$ rpki-client -vvf rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft File: uXp_AVpzYHTfOERcmAdDeCGdKZU.mft (raw, json) Hash identifier: DgbXARgUd0j9DfLcg8lEI6IKeK9m/tia2D77DtnK3uk= Subject key identifier: 40:89:6A:A6:67:F1:9D:00:E8:DC:12:51:1D:A2:BE:53:53:55:0E:8E Authority key identifier: B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 Certificate issuer: /CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft Manifest number: 43 Signing time: Fri 31 May 2024 09:06:15 +0000 Manifest this update: Fri 31 May 2024 09:06:15 +0000 Manifest next update: Fri 07 Jun 2024 09:06:15 +0000 Files and hashes: 1: uXp_AVpzYHTfOERcmAdDeCGdKZU.crl (hash: gLMVOLoJFAvAqVDvFkHQqgtaeaT2NT53v31EBECswmc=) 2: BAB65090BD7811EEB634A117C4F9AE02.roa (hash: DFZxkNn6nNZHERWm5f3XteRUaBE12w803zvTM2ryGo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995 Validity Not Before: May 31 09:06:15 2024 GMT Not After : Jun 7 09:06:15 2024 GMT Subject: CN=66599307-2b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:06:6f:62:ca:fb:c7:29:4c:0f:ac:f9:9a:61: 11:86:bc:2a:19:32:36:d5:2a:c6:43:06:3b:b7:54: af:26:54:cf:c9:ac:3f:57:67:99:f7:c4:d2:86:66: 1b:74:9b:c8:21:b1:a5:bb:62:0c:a1:75:34:27:c0: 9c:e7:bf:cd:26:9e:f3:cc:92:94:6d:b3:9b:72:f1: b6:70:72:46:f3:c3:28:88:8e:1e:d4:c6:ac:d7:fb: 42:0a:c6:c9:3d:75:44:b4:ba:54:0c:c9:0d:64:8d: 39:48:1e:4c:27:65:a6:38:10:3e:73:14:70:7c:4d: c5:62:2f:1a:de:af:c7:e1:e5:6a:85:68:c3:0d:e3: fb:10:a5:4b:76:78:87:63:6a:7c:4f:1b:40:7d:c5: 25:2d:b3:f2:22:0b:e4:6a:8e:40:04:f7:6e:40:f0: 08:b4:72:cd:17:b7:00:bf:67:19:3c:8f:8e:aa:82: bc:cc:b8:63:7a:0c:84:5d:91:76:48:10:89:b9:6e: 2c:0a:ce:95:b3:c6:09:ae:5b:bb:f7:57:eb:92:71: dc:3b:22:47:b1:1d:d0:a0:ac:67:3d:9e:75:95:52: e9:75:7d:27:27:ae:4c:6b:73:37:77:f8:08:b3:9c: 88:7a:9e:65:3e:a9:97:a0:bf:70:7b:fc:2a:82:7f: 36:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:89:6A:A6:67:F1:9D:00:E8:DC:12:51:1D:A2:BE:53:53:55:0E:8E X509v3 Authority Key Identifier: keyid:B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a3:11:83:d1:4d:ce:f4:8d:45:cf:99:21:38:05:8c:18:fe: 69:37:53:cf:75:f8:e2:77:d8:74:e2:e7:cb:cf:0f:68:c8:81: ac:73:9c:b8:df:66:42:01:5a:52:77:9e:a6:68:9f:51:3d:91: 59:f1:37:9f:44:4a:a9:b6:25:9a:94:82:7b:59:f1:06:54:eb: ff:cf:8a:08:03:54:2a:b5:07:10:fd:4f:36:95:69:74:d2:4f: b9:4a:1f:85:36:49:45:f8:40:fe:61:0a:e5:69:2e:54:e6:7e: 2f:3d:9d:34:3f:22:d8:c1:5f:95:b7:5e:95:4b:83:3c:a2:ed: f0:8b:47:69:95:a4:e8:31:cd:c6:25:28:3c:c3:11:cd:f6:55: df:4c:03:63:e0:17:da:6c:05:34:0c:15:ac:7a:27:fd:84:c0: 1b:91:6e:36:b3:06:5f:82:92:53:a7:19:79:25:d4:6a:50:0d: 33:f2:08:8c:ee:7e:d8:75:81:c0:0b:94:af:5e:d9:50:62:df: ba:08:ee:77:7e:c8:8e:d8:e8:c9:2c:6d:3b:7b:93:96:a0:64: 49:51:b6:5f:1c:60:0e:03:39:0a:f0:c1:8d:ee:ed:1a:fa:9c: ef:09:00:de:a8:b2:de:61:86:f1:06:fc:c7:24:f8:fe:c3:b5: 05:69:ce:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MjBENDExMC8GA1UEBRMoQjk3QTdGMDE1QTczNjA3NERGMzg0NDVDOTgwNzQzNzgy MTlEMjk5NTAeFw0yNDA1MzEwOTA2MTVaFw0yNDA2MDcwOTA2MTVaMBgxFjAUBgNV BAMTDTY2NTk5MzA3LTJiNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKBm9iyvvHKUwPrPmaYRGGvCoZMjbVKsZDBju3VK8mVM/JrD9XZ5n3xNKGZht0 m8ghsaW7YgyhdTQnwJznv80mnvPMkpRts5ty8bZwckbzwyiIjh7UxqzX+0IKxsk9 dUS0ulQMyQ1kjTlIHkwnZaY4ED5zFHB8TcViLxrer8fh5WqFaMMN4/sQpUt2eIdj anxPG0B9xSUts/IiC+RqjkAE925A8Ai0cs0XtwC/Zxk8j46qgrzMuGN6DIRdkXZI EIm5biwKzpWzxgmuW7v3V+uScdw7IkexHdCgrGc9nnWVUul1fScnrkxrczd3+Aiz nIh6nmU+qZegv3B7/CqCfzZxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQIlqpmfx nQDo3BJRHaK+U1NVDo4wHwYDVR0jBBgwFoAUuXp/AVpzYHTfOERcmAdDeCGdKZUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyMEQ0LzBFM0YwQzY2QkMx NjExRUVCOTA1OUM4NkM0RjlBRTAyL3VYcF9BVnB6WUhUZk9FUmNtQWREZUNHZEta VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdVhwX0FWcHpZSFRmT0VSY21BZERlQ0dkS1pVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy MEQ0LzBFM0YwQzY2QkMxNjExRUVCOTA1OUM4NkM0RjlBRTAyL3VYcF9BVnB6WUhU Zk9FUmNtQWREZUNHZEtaVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKSjEYPRTc70jUXPmSE4BYwY/mk3U891+OJ32HTi58vPD2jIgaxznLjf ZkIBWlJ3nqZon1E9kVnxN59ESqm2JZqUgntZ8QZU6//PiggDVCq1BxD9TzaVaXTS T7lKH4U2SUX4QP5hCuVpLlTmfi89nTQ/ItjBX5W3XpVLgzyi7fCLR2mVpOgxzcYl KDzDEc32Vd9MA2PgF9psBTQMFax6J/2EwBuRbjazBl+CklOnGXkl1GpQDTPyCIzu fth1gcALlK9e2VBi37oI7nd+yI7Y6MksbTt7k5agZElRtl8cYA4DOQrwwY3u7Rr6 nO8JAN6ost5hhvEG/Mck+P7DtQVpzhs= -----END CERTIFICATE-----Generated at Fri May 31 10:01:40 2024 by rpki-client on console-ams.rpki-client.org