$ rpki-client -vvf rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft File: UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft (raw, json) Hash identifier: RBpyYKwY+/lJHGFyTIsPMnyIkm6c1tbd2EKfxbciAuA= Subject key identifier: A8:66:9E:DF:FD:EB:8D:BE:81:D6:C6:73:1C:38:A8:5A:27:5B:8E:15 Authority key identifier: 50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 Certificate issuer: /CN=A9130803/serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Certificate serial: 0B2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft Manifest number: 0B24 Signing time: Sat 18 May 2024 19:49:14 +0000 Manifest this update: Sat 18 May 2024 19:49:13 +0000 Manifest next update: Sat 25 May 2024 19:49:13 +0000 Files and hashes: 1: UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl (hash: xSWD6M27/FtpKW7t7VKTHndluZ4rQb1qE+F9jpl5UTo=) 2: 8DC4FE4C175F11EAB3DB1F61C4F9AE02.roa (hash: xQYqLjvOPbL1Bc/N9mw4kS03eD5IMDjoeNoamZNcGcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2858 (0xb2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130803/serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Validity Not Before: May 18 19:49:13 2024 GMT Not After : May 25 19:49:13 2024 GMT Subject: CN=66490639-ac2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:81:26:5d:04:23:ed:e1:45:c6:2d:ec:74: bb:12:d6:d0:9e:d1:81:c8:43:9e:60:e0:9e:e9:f7: 37:0d:be:f0:ff:5c:6e:72:4f:a0:a4:74:31:7c:b4: f5:3e:0b:71:ba:4c:84:04:c8:74:fe:50:da:2e:42: 23:99:0d:22:26:be:94:54:64:15:80:b7:56:a4:61: ae:34:a3:6e:81:1c:07:8c:b8:6c:3c:16:63:0f:c5: 24:59:04:ce:ed:a0:71:46:63:f3:e2:fb:8f:9a:9a: e7:35:7e:53:cc:24:3b:a9:2d:0d:9f:e7:22:d7:b0: 7d:d4:a8:44:be:c6:ea:56:f1:24:cb:57:be:db:67: 0e:fd:fb:48:27:76:e2:68:70:0a:89:d5:b1:53:b5: c3:66:d4:54:bf:ac:d1:cf:a9:55:f2:b6:ae:28:50: 1e:dc:2c:85:cf:12:6a:27:8e:d6:43:f6:15:50:99: 70:c3:7b:97:41:69:56:fb:ac:90:fd:95:ec:01:f4: 0e:49:ae:aa:52:b5:44:07:e7:d8:5c:55:0f:f1:0f: c1:c6:f4:ca:95:37:a3:46:87:df:bb:f9:cd:a2:b8: 87:63:0e:2d:41:c0:5c:a7:f8:e0:5f:6f:fe:b5:6a: 81:f0:1b:71:ae:d3:51:b7:23:74:9b:40:1a:6c:57: 97:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:66:9E:DF:FD:EB:8D:BE:81:D6:C6:73:1C:38:A8:5A:27:5B:8E:15 X509v3 Authority Key Identifier: keyid:50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:a2:f9:4b:67:a9:7b:ad:80:92:9b:62:61:d6:05:4a:52:33: 34:d1:e8:5a:1e:87:13:fe:e0:c6:ad:db:8a:f0:91:d0:ab:40: 08:da:b0:fd:8a:1e:8e:a8:d8:1d:23:80:fb:31:1f:f9:72:f9: b3:8d:ce:32:cc:ff:81:db:32:9e:ee:5e:a0:da:d6:71:26:ab: a7:80:c9:11:9f:b3:61:ac:ae:96:a6:24:51:8a:15:53:c3:c9: a3:7a:c2:f7:16:ec:34:0e:78:02:64:e5:d0:5e:43:6b:bc:e7: 9f:06:d7:ab:44:57:cc:ab:84:8c:71:ed:93:5f:09:3f:44:76: 78:b9:e2:90:d0:89:3a:76:3c:8e:e1:e0:f2:0d:5d:c4:f3:f9: 8a:c7:3b:31:ac:a5:91:5c:6e:fe:c8:2d:b0:7b:03:4a:25:df: 13:80:0f:a1:fe:9a:82:d4:73:cc:fe:7f:a4:32:7a:4a:a4:b8: de:cc:91:83:f2:4a:2a:f0:16:72:d8:43:79:7b:68:aa:78:ac: ef:a9:7a:d5:20:88:9a:55:da:26:0a:8a:3d:af:f1:72:2b:9d: 7b:6a:28:06:31:d5:10:1a:94:9a:5b:9d:34:30:e8:1f:03:46: f7:55:5d:1d:5c:4d:cc:cc:a0:c1:7e:eb:67:83:d7:ba:20:1a: 5d:49:9b:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4MDMxMTAvBgNVBAUTKDUwN0EwRUFGNDc1MUFDQjUyQzJDN0ZCRjk4MUQxMUJD RTgzNThCQTEwHhcNMjQwNTE4MTk0OTEzWhcNMjQwNTI1MTk0OTEzWjAYMRYwFAYD VQQDEw02NjQ5MDYzOS1hYzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2+BJl0EI+3hRcYt7HS7EtbQntGByEOeYOCe6fc3Db7w/1xuck+gpHQxfLT1 PgtxukyEBMh0/lDaLkIjmQ0iJr6UVGQVgLdWpGGuNKNugRwHjLhsPBZjD8UkWQTO 7aBxRmPz4vuPmprnNX5TzCQ7qS0Nn+ci17B91KhEvsbqVvEky1e+22cO/ftIJ3bi aHAKidWxU7XDZtRUv6zRz6lV8rauKFAe3CyFzxJqJ47WQ/YVUJlww3uXQWlW+6yQ /ZXsAfQOSa6qUrVEB+fYXFUP8Q/BxvTKlTejRoffu/nNoriHYw4tQcBcp/jgX2/+ tWqB8BtxrtNRtyN0m0AabFeXuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhmnt/9 642+gdbGcxw4qFonW44VMB8GA1UdIwQYMBaAFFB6Dq9HUay1LCx/v5gdEbzoNYuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDgwMy9EODZBQkYwMDE3 NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJMVXNMSC1fbUIwUnZPZzFp NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIb09yMGRSckxVc0xILV9tQjBSdk9nMWk2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDgwMy9EODZBQkYwMDE3NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJM VXNMSC1fbUIwUnZPZzFpNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTovlLZ6l7rYCSm2Jh1gVKUjM00ehaHocT/uDGrduK8JHQq0AI2rD9 ih6OqNgdI4D7MR/5cvmzjc4yzP+B2zKe7l6g2tZxJqungMkRn7NhrK6WpiRRihVT w8mjesL3Fuw0DngCZOXQXkNrvOefBterRFfMq4SMce2TXwk/RHZ4ueKQ0Ik6djyO 4eDyDV3E8/mKxzsxrKWRXG7+yC2wewNKJd8TgA+h/pqC1HPM/n+kMnpKpLjezJGD 8koq8BZy2EN5e2iqeKzvqXrVIIiaVdomCoo9r/FyK517aigGMdUQGpSaW500MOgf A0b3VV0dXE3MzKDBfutng9e6IBpdSZt2 -----END CERTIFICATE-----Generated at Sat May 18 20:48:17 2024 by rpki-client on console-fra.rpki-client.org