$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft File: UHztrU5Y_M0K4JOTmGWG21g_B6I.mft (raw, json) Hash identifier: EFxFXHEv0Kuc6HiImjP1gx/aJAe0bvu08RtHqTh8suE= Subject key identifier: CD:AA:28:5A:4F:C0:AB:FA:3F:B8:62:40:B0:D2:36:63:24:28:ED:79 Authority key identifier: 50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 Certificate issuer: /CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Certificate serial: 0AE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft Manifest number: 0AE9 Signing time: Sat 18 May 2024 20:00:36 +0000 Manifest this update: Sat 18 May 2024 20:00:36 +0000 Manifest next update: Sat 25 May 2024 20:00:36 +0000 Files and hashes: 1: UHztrU5Y_M0K4JOTmGWG21g_B6I.crl (hash: Ey2FU9OTURxwU4WWtrUVXyA1OgICwfJIjmz68HAsSEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2793 (0xae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FD/serialNumber=507CEDAD4E58FCCD0AE09393986586DB583F07A2 Validity Not Before: May 18 20:00:36 2024 GMT Not After : May 25 20:00:36 2024 GMT Subject: CN=664908e4-552e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bd:33:55:e4:2e:e3:5c:33:1c:e3:71:c0:80: 18:93:09:3e:14:da:c1:dc:ee:64:3b:2b:e5:0c:f4: c8:f3:04:9b:c7:cf:98:36:c5:62:a0:72:0f:7f:b4: 6b:a6:6f:c0:6d:1d:79:cc:cf:4c:69:a1:e7:42:60: 85:94:c1:45:63:f0:46:ed:7c:a3:9b:af:f4:b8:22: ed:a1:61:80:5a:fb:24:23:b0:b4:aa:1a:7d:d1:f9: 69:4a:f1:2c:d4:b9:5e:30:88:e0:63:81:6f:ac:2e: d9:46:8e:b8:05:86:7e:fa:19:32:e9:94:75:fb:b3: c3:cc:39:75:bd:f8:0d:76:e1:e2:2e:a8:50:01:00: 75:e6:f4:f8:a2:02:37:36:8f:15:05:b7:a1:31:7a: 61:01:c0:37:5f:01:aa:27:26:52:18:72:1f:e2:d6: 95:fd:6e:67:a2:09:bf:16:d5:bc:9d:3a:01:9c:59: b2:48:ff:b6:58:c1:e2:88:b5:bf:85:d5:ad:37:57: 23:aa:95:ad:a7:5f:8f:da:2b:4e:69:f6:05:06:32: 2e:fe:74:79:24:b3:63:45:c7:d8:d2:a6:dd:78:f5: 10:70:de:d1:4f:44:40:00:c8:ef:78:1d:dc:05:21: bf:a9:b6:8f:1c:d9:c8:d2:10:7a:37:3c:13:22:06: db:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AA:28:5A:4F:C0:AB:FA:3F:B8:62:40:B0:D2:36:63:24:28:ED:79 X509v3 Authority Key Identifier: keyid:50:7C:ED:AD:4E:58:FC:CD:0A:E0:93:93:98:65:86:DB:58:3F:07:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHztrU5Y_M0K4JOTmGWG21g_B6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FD/674CE2F0216111EA83493D4FC4F9AE02/UHztrU5Y_M0K4JOTmGWG21g_B6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:eb:55:64:cb:e3:51:fc:88:af:a3:c9:5b:89:30:5b:fb:09: fc:09:02:c3:79:f0:fc:86:ea:1b:fd:2c:b1:55:e9:5b:e4:d6: a8:0b:09:10:36:db:7e:e4:31:25:ed:51:b5:fd:a1:b6:05:8a: 1a:91:29:5b:4e:ab:d7:07:c3:bd:7f:4a:b7:df:aa:42:8d:09: 68:aa:95:00:e3:8d:29:74:f3:f5:89:e8:2f:8c:aa:fe:2e:46: 40:fb:ad:52:0d:da:c2:45:1d:97:29:51:22:21:9d:03:79:28: 1c:26:eb:ca:cc:2d:e0:a2:c1:7b:92:ac:4d:65:be:12:e1:fc: df:e0:1e:8f:1c:16:87:6d:57:cd:c9:e9:54:a3:ea:09:a0:58: a4:1b:26:c2:49:2c:39:ad:f2:4e:d7:39:ed:f4:d4:95:74:8d: fe:ef:1b:ed:2f:4c:1c:2b:4b:ed:a1:8c:b7:55:c9:6d:7d:d7: 80:d8:ed:12:a6:bb:65:48:4d:a2:e2:71:43:5f:9e:aa:3f:54: 1e:ba:41:b0:3d:05:fc:94:cb:eb:32:bc:7d:d3:1d:27:cb:b8: 3e:d2:6c:2d:93:49:0c:8b:a5:6e:75:8a:e2:0a:b7:f3:bd:80: b7:ba:bf:26:ba:5b:e3:f9:b8:9b:fe:59:c9:07:7e:ba:c2:9d: f3:84:fa:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkQxMTAvBgNVBAUTKDUwN0NFREFENEU1OEZDQ0QwQUUwOTM5Mzk4NjU4NkRC NTgzRjA3QTIwHhcNMjQwNTE4MjAwMDM2WhcNMjQwNTI1MjAwMDM2WjAYMRYwFAYD VQQDEw02NjQ5MDhlNC01NTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv70zVeQu41wzHONxwIAYkwk+FNrB3O5kOyvlDPTI8wSbx8+YNsVioHIPf7Rr pm/AbR15zM9MaaHnQmCFlMFFY/BG7Xyjm6/0uCLtoWGAWvskI7C0qhp90flpSvEs 1LleMIjgY4FvrC7ZRo64BYZ++hky6ZR1+7PDzDl1vfgNduHiLqhQAQB15vT4ogI3 No8VBbehMXphAcA3XwGqJyZSGHIf4taV/W5nogm/FtW8nToBnFmySP+2WMHiiLW/ hdWtN1cjqpWtp1+P2itOafYFBjIu/nR5JLNjRcfY0qbdePUQcN7RT0RAAMjveB3c BSG/qbaPHNnI0hB6NzwTIgbbbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2qKFpP wKv6P7hiQLDSNmMkKO15MB8GA1UdIwQYMBaAFFB87a1OWPzNCuCTk5hlhttYPwei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGRC82NzRDRTJGMDIx NjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9NMEs0Sk9UbUdXRzIxZ19C NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIenRyVTVZX00wSzRKT1RtR1dHMjFnX0I2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGRC82NzRDRTJGMDIxNjExMUVBODM0OTNENEZDNEY5QUUwMi9VSHp0clU1WV9N MEs0Sk9UbUdXRzIxZ19CNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb61Vky+NR/Iivo8lbiTBb+wn8CQLDefD8huob/SyxVelb5NaoCwkQ Ntt+5DEl7VG1/aG2BYoakSlbTqvXB8O9f0q336pCjQloqpUA440pdPP1iegvjKr+ LkZA+61SDdrCRR2XKVEiIZ0DeSgcJuvKzC3gosF7kqxNZb4S4fzf4B6PHBaHbVfN yelUo+oJoFikGybCSSw5rfJO1znt9NSVdI3+7xvtL0wcK0vtoYy3VcltfdeA2O0S prtlSE2i4nFDX56qP1QeukGwPQX8lMvrMrx90x0ny7g+0mwtk0kMi6VudYriCrfz vYC3ur8mulvj+bib/lnJB366wp3zhPpb -----END CERTIFICATE-----Generated at Sat May 18 21:31:26 2024 by rpki-client on console-ams.rpki-client.org