$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft File: uko-NN2arQAtSR0TxciM5c3Jk6o.mft (raw, json) Hash identifier: meCA9hA9W4FGd7qxlt4A4UPinehrjyn/YX2/bPd4IrM= Subject key identifier: 85:32:0A:65:25:F3:AB:26:C1:77:19:93:02:1D:6D:19:5E:B2:DB:BC Authority key identifier: BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA Certificate issuer: /CN=A9142127/serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA Certificate serial: 09F7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft Manifest number: 09F2 Signing time: Sun 02 Jun 2024 21:01:18 +0000 Manifest this update: Sun 02 Jun 2024 21:01:17 +0000 Manifest next update: Sun 09 Jun 2024 21:01:17 +0000 Files and hashes: 1: uko-NN2arQAtSR0TxciM5c3Jk6o.crl (hash: C00XMnigli/BLhB5/KLaZfZnJZ/AvOE0d1ct+gIoVDY=) 2: 2FCB8FBA56DC11EA8D75187CC4F9AE02.roa (hash: le6qjqCzgyimHjECGdiCiB7624kiepl1Husd+YnK6FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 14:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2551 (0x9f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142127/serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA Validity Not Before: Jun 2 21:01:17 2024 GMT Not After : Jun 9 21:01:17 2024 GMT Subject: CN=665cdd9e-8471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:8e:5c:a5:c9:f1:36:ce:35:d7:1d:1e:ca: ff:a1:e0:44:e0:26:bb:56:7f:1e:8d:de:ba:57:93: 35:0e:40:98:75:4e:e6:6e:fd:96:87:1a:74:0f:41: 27:c6:63:72:1c:d3:ff:2a:2f:0c:e0:5a:2d:7e:1f: c6:12:78:22:a0:42:14:1f:c4:53:63:f9:f9:b4:b5: ab:bc:b4:87:b4:d8:24:dd:8d:cb:41:65:b8:61:75: e6:e1:e2:df:20:3a:b9:f7:53:11:b2:0b:ae:2c:7b: 59:f5:9a:79:6b:9c:a1:11:4e:d8:26:a4:11:85:df: e0:23:ce:90:3c:93:df:7b:6e:78:70:b2:80:03:d6: 4d:21:69:d4:88:0f:17:98:68:47:09:0c:be:cd:33: 67:8e:eb:65:00:b6:22:e7:01:41:7d:18:95:3a:7f: 6d:83:77:08:c3:4b:cc:41:f8:e6:50:1e:e0:52:9d: b7:7b:2b:49:ad:e2:c7:28:d2:6d:d3:aa:85:5c:70: 2a:f2:4c:e6:21:31:9f:c8:1f:a0:27:c1:e1:1e:2c: 66:f9:c5:ae:30:cc:4d:11:a3:ba:6a:1d:7c:00:5b: ab:6d:22:a8:37:8c:1c:9d:22:71:3c:c0:25:93:f9: f9:58:cc:c7:50:2f:79:f3:37:af:f6:1e:a8:5b:4f: 3f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:32:0A:65:25:F3:AB:26:C1:77:19:93:02:1D:6D:19:5E:B2:DB:BC X509v3 Authority Key Identifier: keyid:BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:6b:ef:a5:b4:d7:ab:b5:e2:75:f6:61:c1:eb:77:79:74:b6: 23:e5:7d:12:7f:a5:5f:bc:c1:bb:fd:ed:8a:84:d9:70:cf:61: 3a:4f:e8:02:77:80:a7:f8:76:24:a4:20:ca:b5:b5:14:c0:1d: 9c:32:7b:30:72:cd:4e:a8:3f:64:c7:a0:29:6d:19:6c:1b:99: 03:d3:2b:eb:26:97:e5:13:a9:7a:83:45:09:34:7f:95:cd:0d: c6:c7:d6:9b:af:64:a2:1f:9d:a7:8e:ef:02:aa:74:4c:47:c9: 9e:a8:37:58:24:99:32:f7:9a:3d:3e:77:1d:7a:7f:ca:fd:10: 78:2e:07:02:a7:37:99:05:45:08:70:19:2c:d1:a8:8c:34:3f: 9a:b3:57:f1:e5:51:91:1b:17:53:8a:c4:95:fa:1f:76:6f:16: 4a:39:3e:f2:2c:75:09:81:bd:b3:8f:5c:eb:2d:83:93:a9:5a: 87:9f:1a:9a:8d:36:20:12:9e:54:9e:af:dd:67:d5:5d:b0:5d: e2:bf:dc:7a:33:02:36:2e:79:6e:59:64:b1:bf:3a:73:88:38: b7:4d:91:8a:26:9a:3a:89:68:c8:cf:ed:c7:12:b3:72:20:89: 3f:a4:fd:73:5b:bb:05:48:a2:45:92:eb:10:3b:f0:b1:c1:8d: 39:8c:6a:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxMjcxMTAvBgNVBAUTKEJBNEEzRTM0REQ5QUFEMDAyRDQ5MUQxM0M1Qzg4Q0U1 Q0RDOTkzQUEwHhcNMjQwNjAyMjEwMTE3WhcNMjQwNjA5MjEwMTE3WjAYMRYwFAYD VQQDEw02NjVjZGQ5ZS04NDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNyOXKXJ8TbONdcdHsr/oeBE4Ca7Vn8ejd66V5M1DkCYdU7mbv2Whxp0D0En xmNyHNP/Ki8M4Fotfh/GEngioEIUH8RTY/n5tLWrvLSHtNgk3Y3LQWW4YXXm4eLf IDq591MRsguuLHtZ9Zp5a5yhEU7YJqQRhd/gI86QPJPfe254cLKAA9ZNIWnUiA8X mGhHCQy+zTNnjutlALYi5wFBfRiVOn9tg3cIw0vMQfjmUB7gUp23eytJreLHKNJt 06qFXHAq8kzmITGfyB+gJ8HhHixm+cWuMMxNEaO6ah18AFurbSKoN4wcnSJxPMAl k/n5WMzHUC958zev9h6oW08/lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUyCmUl 86smwXcZkwIdbRlestu8MB8GA1UdIwQYMBaAFLpKPjTdmq0ALUkdE8XIjOXNyZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy8zMzdGQkE0NDU0 NkQxMUVBQkREM0MxMTdDNEY5QUUwMi91a28tTk4yYXJRQXRTUjBUeGNpTTVjM0pr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3Vrby1OTjJhclFBdFNSMFR4Y2lNNWMzSms2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjEyNy8zMzdGQkE0NDU0NkQxMUVBQkREM0MxMTdDNEY5QUUwMi91a28tTk4yYXJR QXRTUjBUeGNpTTVjM0prNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCta++ltNerteJ19mHB63d5dLYj5X0Sf6VfvMG7/e2KhNlwz2E6T+gC d4Cn+HYkpCDKtbUUwB2cMnswcs1OqD9kx6ApbRlsG5kD0yvrJpflE6l6g0UJNH+V zQ3Gx9abr2SiH52nju8CqnRMR8meqDdYJJky95o9Pncden/K/RB4LgcCpzeZBUUI cBks0aiMND+as1fx5VGRGxdTisSV+h92bxZKOT7yLHUJgb2zj1zrLYOTqVqHnxqa jTYgEp5Unq/dZ9VdsF3iv9x6MwI2LnluWWSxvzpziDi3TZGKJpo6iWjIz+3HErNy IIk/pP1zW7sFSKJFkusQO/CxwY05jGr0 -----END CERTIFICATE-----Generated at Sun Jun 2 22:48:28 2024 by rpki-client on console-ams.rpki-client.org