$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft File: UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json) Hash identifier: yaa88/NuY2Va9QjxIWy7Mcod7RGhoxbe99GEEIf/3Mk= Subject key identifier: 34:F8:C1:C7:0D:47:60:7A:81:0B:07:0B:40:AB:75:B2:EB:7C:A3:1E Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft Manifest number: 0145 Signing time: Sun 19 May 2024 04:56:36 +0000 Manifest this update: Sun 19 May 2024 04:56:35 +0000 Manifest next update: Sun 26 May 2024 04:56:35 +0000 Files and hashes: 1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: 7zYh9xBnuck/frsCiICgoiXc+fZBAi7pwJaHBQ7x0NY=) 2: C512161E3AF711ED8065EF72C4F9AE02.roa (hash: CLIH7di2J/3T/WykzxRsgyDYQ9PowqJrFEJoM7K6CJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Validity Not Before: May 19 04:56:35 2024 GMT Not After : May 26 04:56:35 2024 GMT Subject: CN=66498683-877b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:cc:5b:d2:b5:b1:34:44:d0:f1:77:70:ed: 80:33:62:df:c3:5b:65:e2:e5:83:5c:39:92:7d:47: f1:4a:c3:d3:c8:8d:dd:a2:36:49:5c:17:b5:6f:9e: bf:0f:9e:40:9a:ee:8d:ac:67:f2:ff:ea:2f:4b:0e: 8d:fe:94:80:a7:47:db:88:6c:df:d3:33:36:b9:50: 8c:34:7a:14:45:bc:f4:7b:67:da:1f:62:98:1d:0a: 0a:b6:5b:d3:75:2f:5d:b2:c8:85:18:62:af:26:61: 9d:84:56:6d:c0:13:04:58:04:ba:65:3d:4b:e1:42: ba:2a:ee:a5:71:9a:bd:8f:c7:5d:41:18:01:af:29: 88:c3:00:b1:d0:63:fd:8e:3c:d3:65:eb:d1:eb:00: a6:7d:cd:40:f8:7f:0b:38:ed:47:14:a7:45:63:64: 59:66:50:9e:52:c9:fb:8c:6e:0b:ca:9e:19:fd:01: 6b:0e:89:9e:38:a0:78:ed:9e:59:cf:69:72:41:74: 9f:cf:2c:cd:c3:72:8c:01:3c:dd:e0:e0:32:17:16: 75:7a:19:5c:f8:33:f2:ca:ca:a9:d3:a7:76:99:57: cd:03:19:79:df:3b:a8:29:86:5c:2d:6e:8b:ce:b1: 57:8d:03:fd:9d:cf:e4:c9:dc:7c:0e:18:77:ae:2a: 68:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F8:C1:C7:0D:47:60:7A:81:0B:07:0B:40:AB:75:B2:EB:7C:A3:1E X509v3 Authority Key Identifier: keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:41:d5:f6:99:dd:18:bc:e7:ac:fd:be:31:db:bd:0d:d3:e9: 9e:a6:22:57:6f:2e:32:39:03:c2:a2:26:c0:c8:8b:ab:58:07: 5e:c1:03:56:04:1a:57:5f:cb:fc:b7:f9:15:d1:68:4e:fa:b3: 7e:69:d3:f9:e6:11:cd:70:bf:a5:f7:13:36:36:71:51:4c:e0: 27:0c:2c:7e:30:0f:31:95:cc:d2:c4:5d:8a:16:f9:f2:cc:f7: 02:91:a4:77:34:f3:da:f3:7a:67:a1:d2:56:a2:04:5f:8c:ae: 19:d0:85:37:9a:2b:6c:f8:b8:4f:00:40:e7:01:09:0a:34:20: cc:ee:af:be:36:0d:8c:5e:b0:b4:0e:3a:77:4a:9d:3c:60:8c: eb:db:31:f9:77:9f:21:16:f9:7b:c6:78:3d:88:38:a5:bb:3e: 95:38:64:02:6a:1d:dd:ac:92:43:20:cf:c3:34:be:40:cc:12: c2:8a:25:ed:79:d7:fe:e9:2b:cd:e7:21:31:5a:75:37:83:d9: ab:66:c3:e7:97:68:5e:a3:bf:46:e0:f0:3f:65:0d:e2:3d:6c: cd:a7:47:b3:75:db:94:c5:34:27:ed:8e:a3:06:7a:3b:fa:b8: 81:10:82:6f:28:34:16:33:74:af:26:2c:bf:7c:ac:1a:26:bb: 53:43:6b:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBRDYxMTAvBgNVBAUTKDUzMzJGOUFGMzA1MkNGM0Y4NUVBQkREMEFBRDY4MTUy Mzk1MkU2NTYwHhcNMjQwNTE5MDQ1NjM1WhcNMjQwNTI2MDQ1NjM1WjAYMRYwFAYD VQQDEw02NjQ5ODY4My04NzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLzMW9K1sTRE0PF3cO2AM2Lfw1tl4uWDXDmSfUfxSsPTyI3dojZJXBe1b56/ D55Amu6NrGfy/+ovSw6N/pSAp0fbiGzf0zM2uVCMNHoURbz0e2faH2KYHQoKtlvT dS9dssiFGGKvJmGdhFZtwBMEWAS6ZT1L4UK6Ku6lcZq9j8ddQRgBrymIwwCx0GP9 jjzTZevR6wCmfc1A+H8LOO1HFKdFY2RZZlCeUsn7jG4Lyp4Z/QFrDomeOKB47Z5Z z2lyQXSfzyzNw3KMATzd4OAyFxZ1ehlc+DPyysqp06d2mVfNAxl53zuoKYZcLW6L zrFXjQP9nc/kydx8Dhh3ripo1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDT4wccN R2B6gQsHC0CrdbLrfKMeMB8GA1UdIwQYMBaAFFMy+a8wUs8/heq90KrWgVI5UuZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkFENi9ENjRGNEU5QzNB RjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6LUY2cjNRcXRhQlVqbFM1 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6TDVyekJTenotRjZyM1FxdGFCVWpsUzVsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkFENi9ENjRGNEU5QzNBRjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6 LUY2cjNRcXRhQlVqbFM1bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPQdX2md0YvOes/b4x270N0+mepiJXby4yOQPCoibAyIurWAdewQNW BBpXX8v8t/kV0WhO+rN+adP55hHNcL+l9xM2NnFRTOAnDCx+MA8xlczSxF2KFvny zPcCkaR3NPPa83pnodJWogRfjK4Z0IU3mits+LhPAEDnAQkKNCDM7q++Ng2MXrC0 Djp3Sp08YIzr2zH5d58hFvl7xng9iDiluz6VOGQCah3drJJDIM/DNL5AzBLCiiXt edf+6SvN5yExWnU3g9mrZsPnl2heo79G4PA/ZQ3iPWzNp0ezdduUxTQn7Y6jBno7 +riBEIJvKDQWM3SvJiy/fKwaJrtTQ2uB -----END CERTIFICATE-----Generated at Sun May 19 06:14:32 2024 by rpki-client on console-ams.rpki-client.org