 23 Nov 2024 05:42:38 +0000 Manifest this update: Sat 23 Nov 2024 05:42:38 +0000 Manifest next update: Sat 30 Nov 2024 05:42:38 +0000 Files and hashes: 1: c-uK0qOl84q_4a4oB08oMcJzG6k.crl (hash: B0GNafJeYSXjCFK714FvlVdoWNchXxmUQ5XoswkDvzg=) 2: 8B7BD7CC700211EF9FEC365AC4F9AE02.roa (hash: MYqPgxBGfIGKCkX+SQW42+81sVWr8a9Nd2V6LH33Vw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9 Validity Not Before: Nov 23 05:42:38 2024 GMT Not After : Nov 30 05:42:38 2024 GMT Subject: CN=67416b4e-e70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:14:fe:34:ca:47:d0:c5:67:ae:d9:88:16:8c: 84:d8:49:68:22:66:3b:8f:c5:fa:c1:8a:5a:0f:26: 0b:dc:50:b2:27:3a:f4:0b:a2:b6:77:ee:41:31:bc: ce:28:2d:54:02:52:b7:e8:db:94:be:56:d3:71:f7: a4:28:e8:68:ae:f6:e0:a7:0d:bf:de:66:69:dd:fb: 5c:b6:36:4e:79:60:00:75:4b:37:cf:33:4d:ca:ad: 3e:72:4c:d2:2f:25:86:e5:33:ab:dc:df:07:02:f1: c9:0c:93:90:f6:1d:a2:33:89:83:8d:41:9a:72:2b: 61:04:0d:54:01:a3:43:7e:18:48:a5:fe:c8:ae:a8: 88:85:4e:59:ed:8a:39:f5:48:aa:54:69:7d:66:e5: 91:47:ee:20:75:a0:8b:81:38:02:35:29:3a:1d:5d: 91:22:55:a0:12:44:ae:d7:09:91:17:5b:ea:54:49: 83:e6:aa:50:96:cb:22:5f:bb:4b:4a:46:e9:a9:70: 6d:05:fb:3d:95:90:2e:a1:5c:10:fe:42:e3:19:c1: bf:a8:63:7b:03:67:59:de:6f:50:a5:f7:a8:b4:f0: 00:a7:8d:77:09:cc:4c:f3:2d:5c:e6:38:6e:b6:ca: 1b:d8:66:c8:ac:dd:55:c0:02:24:a9:e2:36:72:97: 86:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E9:CB:C9:0C:DA:AD:4A:A2:07:70:97:B6:6E:C1:39:1A:D9:79:58 X509v3 Authority Key Identifier: keyid:73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8a:e0:00:22:a5:21:ed:9b:94:1f:dd:1d:40:2b:3a:fd:26: fd:d4:16:12:06:6f:d9:2f:fc:bd:39:7e:d7:3b:de:4d:66:c7: 91:a0:ed:48:67:92:5a:27:03:e0:de:18:4e:07:f1:cb:ef:f6: cb:6a:e5:88:7a:69:ab:86:1d:8f:3b:02:d4:58:be:b2:2d:0c: d3:82:35:a4:8d:6a:56:8c:16:97:11:76:45:ce:10:0b:da:00: 3f:d2:d2:f6:70:03:a9:2e:ac:99:cc:c0:8b:76:9c:01:64:69: f4:8e:2b:eb:c8:fe:a1:63:0d:15:f6:4e:15:41:5c:c7:46:cd: 3e:8d:3a:10:8f:22:a4:53:32:61:6f:1a:3d:1d:73:f8:dc:2d: 54:28:4f:dc:a5:de:90:c4:3d:d6:11:94:61:44:58:66:51:51: 1d:b2:49:69:92:98:ad:14:5f:85:5c:46:dd:49:f8:76:3d:7e: c3:cf:c8:60:42:85:36:92:2f:5a:31:24:5a:9b:c6:0e:2b:d5: 0e:c9:57:d0:d0:b1:e7:b7:22:9a:81:81:12:a1:7b:7b:01:d6: f1:02:66:44:0e:7e:6f:00:d6:ca:9f:6b:f7:23:14:89:66:61: 26:a8:83:28:5b:20:59:14:80:f2:6f:98:32:2a:ac:78:c5:6b: bb:1d:e8:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDJBQTExMC8GA1UEBRMoNzNFQjhBRDJBM0E1RjM4QUJGRTFBRTI4MDc0RjI4MzFD MjczMUJBOTAeFw0yNDExMjMwNTQyMzhaFw0yNDExMzAwNTQyMzhaMBgxFjAUBgNV BAMTDTY3NDE2YjRlLWU3MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLFP40ykfQxWeu2YgWjITYSWgiZjuPxfrBiloPJgvcULInOvQLorZ37kExvM4o LVQCUrfo25S+VtNx96Qo6Giu9uCnDb/eZmnd+1y2Nk55YAB1SzfPM03KrT5yTNIv JYblM6vc3wcC8ckMk5D2HaIziYONQZpyK2EEDVQBo0N+GEil/siuqIiFTlntijn1 SKpUaX1m5ZFH7iB1oIuBOAI1KTodXZEiVaASRK7XCZEXW+pUSYPmqlCWyyJfu0tK RumpcG0F+z2VkC6hXBD+QuMZwb+oY3sDZ1neb1Cl96i08ACnjXcJzEzzLVzmOG62 yhvYZsis3VXAAiSp4jZyl4YTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKOnLyQza rUqiB3CXtm7BORrZeVgwHwYDVR0jBBgwFoAUc+uK0qOl84q/4a4oB08oMcJzG6kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MkFBL0U0MDdCMzMwNzAw MTExRUZCQkU4QTE1OEM0RjlBRTAyL2MtdUswcU9sODRxXzRhNG9CMDhvTWNKekc2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYy11SzBxT2w4NHFfNGE0b0IwOG9NY0p6RzZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MkFBL0U0MDdCMzMwNzAwMTExRUZCQkU4QTE1OEM0RjlBRTAyL2MtdUswcU9sODRx XzRhNG9CMDhvTWNKekc2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJuK4AAipSHtm5Qf3R1AKzr9Jv3UFhIGb9kv/L05ftc73k1mx5Gg7Uhn klonA+DeGE4H8cvv9stq5Yh6aauGHY87AtRYvrItDNOCNaSNalaMFpcRdkXOEAva AD/S0vZwA6kurJnMwIt2nAFkafSOK+vI/qFjDRX2ThVBXMdGzT6NOhCPIqRTMmFv Gj0dc/jcLVQoT9yl3pDEPdYRlGFEWGZRUR2ySWmSmK0UX4VcRt1J+HY9fsPPyGBC hTaSL1oxJFqbxg4r1Q7JV9DQsee3IpqBgRKhe3sB1vECZkQOfm8A1sqfa/cjFIlm YSaogyhbIFkUgPJvmDIqrHjFa7sd6Mw= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org