$ rpki-client -vvf rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft File: UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft (raw, json) Hash identifier: Xdu+tCap9X1NHhBG/6IWH0vsIWFFSg/a7QEp5adXdr0= Subject key identifier: CF:92:6B:9E:05:3F:03:5B:09:87:98:A8:A5:F5:3E:4B:D3:D4:31:F3 Authority key identifier: 50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30 Certificate issuer: /CN=A913318E/serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft Manifest number: 1F Signing time: Sun 19 May 2024 08:40:26 +0000 Manifest this update: Sun 19 May 2024 08:40:26 +0000 Manifest next update: Sun 26 May 2024 08:40:26 +0000 Files and hashes: 1: UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl (hash: 1BkkgpXqVInQAMRmcBislZ7xkSJKnlYA4Vp0TI471K8=) 2: 6EAE50E8EBFA11EEA937307AC4F9AE02.roa (hash: PvnhLROEDT/HF0pg2lWtSI4NudFoUGDhALVvmqWgLCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913318E/serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230 Validity Not Before: May 19 08:40:26 2024 GMT Not After : May 26 08:40:26 2024 GMT Subject: CN=6649bafa-73a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:62:b2:d2:82:8b:f4:ed:e5:ab:78:53:f1:89: 74:23:60:4a:72:1d:6d:ee:c4:ff:b2:f0:42:e1:9d: b8:89:0b:ef:91:9d:f4:aa:bd:52:71:f5:ef:f3:34: bb:a1:ee:2b:30:68:b1:44:3a:35:92:cf:f3:07:ea: 95:ba:00:d8:14:0e:04:de:2a:cf:d0:ea:3e:0b:ef: a4:2d:24:ad:b6:2c:a0:81:70:52:4b:d5:43:34:12: a6:ea:f8:92:98:ef:1a:c0:84:f1:d6:00:f4:e2:0f: 4d:18:f2:08:12:e4:2c:ee:3b:9b:bc:f8:41:96:42: de:0c:7f:a1:29:0b:91:8e:a6:8d:3f:9e:e5:01:4c: 20:55:cb:7b:fa:37:d2:5c:80:e1:a1:54:a7:c4:91: e1:34:bc:03:cc:1b:92:c5:ed:f1:e5:4d:b7:25:65: 15:a8:c4:b7:36:4f:55:36:c0:e3:d8:bf:79:ad:15: f5:43:0a:1f:48:8b:00:13:7a:5d:5c:53:ad:00:96: 09:2d:98:fb:3c:43:f2:80:54:cd:b0:25:46:46:e7: 88:7e:96:a7:2b:31:1d:2b:8d:1a:07:c6:1b:09:62: 92:15:c0:6f:cc:e9:f6:af:a8:8b:0e:91:f4:4c:11: 4e:ca:65:bf:b9:60:b6:96:d3:e9:f0:16:b6:f6:3b: 81:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:92:6B:9E:05:3F:03:5B:09:87:98:A8:A5:F5:3E:4B:D3:D4:31:F3 X509v3 Authority Key Identifier: keyid:50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:df:ce:eb:95:b8:31:ee:11:c0:57:e2:48:7c:c6:6f:91:1d: 39:44:1a:5f:38:dd:3b:11:83:f3:6d:c5:82:24:3a:f9:2c:e9: 45:e4:ba:6b:41:07:2b:89:40:40:03:ea:49:0b:a0:9e:6b:41: ee:26:b3:1b:86:0b:33:e6:9d:88:36:fc:21:4f:7d:ef:49:d4: 86:29:a5:29:7c:f0:ad:63:69:4d:5d:d1:ad:a4:a8:0c:8c:9a: 17:6a:cd:31:ce:86:67:29:ff:04:7c:08:ea:0e:70:f0:a1:0f: a2:37:a9:66:3d:3c:22:d2:60:5d:29:4d:48:5e:40:1e:8d:2e: 5e:67:6e:92:87:98:c8:cb:14:e3:b4:ac:57:89:a1:8f:1a:6b: 3f:4c:e8:19:d8:82:79:25:5b:3b:4e:5a:7b:bd:68:87:ca:99: b2:b0:0d:f6:be:c2:f4:2e:1d:7a:a0:96:da:14:b8:89:28:75: 8a:92:ef:50:67:f1:e4:51:15:af:5a:92:ac:34:48:e5:0d:fd: 8e:ff:35:11:9d:4b:71:1d:1a:a6:b9:18:29:98:53:b7:50:ce: 1b:a4:f2:61:ee:b4:6e:dc:74:38:bc:e0:df:ad:c6:82:01:39: 98:20:05:88:88:7f:0b:99:46:11:4e:e5:8b:1b:f2:17:7f:c6: a3:31:00:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzE4RTExMC8GA1UEBRMoNTAwRjkyMDBFQjg2REM1RkQwNkRCNzg2QzBDRUE0NTJE MENFNzIzMDAeFw0yNDA1MTkwODQwMjZaFw0yNDA1MjYwODQwMjZaMBgxFjAUBgNV BAMTDTY2NDliYWZhLTczYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdYrLSgov07eWreFPxiXQjYEpyHW3uxP+y8ELhnbiJC++RnfSqvVJx9e/zNLuh 7iswaLFEOjWSz/MH6pW6ANgUDgTeKs/Q6j4L76QtJK22LKCBcFJL1UM0Eqbq+JKY 7xrAhPHWAPTiD00Y8ggS5CzuO5u8+EGWQt4Mf6EpC5GOpo0/nuUBTCBVy3v6N9Jc gOGhVKfEkeE0vAPMG5LF7fHlTbclZRWoxLc2T1U2wOPYv3mtFfVDCh9IiwATel1c U60AlgktmPs8Q/KAVM2wJUZG54h+lqcrMR0rjRoHxhsJYpIVwG/M6favqIsOkfRM EU7KZb+5YLaW0+nwFrb2O4EfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz5JrngU/ A1sJh5iopfU+S9PUMfMwHwYDVR0jBBgwFoAUUA+SAOuG3F/QbbeGwM6kUtDOcjAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzMThFLzZBOTBBRjg0RUJG OTExRUU5REE3OUI3N0M0RjlBRTAyL1VBLVNBT3VHM0ZfUWJiZUd3TTZrVXRET2Nq QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVUEtU0FPdUczRl9RYmJlR3dNNmtVdERPY2pBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz MThFLzZBOTBBRjg0RUJGOTExRUU5REE3OUI3N0M0RjlBRTAyL1VBLVNBT3VHM0Zf UWJiZUd3TTZrVXRET2NqQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJjfzuuVuDHuEcBX4kh8xm+RHTlEGl843TsRg/NtxYIkOvks6UXkumtB ByuJQEAD6kkLoJ5rQe4msxuGCzPmnYg2/CFPfe9J1IYppSl88K1jaU1d0a2kqAyM mhdqzTHOhmcp/wR8COoOcPChD6I3qWY9PCLSYF0pTUheQB6NLl5nbpKHmMjLFOO0 rFeJoY8aaz9M6BnYgnklWztOWnu9aIfKmbKwDfa+wvQuHXqgltoUuIkodYqS71Bn 8eRRFa9akqw0SOUN/Y7/NRGdS3EdGqa5GCmYU7dQzhuk8mHutG7cdDi84N+txoIB OZggBYiIfwuZRhFO5Ysb8hd/xqMxAFo= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org