$ rpki-client -vvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft File: uK3V-E0RutdH--lY1GutO6kTGQM.mft (raw, json) Hash identifier: jWOdzkRFHq0Dm42WsVC7p+c9IhIY1krENRQdF84BfQY= Subject key identifier: 5E:41:7A:BC:74:68:A2:91:41:19:85:C2:22:94:44:8F:E0:84:69:6F Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 Certificate issuer: /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Certificate serial: 032B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft Manifest number: 0321 Signing time: Sat 23 Nov 2024 00:44:53 +0000 Manifest this update: Sat 23 Nov 2024 00:44:52 +0000 Manifest next update: Sat 30 Nov 2024 00:44:52 +0000 Files and hashes: 1: uK3V-E0RutdH--lY1GutO6kTGQM.crl (hash: E1D8VMn8dU+qCrdEtD7AcbzU/uanSg+CG6BmBYsWWDQ=) 2: 1A377B907A7811EF9D5ED47CC4F9AE02.roa (hash: 2rZ8JkbwEBy2UzepU0XN3j2F5qgf6EJRSOSaXa5sPO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 811 (0x32b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Validity Not Before: Nov 23 00:44:52 2024 GMT Not After : Nov 30 00:44:52 2024 GMT Subject: CN=67412585-497a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9a:c8:4f:4d:10:15:25:87:74:97:ef:3e:fb: b3:41:55:53:88:2e:59:f4:82:13:f6:14:a3:da:ae: 1f:82:75:57:48:a4:88:0f:98:32:62:45:e6:c1:ca: 72:94:ae:2d:47:ca:f8:84:34:4f:c9:aa:f7:da:d6: 4b:55:a7:83:36:3a:1a:01:6e:e7:7e:dc:77:05:c7: 02:0d:33:3f:80:d8:fe:df:4f:d4:66:25:0a:cc:bc: 2c:fe:de:4a:15:9b:f6:6d:6f:0c:14:f8:5f:5a:27: d2:21:70:a1:5d:a2:fa:61:67:80:33:39:50:ba:40: 87:f5:73:06:9c:ed:00:ef:8b:a0:59:5a:7d:d2:93: e0:c2:e5:e8:3b:42:87:b7:26:2a:8c:d4:2d:50:f1: b1:72:59:a1:f1:c2:10:36:25:49:36:a2:92:61:e5: 9c:83:b2:06:ce:bc:41:6e:d5:8c:c8:1e:98:e8:56: c1:aa:10:47:62:f2:53:2f:3d:7b:32:08:d8:38:0f: d5:a2:7f:96:16:14:a8:ae:8f:55:38:6d:47:c7:77: 84:0d:82:10:4c:24:d2:4d:28:56:57:c4:f7:3a:25: 00:36:c7:0c:5d:be:62:6f:e6:1b:5e:6e:05:2a:c6: ea:34:fa:c3:cd:4c:4d:1b:03:1c:e6:38:91:18:86: 9f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:41:7A:BC:74:68:A2:91:41:19:85:C2:22:94:44:8F:E0:84:69:6F X509v3 Authority Key Identifier: keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:b3:87:90:67:9b:a6:11:96:ae:41:09:86:5b:86:e3:b6:27: 95:23:21:37:80:85:90:1d:93:21:92:f7:2e:b1:a3:11:98:e6: 22:6f:d7:2f:80:68:5f:d9:3e:7d:d5:ab:f7:a5:98:e8:4f:66: c7:e2:27:f0:66:39:a9:c8:38:ae:c8:bc:46:05:cd:b1:dc:5c: 75:40:05:02:70:de:ca:29:e2:6c:0a:a7:4f:e9:31:d4:a9:39: 4d:1c:ad:fb:bf:b7:82:43:f9:c1:5a:6e:57:4a:0b:56:f0:07: dc:ba:53:f7:95:9e:24:64:c5:ab:f1:b6:e1:35:e3:d9:30:a9: 30:c8:d4:46:46:5b:3c:fe:20:50:ef:31:f3:21:3b:4a:84:95: b5:3d:49:e4:94:f5:e4:3a:9e:c8:ee:db:de:fd:90:19:f8:05: 4c:b1:52:cb:f4:1b:09:1f:98:b7:59:20:ae:c3:79:4c:68:49: f3:1e:bc:c3:34:48:22:0d:cd:f2:30:6a:b0:69:48:6e:42:09: f7:87:ed:ab:65:c1:ef:39:00:46:9b:88:68:2c:79:ff:14:37: 2a:36:ac:ab:03:c4:19:b3:b6:bc:de:f5:05:02:48:07:ff:63: 9f:d2:ea:ec:48:d4:90:d1:00:80:82:e6:82:16:ae:dc:3e:95: e4:54:45:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg2RDIxMTAvBgNVBAUTKEI4QURENUY4NEQxMUJBRDc0N0ZCRTk1OEQ0NkJBRDNC QTkxMzE5MDMwHhcNMjQxMTIzMDA0NDUyWhcNMjQxMTMwMDA0NDUyWjAYMRYwFAYD VQQDEw02NzQxMjU4NS00OTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25rIT00QFSWHdJfvPvuzQVVTiC5Z9IIT9hSj2q4fgnVXSKSID5gyYkXmwcpy lK4tR8r4hDRPyar32tZLVaeDNjoaAW7nftx3BccCDTM/gNj+30/UZiUKzLws/t5K FZv2bW8MFPhfWifSIXChXaL6YWeAMzlQukCH9XMGnO0A74ugWVp90pPgwuXoO0KH tyYqjNQtUPGxclmh8cIQNiVJNqKSYeWcg7IGzrxBbtWMyB6Y6FbBqhBHYvJTLz17 MgjYOA/Von+WFhSoro9VOG1Hx3eEDYIQTCTSTShWV8T3OiUANscMXb5ib+YbXm4F KsbqNPrDzUxNGwMc5jiRGIafFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5Berx0 aKKRQRmFwiKURI/ghGlvMB8GA1UdIwQYMBaAFLit1fhNEbrXR/vpWNRrrTupExkD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODZEMi8zOUREQ0NEQ0E5 NzUxMUVDQkE1QkRDMzNDNEY5QUUwMi91SzNWLUUwUnV0ZEgtLWxZMUd1dE82a1RH UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLM1YtRTBSdXRkSC0tbFkxR3V0TzZrVEdRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODZEMi8zOUREQ0NEQ0E5NzUxMUVDQkE1QkRDMzNDNEY5QUUwMi91SzNWLUUwUnV0 ZEgtLWxZMUd1dE82a1RHUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0s4eQZ5umEZauQQmGW4bjtieVIyE3gIWQHZMhkvcusaMRmOYib9cv gGhf2T591av3pZjoT2bH4ifwZjmpyDiuyLxGBc2x3Fx1QAUCcN7KKeJsCqdP6THU qTlNHK37v7eCQ/nBWm5XSgtW8AfculP3lZ4kZMWr8bbhNePZMKkwyNRGRls8/iBQ 7zHzITtKhJW1PUnklPXkOp7I7tve/ZAZ+AVMsVLL9BsJH5i3WSCuw3lMaEnzHrzD NEgiDc3yMGqwaUhuQgn3h+2rZcHvOQBGm4hoLHn/FDcqNqyrA8QZs7a83vUFAkgH /2Of0ursSNSQ0QCAguaCFq7cPpXkVEWT -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:59 2024 by rpki-client on console-ams.rpki-client.org