$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json) Hash identifier: TX0mL6QDp/b1p4Ub84st5EgFVjvw06mWKPqUt1ZX8ho= Subject key identifier: F8:0F:7E:01:46:1B:F0:F8:3D:D3:B1:25:5A:00:B3:1C:48:54:CF:76 Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Certificate serial: 098C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft Manifest number: 0987 Signing time: Sat 18 May 2024 20:56:34 +0000 Manifest this update: Sat 18 May 2024 20:56:33 +0000 Manifest next update: Sat 25 May 2024 20:56:33 +0000 Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: J4rypIBu7omIPOHxEGAE/iPOGxKHKWkD+2/mqxrT0Ms=) 2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: jKGVgYJukPiK6ySsx84NYDRYeDXnDYGdPyvlYaZsN/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2444 (0x98c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Validity Not Before: May 18 20:56:33 2024 GMT Not After : May 25 20:56:33 2024 GMT Subject: CN=66491602-ece6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bc:c2:32:29:72:22:a9:fc:e2:bc:af:1d:f8: 7d:0d:4b:de:30:fe:8e:45:58:91:27:0b:2a:e2:63: b1:c8:86:2b:cb:b6:08:54:f9:b3:42:dd:c7:21:68: aa:4e:5c:6c:27:4f:d0:28:f1:af:51:f8:12:cf:73: 52:81:43:b1:20:c0:30:5c:25:e9:bc:34:40:13:da: 07:74:c1:27:96:85:ff:c6:83:d3:25:10:ba:1e:3d: bf:f0:4b:6c:37:09:48:d8:d0:02:e4:02:a2:46:0d: 0b:b4:b7:ad:77:2f:a2:70:a7:44:8c:50:cb:04:56: d5:01:84:d0:d2:ee:85:ba:92:cb:3a:7d:ea:e7:ab: 01:f3:78:50:c9:f6:bf:b1:07:f9:e8:09:c3:d3:47: 1e:e6:0c:0c:18:fe:ba:fb:32:28:c8:24:f1:2e:3f: 71:0a:64:b3:51:f2:e8:96:38:3b:63:83:44:38:3f: 02:30:51:59:a9:cf:3c:95:f7:d4:fa:a0:ac:3f:dd: 3f:48:48:6a:7e:f8:45:42:b1:73:15:1c:b3:26:54: 88:b9:2e:36:11:09:00:7c:43:9c:a4:78:12:79:b6: d4:a9:05:0e:fa:fe:45:47:8d:2b:ad:96:b5:71:37: 51:67:4f:98:92:5c:a3:3a:33:2b:8d:c2:fe:f3:cc: 69:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0F:7E:01:46:1B:F0:F8:3D:D3:B1:25:5A:00:B3:1C:48:54:CF:76 X509v3 Authority Key Identifier: keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:86:e4:f9:71:42:ca:a9:09:d1:70:24:29:44:bb:eb:b8:d3: 42:b8:a9:8e:e9:16:6d:ce:9f:98:d3:79:5f:b1:9c:0f:df:c2: 72:0d:ae:80:c1:23:72:f2:b9:91:a5:45:2f:ca:ca:43:ed:4f: 80:0b:58:38:10:f5:ca:78:15:30:74:56:4c:e2:64:a1:b5:d5: 36:5c:63:91:b5:77:69:f8:72:95:cc:14:0e:5f:bb:31:2c:e1: 07:86:0b:8e:bb:3f:1f:bb:b6:d0:fd:e8:e0:92:21:5a:61:3e: 8d:2b:1d:79:a8:78:64:ce:b4:8a:54:41:4b:f0:d8:d2:d9:13: 86:66:fc:cc:60:26:34:10:43:ea:ce:a3:f4:e4:a0:9b:4c:7e: 41:9d:e9:e7:31:4d:85:a7:ff:6e:87:4a:73:28:17:4c:43:c2: fc:3a:17:2a:43:14:33:f2:91:0d:57:83:69:47:b8:51:3d:a9: 91:da:de:50:5e:c2:4e:64:16:ca:1a:93:df:53:c4:b3:45:49: 06:ff:7c:17:43:f6:e1:90:6f:03:ab:38:c9:e9:a9:e0:28:5e: a6:12:31:f2:d8:e1:c3:d6:a3:e5:57:72:1f:45:5d:83:8f:9d: b5:13:f6:ef:8b:34:12:7e:37:b5:c1:53:3e:74:8a:0c:8e:37: c1:44:00:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF QUUzRUYzQzAwHhcNMjQwNTE4MjA1NjMzWhcNMjQwNTI1MjA1NjMzWjAYMRYwFAYD VQQDEw02NjQ5MTYwMi1lY2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorzCMilyIqn84ryvHfh9DUveMP6ORViRJwsq4mOxyIYry7YIVPmzQt3HIWiq TlxsJ0/QKPGvUfgSz3NSgUOxIMAwXCXpvDRAE9oHdMEnloX/xoPTJRC6Hj2/8Ets NwlI2NAC5AKiRg0LtLetdy+icKdEjFDLBFbVAYTQ0u6FupLLOn3q56sB83hQyfa/ sQf56AnD00ce5gwMGP66+zIoyCTxLj9xCmSzUfLoljg7Y4NEOD8CMFFZqc88lffU +qCsP90/SEhqfvhFQrFzFRyzJlSIuS42EQkAfEOcpHgSebbUqQUO+v5FR40rrZa1 cTdRZ0+YklyjOjMrjcL+88xpTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgPfgFG G/D4PdOxJVoAsxxIVM92MB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3 OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OURGMi85OTk4RjFDNDY3OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0 TTJIYlZadGJhNFBxNC04OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdhuT5cULKqQnRcCQpRLvruNNCuKmO6RZtzp+Y03lfsZwP38JyDa6A wSNy8rmRpUUvyspD7U+AC1g4EPXKeBUwdFZM4mShtdU2XGORtXdp+HKVzBQOX7sx LOEHhguOuz8fu7bQ/ejgkiFaYT6NKx15qHhkzrSKVEFL8NjS2ROGZvzMYCY0EEPq zqP05KCbTH5BnennMU2Fp/9uh0pzKBdMQ8L8OhcqQxQz8pENV4NpR7hRPamR2t5Q XsJOZBbKGpPfU8SzRUkG/3wXQ/bhkG8DqzjJ6angKF6mEjHy2OHD1qPlV3IfRV2D j521E/bvizQSfje1wVM+dIoMjjfBRAD6 -----END CERTIFICATE-----Generated at Sat May 18 21:31:27 2024 by rpki-client on console-ams.rpki-client.org