$ rpki-client -vvf rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft File: uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft (raw, json) Hash identifier: HZh2/Firu64Zj39ETY0Cv7bND4HC/oO75U5W6Zw+OXE= Subject key identifier: F7:9C:69:AD:4B:0A:76:A3:FF:25:D7:EC:B3:69:4A:D4:DA:9C:A6:B4 Authority key identifier: BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB Certificate issuer: /CN=A9113217/serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft Manifest number: A3 Signing time: Sun 19 May 2024 06:45:59 +0000 Manifest this update: Sun 19 May 2024 06:45:59 +0000 Manifest next update: Sun 26 May 2024 06:45:59 +0000 Files and hashes: 1: uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl (hash: UJbMUkJSV6sBMilz071Dd4zm1Fiu9VKBHDH3va1gfdA=) 2: 859871F2215D11EE963E9A52C4F9AE02.roa (hash: AcktJiYcY8RYWRnABWd41Q4tnQHfbCZURcsBwSR+FBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113217/serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB Validity Not Before: May 19 06:45:59 2024 GMT Not After : May 26 06:45:59 2024 GMT Subject: CN=6649a027-65f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:fd:09:15:9b:c2:a0:cd:bc:6b:ee:ce:eb: 89:6b:37:b6:f6:cc:da:33:81:f5:6d:df:0a:db:a8: 74:56:0a:4f:8b:e4:3b:e0:e8:77:db:62:36:03:56: 77:8f:f2:02:53:f5:bf:a9:53:ef:68:b2:9f:a4:de: c8:9b:43:d3:1b:8b:7d:d3:26:cc:96:11:d2:59:a5: 61:0f:1c:1c:67:06:ba:08:9f:76:32:6f:b3:bd:a6: b0:6d:86:f7:1b:a0:e5:ef:77:15:ee:f7:a4:d9:8f: 63:5b:b1:9c:0a:ff:d0:3b:07:2e:9d:39:7d:07:23: 96:5b:42:c1:54:fb:97:ae:ad:7d:b3:8f:94:4c:4b: 4c:78:22:c0:14:93:c0:8f:4e:46:c2:12:b7:61:5d: e0:bf:7f:bc:53:28:4d:ff:09:f0:4e:cc:5e:ad:b7: b4:b6:d2:d2:a8:01:2d:5f:d7:41:59:b6:d8:d8:8d: ea:02:98:f8:cd:a6:9f:ba:52:99:2f:b2:65:6e:1b: 59:40:77:55:dc:81:cb:2c:97:d7:3c:7c:eb:74:72: e2:3c:6d:aa:e7:9b:a4:c1:1e:56:01:ea:7d:d2:40: 1c:51:1b:27:41:fa:52:2c:82:88:41:1d:de:1e:af: 2b:d0:2f:4b:18:77:33:57:4b:cf:51:18:5a:d5:31: 5e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9C:69:AD:4B:0A:76:A3:FF:25:D7:EC:B3:69:4A:D4:DA:9C:A6:B4 X509v3 Authority Key Identifier: keyid:BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d7:39:f8:70:f0:70:f5:33:ad:b7:8a:2c:8f:32:12:27:c5: f5:54:83:f7:8f:43:d4:93:5d:c4:b1:d4:8f:a5:c0:e1:f0:2f: 6c:80:5f:5d:66:17:9b:03:79:29:e7:e0:ee:f1:69:48:17:ae: 80:89:29:9d:77:92:89:f7:e4:36:08:58:82:87:87:00:7b:19: a8:12:ab:f7:c2:b6:69:36:4f:7b:33:e5:57:ec:3a:5a:13:64: 87:21:41:17:f3:70:6e:f4:a4:16:16:96:64:b3:72:6a:9d:df: 9d:80:96:a8:02:0f:b9:19:7d:90:15:38:5d:59:f6:80:dd:1b: 05:85:3d:ac:ce:28:3c:36:09:8e:f8:b5:2d:e3:9f:e9:3b:31: 41:15:5b:56:ba:59:04:99:d3:e3:a3:1b:49:d2:16:b7:5f:8c: 22:e8:2b:d7:fd:f7:24:35:bc:c8:9d:53:88:df:02:0d:15:8f: 5e:f4:30:2b:33:45:19:73:de:2b:75:49:ff:3c:30:b2:03:27: 1a:2e:44:de:cb:7b:60:62:08:d3:d5:5c:18:36:50:f0:c5:20: 27:30:d9:aa:27:86:76:7a:fc:da:3b:de:75:76:bd:51:54:65: 0d:f4:a3:13:d7:78:4e:d0:c9:8e:75:58:09:b5:6d:eb:dd:7a: 6a:de:e2:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMyMTcxMTAvBgNVBAUTKEJCMzAwNzhDRjY4Nzc4N0QzQTVCM0U1MzRDMDg5NzE2 QTg2QjEzQkIwHhcNMjQwNTE5MDY0NTU5WhcNMjQwNTI2MDY0NTU5WjAYMRYwFAYD VQQDEw02NjQ5YTAyNy02NWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAum39CRWbwqDNvGvuzuuJaze29szaM4H1bd8K26h0VgpPi+Q74Oh322I2A1Z3 j/ICU/W/qVPvaLKfpN7Im0PTG4t90ybMlhHSWaVhDxwcZwa6CJ92Mm+zvaawbYb3 G6Dl73cV7vek2Y9jW7GcCv/QOwcunTl9ByOWW0LBVPuXrq19s4+UTEtMeCLAFJPA j05GwhK3YV3gv3+8UyhN/wnwTsxerbe0ttLSqAEtX9dBWbbY2I3qApj4zaafulKZ L7JlbhtZQHdV3IHLLJfXPHzrdHLiPG2q55ukwR5WAep90kAcURsnQfpSLIKIQR3e Hq8r0C9LGHczV0vPURha1TFeSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPecaa1L Cnaj/yXX7LNpStTanKa0MB8GA1UdIwQYMBaAFLswB4z2h3h9Ols+U0wIlxaoaxO7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzIxNy9ENzIxOTZEMDIx NUMxMUVFQkNCNUIyNEVDNEY5QUUwMi91ekFIalBhSGVIMDZXejVUVEFpWEZxaHJF N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V6QUhqUGFIZUgwNld6NVRUQWlYRnFockU3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzIxNy9ENzIxOTZEMDIxNUMxMUVFQkNCNUIyNEVDNEY5QUUwMi91ekFIalBhSGVI MDZXejVUVEFpWEZxaHJFN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs1zn4cPBw9TOtt4osjzISJ8X1VIP3j0PUk13EsdSPpcDh8C9sgF9d ZhebA3kp5+Du8WlIF66AiSmdd5KJ9+Q2CFiCh4cAexmoEqv3wrZpNk97M+VX7Dpa E2SHIUEX83Bu9KQWFpZks3Jqnd+dgJaoAg+5GX2QFThdWfaA3RsFhT2szig8NgmO +LUt45/pOzFBFVtWulkEmdPjoxtJ0ha3X4wi6CvX/fckNbzInVOI3wINFY9e9DAr M0UZc94rdUn/PDCyAycaLkTey3tgYgjT1VwYNlDwxSAnMNmqJ4Z2evzaO951dr1R VGUN9KMT13hO0MmOdVgJtW3r3Xpq3uJr -----END CERTIFICATE-----Generated at Sun May 19 08:24:56 2024 by rpki-client on console-ams.rpki-client.org