$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft File: uV2VSq65WdNCfBB2qfV98hw4v8w.mft (raw, json) Hash identifier: xmOkPBp7LiFCVKIUucY1rhbgpqD3ALZrA/yfE9CwsFc= Subject key identifier: 25:B2:4E:AD:16:45:E5:29:49:8C:31:62:1F:6F:B5:CA:5F:B4:E0:4B Authority key identifier: B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC Certificate issuer: /CN=A91FBD28/serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Certificate serial: 2654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft Manifest number: 2636 Signing time: Fri 22 Nov 2024 15:42:34 +0000 Manifest this update: Fri 22 Nov 2024 15:42:33 +0000 Manifest next update: Fri 29 Nov 2024 15:42:33 +0000 Files and hashes: 1: uV2VSq65WdNCfBB2qfV98hw4v8w.crl (hash: BONLiUdXzSAOBjPw5Vx0Vib7kVmZGwSE4eTWd75tFYI=) 2: 94688318A57B11EA964E0C3DC4F9AE02.roa (hash: 50fdGVAPKXpEsQtMRlmNaJJbO594br4a4E+HZ7rtPVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9812 (0x2654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD28/serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC Validity Not Before: Nov 22 15:42:33 2024 GMT Not After : Nov 29 15:42:33 2024 GMT Subject: CN=6740a669-7f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e7:1a:18:e0:31:af:08:75:b5:4a:a9:10:98: 31:bd:f7:00:e1:66:9d:4c:fb:41:6b:bd:85:98:0a: 32:fc:c0:ad:d1:6a:b9:b4:cc:9d:dd:d4:4d:cd:e4: 99:25:57:db:83:8c:88:2d:6f:8a:51:13:69:04:c6: 71:e0:57:e5:03:a7:5e:65:7f:4e:18:f1:9a:96:09: f1:98:30:1e:02:98:a6:05:48:66:2d:f4:e9:e9:36: a0:78:8b:dc:66:a9:f6:5b:4c:63:3e:48:4e:25:0f: a9:f1:6e:f4:b5:46:32:c1:74:5c:93:2e:87:49:22: 5f:bf:87:db:df:fe:6d:fa:a7:28:3f:28:88:db:07: 52:38:8f:b5:38:fd:2a:3a:72:5f:57:99:ba:8e:41: fe:20:f0:99:b4:8b:9f:7b:cc:df:ed:ac:e0:b7:1c: 11:fd:22:4b:38:40:f9:fc:f6:ec:8f:86:c6:e6:c8: c7:68:3c:16:76:b2:67:de:4e:f6:cc:64:c0:e6:08: 65:1c:d9:e3:ab:f4:0d:4b:f0:78:c4:e8:dd:2f:ed: 83:8b:9f:dc:bf:42:48:e8:aa:84:24:34:75:90:10: c0:a2:ae:62:da:24:c3:9e:5e:7a:cb:7f:e7:94:92: 77:1d:84:3e:c8:e2:e9:71:a4:01:b1:a0:7f:0e:b0: f4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B2:4E:AD:16:45:E5:29:49:8C:31:62:1F:6F:B5:CA:5F:B4:E0:4B X509v3 Authority Key Identifier: keyid:B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:cf:9c:1e:af:34:d9:63:22:89:3f:7d:77:4a:ba:4d:fe:ca: 1f:79:61:39:63:cd:e0:dc:0b:75:84:5d:50:23:d3:b2:f3:53: 45:b8:57:5a:77:86:39:ef:2e:71:ca:fe:1a:02:62:55:c3:4e: 15:8d:d7:9f:29:7c:ee:2e:de:1f:10:4e:92:1c:87:7b:68:46: 07:25:07:6b:28:d2:d6:c8:51:02:95:68:b7:8b:c2:52:c3:80: bc:9b:99:99:dc:59:4d:aa:9d:aa:93:0d:06:bf:fe:b7:b5:e2: 2f:85:14:77:56:fc:11:3f:6a:ff:44:b0:f9:b1:08:a7:d5:ce: 9c:90:06:38:53:ad:3c:e0:6f:0c:52:d7:3e:6e:34:ab:6e:7d: 3a:52:bd:03:3b:17:57:22:2e:d7:41:28:8f:c3:12:cc:7a:56: cf:20:d9:e3:a2:63:a2:14:16:f6:9c:e3:7e:96:f3:c1:d4:7d: 6a:9b:43:20:99:1f:99:7f:97:ba:88:3e:20:c1:81:9a:2a:e9: 18:71:b1:fc:94:08:c7:d3:71:b7:47:11:d0:a8:a3:47:86:6a: 16:88:8c:2d:d3:0f:f4:b4:a8:e6:3c:37:61:f0:33:90:be:56: e2:0c:1d:03:7f:4a:bc:f1:0f:ad:fb:96:63:69:d4:7b:9c:07: 44:89:a1:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEMjgxMTAvBgNVBAUTKEI5NUQ5NTRBQUVCOTU5RDM0MjdDMTA3NkE5RjU3REYy MUMzOEJGQ0MwHhcNMjQxMTIyMTU0MjMzWhcNMjQxMTI5MTU0MjMzWjAYMRYwFAYD VQQDEw02NzQwYTY2OS03ZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxucaGOAxrwh1tUqpEJgxvfcA4WadTPtBa72FmAoy/MCt0Wq5tMyd3dRNzeSZ JVfbg4yILW+KURNpBMZx4FflA6deZX9OGPGalgnxmDAeApimBUhmLfTp6TageIvc Zqn2W0xjPkhOJQ+p8W70tUYywXRcky6HSSJfv4fb3/5t+qcoPyiI2wdSOI+1OP0q OnJfV5m6jkH+IPCZtIufe8zf7azgtxwR/SJLOED5/Pbsj4bG5sjHaDwWdrJn3k72 zGTA5ghlHNnjq/QNS/B4xOjdL+2Di5/cv0JI6KqEJDR1kBDAoq5i2iTDnl56y3/n lJJ3HYQ+yOLpcaQBsaB/DrD0bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWyTq0W ReUpSYwxYh9vtcpftOBLMB8GA1UdIwQYMBaAFLldlUquuVnTQnwQdqn1ffIcOL/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQyOC9FNkNFRDcyMkUx QjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdkTkNmQkIycWZWOThodzR2 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VWMlZTcTY1V2ROQ2ZCQjJxZlY5OGh3NHY4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQyOC9FNkNFRDcyMkUxQjAxMUU0OEMyRERFMTZDNEY5QUUwMi91VjJWU3E2NVdk TkNmQkIycWZWOThodzR2OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWz5werzTZYyKJP313SrpN/sofeWE5Y83g3At1hF1QI9Oy81NFuFda d4Y57y5xyv4aAmJVw04VjdefKXzuLt4fEE6SHId7aEYHJQdrKNLWyFEClWi3i8JS w4C8m5mZ3FlNqp2qkw0Gv/63teIvhRR3VvwRP2r/RLD5sQin1c6ckAY4U6084G8M Utc+bjSrbn06Ur0DOxdXIi7XQSiPwxLMelbPINnjomOiFBb2nON+lvPB1H1qm0Mg mR+Zf5e6iD4gwYGaKukYcbH8lAjH03G3RxHQqKNHhmoWiIwt0w/0tKjmPDdh8DOQ vlbiDB0Df0q88Q+t+5ZjadR7nAdEiaFx -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:06 2024 by rpki-client on console-ams.rpki-client.org