$ rpki-client -vvf rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft File: UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft (raw, json) Hash identifier: tMyYBL1d81ar6jhQd+pmLCVBtnz1Dh7Cj7swl8bUcm4= Subject key identifier: 54:39:FD:85:02:59:7C:7E:8B:CC:73:18:0B:55:5F:B3:9B:31:DF:8C Authority key identifier: 50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79 Certificate issuer: /CN=A9157031/serialNumber=50E50EDAF64A2C25B731239673D9070F61830279 Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft Manifest number: 0323 Signing time: Sun 19 May 2024 03:03:07 +0000 Manifest this update: Sun 19 May 2024 03:03:06 +0000 Manifest next update: Sun 26 May 2024 03:03:06 +0000 Files and hashes: 1: UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl (hash: U70/fIyujUINk+IDMXFmdWbIPLxBBlyHPQAPlAkm8SY=) 2: 32D8FF34C99E11ED98E9BE5BC4F9AE02.roa (hash: VMUCqPEo6s3IyQmGwdfYbeuxJD+3gM2MVq6Pur4XNUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157031/serialNumber=50E50EDAF64A2C25B731239673D9070F61830279 Validity Not Before: May 19 03:03:06 2024 GMT Not After : May 26 03:03:06 2024 GMT Subject: CN=66496bea-915a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:94:bd:1c:a0:29:39:3d:9f:45:08:db:48:48: fb:8c:32:99:2e:4f:24:07:6c:c0:4c:b6:a1:56:23: 0d:9b:c4:43:63:34:1a:d9:bf:5c:a4:16:f6:1b:c3: d6:b4:a5:35:bb:40:44:25:4b:4c:90:fe:8f:83:5d: b9:6f:65:3a:e5:44:a7:a2:39:49:11:99:a7:eb:bf: 31:24:ec:86:da:27:73:47:6c:ee:ba:cb:b8:b6:64: 42:fb:f6:c7:45:03:f1:87:05:d8:11:0c:a5:f2:02: f3:77:15:bd:bb:91:04:4c:7b:f4:c6:98:c2:d4:81: 7e:de:50:37:e9:5e:c3:a4:7c:7d:68:b7:05:cf:59: 70:2e:5d:46:af:9c:c4:7b:8a:3c:b2:40:1c:e7:30: 94:a7:10:1c:7c:b9:06:8a:e6:20:d6:f2:94:c3:8e: 75:14:ff:04:bd:ad:39:99:8d:53:43:74:c6:7d:8e: 8e:c1:a9:1c:71:9f:e3:18:53:13:8d:bf:38:e0:81: b1:86:45:bf:ff:17:51:56:31:f0:f5:d6:3e:70:a4: 84:4f:44:33:9d:c7:a1:06:7e:dd:78:a9:aa:e3:08: b7:23:ed:8e:93:47:92:09:9c:ad:1a:e4:c5:82:4b: 1f:26:16:45:f0:82:33:37:8b:6e:3c:73:06:4c:0f: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:39:FD:85:02:59:7C:7E:8B:CC:73:18:0B:55:5F:B3:9B:31:DF:8C X509v3 Authority Key Identifier: keyid:50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:60:e5:7d:88:2c:78:5a:0e:e8:86:21:b6:10:cf:76:5f:56: 78:a0:f5:82:fc:5b:57:23:83:d7:a2:56:6d:b4:df:23:90:32: 19:02:24:45:a1:45:d3:c3:23:96:be:e0:0f:b6:94:94:a3:6a: ae:e7:32:e9:16:b0:12:00:97:8a:c7:c6:0e:67:0c:57:19:9e: 36:f2:db:44:a0:db:87:5d:30:03:64:67:52:2e:6d:4c:85:d7: af:90:56:56:5e:c1:fd:4b:1e:f3:2d:b4:1c:b0:33:54:07:01: 70:4e:3b:aa:29:1f:08:fc:54:4d:d5:c5:31:5f:6c:20:4e:5b: 1f:d8:b6:f7:29:a3:af:1a:6a:f7:26:56:dc:03:14:06:4e:2d: 9f:3d:43:e4:0d:13:8e:0b:0e:a8:a5:65:f4:7f:65:bb:99:91: 8a:89:8c:7d:f2:c2:a3:33:30:82:5b:77:40:4c:c1:e3:aa:95: aa:78:60:1d:7b:c3:72:69:ef:5c:9c:ae:5d:a7:c2:1b:4c:4a: 06:72:8f:b2:8b:74:6a:0d:23:fe:00:4a:22:57:43:62:51:6c: 5e:f2:91:1e:14:6a:12:15:6c:a3:9c:9e:a4:35:e5:27:33:b3: cf:b0:f6:0c:8a:11:71:39:b5:77:c0:80:d6:dd:f7:ee:7e:bf: 27:5d:48:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTcwMzExMTAvBgNVBAUTKDUwRTUwRURBRjY0QTJDMjVCNzMxMjM5NjczRDkwNzBG NjE4MzAyNzkwHhcNMjQwNTE5MDMwMzA2WhcNMjQwNTI2MDMwMzA2WjAYMRYwFAYD VQQDEw02NjQ5NmJlYS05MTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJS9HKApOT2fRQjbSEj7jDKZLk8kB2zATLahViMNm8RDYzQa2b9cpBb2G8PW tKU1u0BEJUtMkP6Pg125b2U65USnojlJEZmn678xJOyG2idzR2zuusu4tmRC+/bH RQPxhwXYEQyl8gLzdxW9u5EETHv0xpjC1IF+3lA36V7DpHx9aLcFz1lwLl1Gr5zE e4o8skAc5zCUpxAcfLkGiuYg1vKUw451FP8Eva05mY1TQ3TGfY6OwakccZ/jGFMT jb844IGxhkW//xdRVjHw9dY+cKSET0QzncehBn7deKmq4wi3I+2Ok0eSCZytGuTF gksfJhZF8IIzN4tuPHMGTA/BcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQ5/YUC WXx+i8xzGAtVX7ObMd+MMB8GA1UdIwQYMBaAFFDlDtr2SiwltzEjlnPZBw9hgwJ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzAzMS83QTAwNEY3ODdF QzkxMUVDODRFQzQ0MThDNEY5QUUwMi9VT1VPMnZaS0xDVzNNU09XYzlrSEQyR0RB bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPVU8ydlpLTENXM01TT1djOWtIRDJHREFuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzAzMS83QTAwNEY3ODdFQzkxMUVDODRFQzQ0MThDNEY5QUUwMi9VT1VPMnZaS0xD VzNNU09XYzlrSEQyR0RBbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQYOV9iCx4Wg7ohiG2EM92X1Z4oPWC/FtXI4PXolZttN8jkDIZAiRF oUXTwyOWvuAPtpSUo2qu5zLpFrASAJeKx8YOZwxXGZ428ttEoNuHXTADZGdSLm1M hdevkFZWXsH9Sx7zLbQcsDNUBwFwTjuqKR8I/FRN1cUxX2wgTlsf2Lb3KaOvGmr3 JlbcAxQGTi2fPUPkDROOCw6opWX0f2W7mZGKiYx98sKjMzCCW3dATMHjqpWqeGAd e8Nyae9cnK5dp8IbTEoGco+yi3RqDSP+AEoiV0NiUWxe8pEeFGoSFWyjnJ6kNeUn M7PPsPYMihFxObV3wIDW3ffufr8nXUh3 -----END CERTIFICATE-----Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org