$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft File: uhYFabkV4kxq5sJIlNBPnUo5FpI.mft (raw, json) Hash identifier: b4Y+zVIcV7+41ja4lH75HFU8a68pc43Hn8ijLCMJMyA= Subject key identifier: 3D:8D:F6:F6:16:80:26:BB:1E:15:AD:54:D5:FA:7C:85:40:76:92:C2 Authority key identifier: BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92 Certificate issuer: /CN=A912CDCB/serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692 Certificate serial: 0410 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft Manifest number: 040D Signing time: Sun 19 May 2024 02:06:27 +0000 Manifest this update: Sun 19 May 2024 02:06:27 +0000 Manifest next update: Sun 26 May 2024 02:06:27 +0000 Files and hashes: 1: uhYFabkV4kxq5sJIlNBPnUo5FpI.crl (hash: piIU/bqoyE49zlyqcKgnbhky5I2GK96K0dO+sgpSN2U=) 2: DAF98AAA20F111EC89E7D668C4F9AE02.roa (hash: jql66WIeHU5PdQKz58WCo9HnFbZyJdv+XlH/V28o6kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1040 (0x410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDCB/serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692 Validity Not Before: May 19 02:06:27 2024 GMT Not After : May 26 02:06:27 2024 GMT Subject: CN=66495ea3-635f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:ec:45:92:b3:78:43:32:b8:18:d1:a3:17: af:13:6b:80:81:ed:6f:ca:fd:2b:c5:ee:0a:92:2b: 6b:53:74:6d:e0:60:42:ce:60:4f:fe:ed:40:2f:6c: f5:17:08:cd:77:81:6c:e0:ed:45:a1:e1:27:ff:d9: da:3a:bd:f4:4b:e2:44:ea:14:5a:1d:09:3a:40:95: e7:17:ab:f1:6d:56:43:1e:1f:5d:eb:3a:04:9d:5c: 4c:ee:41:24:f5:58:03:a7:97:b1:8e:4c:3e:2b:6c: f7:b4:df:52:a7:9e:0d:28:02:ab:fc:ef:7f:c7:9e: cc:f5:00:15:4d:96:08:e9:11:04:44:57:dd:db:50: ce:b6:dc:11:64:5d:9c:e2:6d:0e:3a:ba:3b:20:ff: b7:32:00:44:b3:ab:b2:d4:6b:2f:49:ce:7d:3c:c4: df:44:3f:a7:fc:53:2d:a7:a0:36:f1:ed:b0:f9:98: 1a:cc:fe:92:8b:08:fb:94:fe:3b:e1:31:93:ed:64: 90:8d:86:b5:42:c3:26:cd:48:8c:36:3e:7b:19:8e: f1:56:6b:09:a0:dd:59:1e:ce:55:48:e1:51:4a:1b: c2:92:2e:7c:fc:d2:ad:4e:f8:42:0e:39:ab:cc:94: ef:94:47:7e:6e:10:93:e4:9f:7c:b6:14:9c:e2:3a: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8D:F6:F6:16:80:26:BB:1E:15:AD:54:D5:FA:7C:85:40:76:92:C2 X509v3 Authority Key Identifier: keyid:BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:6b:43:89:55:d8:2d:c5:79:d3:71:2f:97:df:27:39:f2:b3: 32:bf:1d:85:61:17:b3:59:0f:f4:5d:89:d3:9b:83:51:3f:07: 83:21:5b:ef:eb:82:34:b7:0a:28:d5:06:3b:cc:62:93:01:21: 2f:e9:cd:ed:51:a1:6d:df:6e:b0:71:b8:47:0a:31:6f:1a:19: 92:a3:09:42:49:6f:86:f4:6c:8d:8e:05:a1:2d:12:6a:da:10: 55:90:da:65:36:4d:dd:08:e4:96:d5:6b:e7:53:06:e5:03:ae: 15:81:7b:e0:f7:07:b4:77:33:8f:22:3d:17:02:4b:6a:7c:22: d5:48:13:31:43:af:c6:02:8d:25:20:90:2d:f7:27:d7:e2:d8: 10:de:d0:bc:b0:05:93:5d:f8:4f:d8:e1:60:7d:02:0a:e0:21: eb:69:dd:1b:9f:82:23:63:56:f4:ff:1a:4a:1e:8b:e4:68:f1: 3e:c2:cf:30:85:aa:07:42:2e:43:be:69:99:4a:cc:9c:ba:1e: 00:ae:26:5c:8a:66:ef:40:a5:42:5a:0e:34:3a:51:d4:cc:91: e3:07:ad:33:84:89:4f:cf:c0:db:37:f8:ae:9a:ff:c8:33:54: d4:f5:7f:dc:7f:5e:0c:6f:4b:05:48:fe:fe:f0:6d:bc:3a:5d: b4:7e:34:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQ0IxMTAvBgNVBAUTKEJBMTYwNTY5QjkxNUUyNEM2QUU2QzI0ODk0RDA0RjlE NEEzOTE2OTIwHhcNMjQwNTE5MDIwNjI3WhcNMjQwNTI2MDIwNjI3WjAYMRYwFAYD VQQDEw02NjQ5NWVhMy02MzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbLsRZKzeEMyuBjRoxevE2uAge1vyv0rxe4KkitrU3Rt4GBCzmBP/u1AL2z1 FwjNd4Fs4O1FoeEn/9naOr30S+JE6hRaHQk6QJXnF6vxbVZDHh9d6zoEnVxM7kEk 9VgDp5exjkw+K2z3tN9Sp54NKAKr/O9/x57M9QAVTZYI6REERFfd21DOttwRZF2c 4m0OOro7IP+3MgBEs6uy1GsvSc59PMTfRD+n/FMtp6A28e2w+ZgazP6Siwj7lP47 4TGT7WSQjYa1QsMmzUiMNj57GY7xVmsJoN1ZHs5VSOFRShvCki58/NKtTvhCDjmr zJTvlEd+bhCT5J98thSc4jpbawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2N9vYW gCa7HhWtVNX6fIVAdpLCMB8GA1UdIwQYMBaAFLoWBWm5FeJMaubCSJTQT51KORaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDQi84QTgyMDk0NDIw RUMxMUVDOUQ1RDMxM0JDNEY5QUUwMi91aFlGYWJrVjRreHE1c0pJbE5CUG5VbzVG cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VoWUZhYmtWNGt4cTVzSklsTkJQblVvNUZwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDQi84QTgyMDk0NDIwRUMxMUVDOUQ1RDMxM0JDNEY5QUUwMi91aFlGYWJrVjRr eHE1c0pJbE5CUG5VbzVGcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZa0OJVdgtxXnTcS+X3yc58rMyvx2FYRezWQ/0XYnTm4NRPweDIVvv 64I0twoo1QY7zGKTASEv6c3tUaFt326wcbhHCjFvGhmSowlCSW+G9GyNjgWhLRJq 2hBVkNplNk3dCOSW1WvnUwblA64VgXvg9we0dzOPIj0XAktqfCLVSBMxQ6/GAo0l IJAt9yfX4tgQ3tC8sAWTXfhP2OFgfQIK4CHrad0bn4IjY1b0/xpKHovkaPE+ws8w haoHQi5DvmmZSsycuh4AriZcimbvQKVCWg40OlHUzJHjB60zhIlPz8DbN/iumv/I M1TU9X/cf14Mb0sFSP7+8G28Ol20fjRt -----END CERTIFICATE-----Generated at Sun May 19 02:39:35 2024 by rpki-client on console-fra.rpki-client.org