$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json) Hash identifier: DNdMLRKI/QYVqVR46eARR5O/xzsMyBoVG50LrkB+fwI= Subject key identifier: E4:65:A1:AF:60:32:68:F5:AE:55:82:55:8D:E3:2D:CF:D6:57:F6:68 Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Certificate serial: 0ABB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft Manifest number: 0AB5 Signing time: Sat 18 May 2024 20:08:15 +0000 Manifest this update: Sat 18 May 2024 20:08:14 +0000 Manifest next update: Sat 25 May 2024 20:08:14 +0000 Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: PdPU3fKex8wLqoguKqJJbGtehJ8fzygDBLpxTUePIPU=) 2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: or6enVGaDRWyutHd8icp3MYkh3hV4LifLbAwdS8e2Ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2747 (0xabb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Validity Not Before: May 18 20:08:14 2024 GMT Not After : May 25 20:08:14 2024 GMT Subject: CN=66490aaf-4593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:39:09:85:8c:7b:00:ec:b1:a2:59:ac:a8:63: 1b:1f:0a:83:be:e0:52:ec:69:f0:fe:c7:4b:0b:6a: 3f:2b:9d:a3:63:71:b7:d9:78:fc:3c:35:3c:85:be: 82:9e:0d:7d:59:f6:42:13:e9:d4:77:a3:49:be:79: 6f:cc:f9:79:b1:16:5b:ce:49:1b:85:45:e1:39:19: 44:e3:9d:59:45:c1:05:46:f1:ac:98:e6:12:ec:cf: 55:fe:20:d8:5c:96:27:2d:09:be:68:80:79:06:4b: a6:a7:09:5e:e3:d4:dd:11:97:83:62:d3:38:34:c7: 67:4b:7f:de:ca:4d:90:1b:3e:e3:e6:23:ac:e7:a3: 47:49:ab:c0:3d:33:4f:ca:3c:07:03:0e:79:c7:0d: c8:75:c1:b1:8f:25:8b:9d:fe:ab:1f:cb:a0:05:49: a4:84:b4:a6:f1:5b:0a:c2:8e:08:2e:60:04:7d:ff: f5:bb:70:ea:15:65:07:0d:b3:57:47:c7:a4:56:2e: fd:01:3b:50:38:0b:e5:3f:fe:95:e1:cb:09:cf:60: 11:5e:08:bf:56:72:0c:a7:84:35:d5:db:2a:3c:32: db:8c:33:b0:98:d6:a5:87:63:81:aa:9b:39:94:db: b8:fa:82:71:da:38:ac:d2:7d:16:16:e7:0d:77:c6: e9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:65:A1:AF:60:32:68:F5:AE:55:82:55:8D:E3:2D:CF:D6:57:F6:68 X509v3 Authority Key Identifier: keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:2d:d4:25:f0:db:b1:c9:8d:af:df:e1:c5:75:41:24:0d:e9: ee:27:a2:c0:de:a7:6c:37:3c:a8:3e:14:5e:a4:8d:ff:cf:c3: 88:5b:2b:6d:15:92:77:7e:42:a2:55:7e:91:31:de:17:55:fb: 2f:6b:b6:92:df:43:8e:90:cc:ff:44:24:47:a3:6a:a3:86:ee: 06:03:8e:ea:5b:c4:e5:0c:99:df:01:cf:7a:14:e3:1d:63:17: 45:a8:9e:1b:59:45:f2:9f:cb:6f:d5:26:25:e5:59:97:c4:a2: e6:5d:a5:de:a0:8c:25:d1:04:ed:7a:0f:36:cf:dd:c4:76:7f: c3:af:f9:c9:d2:96:7a:5f:14:d7:22:2c:47:bc:e9:4a:fb:75: b0:09:ce:7d:ea:15:94:19:8a:24:1d:48:bf:ff:e9:26:d1:b8: 4b:00:dc:3e:fe:8e:9b:7c:ee:c2:82:bf:f2:d3:cd:3c:b1:84: 07:e0:9e:e8:bc:28:2a:58:53:81:3a:96:57:24:e6:06:32:e6: 4c:0e:bd:50:b4:8c:cb:2a:53:78:75:31:4e:ec:18:13:f1:46: 91:50:1c:03:8d:15:49:68:e0:18:08:e3:d1:2e:a6:81:11:07: 12:b8:57:c9:2a:c1:4f:02:a2:23:4f:90:f1:20:cc:0f:20:19: e9:ea:c6:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3NTQxMTAvBgNVBAUTKDUzMTc0OTA5NUU0NDlGRDgyQUExREI1MERBODM0MDE3 MjMwQkREMTMwHhcNMjQwNTE4MjAwODE0WhcNMjQwNTI1MjAwODE0WjAYMRYwFAYD VQQDEw02NjQ5MGFhZi00NTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jkJhYx7AOyxolmsqGMbHwqDvuBS7Gnw/sdLC2o/K52jY3G32Xj8PDU8hb6C ng19WfZCE+nUd6NJvnlvzPl5sRZbzkkbhUXhORlE451ZRcEFRvGsmOYS7M9V/iDY XJYnLQm+aIB5Bkumpwle49TdEZeDYtM4NMdnS3/eyk2QGz7j5iOs56NHSavAPTNP yjwHAw55xw3IdcGxjyWLnf6rH8ugBUmkhLSm8VsKwo4ILmAEff/1u3DqFWUHDbNX R8ekVi79ATtQOAvlP/6V4csJz2ARXgi/VnIMp4Q11dsqPDLbjDOwmNalh2OBqps5 lNu4+oJx2jis0n0WFucNd8bpXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORloa9g Mmj1rlWCVY3jLc/WV/ZoMB8GA1UdIwQYMBaAFFMXSQleRJ/YKqHbUNqDQBcjC90T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzc1NC84QjMxNDVBRTJD OEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45Z3FvZHRRMm9OQUZ5TUwz Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4ZEpDVjVFbjlncW9kdFEyb05BRnlNTDNSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzc1NC84QjMxNDVBRTJDOEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45 Z3FvZHRRMm9OQUZ5TUwzUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCULdQl8NuxyY2v3+HFdUEkDenuJ6LA3qdsNzyoPhRepI3/z8OIWytt FZJ3fkKiVX6RMd4XVfsva7aS30OOkMz/RCRHo2qjhu4GA47qW8TlDJnfAc96FOMd YxdFqJ4bWUXyn8tv1SYl5VmXxKLmXaXeoIwl0QTteg82z93Edn/Dr/nJ0pZ6XxTX IixHvOlK+3WwCc596hWUGYokHUi//+km0bhLANw+/o6bfO7Cgr/y0808sYQH4J7o vCgqWFOBOpZXJOYGMuZMDr1QtIzLKlN4dTFO7BgT8UaRUBwDjRVJaOAYCOPRLqaB EQcSuFfJKsFPAqIjT5DxIMwPIBnp6sa+ -----END CERTIFICATE-----Generated at Sat May 18 21:31:24 2024 by rpki-client on console-ams.rpki-client.org