$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft File: UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft (raw, json) Hash identifier: PpyAOWquQej0qVRwpPX92+o/omi9fe07DVooA/eXEgw= Subject key identifier: 85:9C:3A:1A:14:DC:2E:6F:93:B5:20:46:4A:62:39:1A:6F:57:1C:6E Authority key identifier: 50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5 Certificate issuer: /CN=A91F65FA/serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft Manifest number: 022A Signing time: Sat 23 Nov 2024 01:25:33 +0000 Manifest this update: Sat 23 Nov 2024 01:25:32 +0000 Manifest next update: Sat 30 Nov 2024 01:25:32 +0000 Files and hashes: 1: UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl (hash: 9CAvKKMytGYVTAcBEDZupesNy21z+Zrxm5eZVC2Ya30=) 2: 84365644062E11EDA95B3143C4F9AE02.roa (hash: Ce8LxCwa+14WBiZH4xO77gyajQG4GNjYlXvOSa5B0Fc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65FA/serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5 Validity Not Before: Nov 23 01:25:32 2024 GMT Not After : Nov 30 01:25:32 2024 GMT Subject: CN=67412f0c-34b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:36:74:b2:08:eb:45:c2:74:68:07:e0:c4: 7b:6a:83:77:fb:f5:dc:af:29:aa:94:f8:e1:ac:02: 2c:c7:ac:0d:c2:38:df:a7:c4:6b:f7:c6:13:de:cd: 79:0b:95:35:46:1c:70:80:ad:3a:2b:3e:0a:32:92: eb:11:15:9e:cc:23:f9:51:a7:39:41:4f:b0:ce:7d: 9f:d0:5e:44:af:52:35:d4:ce:12:70:38:18:e0:8f: ac:09:c2:8c:d0:6f:7f:bd:fc:4a:b8:24:57:5d:de: 03:f2:be:07:64:3a:f6:0f:a9:19:ea:2b:c5:41:6f: b3:17:05:4b:f9:81:9a:94:08:51:86:00:0c:f2:e0: 91:1b:86:87:d3:2f:8b:38:71:09:33:83:3d:50:96: e6:31:a7:64:d0:ee:2d:aa:bd:fe:c4:93:9c:5d:99: e8:64:50:15:74:17:85:89:9a:4c:a7:16:64:e8:89: 4e:26:82:72:29:17:9b:68:d9:c0:e5:b7:2d:90:f9: 02:7f:9c:e5:22:61:56:ac:ee:4f:83:e7:f3:2e:12: 49:e6:f2:b0:98:d2:91:4b:7b:5d:4a:1e:6a:3c:7c: 0b:c5:66:61:ba:97:ee:fb:1b:44:19:59:ec:68:a4: 32:74:68:85:96:1a:e4:69:4a:c6:f3:9e:6c:8c:40: a5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9C:3A:1A:14:DC:2E:6F:93:B5:20:46:4A:62:39:1A:6F:57:1C:6E X509v3 Authority Key Identifier: keyid:50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:cd:54:08:fa:20:cf:bc:97:07:fa:c9:4f:5b:f4:4c:97:30: 26:c8:a2:69:e6:42:11:bf:e7:cc:2e:6a:f2:dc:8f:60:95:38: 3f:2f:a5:9b:f7:ea:9a:05:4c:e4:e0:b8:25:f8:97:fa:1d:c4: 0c:0b:2b:63:cb:42:84:13:63:60:01:b7:0e:15:c9:8b:55:95: dc:66:50:42:94:1d:e3:3b:ee:f0:00:dd:b5:13:51:60:e5:b4: fc:a9:25:ef:70:b7:e9:f9:0f:dd:48:19:9d:41:43:4e:a3:26: a9:4b:b7:18:bf:d2:8d:11:c8:9d:9c:b6:5a:9d:2b:61:69:c5: 28:fa:de:3c:97:ac:af:0b:66:1c:f9:88:f8:d4:82:52:56:0f: 72:52:ce:69:c3:e1:d8:a0:96:77:bd:6b:0b:a3:b9:2b:c7:bd: 08:f8:29:13:3c:2b:36:61:e0:11:2b:a8:97:e7:68:15:0d:c8: eb:5d:99:86:2c:a3:fe:cf:6e:e1:03:44:55:4e:bd:d7:a4:4e: 4d:0d:14:4c:ca:c9:07:7d:14:b7:47:7f:66:4c:68:5e:8b:df: 70:56:c6:ff:98:94:2c:2e:94:bb:6f:60:a0:cf:3f:93:65:eb: 1b:57:34:5b:0f:ec:f6:fd:42:d6:9b:94:ee:0d:f3:46:05:65: 51:0b:8b:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1RkExMTAvBgNVBAUTKDUwM0I5MjQxNDY0REY5N0QyQTAwOTk5NjNFNjMzRTEw ODdFRkREQzUwHhcNMjQxMTIzMDEyNTMyWhcNMjQxMTMwMDEyNTMyWjAYMRYwFAYD VQQDEw02NzQxMmYwYy0zNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCo2dLII60XCdGgH4MR7aoN3+/XcrymqlPjhrAIsx6wNwjjfp8Rr98YT3s15 C5U1RhxwgK06Kz4KMpLrERWezCP5Uac5QU+wzn2f0F5Er1I11M4ScDgY4I+sCcKM 0G9/vfxKuCRXXd4D8r4HZDr2D6kZ6ivFQW+zFwVL+YGalAhRhgAM8uCRG4aH0y+L OHEJM4M9UJbmMadk0O4tqr3+xJOcXZnoZFAVdBeFiZpMpxZk6IlOJoJyKRebaNnA 5bctkPkCf5zlImFWrO5Pg+fzLhJJ5vKwmNKRS3tdSh5qPHwLxWZhupfu+xtEGVns aKQydGiFlhrkaUrG855sjECleQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWcOhoU 3C5vk7UgRkpiORpvVxxuMB8GA1UdIwQYMBaAFFA7kkFGTfl9KgCZlj5jPhCH793F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVGQS85QTcwMjYyMjA2 MkIxMUVEQUExRUVDM0RDNEY5QUUwMi9VRHVTUVVaTi1YMHFBSm1XUG1NLUVJZnYz Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VEdVNRVVpOLVgwcUFKbVdQbU0tRUlmdjNjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVGQS85QTcwMjYyMjA2MkIxMUVEQUExRUVDM0RDNEY5QUUwMi9VRHVTUVVaTi1Y MHFBSm1XUG1NLUVJZnYzY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDezVQI+iDPvJcH+slPW/RMlzAmyKJp5kIRv+fMLmry3I9glTg/L6Wb 9+qaBUzk4Lgl+Jf6HcQMCytjy0KEE2NgAbcOFcmLVZXcZlBClB3jO+7wAN21E1Fg 5bT8qSXvcLfp+Q/dSBmdQUNOoyapS7cYv9KNEcidnLZanSthacUo+t48l6yvC2Yc +Yj41IJSVg9yUs5pw+HYoJZ3vWsLo7krx70I+CkTPCs2YeARK6iX52gVDcjrXZmG LKP+z27hA0RVTr3XpE5NDRRMyskHfRS3R39mTGhei99wVsb/mJQsLpS7b2Cgzz+T ZesbVzRbD+z2/ULWm5TuDfNGBWVRC4v9 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:59 2024 by rpki-client on console-ams.rpki-client.org