$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft File: U2uRsXtuG7FjjINYoPpepdDr77c.mft (raw, json) Hash identifier: 2SXuNMB92tXxZ0Bl2TYNl9PtXJS3KPsxMt/LBYgvakM= Subject key identifier: CB:3A:78:92:18:BB:2C:FC:88:43:51:47:D1:D2:43:8C:25:96:0F:56 Authority key identifier: 53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7 Certificate issuer: /CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft Manifest number: BF Signing time: Fri 31 May 2024 04:05:40 +0000 Manifest this update: Fri 31 May 2024 04:05:39 +0000 Manifest next update: Fri 07 Jun 2024 04:05:39 +0000 Files and hashes: 1: U2uRsXtuG7FjjINYoPpepdDr77c.crl (hash: jMhEuWnzq3wAJ7JGJNAPAZTPKZiw+IhrFXC7y3bk5Vw=) 2: 234074FA00DD11EE95AF6F7CC4F9AE02.roa (hash: h1m9sLre/7LN5ad1i+1GbnT3wM3IJOvLq7MEJkLNy3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7 Validity Not Before: May 31 04:05:39 2024 GMT Not After : Jun 7 04:05:39 2024 GMT Subject: CN=66594c94-ccf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:75:2e:b7:59:14:df:d7:87:d5:50:4c:2a:e8: a0:70:2c:1b:5f:97:1e:07:36:6a:bb:eb:4e:a2:82: 6e:43:1e:c6:c3:f3:20:e9:f0:7b:2c:53:e0:2c:4a: 42:5e:88:6b:7e:3f:48:66:10:f9:05:96:f6:cc:b2: c9:a3:47:c2:49:ee:56:2d:8e:48:a4:1a:3f:42:ee: d0:da:22:62:1e:1c:56:0d:5a:17:cf:e8:62:e8:df: 05:a7:a1:c7:aa:f7:0c:0b:88:6a:7b:b9:83:95:c1: c7:83:c4:72:db:b9:4c:ed:d3:36:42:b8:d2:f5:c8: 5b:ae:24:6b:af:9b:69:d7:fc:6f:e4:55:68:eb:f3: 80:86:63:60:12:e7:20:a2:8b:af:d4:3b:d7:3f:63: a0:83:9c:86:48:f1:bc:ad:93:8f:56:8a:13:5d:97: 81:d4:c9:b0:5a:76:ea:08:95:04:52:62:0d:40:6b: 24:0e:44:2b:c0:72:52:30:78:3b:e1:24:21:a4:86: 21:bf:3c:f7:6f:29:54:0c:a9:86:a7:fb:40:93:0a: 81:e8:75:f7:dd:87:d5:9d:f1:2f:db:d5:ca:0d:6a: 46:f8:b0:96:e8:02:47:6f:ab:3c:64:0b:5a:de:4a: 1e:89:3b:ae:38:7e:a2:c7:74:2f:ba:1a:58:2b:65: 57:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3A:78:92:18:BB:2C:FC:88:43:51:47:D1:D2:43:8C:25:96:0F:56 X509v3 Authority Key Identifier: keyid:53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:f4:90:d4:ef:06:0d:2a:14:0e:25:14:98:b7:14:1e:01:48: 98:bc:41:17:81:d9:6c:43:7d:71:c5:3c:37:5f:93:5c:3f:fd: ba:f8:49:7b:f6:26:f6:26:80:8b:db:9e:97:1b:03:6f:86:69: e7:3b:70:2f:d2:a6:64:60:4d:ca:cd:44:c5:ca:87:2c:1a:21: 48:6c:8e:2e:cf:84:1e:6d:84:10:60:9e:81:48:16:a4:78:1b: c5:66:f9:76:f1:bc:b1:bd:a7:34:5b:99:2e:ae:61:ca:1e:a5: 7b:66:5a:d2:32:d6:e7:7d:ab:a8:84:d2:64:13:e8:69:bd:96: 1b:70:e1:46:14:e2:ff:ad:5e:3c:8b:b2:91:60:d7:8b:1e:bb: 11:c5:a8:88:6e:60:9d:3d:6e:4f:e7:14:5b:b0:03:de:8c:9b: 78:4a:04:d0:fd:05:d1:2b:5a:ea:33:d8:ee:42:3d:bd:c3:56: d8:df:1c:14:69:17:e8:18:a6:5d:70:2c:92:df:ee:e9:7a:8d: 40:c6:8c:c2:f3:df:49:93:c3:e2:50:19:ea:92:b5:b9:db:34: ad:aa:f8:86:3d:12:cd:c2:c6:00:0e:d5:ab:9a:6b:9b:54:56: be:fd:3c:6f:97:f1:24:aa:e5:c4:33:1f:1f:14:b7:8b:dd:28: 72:62:9a:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDM0QxMTAvBgNVBAUTKDUzNkI5MUIxN0I2RTFCQjE2MzhDODM1OEEwRkE1RUE1 RDBFQkVGQjcwHhcNMjQwNTMxMDQwNTM5WhcNMjQwNjA3MDQwNTM5WjAYMRYwFAYD VQQDEw02NjU5NGM5NC1jY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXUut1kU39eH1VBMKuigcCwbX5ceBzZqu+tOooJuQx7Gw/Mg6fB7LFPgLEpC Xohrfj9IZhD5BZb2zLLJo0fCSe5WLY5IpBo/Qu7Q2iJiHhxWDVoXz+hi6N8Fp6HH qvcMC4hqe7mDlcHHg8Ry27lM7dM2QrjS9chbriRrr5tp1/xv5FVo6/OAhmNgEucg oouv1DvXP2Ogg5yGSPG8rZOPVooTXZeB1MmwWnbqCJUEUmINQGskDkQrwHJSMHg7 4SQhpIYhvzz3bylUDKmGp/tAkwqB6HX33YfVnfEv29XKDWpG+LCW6AJHb6s8ZAta 3koeiTuuOH6ix3QvuhpYK2VXeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMs6eJIY uyz8iENRR9HSQ4wllg9WMB8GA1UdIwQYMBaAFFNrkbF7bhuxY4yDWKD6XqXQ6++3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzRC8yMzIzRkQ4MDAw RDcxMUVFOTNDQjBGN0VDNEY5QUUwMi9VMnVSc1h0dUc3RmpqSU5Zb1BwZXBkRHI3 N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1UydVJzWHR1RzdGampJTllvUHBlcGREcjc3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzRC8yMzIzRkQ4MDAwRDcxMUVFOTNDQjBGN0VDNEY5QUUwMi9VMnVSc1h0dUc3 RmpqSU5Zb1BwZXBkRHI3N2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ9JDU7wYNKhQOJRSYtxQeAUiYvEEXgdlsQ31xxTw3X5NcP/26+El7 9ib2JoCL256XGwNvhmnnO3Av0qZkYE3KzUTFyocsGiFIbI4uz4QebYQQYJ6BSBak eBvFZvl28byxvac0W5kurmHKHqV7ZlrSMtbnfauohNJkE+hpvZYbcOFGFOL/rV48 i7KRYNeLHrsRxaiIbmCdPW5P5xRbsAPejJt4SgTQ/QXRK1rqM9juQj29w1bY3xwU aRfoGKZdcCyS3+7peo1AxozC899Jk8PiUBnqkrW52zStqviGPRLNwsYADtWrmmub VFa+/Txvl/EkquXEMx8fFLeL3ShyYpre -----END CERTIFICATE-----Generated at Fri May 31 04:53:55 2024 by rpki-client on console-fra.rpki-client.org