$ rpki-client -vvf rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft File: UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft (raw, json) Hash identifier: iYsVgsqqH8BEvrDEbuRMlhAfMp7zhuywC26/SutK3kI= Subject key identifier: A6:64:D8:62:16:BB:3C:23:EB:FA:4C:80:E6:F1:2B:42:32:E6:B8:56 Authority key identifier: 52:1B:06:C2:91:10:28:4A:AA:FE:08:75:AA:61:86:B0:00:6D:27:67 Certificate issuer: /CN=A911902E/serialNumber=521B06C29110284AAAFE0875AA6186B0006D2767 Certificate serial: 05A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft Manifest number: 05A1 Signing time: Sat 01 Jun 2024 01:16:23 +0000 Manifest this update: Sat 01 Jun 2024 01:16:22 +0000 Manifest next update: Sat 08 Jun 2024 01:16:22 +0000 Files and hashes: 1: UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl (hash: xGQRY5C3N5avFN6Tj6p7KoYeTQJ/RQqOdXgJGI/MotU=) 2: C3FEC56C855711EB871D267FC4F9AE02.roa (hash: MIHHCA2H7xXD0VmwKScOnxk+jNMTwOWmph8DHWmwD6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1448 (0x5a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911902E/serialNumber=521B06C29110284AAAFE0875AA6186B0006D2767 Validity Not Before: Jun 1 01:16:22 2024 GMT Not After : Jun 8 01:16:22 2024 GMT Subject: CN=665a7667-1b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:32:f2:3f:96:2c:7f:ab:52:d3:7e:78:43:b3: c8:9b:82:93:20:fd:d4:2b:0b:db:b2:4b:3d:e7:0c: 6e:b3:63:e5:46:59:d1:eb:07:47:32:4c:fe:9d:86: 55:00:5c:43:5c:5f:a0:ae:2b:2d:fe:1d:2c:1e:1a: 53:f3:68:75:7a:bb:01:c4:67:9f:d2:49:3b:43:45: fe:c1:25:97:a3:bb:f4:b3:53:43:55:08:24:6d:cb: a3:ee:6a:06:60:46:ec:fd:89:b2:69:df:2e:18:f3: 9d:7d:e3:08:34:92:f9:16:c9:ed:c6:86:eb:fe:ea: f5:c5:ed:9b:81:61:a9:9d:0d:24:e9:5c:65:40:ff: 14:ed:65:a9:2b:f6:36:7e:55:7d:3e:08:bc:27:a0: e8:07:9f:27:51:d3:23:ac:ff:48:d0:37:49:21:48: bd:ab:c5:4d:82:68:ba:05:12:6a:a4:fe:03:c2:01: 7d:d7:8e:ca:7b:04:dd:25:1b:79:ab:d9:56:c8:9f: 13:10:fb:87:3c:77:a8:cd:0e:79:72:d6:d7:ba:6c: 59:51:2d:21:ed:74:4e:1e:2f:fa:6e:a6:63:c9:fe: 5b:f4:fc:2b:ac:86:a5:24:93:d5:fc:9c:28:24:3b: bc:a7:24:f8:b0:7a:ae:5c:2b:c2:f6:a7:49:fc:1d: 7d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:64:D8:62:16:BB:3C:23:EB:FA:4C:80:E6:F1:2B:42:32:E6:B8:56 X509v3 Authority Key Identifier: keyid:52:1B:06:C2:91:10:28:4A:AA:FE:08:75:AA:61:86:B0:00:6D:27:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:05:9d:f1:49:f0:99:a5:14:53:52:b8:6d:c0:fe:c7:4f:8a: 27:c4:19:9f:a9:2c:cd:00:00:35:a6:d4:0a:15:7a:fe:f6:5c: ef:43:5f:f8:76:bb:70:fd:22:0a:4f:e5:da:6f:87:f5:ab:59: 31:0c:6e:02:75:fb:49:93:2a:fa:5c:6d:70:de:d2:d9:70:c9: ee:89:6f:0b:b8:b9:f9:d9:b3:d9:a8:0f:b0:b9:20:8b:2b:62: 8e:d7:e4:ca:c7:8c:16:d2:89:f0:17:f4:24:7f:70:44:bc:bf: b6:cf:fe:8f:42:c2:bd:5d:7c:44:6b:d7:33:e3:52:09:96:33: c1:4a:cf:03:79:bf:cb:bb:2e:67:72:f5:10:67:93:81:21:86: b4:c6:48:45:70:e4:f2:0e:69:58:56:a7:cc:0e:4e:9d:55:1e: 19:29:5b:fb:67:40:48:54:49:b5:b3:f0:55:6b:43:1f:84:74: fd:82:c7:38:c0:89:4d:35:50:2a:05:6e:83:07:dc:64:d7:9d: 67:35:21:2c:c6:d4:b2:06:6e:62:fa:e1:76:5f:35:f1:3c:94: 50:22:af:63:c0:bc:5e:f2:48:b4:c2:9f:03:6f:20:4f:e6:d3: 2b:4d:c8:87:04:31:d0:0f:70:0d:92:b5:bb:79:21:67:ff:b8: f9:cd:f0:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwMkUxMTAvBgNVBAUTKDUyMUIwNkMyOTExMDI4NEFBQUZFMDg3NUFBNjE4NkIw MDA2RDI3NjcwHhcNMjQwNjAxMDExNjIyWhcNMjQwNjA4MDExNjIyWjAYMRYwFAYD VQQDEw02NjVhNzY2Ny0xYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DLyP5Ysf6tS0354Q7PIm4KTIP3UKwvbsks95wxus2PlRlnR6wdHMkz+nYZV AFxDXF+grist/h0sHhpT82h1ersBxGef0kk7Q0X+wSWXo7v0s1NDVQgkbcuj7moG YEbs/Ymyad8uGPOdfeMINJL5Fsntxobr/ur1xe2bgWGpnQ0k6VxlQP8U7WWpK/Y2 flV9Pgi8J6DoB58nUdMjrP9I0DdJIUi9q8VNgmi6BRJqpP4DwgF9147KewTdJRt5 q9lWyJ8TEPuHPHeozQ55ctbXumxZUS0h7XROHi/6bqZjyf5b9PwrrIalJJPV/Jwo JDu8pyT4sHquXCvC9qdJ/B19fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZk2GIW uzwj6/pMgObxK0Iy5rhWMB8GA1UdIwQYMBaAFFIbBsKREChKqv4IdaphhrAAbSdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTAyRS81N0FGREIyODg1 NTUxMUVCOTRDMjIxNUZDNEY5QUUwMi9VaHNHd3BFUUtFcXFfZ2gxcW1HR3NBQnRK MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Voc0d3cEVRS0VxcV9naDFxbUdHc0FCdEoyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTAyRS81N0FGREIyODg1NTUxMUVCOTRDMjIxNUZDNEY5QUUwMi9VaHNHd3BFUUtF cXFfZ2gxcW1HR3NBQnRKMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXBZ3xSfCZpRRTUrhtwP7HT4onxBmfqSzNAAA1ptQKFXr+9lzvQ1/4 drtw/SIKT+Xab4f1q1kxDG4CdftJkyr6XG1w3tLZcMnuiW8LuLn52bPZqA+wuSCL K2KO1+TKx4wW0onwF/Qkf3BEvL+2z/6PQsK9XXxEa9cz41IJljPBSs8Deb/Luy5n cvUQZ5OBIYa0xkhFcOTyDmlYVqfMDk6dVR4ZKVv7Z0BIVEm1s/BVa0MfhHT9gsc4 wIlNNVAqBW6DB9xk151nNSEsxtSyBm5i+uF2XzXxPJRQIq9jwLxe8ki0wp8DbyBP 5tMrTciHBDHQD3ANkrW7eSFn/7j5zfAF -----END CERTIFICATE-----Generated at Sat Jun 1 02:55:14 2024 by rpki-client on console-fra.rpki-client.org