$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft File: U_b3klO824sdFxgs5PGdOf1JnfU.mft (raw, json) Hash identifier: oGLVOx9NhBDDu70ddTsB33PV2znAsScqvQ9OYBnb4aI= Subject key identifier: F3:23:D7:EC:53:F6:66:FF:3A:67:27:30:18:BA:32:89:B8:FB:CA:64 Authority key identifier: 53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5 Certificate issuer: /CN=A9154340/serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5 Certificate serial: 057F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft Manifest number: 057B Signing time: Sun 19 May 2024 00:37:59 +0000 Manifest this update: Sun 19 May 2024 00:37:59 +0000 Manifest next update: Sun 26 May 2024 00:37:58 +0000 Files and hashes: 1: U_b3klO824sdFxgs5PGdOf1JnfU.crl (hash: CvsEqboh0ybTnQuT1HZV/eDqM1MHPnNgUleEgiayRQo=) 2: 28D1785891E311EBA138E330C4F9AE02.roa (hash: ZXRE/wzu5lKhs8MxseA6/JZbA6gFP0KL6bGQMwyeb1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154340/serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5 Validity Not Before: May 19 00:37:59 2024 GMT Not After : May 26 00:37:58 2024 GMT Subject: CN=664949e7-05fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:68:ef:34:68:2f:d9:bf:27:10:38:6a:1a:be: 28:35:ce:c3:0d:3c:de:8d:12:0b:f9:75:01:bd:f4: 70:52:f2:18:06:0f:64:95:b7:4e:96:59:38:c5:a6: 12:6b:58:d3:fa:dc:ae:cc:51:89:cf:38:45:f0:0f: e7:77:23:46:5d:f3:03:ca:f3:66:6c:e0:58:17:89: b3:65:5d:1e:64:8a:0f:6b:c7:77:ff:fb:d9:2e:90: 41:5c:3a:30:16:bc:d9:91:b0:9e:44:5c:71:d0:e6: f1:80:3c:12:8b:b2:1f:97:cc:31:94:d1:ee:6c:1f: cb:22:4f:81:93:d4:4b:9d:9c:f0:a3:a1:21:93:13: c6:97:6f:2c:15:e2:c1:4c:9e:ca:3e:a0:65:08:d1: 8c:26:8d:dc:96:28:d5:d9:6e:af:de:01:e8:b5:8d: 56:10:78:49:0c:e2:31:90:87:f3:c6:6e:c0:1c:26: e2:3a:3c:52:09:07:20:0b:08:21:d0:d6:90:66:92: bc:4c:36:a8:37:40:29:7b:2a:a2:ca:9c:a2:40:35: 6f:ee:39:4f:a7:83:8d:37:b6:f3:fb:91:2e:cc:37: 22:23:aa:36:23:dc:f4:10:5d:37:5b:f7:27:99:bc: d9:9f:a5:25:a7:1b:c7:d5:8e:55:10:9b:bd:a5:97: f5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:23:D7:EC:53:F6:66:FF:3A:67:27:30:18:BA:32:89:B8:FB:CA:64 X509v3 Authority Key Identifier: keyid:53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1f:05:89:43:40:5d:95:63:f6:c0:2d:95:13:40:38:dc:97: 48:d1:6c:47:c4:cd:2e:d6:4e:cc:58:b5:a5:22:88:08:92:18: f9:03:d4:58:0e:96:04:6f:5d:a0:e9:b5:84:2e:42:24:75:b6: 44:24:4a:13:8a:c0:91:8d:65:69:0d:cb:05:e7:94:f2:5a:fa: 01:08:c5:82:9a:3e:06:25:01:68:ff:99:f2:63:0f:58:74:2e: 9c:99:85:16:b4:af:05:33:cf:bb:1a:b9:d8:92:d3:a0:07:c7: fb:c4:18:a8:ca:28:ca:51:db:e0:6f:8e:8f:2d:ee:aa:95:47: 7b:5e:24:1b:c2:02:94:23:2a:03:08:18:73:99:ed:3e:20:59: c7:66:d4:29:f6:41:8f:0c:36:d1:87:48:20:5b:ba:71:e6:ab: 5f:00:d3:ab:0b:3e:ad:22:8c:d2:b1:cb:27:2a:a2:ad:3f:f8: 30:4c:ae:22:f1:83:db:67:08:65:4d:26:c7:34:3b:87:19:fa: 45:d3:df:26:2f:1b:67:31:8b:03:59:43:c4:00:77:b4:96:0c: 17:6c:37:1a:d8:dd:63:d5:dd:b5:fa:b3:85:73:c6:64:cf:ca: c3:6d:cb:f6:5a:ba:6f:73:af:6f:51:53:66:ca:44:8a:57:7d: 2f:92:b8:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzNDAxMTAvBgNVBAUTKDUzRjZGNzkyNTNCQ0RCOEIxRDE3MTgyQ0U0RjE5RDM5 RkQ0OTlERjUwHhcNMjQwNTE5MDAzNzU5WhcNMjQwNTI2MDAzNzU4WjAYMRYwFAYD VQQDEw02NjQ5NDllNy0wNWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GjvNGgv2b8nEDhqGr4oNc7DDTzejRIL+XUBvfRwUvIYBg9klbdOllk4xaYS a1jT+tyuzFGJzzhF8A/ndyNGXfMDyvNmbOBYF4mzZV0eZIoPa8d3//vZLpBBXDow FrzZkbCeRFxx0ObxgDwSi7Ifl8wxlNHubB/LIk+Bk9RLnZzwo6EhkxPGl28sFeLB TJ7KPqBlCNGMJo3clijV2W6v3gHotY1WEHhJDOIxkIfzxm7AHCbiOjxSCQcgCwgh 0NaQZpK8TDaoN0ApeyqiypyiQDVv7jlPp4ONN7bz+5EuzDciI6o2I9z0EF03W/cn mbzZn6UlpxvH1Y5VEJu9pZf1qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMj1+xT 9mb/OmcnMBi6Mom4+8pkMB8GA1UdIwQYMBaAFFP295JTvNuLHRcYLOTxnTn9SZ31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC83QzFGRDFEMjkx RTExMUVCQjY4NzhDMkVDNEY5QUUwMi9VX2Iza2xPODI0c2RGeGdzNVBHZE9mMUpu ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VfYjNrbE84MjRzZEZ4Z3M1UEdkT2YxSm5mVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM0MC83QzFGRDFEMjkxRTExMUVCQjY4NzhDMkVDNEY5QUUwMi9VX2Iza2xPODI0 c2RGeGdzNVBHZE9mMUpuZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSHwWJQ0BdlWP2wC2VE0A43JdI0WxHxM0u1k7MWLWlIogIkhj5A9RY DpYEb12g6bWELkIkdbZEJEoTisCRjWVpDcsF55TyWvoBCMWCmj4GJQFo/5nyYw9Y dC6cmYUWtK8FM8+7GrnYktOgB8f7xBioyijKUdvgb46PLe6qlUd7XiQbwgKUIyoD CBhzme0+IFnHZtQp9kGPDDbRh0ggW7px5qtfANOrCz6tIozSscsnKqKtP/gwTK4i 8YPbZwhlTSbHNDuHGfpF098mLxtnMYsDWUPEAHe0lgwXbDca2N1j1d21+rOFc8Zk z8rDbcv2Wrpvc69vUVNmykSKV30vkrg9 -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org