$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft File: UudzDz1hVWPrWMn6dZKhvYBbWjU.mft (raw, json) Hash identifier: 5BkPJVheVWM/A+wfi28pEHNnNiDFE2j1e99dipRlc0s= Subject key identifier: FE:F6:1B:69:17:AF:0F:27:E4:B7:1D:1A:14:94:4F:5B:A3:02:A5:CA Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 Certificate issuer: /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft Manifest number: 011D Signing time: Sat 01 Jun 2024 06:31:22 +0000 Manifest this update: Sat 01 Jun 2024 06:31:22 +0000 Manifest next update: Sat 08 Jun 2024 06:31:22 +0000 Files and hashes: 1: UudzDz1hVWPrWMn6dZKhvYBbWjU.crl (hash: gzTCzEV8Qz0sOMtZPJuj0PubgHLrukfAjjseYzmQ+Z0=) 2: AE148B2A6BB911ED97343873C4F9AE02.roa (hash: u6SVoGQGrtu5LIBqra8PV8OpxktuEo3Qc4ssotlBn0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Validity Not Before: Jun 1 06:31:22 2024 GMT Not After : Jun 8 06:31:22 2024 GMT Subject: CN=665ac03a-ff10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0d:b7:95:26:ac:87:0b:6b:a0:f6:33:2c:5a: 31:1e:4d:fa:9e:12:14:07:44:ba:b7:7e:75:9b:4e: 2c:64:c2:be:ca:cd:99:59:f2:20:92:a7:f3:0c:59: 63:a4:71:b7:2c:bf:9a:18:22:90:1f:23:00:fe:40: 3b:12:44:b8:e9:b0:50:7e:89:c4:60:ef:17:4e:d2: f6:a0:1d:ef:ed:41:44:8e:05:df:53:c5:b8:0e:9d: 1c:15:1f:0f:4d:5e:16:c3:63:58:1c:11:fb:f7:99: aa:95:5d:35:96:98:18:d7:92:c2:f3:37:89:1d:53: 3c:f9:de:58:e0:85:41:ea:c2:f7:2e:46:45:82:73: 22:f4:e8:97:de:fb:74:a3:9f:22:c6:30:c9:f0:46: 15:6e:0f:e0:c3:8a:d5:06:a9:64:cb:a8:4d:58:89: 7e:04:73:68:0a:0d:a2:d1:98:62:da:f3:da:4b:e8: b5:70:39:c3:e7:c1:6d:d6:42:c7:20:86:a8:dd:bb: 40:e7:6d:1c:9d:27:ff:e2:b2:cd:a9:d6:76:9a:d2: 00:63:ae:77:32:e8:31:65:e8:64:f9:ee:71:2a:c8: 7f:d7:d2:14:15:8c:de:c4:b7:d3:e4:4e:5d:5b:d1: f9:59:7c:d0:28:fe:68:04:2a:65:5d:5a:8c:a1:cd: 73:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F6:1B:69:17:AF:0F:27:E4:B7:1D:1A:14:94:4F:5B:A3:02:A5:CA X509v3 Authority Key Identifier: keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:c0:56:f5:44:66:71:21:61:c2:b8:91:40:37:a0:91:2b:c5: 66:1c:2a:07:a5:8c:d0:59:99:95:fb:fe:b7:14:69:91:12:ff: e7:bd:bc:7c:36:2e:0e:3a:ba:79:53:c2:b2:11:0d:40:7f:9b: c6:cd:2c:d2:47:d4:5c:6e:7c:db:28:e2:91:df:ab:35:11:34: 9f:a4:f3:41:f4:e8:95:10:d1:a9:2f:e3:60:36:74:05:b4:7a: 2c:75:9d:cb:e0:25:70:dc:9d:ba:67:da:fd:c1:a8:98:fc:e2: 29:db:d0:8b:20:65:d6:12:76:9a:f5:db:b8:bd:cc:46:e0:fb: ef:fe:b3:e5:a3:bf:25:31:ba:e3:d7:cd:20:4c:26:6e:24:23: e5:25:14:72:06:f4:91:a2:f3:dd:d6:3d:cd:75:f1:30:a0:d4: ee:d2:b7:38:c0:ad:1b:78:a8:3a:1f:1f:85:6d:84:d0:a9:7e: bd:6c:fe:7c:a2:1f:71:57:b2:2d:bf:ed:3f:6f:0d:8c:5c:0a: 96:95:57:86:ae:6c:2d:e1:56:78:17:82:2d:b7:79:d4:25:73: 0a:d8:e4:12:fc:21:c0:16:ca:3d:21:eb:2a:d7:78:3a:10:38: d2:b9:e1:5a:4f:3a:7c:c1:4f:b9:60:a7:e3:ad:25:2f:bc:b0: a6:72:1a:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ5QkUxMTAvBgNVBAUTKDUyRTc3MzBGM0Q2MTU1NjNFQjU4QzlGQTc1OTJBMUJE ODA1QjVBMzUwHhcNMjQwNjAxMDYzMTIyWhcNMjQwNjA4MDYzMTIyWjAYMRYwFAYD VQQDEw02NjVhYzAzYS1mZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxg23lSashwtroPYzLFoxHk36nhIUB0S6t351m04sZMK+ys2ZWfIgkqfzDFlj pHG3LL+aGCKQHyMA/kA7EkS46bBQfonEYO8XTtL2oB3v7UFEjgXfU8W4Dp0cFR8P TV4Ww2NYHBH795mqlV01lpgY15LC8zeJHVM8+d5Y4IVB6sL3LkZFgnMi9OiX3vt0 o58ixjDJ8EYVbg/gw4rVBqlky6hNWIl+BHNoCg2i0Zhi2vPaS+i1cDnD58Ft1kLH IIao3btA520cnSf/4rLNqdZ2mtIAY653MugxZehk+e5xKsh/19IUFYzexLfT5E5d W9H5WXzQKP5oBCplXVqMoc1zHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP72G2kX rw8n5LcdGhSUT1ujAqXKMB8GA1UdIwQYMBaAFFLncw89YVVj61jJ+nWSob2AW1o1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDlCRS82RkNGQjg2NjZC QjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZXUHJXTW42ZFpLaHZZQmJX alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1ZHpEejFoVldQcldNbjZkWktodllCYldqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDlCRS82RkNGQjg2NjZCQjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZX UHJXTW42ZFpLaHZZQmJXalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1wFb1RGZxIWHCuJFAN6CRK8VmHCoHpYzQWZmV+/63FGmREv/nvbx8 Ni4OOrp5U8KyEQ1Af5vGzSzSR9RcbnzbKOKR36s1ETSfpPNB9OiVENGpL+NgNnQF tHosdZ3L4CVw3J26Z9r9waiY/OIp29CLIGXWEnaa9du4vcxG4Pvv/rPlo78lMbrj 180gTCZuJCPlJRRyBvSRovPd1j3NdfEwoNTu0rc4wK0beKg6Hx+FbYTQqX69bP58 oh9xV7Itv+0/bw2MXAqWlVeGrmwt4VZ4F4Itt3nUJXMK2OQS/CHAFso9Iesq13g6 EDjSueFaTzp8wU+5YKfjrSUvvLCmchpd -----END CERTIFICATE-----Generated at Sat Jun 1 07:09:19 2024 by rpki-client on console-fra.rpki-client.org