$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft File: uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json) Hash identifier: 4gAhAWgCjkwN4YhruCVYJjum3LwPLSFldhXLXhWqfLs= Subject key identifier: F2:20:B9:EF:91:DB:98:26:47:79:20:17:9D:C0:00:84:4C:95:08:82 Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 Certificate issuer: /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Certificate serial: 0F27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft Manifest number: 177A Signing time: Sat 18 May 2024 18:12:26 +0000 Manifest this update: Sat 18 May 2024 18:12:25 +0000 Manifest next update: Sat 25 May 2024 18:12:25 +0000 Files and hashes: 1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: njb45sazzcqULBvIHgcQWhSS2adc4rHVBQaHMZCtp5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3879 (0xf27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Validity Not Before: May 18 18:12:25 2024 GMT Not After : May 25 18:12:25 2024 GMT Subject: CN=6648ef8a-f9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b8:45:e7:0b:81:6a:eb:af:c4:67:42:85:40: ee:3d:0d:96:ec:72:12:63:c7:a5:a7:7b:af:26:a5: 4f:85:54:4d:01:d3:49:8d:08:83:0b:09:3b:18:52: cf:e9:87:8a:cc:79:ef:fa:c9:77:00:24:f0:71:e7: 7e:b0:41:83:eb:9c:c6:2d:92:91:7a:1d:ca:79:38: ea:e7:02:9a:4f:5a:b5:da:3a:04:c0:ad:25:e0:c6: e5:ea:70:5d:2b:a6:cc:e6:67:ef:a8:96:36:33:34: 79:41:a7:f5:98:2b:29:cd:a1:ae:94:2f:3c:68:26: 56:54:32:83:ac:6f:e8:6b:2f:8c:ab:28:fb:3c:db: 7c:c7:a7:b5:b7:bb:a5:8e:89:24:21:d0:8d:63:95: 0c:10:e7:23:c4:a5:a9:c8:c7:53:be:08:35:d5:3b: c0:51:10:de:e7:ff:4f:b8:8c:49:3d:58:68:61:f4: 39:fb:18:07:4b:0b:0a:46:f5:78:44:2f:04:10:11: ae:17:10:41:9d:e3:af:ea:e6:6e:b4:5e:a9:da:cc: d6:5f:66:c4:d5:92:81:de:09:71:7e:0c:8b:ef:5e: 14:d5:74:c6:60:54:8d:38:18:ae:7c:e3:c8:06:a3: 45:f8:97:f7:7f:f2:b5:e1:9f:6e:2e:65:42:35:86: 4d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:20:B9:EF:91:DB:98:26:47:79:20:17:9D:C0:00:84:4C:95:08:82 X509v3 Authority Key Identifier: keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:c3:9d:fb:99:e7:56:09:b3:c3:e2:51:e0:17:8a:d3:56:3a: 38:bc:d7:a1:3b:65:57:26:23:92:79:df:ee:b5:ff:f4:64:75: d5:42:eb:1f:af:14:b4:01:f9:c0:b2:1a:71:42:ee:b4:d1:94: 26:e9:93:6d:0c:e2:ec:42:a5:df:7c:cd:03:2e:72:47:33:bb: 28:e4:3c:90:73:02:3f:2a:a0:ee:53:e0:04:0e:f5:97:e5:9b: 2c:7a:23:66:37:07:e9:51:d7:18:5c:93:f5:bb:79:78:d2:9c: df:c4:3a:d2:ae:73:94:4c:10:dc:f6:42:17:03:0f:69:72:6b: 52:b0:f7:3a:e8:a5:72:9f:50:73:a5:0d:87:92:11:cb:48:4f: fa:a4:49:7e:0c:41:9b:27:6d:0d:aa:ec:93:61:b9:5f:04:2f: cc:91:14:ae:bf:36:af:50:9d:ba:a2:a6:7b:3c:0e:61:1b:59: e1:96:1e:5b:ff:0e:c0:b5:00:4d:28:bb:a9:ed:14:ac:24:c3: 1d:2f:e8:9d:a2:b9:f9:8a:18:a5:ae:03:60:11:96:6e:88:60: 23:3c:65:2a:aa:74:ac:8e:54:c3:f6:21:a5:15:29:22:62:83: ff:f1:62:d6:70:a3:48:40:18:02:a2:40:74:a8:b7:f0:c2:9c: 70:f0:6e:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF Q0IxMUZERDEwHhcNMjQwNTE4MTgxMjI1WhcNMjQwNTI1MTgxMjI1WjAYMRYwFAYD VQQDEw02NjQ4ZWY4YS1mOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobhF5wuBauuvxGdChUDuPQ2W7HISY8elp3uvJqVPhVRNAdNJjQiDCwk7GFLP 6YeKzHnv+sl3ACTwced+sEGD65zGLZKReh3KeTjq5wKaT1q12joEwK0l4Mbl6nBd K6bM5mfvqJY2MzR5Qaf1mCspzaGulC88aCZWVDKDrG/oay+Mqyj7PNt8x6e1t7ul jokkIdCNY5UMEOcjxKWpyMdTvgg11TvAURDe5/9PuIxJPVhoYfQ5+xgHSwsKRvV4 RC8EEBGuFxBBneOv6uZutF6p2szWX2bE1ZKB3glxfgyL714U1XTGYFSNOBiufOPI BqNF+Jf3f/K14Z9uLmVCNYZNiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIgue+R 25gmR3kgF53AAIRMlQiCMB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj dG14eXU1X0tjNzdzc1JfZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJw537medWCbPD4lHgF4rTVjo4vNehO2VXJiOSed/utf/0ZHXVQusf rxS0AfnAshpxQu600ZQm6ZNtDOLsQqXffM0DLnJHM7so5DyQcwI/KqDuU+AEDvWX 5ZsseiNmNwfpUdcYXJP1u3l40pzfxDrSrnOUTBDc9kIXAw9pcmtSsPc66KVyn1Bz pQ2HkhHLSE/6pEl+DEGbJ20NquyTYblfBC/MkRSuvzavUJ26oqZ7PA5hG1nhlh5b /w7AtQBNKLup7RSsJMMdL+idorn5ihilrgNgEZZuiGAjPGUqqnSsjlTD9iGlFSki YoP/8WLWcKNIQBgCokB0qLfwwpxw8G4A -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org