$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft File: uNk1BsinkdH5_6W2fDiBbdwD7ms.mft (raw, json) Hash identifier: R2jRnqaIWJpPAi9FhWLvYIMQCLg9+5gtJI/eBTsugnU= Subject key identifier: 23:8F:5C:2B:F9:79:DF:8F:29:13:4E:5C:7C:D8:A4:A3:23:F5:34:36 Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B Certificate issuer: /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Certificate serial: 0976 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft Manifest number: 0971 Signing time: Sat 18 May 2024 20:59:48 +0000 Manifest this update: Sat 18 May 2024 20:59:48 +0000 Manifest next update: Sat 25 May 2024 20:59:48 +0000 Files and hashes: 1: uNk1BsinkdH5_6W2fDiBbdwD7ms.crl (hash: zhla9Ft6ANtimrQN4LfTkbCd0M7REjwKmi/ZhqZEgTo=) 2: C01674A86BF011EA87B33D25C4F9AE02.roa (hash: 41vzsNFWtlDB3OOheuZb6doD/XkheVi/JY4sN43fJrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2422 (0x976) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Validity Not Before: May 18 20:59:48 2024 GMT Not After : May 25 20:59:48 2024 GMT Subject: CN=664916c4-0876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:27:d7:6b:4b:9f:fb:29:e1:08:c2:ec:19: b3:e9:dd:74:db:1d:45:7d:32:39:ef:48:f4:b7:3f: 91:5e:89:dd:f0:3e:15:27:78:ec:c0:53:4b:31:75: 67:59:18:30:df:c0:fc:b4:aa:7f:75:82:e0:15:b0: 4d:5d:1b:16:ae:47:65:66:b9:ff:e3:98:cf:5f:e5: f0:9f:db:2c:ec:3e:5d:71:4a:74:20:79:1e:13:1f: 3c:ad:89:0b:81:4c:59:ee:f3:c9:5a:8b:90:17:0a: ab:b5:28:bb:56:e2:b7:38:77:76:1f:89:73:b3:97: 5c:f2:ce:e6:a2:ec:0c:63:73:6e:5d:e8:c5:63:04: 28:5f:96:0e:2a:14:9e:d3:7c:13:ca:d2:af:fb:17: 17:b4:1f:e7:b9:3d:dc:6c:3c:b3:9b:aa:e6:32:77: 63:77:f4:37:d1:c3:7c:39:c0:17:e9:9f:e2:25:09: 2d:19:b5:64:8e:4c:db:0b:eb:1d:15:26:9f:b9:e9: 1c:aa:db:09:88:17:75:4a:ce:8b:4c:39:2d:19:f6: ae:4d:c0:df:c2:51:de:50:74:5a:27:c1:02:ca:c7: 20:d7:54:0d:93:f7:07:f0:29:6d:4a:85:b7:5f:37: a4:b4:d5:cf:0c:63:08:5a:25:f3:78:d8:cf:e0:6c: 55:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8F:5C:2B:F9:79:DF:8F:29:13:4E:5C:7C:D8:A4:A3:23:F5:34:36 X509v3 Authority Key Identifier: keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:68:79:44:7c:04:fa:9e:cb:94:51:e9:e6:06:16:d1:a6:80: 07:d8:d5:d7:c9:ca:e2:02:d9:3b:cf:fd:0c:bc:72:da:34:46: 12:6b:fc:7a:d9:60:57:34:6f:76:77:c6:dc:a8:47:8d:9c:ca: 61:98:1e:fc:b7:b4:4e:fe:87:9b:a5:ba:ce:74:d8:83:8c:b4: 0c:1e:75:ca:47:0b:ef:27:f9:86:49:29:58:68:89:01:13:8f: fa:ee:ec:84:1c:9d:9a:8e:59:60:3b:8a:c4:ce:7d:e0:32:87: c7:0a:68:38:2a:1d:32:1e:ff:98:91:ed:55:63:9d:05:9c:be: 4d:c5:b2:59:28:25:55:cc:9c:7a:05:39:7d:5e:13:37:18:31: 95:e4:e3:b1:9b:d0:1f:af:bc:f5:81:72:62:e5:01:96:55:fb: 20:d0:b0:d0:f3:59:4f:8c:c9:f9:8b:a3:f2:0f:3d:63:4c:36: f7:7e:06:a8:20:ad:ef:8f:de:7b:d3:1e:ef:5c:fc:38:5d:70: d1:62:e7:81:51:3a:3f:5b:d4:23:2e:96:1e:de:9e:2d:bb:f4: 40:57:14:2b:00:1d:55:db:d3:38:e8:ea:af:e8:32:b1:a2:9d: eb:15:8c:4d:db:03:74:7c:e7:d2:2a:41:bb:11:b2:cb:27:92: 55:4a:eb:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBERUMxMTAvBgNVBAUTKEI4RDkzNTA2QzhBNzkxRDFGOUZGQTVCNjdDMzg4MTZE REMwM0VFNkIwHhcNMjQwNTE4MjA1OTQ4WhcNMjQwNTI1MjA1OTQ4WjAYMRYwFAYD VQQDEw02NjQ5MTZjNC0wODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+Mn12tLn/sp4QjC7Bmz6d102x1FfTI570j0tz+RXond8D4VJ3jswFNLMXVn WRgw38D8tKp/dYLgFbBNXRsWrkdlZrn/45jPX+Xwn9ss7D5dcUp0IHkeEx88rYkL gUxZ7vPJWouQFwqrtSi7VuK3OHd2H4lzs5dc8s7mouwMY3NuXejFYwQoX5YOKhSe 03wTytKv+xcXtB/nuT3cbDyzm6rmMndjd/Q30cN8OcAX6Z/iJQktGbVkjkzbC+sd FSafuekcqtsJiBd1Ss6LTDktGfauTcDfwlHeUHRaJ8ECyscg11QNk/cH8CltSoW3 XzektNXPDGMIWiXzeNjP4GxV7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOPXCv5 ed+PKRNOXHzYpKMj9TQ2MB8GA1UdIwQYMBaAFLjZNQbIp5HR+f+ltnw4gW3cA+5r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMERFQy8xNzJEMEEyNDZC RUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtkSDVfNlcyZkRpQmJkd0Q3 bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VOazFCc2lua2RINV82VzJmRGlCYmR3RDdtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MERFQy8xNzJEMEEyNDZCRUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtk SDVfNlcyZkRpQmJkd0Q3bXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEaHlEfAT6nsuUUenmBhbRpoAH2NXXycriAtk7z/0MvHLaNEYSa/x6 2WBXNG92d8bcqEeNnMphmB78t7RO/oebpbrOdNiDjLQMHnXKRwvvJ/mGSSlYaIkB E4/67uyEHJ2ajllgO4rEzn3gMofHCmg4Kh0yHv+Yke1VY50FnL5NxbJZKCVVzJx6 BTl9XhM3GDGV5OOxm9Afr7z1gXJi5QGWVfsg0LDQ81lPjMn5i6PyDz1jTDb3fgao IK3vj9570x7vXPw4XXDRYueBUTo/W9QjLpYe3p4tu/RAVxQrAB1V29M46Oqv6DKx op3rFYxN2wN0fOfSKkG7EbLLJ5JVSutJ -----END CERTIFICATE-----Generated at Sat May 18 21:31:24 2024 by rpki-client on console-ams.rpki-client.org