$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft File: u9oqUrUEjxqKq79cJBcmASd8svM.mft (raw, json) Hash identifier: LuXw2rTA0EquzEp9dqQjPASWxZW4G4Kr+5uySmVF9PM= Subject key identifier: A7:FE:81:24:FE:3A:93:AE:47:AC:FA:3A:17:59:A1:61:33:65:04:35 Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft Manifest number: 31 Signing time: Sun 19 May 2024 08:23:35 +0000 Manifest this update: Sun 19 May 2024 08:23:34 +0000 Manifest next update: Sun 26 May 2024 08:23:34 +0000 Files and hashes: 1: u9oqUrUEjxqKq79cJBcmASd8svM.crl (hash: nOId5sfkdY64VNrxzWDLeQcYdtpx/H2IvRBXLWEjwZE=) 2: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (hash: Zf2aGirHutcUGM8OKVSuTfZK9xWSl0wXe0Qvn8CL4Y4=) 3: 6133230CEB3311EEA75DE77DC4F9AE02.roa (hash: Ro0WjrfgWaHXMYveHr1ptLiLsehp8t34UtftOvsWgq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Validity Not Before: May 19 08:23:34 2024 GMT Not After : May 26 08:23:34 2024 GMT Subject: CN=6649b706-b1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0b:93:32:e2:7e:a6:a3:b7:d1:64:4d:cf:e6: 77:1f:1d:72:83:7a:23:e6:73:f0:73:51:36:82:2e: e4:44:a1:d4:e6:eb:a5:6a:9f:c2:1b:ae:64:d3:41: dc:22:a9:c6:7e:9c:d6:29:6c:b0:5f:1d:6f:a7:e3: c4:8d:1f:11:d5:73:2c:dc:56:dd:76:b8:45:86:98: f7:3e:f5:19:08:3e:0b:81:1b:67:b2:39:c1:8b:ce: 75:3d:ef:72:31:27:73:35:1f:61:db:49:d1:57:c7: 1f:37:8b:38:3f:0d:34:e1:5a:87:2e:fc:c4:d5:f4: 00:60:28:37:54:36:f9:21:dc:80:e3:b6:73:67:54: 4f:47:1c:35:14:c7:5b:9d:22:bd:9f:fc:f2:9b:7b: c1:b5:f4:34:3a:09:81:27:17:a5:5d:d6:87:40:f1: c6:55:6b:10:c4:66:b0:ed:f7:bf:70:cc:8b:0e:14: 12:b2:0c:63:b5:8a:30:c5:8a:6b:0b:0a:61:ed:73: c5:73:2e:b7:18:30:0c:9f:37:2f:09:cc:7e:ba:ab: af:96:de:3c:c6:c7:05:e4:2c:36:8c:3a:a6:f9:78: 1c:5f:6c:9e:98:6e:4c:48:34:3c:55:56:c3:40:f9: f3:bd:af:63:a6:cb:b7:2e:c9:d3:42:90:f6:8f:26: 55:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FE:81:24:FE:3A:93:AE:47:AC:FA:3A:17:59:A1:61:33:65:04:35 X509v3 Authority Key Identifier: keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:9e:1e:7e:00:8e:02:a6:04:cd:be:83:57:8c:e6:4d:9d:5f: c1:e8:a9:b9:d5:88:13:a9:2b:2e:ab:89:35:fb:7d:c5:fb:d4: 96:c7:ab:8d:43:38:cf:cd:8f:e2:13:b1:9b:55:15:f6:67:1d: 15:88:ed:be:56:ea:7b:8f:4d:7c:8e:40:c5:86:f4:e2:8a:81: 9b:e1:a1:4e:8c:6b:29:cb:1a:c4:aa:08:c2:01:94:7b:3b:fc: 79:e3:a3:46:1f:ac:00:8a:15:34:61:cf:4e:c9:07:75:8b:38: 94:4d:94:7f:d8:13:e5:52:01:ca:01:a8:29:9d:29:e2:1e:04: 9a:88:bf:28:b9:6f:57:e7:f8:4b:f8:57:9d:5c:31:ce:b5:3b: 97:c5:41:36:9d:64:64:27:fe:95:c6:05:4a:5f:40:8e:20:4d: de:a6:bc:99:59:41:e3:b5:ae:21:fe:85:1d:b1:77:a6:38:21: 76:0d:d6:c5:42:71:1a:39:99:cb:ea:de:d7:f9:66:1c:a6:4f: 27:c8:dc:a4:90:4b:ed:ff:a6:19:a9:d7:b6:8b:5f:df:00:3c: 2d:17:ff:14:10:a6:bb:c1:da:9f:93:93:13:3c:98:b3:e9:17: dc:95:4b:da:df:38:12:49:3e:cf:ad:39:48:b4:27:9d:4d:1c: 26:3b:c6:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QkE4MjExMC8GA1UEBRMoQkJEQTJBNTJCNTA0OEYxQThBQUJCRjVDMjQxNzI2MDEy NzdDQjJGMzAeFw0yNDA1MTkwODIzMzRaFw0yNDA1MjYwODIzMzRaMBgxFjAUBgNV BAMTDTY2NDliNzA2LWIxYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcC5My4n6mo7fRZE3P5ncfHXKDeiPmc/BzUTaCLuREodTm66Vqn8IbrmTTQdwi qcZ+nNYpbLBfHW+n48SNHxHVcyzcVt12uEWGmPc+9RkIPguBG2eyOcGLznU973Ix J3M1H2HbSdFXxx83izg/DTThWocu/MTV9ABgKDdUNvkh3IDjtnNnVE9HHDUUx1ud Ir2f/PKbe8G19DQ6CYEnF6Vd1odA8cZVaxDEZrDt979wzIsOFBKyDGO1ijDFimsL CmHtc8VzLrcYMAyfNy8JzH66q6+W3jzGxwXkLDaMOqb5eBxfbJ6YbkxINDxVVsNA +fO9r2Omy7cuydNCkPaPJlXRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp/6BJP46 k65HrPo6F1mhYTNlBDUwHwYDVR0jBBgwFoAUu9oqUrUEjxqKq79cJBcmASd8svMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCQTgyL0YyNjAxNEU4Q0U1 QTExRUU4QzNCRDAzQUM0RjlBRTAyL3U5b3FVclVFanhxS3E3OWNKQmNtQVNkOHN2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdTlvcVVyVUVqeHFLcTc5Y0pCY21BU2Q4c3ZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC QTgyL0YyNjAxNEU4Q0U1QTExRUU4QzNCRDAzQUM0RjlBRTAyL3U5b3FVclVFanhx S3E3OWNKQmNtQVNkOHN2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHOeHn4AjgKmBM2+g1eM5k2dX8HoqbnViBOpKy6riTX7fcX71JbHq41D OM/Nj+ITsZtVFfZnHRWI7b5W6nuPTXyOQMWG9OKKgZvhoU6MaynLGsSqCMIBlHs7 /Hnjo0YfrACKFTRhz07JB3WLOJRNlH/YE+VSAcoBqCmdKeIeBJqIvyi5b1fn+Ev4 V51cMc61O5fFQTadZGQn/pXGBUpfQI4gTd6mvJlZQeO1riH+hR2xd6Y4IXYN1sVC cRo5mcvq3tf5ZhymTyfI3KSQS+3/phmp17aLX98APC0X/xQQprvB2p+TkxM8mLPp F9yVS9rfOBJJPs+tOUi0J51NHCY7xtE= -----END CERTIFICATE-----Generated at Sun May 19 09:04:12 2024 by rpki-client on console-fra.rpki-client.org