$ rpki-client -vvf rpki.apnic.net/member_repository/A913D657/7167885E42F811EA87424C3DC4F9AE02/uTpsTJBSDd3Jmj02SQW1UjV00yQ.mft File: uTpsTJBSDd3Jmj02SQW1UjV00yQ.mft (raw, json) Hash identifier: KC2FdNK5+9Dj/Gn7qJrG7PYlJw5fQM5W9PTCaox0G7c= Subject key identifier: 14:9F:79:E1:B6:BF:6B:DC:0A:58:36:07:EA:49:93:AD:15:FD:25:2C Authority key identifier: B9:3A:6C:4C:90:52:0D:DD:C9:9A:3D:36:49:05:B5:52:35:74:D3:24 Certificate issuer: /CN=A913D657/serialNumber=B93A6C4C90520DDDC99A3D364905B5523574D324 Certificate serial: 0A52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uTpsTJBSDd3Jmj02SQW1UjV00yQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D657/7167885E42F811EA87424C3DC4F9AE02/uTpsTJBSDd3Jmj02SQW1UjV00yQ.mft Manifest number: 0A4A Signing time: Sat 18 May 2024 20:27:29 +0000 Manifest this update: Sat 18 May 2024 20:27:28 +0000 Manifest next update: Sat 25 May 2024 20:27:28 +0000 Files and hashes: 1: uTpsTJBSDd3Jmj02SQW1UjV00yQ.crl (hash: SSdYIhOHBUp61VNxPGavZ/ZFDwE2+H0lnJpPk75Y+hA=) 2: E40F9840431D11EA9772B432C4F9AE02.roa (hash: lJj0lEitjgrqi8XLQtDJNuTNmGXS6tADBUsrYZnfIUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D657/7167885E42F811EA87424C3DC4F9AE02/uTpsTJBSDd3Jmj02SQW1UjV00yQ.crl rsync://rpki.apnic.net/member_repository/A913D657/7167885E42F811EA87424C3DC4F9AE02/uTpsTJBSDd3Jmj02SQW1UjV00yQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uTpsTJBSDd3Jmj02SQW1UjV00yQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2642 (0xa52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D657/serialNumber=B93A6C4C90520DDDC99A3D364905B5523574D324 Validity Not Before: May 18 20:27:28 2024 GMT Not After : May 25 20:27:28 2024 GMT Subject: CN=66490f30-cf60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fd:e3:62:23:8e:8e:3c:85:c1:97:81:51:b5: c6:ad:4b:25:6b:bb:1e:59:f6:6f:a7:e1:89:5a:e7: 9c:48:97:82:50:28:d7:12:e0:50:61:24:02:f5:bf: 7e:7d:c4:ed:b6:17:19:5d:00:f5:dd:3d:87:d4:17: 97:ee:bd:af:68:27:a4:bc:28:55:3f:5b:71:66:bf: f7:5a:e9:19:c3:a2:43:1c:85:d8:51:27:96:70:6f: 3d:8d:a4:d2:2d:90:f2:e5:12:dd:a2:83:92:e4:d5: a7:1a:b7:c7:37:47:7f:d7:60:a3:47:8c:d5:00:cb: bc:c3:6b:aa:c6:93:52:40:1b:6c:2e:93:e0:55:dd: 55:0e:82:e7:b5:39:33:23:6c:ba:4b:b1:a4:11:09: 92:bf:56:73:f5:44:3a:44:d1:9d:12:ec:f6:f6:23: 35:26:22:8e:8c:7e:22:b0:76:e6:fd:8e:75:f5:92: a3:d2:1e:01:97:32:19:27:b1:26:99:5e:44:68:54: a3:f9:9e:9c:a0:d4:bf:1c:a2:09:85:27:ee:d9:7d: 72:32:91:94:fc:cf:8d:e5:c2:a7:7c:76:a1:cc:27: 6f:28:41:62:50:fa:d6:32:73:0c:95:14:5c:08:a8: 84:ba:b6:2f:0c:50:f6:00:30:0a:cc:8a:1d:66:80: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9F:79:E1:B6:BF:6B:DC:0A:58:36:07:EA:49:93:AD:15:FD:25:2C X509v3 Authority Key Identifier: keyid:B9:3A:6C:4C:90:52:0D:DD:C9:9A:3D:36:49:05:B5:52:35:74:D3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D657/7167885E42F811EA87424C3DC4F9AE02/uTpsTJBSDd3Jmj02SQW1UjV00yQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uTpsTJBSDd3Jmj02SQW1UjV00yQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D657/7167885E42F811EA87424C3DC4F9AE02/uTpsTJBSDd3Jmj02SQW1UjV00yQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4d:a9:46:2e:6f:3c:ec:2f:73:70:82:28:fd:5f:b0:92:fc: 70:27:9d:ca:fe:58:57:fd:a4:78:e9:5f:7d:a8:93:17:5b:f5: a7:a9:68:f3:a1:4d:82:6a:91:bc:8e:c3:1f:71:dd:44:bb:a4: 40:f7:66:ae:be:97:44:6c:66:a6:de:d7:6a:cd:bc:a4:d0:ca: e4:61:d4:e0:de:da:2a:24:33:13:46:d6:fb:f9:98:0a:6c:6f: 56:8b:50:32:12:bb:44:6d:00:c4:97:34:3d:5b:00:cb:8e:6a: 5a:02:37:95:36:e2:07:a5:89:39:aa:79:32:62:30:3c:ac:71: b4:6d:5b:f5:34:b1:15:c4:98:47:13:96:1b:eb:73:6f:d9:2e: 6a:a7:91:aa:db:9f:70:76:4f:3c:ec:cc:80:d1:86:33:af:43: 9b:52:47:bd:08:25:26:a2:da:ea:d9:72:9e:0e:c4:dc:ed:12: 25:44:cf:9d:93:02:c1:86:98:60:06:12:69:79:bf:94:99:d3: b5:a2:16:96:8c:94:c2:6e:77:5b:92:a6:21:ed:03:79:f2:ed: a6:b4:d9:60:7c:1b:4c:9c:53:25:6a:c0:ee:25:09:6a:0f:ce: a9:ef:f7:d0:eb:23:e9:65:e4:64:98:0f:78:b1:66:6e:dc:4f: b2:f0:cf:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2NTcxMTAvBgNVBAUTKEI5M0E2QzRDOTA1MjBERERDOTlBM0QzNjQ5MDVCNTUy MzU3NEQzMjQwHhcNMjQwNTE4MjAyNzI4WhcNMjQwNTI1MjAyNzI4WjAYMRYwFAYD VQQDEw02NjQ5MGYzMC1jZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6v3jYiOOjjyFwZeBUbXGrUsla7seWfZvp+GJWuecSJeCUCjXEuBQYSQC9b9+ fcTtthcZXQD13T2H1BeX7r2vaCekvChVP1txZr/3WukZw6JDHIXYUSeWcG89jaTS LZDy5RLdooOS5NWnGrfHN0d/12CjR4zVAMu8w2uqxpNSQBtsLpPgVd1VDoLntTkz I2y6S7GkEQmSv1Zz9UQ6RNGdEuz29iM1JiKOjH4isHbm/Y519ZKj0h4BlzIZJ7Em mV5EaFSj+Z6coNS/HKIJhSfu2X1yMpGU/M+N5cKnfHahzCdvKEFiUPrWMnMMlRRc CKiEurYvDFD2ADAKzIodZoDbgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSfeeG2 v2vcClg2B+pJk60V/SUsMB8GA1UdIwQYMBaAFLk6bEyQUg3dyZo9NkkFtVI1dNMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDY1Ny83MTY3ODg1RTQy RjgxMUVBODc0MjRDM0RDNEY5QUUwMi91VHBzVEpCU0RkM0ptajAyU1FXMVVqVjAw eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VUcHNUSkJTRGQzSm1qMDJTUVcxVWpWMDB5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDY1Ny83MTY3ODg1RTQyRjgxMUVBODc0MjRDM0RDNEY5QUUwMi91VHBzVEpCU0Rk M0ptajAyU1FXMVVqVjAweVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbTalGLm887C9zcIIo/V+wkvxwJ53K/lhX/aR46V99qJMXW/WnqWjz oU2CapG8jsMfcd1Eu6RA92auvpdEbGam3tdqzbyk0MrkYdTg3toqJDMTRtb7+ZgK bG9Wi1AyErtEbQDElzQ9WwDLjmpaAjeVNuIHpYk5qnkyYjA8rHG0bVv1NLEVxJhH E5Yb63Nv2S5qp5Gq259wdk887MyA0YYzr0ObUke9CCUmotrq2XKeDsTc7RIlRM+d kwLBhphgBhJpeb+UmdO1ohaWjJTCbndbkqYh7QN58u2mtNlgfBtMnFMlasDuJQlq D86p7/fQ6yPpZeRkmA94sWZu3E+y8M8q -----END CERTIFICATE-----Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org