$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft File: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft (raw, json) Hash identifier: GqZnKEgZHS88XLn/z8gb6nkIzSR1d0D+l2UaqleLA4w= Subject key identifier: B1:14:ED:C6:58:81:DA:EB:C4:A1:46:18:6E:7F:65:6D:03:5D:2A:32 Authority key identifier: 50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23 Certificate issuer: /CN=A91FBDDF/serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft Manifest number: CB Signing time: Sat 23 Nov 2024 03:50:00 +0000 Manifest this update: Sat 23 Nov 2024 03:50:00 +0000 Manifest next update: Sat 30 Nov 2024 03:50:00 +0000 Files and hashes: 1: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl (hash: fM7+q+wEtmvl87E7mLmtZiyDzZEep6sFNd18pkTxYYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBDDF/serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023 Validity Not Before: Nov 23 03:50:00 2024 GMT Not After : Nov 30 03:50:00 2024 GMT Subject: CN=674150e8-3d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:d8:f2:39:80:b2:12:5f:5b:02:55:60:b0: 17:4e:4a:0b:d1:68:3d:71:4f:b2:6e:93:d0:37:b9: 1d:0e:5e:ac:07:3d:d2:12:b3:b1:49:b7:71:e6:fb: 7c:d0:87:14:b9:7f:2c:91:88:d0:4c:27:26:9e:fa: ba:ab:0c:b7:5b:61:05:0d:97:ac:b3:9f:ad:a5:0b: 0c:77:dc:02:cc:37:95:53:bf:d6:76:a2:f3:38:02: 64:a3:8f:36:b5:4d:4a:45:d1:91:0f:5f:ca:92:75: a0:df:e2:b1:ad:5b:25:79:97:f5:0e:e9:f0:d1:15: 98:61:d2:67:8d:06:89:9f:2e:82:99:33:b0:4a:66: 77:9b:35:8a:d9:4a:48:9c:30:5c:dc:a1:bf:a9:3e: 22:a9:8c:cd:d7:66:45:e6:61:2c:1c:f3:4b:e2:37: d5:25:46:00:5c:78:42:ab:03:3e:d1:c9:31:16:8c: 59:3a:a1:73:0e:07:ba:c0:c4:8f:6c:86:74:38:7c: 10:f9:02:82:b5:bb:c0:96:ee:e5:c4:51:38:f6:2f: 24:f2:8e:97:5d:f0:c4:aa:2c:d8:b4:9f:bf:21:e3: 58:f3:cf:9d:cb:71:d2:31:2d:f5:00:c8:24:2a:79: de:f3:29:3b:18:41:d7:3d:46:35:a2:d6:47:36:4c: bd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:14:ED:C6:58:81:DA:EB:C4:A1:46:18:6E:7F:65:6D:03:5D:2A:32 X509v3 Authority Key Identifier: keyid:50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:5f:bf:55:ad:0a:1e:48:54:13:5d:af:50:7b:18:23:90:40: b8:f5:45:d8:3f:9b:bc:06:ed:c6:5b:6d:23:4a:cf:ac:a4:c3: 0d:9b:8d:5e:f5:9c:bb:bf:a0:fa:b1:e4:9d:2d:fd:c1:75:8d: 19:b9:dc:f0:72:22:77:b6:47:04:18:38:4c:02:f4:78:51:f7: 21:a2:c4:b9:76:c3:a1:38:bb:d8:84:bf:56:3e:35:43:76:a3: 22:52:ba:48:3a:49:88:87:63:93:c7:db:e1:05:0c:90:5c:a2: 40:40:1a:78:1b:20:20:74:14:12:c5:fd:f7:3f:a2:b2:13:64: 39:e2:34:d4:12:fa:50:4c:22:d7:a8:f3:02:91:4b:b9:2a:14: 69:aa:05:67:7e:50:21:0e:f6:a4:e8:6c:09:e7:d6:8a:cc:17: 3b:42:a6:b3:da:12:43:c0:97:d8:52:24:f6:05:d8:5e:24:47: e1:d1:bc:fd:68:ec:bd:bf:30:df:a9:d5:f1:f0:b9:0d:55:cb: f5:4f:25:ce:89:54:40:1e:a4:ce:4f:52:91:6d:8d:a6:03:49: 94:7b:52:81:b1:f8:29:5c:7a:42:ef:4d:ae:ab:d1:d4:7f:98: 7f:d5:6c:24:f5:3c:40:eb:c6:8b:08:b9:d1:f9:02:b7:19:ae: d0:e0:ef:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEREYxMTAvBgNVBAUTKDUwM0QxQkY1NkIyMjI5QjUyQUEzRkY2ODUzNDY5OUYw NkZEMjUwMjMwHhcNMjQxMTIzMDM1MDAwWhcNMjQxMTMwMDM1MDAwWjAYMRYwFAYD VQQDEw02NzQxNTBlOC0zZDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrrY8jmAshJfWwJVYLAXTkoL0Wg9cU+ybpPQN7kdDl6sBz3SErOxSbdx5vt8 0IcUuX8skYjQTCcmnvq6qwy3W2EFDZess5+tpQsMd9wCzDeVU7/WdqLzOAJko482 tU1KRdGRD1/KknWg3+KxrVsleZf1Dunw0RWYYdJnjQaJny6CmTOwSmZ3mzWK2UpI nDBc3KG/qT4iqYzN12ZF5mEsHPNL4jfVJUYAXHhCqwM+0ckxFoxZOqFzDge6wMSP bIZ0OHwQ+QKCtbvAlu7lxFE49i8k8o6XXfDEqizYtJ+/IeNY88+dy3HSMS31AMgk Knne8yk7GEHXPUY1otZHNky90wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEU7cZY gdrrxKFGGG5/ZW0DXSoyMB8GA1UdIwQYMBaAFFA9G/VrIim1KqP/aFNGmfBv0lAj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkRERi80NzVDNjRCRTcy NDUxMUVFQUEyOUVDNzRDNEY5QUUwMi9VRDBiOVdzaUtiVXFvXzlvVTBhWjhHX1NV Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VEMGI5V3NpS2JVcW9fOW9VMGFaOEdfU1VDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkRERi80NzVDNjRCRTcyNDUxMUVFQUEyOUVDNzRDNEY5QUUwMi9VRDBiOVdzaUti VXFvXzlvVTBhWjhHX1NVQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQX79VrQoeSFQTXa9QexgjkEC49UXYP5u8Bu3GW20jSs+spMMNm41e 9Zy7v6D6seSdLf3BdY0ZudzwciJ3tkcEGDhMAvR4UfchosS5dsOhOLvYhL9WPjVD dqMiUrpIOkmIh2OTx9vhBQyQXKJAQBp4GyAgdBQSxf33P6KyE2Q54jTUEvpQTCLX qPMCkUu5KhRpqgVnflAhDvak6GwJ59aKzBc7Qqaz2hJDwJfYUiT2BdheJEfh0bz9 aOy9vzDfqdXx8LkNVcv1TyXOiVRAHqTOT1KRbY2mA0mUe1KBsfgpXHpC702uq9HU f5h/1Wwk9TxA68aLCLnR+QK3Ga7Q4O+C -----END CERTIFICATE-----Generated at Sat Nov 23 05:03:01 2024 by rpki-client on console-fra.rpki-client.org