$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft File: UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft (raw, json) Hash identifier: hZ4z/Do1gx3GDOReS24dsa+wmWHrbpdTKF/ZVKqLN9g= Subject key identifier: B7:95:65:00:11:82:CA:6C:9F:FD:3E:D9:49:55:3C:50:32:5F:12:66 Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C Certificate issuer: /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C Certificate serial: 0417 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft Manifest number: 03EF Signing time: Sat 23 Nov 2024 00:09:34 +0000 Manifest this update: Sat 23 Nov 2024 00:09:34 +0000 Manifest next update: Sat 30 Nov 2024 00:09:34 +0000 Files and hashes: 1: UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl (hash: 5FZ/K3hK2IR603cpEROcAFYqj66FboHu1uGmB5McM8E=) 2: 0294E1EADB0D11EE88489759C4F9AE02.roa (hash: hDxnlutqT9/pJfzJ08YZAIv8bDDIJuJIHzivB3I12dU=) 3: 01CF36F2DB0D11EE88489759C4F9AE02.roa (hash: waCwgO5G1eWxvmW8D4proRstxdhAb+1liP0DXd6paFo=) 4: 0104D0BADB0D11EE88489759C4F9AE02.roa (hash: LPhjXW7HkqepU7G8SEAF/BpJh0/ofgBAEpXIt/PkqcQ=) 5: 71A1BB74759711EFA89BA96BC4F9AE02.roa (hash: 6cUJTPCAVeXzehLIW6gFSNQlXybCjLDilQnNjh4uWfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1047 (0x417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C Validity Not Before: Nov 23 00:09:34 2024 GMT Not After : Nov 30 00:09:34 2024 GMT Subject: CN=67411d3e-18ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bc:96:41:bc:c6:e8:7f:c5:47:b2:21:1d:c4: da:ea:28:6b:7a:bf:e4:6a:d2:f4:62:c6:ea:6c:6b: a7:d9:81:cd:a8:54:c8:46:81:97:c2:3b:ee:32:26: 2f:c4:c7:6b:31:37:73:d6:cb:bb:48:60:e9:a0:37: 5c:2f:f4:07:bf:af:5e:59:6c:fe:c1:d6:15:6d:52: 1a:e2:4f:e6:27:ce:54:ec:d5:ac:e9:62:f3:16:aa: c1:e9:89:5f:f0:b3:69:68:0b:1b:b6:d9:24:db:a7: d7:f4:b2:58:1a:38:db:37:5b:b3:42:2a:df:5d:b4: 9d:14:16:4e:5c:ab:f3:15:9f:1c:20:41:87:99:4f: 23:bc:37:f1:59:45:b5:6c:a6:68:46:1d:35:eb:a1: e8:9b:15:ff:41:00:90:6d:b9:ec:6f:ea:c8:3e:66: 15:5e:51:f8:6a:29:9c:a9:2e:9a:03:3f:c2:8c:10: d3:88:79:97:92:f9:47:04:92:56:c8:97:cd:0f:5b: ba:7d:07:a9:9b:d5:6b:23:97:82:18:fb:4a:5a:92: 89:57:73:0b:b2:5b:0b:99:75:f8:00:f0:29:bb:ba: 7d:55:62:00:1e:52:b5:02:f6:42:e3:c1:c4:b4:80: 9f:e2:c5:61:5a:75:61:77:ce:c5:de:29:30:fc:e3: 27:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:95:65:00:11:82:CA:6C:9F:FD:3E:D9:49:55:3C:50:32:5F:12:66 X509v3 Authority Key Identifier: keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e2:f8:42:ce:50:e1:d0:9b:73:56:42:09:00:e4:9e:76:87: 02:10:d1:7c:b3:78:b7:fb:74:01:f9:a1:a0:2c:5b:95:de:57: 11:64:b3:33:e4:38:ca:fa:56:d9:ac:54:bb:b8:39:d8:19:45: c9:36:89:28:40:c1:32:31:2c:2d:e3:bf:39:9a:bd:61:1a:c8: c4:91:da:48:b5:d0:5a:c5:c4:43:e5:27:74:31:8a:bc:3e:4b: 34:e9:72:62:65:93:da:da:8f:89:4d:ef:b6:bc:6d:ca:1c:f6: 67:48:8d:20:ac:21:89:4f:01:71:f7:bb:d2:05:74:1f:bd:a3: be:58:64:c7:53:06:9b:f4:b6:e6:80:05:8c:20:bd:21:17:31: 71:5f:dd:b1:95:ea:13:21:3d:33:f5:b9:c4:4d:44:4f:e6:3d: 46:c1:50:26:00:34:bd:ff:91:69:75:dc:b8:56:51:bb:a2:53: 6a:b1:95:22:1f:72:f7:2e:56:f2:15:73:70:98:bf:b7:11:64: ef:c3:2d:a7:ff:ba:2b:71:c3:2c:5b:76:ab:29:45:4a:f2:c5: 57:95:97:d4:b3:db:d4:fc:ac:b4:aa:f8:81:32:ae:8b:10:ff: 6c:54:8b:99:2c:1b:1d:9c:f4:38:2d:5a:ad:9c:6a:3e:d0:87: 4a:20:33:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMDYxMTAvBgNVBAUTKDUwNzM5NTFFNUMxNTgyNjkzQTg3MDcyRUU1NDhDNjU0 ODVCMDVBMkMwHhcNMjQxMTIzMDAwOTM0WhcNMjQxMTMwMDAwOTM0WjAYMRYwFAYD VQQDEw02NzQxMWQzZS0xOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLyWQbzG6H/FR7IhHcTa6ihrer/katL0YsbqbGun2YHNqFTIRoGXwjvuMiYv xMdrMTdz1su7SGDpoDdcL/QHv69eWWz+wdYVbVIa4k/mJ85U7NWs6WLzFqrB6Ylf 8LNpaAsbttkk26fX9LJYGjjbN1uzQirfXbSdFBZOXKvzFZ8cIEGHmU8jvDfxWUW1 bKZoRh0166HomxX/QQCQbbnsb+rIPmYVXlH4aimcqS6aAz/CjBDTiHmXkvlHBJJW yJfND1u6fQepm9VrI5eCGPtKWpKJV3MLslsLmXX4APApu7p9VWIAHlK1AvZC48HE tICf4sVhWnVhd87F3ikw/OMnlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeVZQAR gspsn/0+2UlVPFAyXxJmMB8GA1UdIwQYMBaAFFBzlR5cFYJpOocHLuVIxlSFsFos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUwNi8wNTU5RUVBRTVD QkUxMUVDQjI3M0RDN0NDNEY5QUUwMi9VSE9WSGx3VmdtazZod2N1NVVqR1ZJV3dX aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIT1ZIbHdWZ21rNmh3Y3U1VWpHVklXd1dpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUwNi8wNTU5RUVBRTVDQkUxMUVDQjI3M0RDN0NDNEY5QUUwMi9VSE9WSGx3Vmdt azZod2N1NVVqR1ZJV3dXaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO4vhCzlDh0JtzVkIJAOSedocCENF8s3i3+3QB+aGgLFuV3lcRZLMz 5DjK+lbZrFS7uDnYGUXJNokoQMEyMSwt4785mr1hGsjEkdpItdBaxcRD5Sd0MYq8 Pks06XJiZZPa2o+JTe+2vG3KHPZnSI0grCGJTwFx97vSBXQfvaO+WGTHUwab9Lbm gAWMIL0hFzFxX92xleoTIT0z9bnETURP5j1GwVAmADS9/5Fpddy4VlG7olNqsZUi H3L3LlbyFXNwmL+3EWTvwy2n/7orccMsW3arKUVK8sVXlZfUs9vU/Ky0qviBMq6L EP9sVIuZLBsdnPQ4LVqtnGo+0IdKIDPp -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org