$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft File: UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json) Hash identifier: 0URPYeL620kAvkrv41cfyg7C8lYPq/VwbxQPqsr/K2g= Subject key identifier: 7B:AB:5E:7E:A5:1B:9F:14:A7:FC:91:AB:6F:6A:35:B6:39:7A:F6:51 Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 0773 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft Manifest number: 1E05 Signing time: Sat 18 May 2024 17:06:35 +0000 Manifest this update: Sat 18 May 2024 17:06:35 +0000 Manifest next update: Sat 25 May 2024 17:06:35 +0000 Files and hashes: 1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: SuvQ8LxxBq3nhqjT764c1d5fxs8ErsXDB6F/AchRBFQ=) 2: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: e4nlW3b1Gd+pOc4exYAE1ueBKcTmyXONvmF9PSvaz18=) 3: B797228EC64E11EE939CA20CC4F9AE02.roa (hash: 2QNk5YMjeCeR7yxQGBF4Zfizmee2atH27xvZ/mJABZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1907 (0x773) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: May 18 17:06:35 2024 GMT Not After : May 25 17:06:35 2024 GMT Subject: CN=6648e01b-84a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f3:e1:4b:34:02:6d:df:33:c0:f3:6e:74:c2: 60:7a:c2:45:f4:7c:e0:5e:d5:13:06:36:5f:1a:b4: 4a:1a:2f:3a:0e:6a:fb:d4:25:91:5f:d1:03:66:69: 43:f0:26:6f:1d:8d:60:83:74:a0:27:18:19:0e:9a: 92:d9:ef:ae:d0:cf:43:07:9f:7d:e8:33:03:a0:4e: da:f2:3b:14:ee:b3:bf:cd:2e:7a:b8:21:1c:a2:0d: a6:ac:45:35:2e:e9:3e:c6:26:78:b9:95:f6:18:8e: 58:77:65:93:f7:1d:ef:0c:53:09:81:dc:f3:17:2b: cc:d5:59:8c:3c:99:e9:81:a1:1f:e1:3f:23:84:88: 8b:b6:27:0a:5c:5e:a0:67:6c:01:fb:92:aa:60:d3: ad:15:c2:08:2a:b4:c6:a9:86:1f:32:27:7c:03:78: 63:c2:a5:43:49:56:7a:ea:e1:7e:e6:c4:4d:85:3a: 78:4f:37:fe:92:0d:79:40:32:ab:9a:c2:10:bd:12: d4:51:34:52:00:1c:f1:44:1b:6e:d7:8b:d8:b4:64: 5b:0e:68:1d:7f:09:c3:cd:65:d9:f1:73:02:c8:24: 91:8b:be:af:9e:78:77:50:62:c7:f4:8d:1b:13:c3: c9:3a:ab:a4:12:9e:51:25:61:56:44:50:52:8f:ec: 1e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AB:5E:7E:A5:1B:9F:14:A7:FC:91:AB:6F:6A:35:B6:39:7A:F6:51 X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:f1:5d:90:a7:54:e7:5d:ef:8b:06:c2:c3:06:ba:eb:fd:09: 45:62:16:10:4b:03:fb:44:45:df:b8:f5:03:fd:79:b0:b5:92: 25:47:76:79:8e:e1:30:e7:2f:36:b6:d8:9d:83:f4:9f:d8:5d: 30:2a:52:80:72:94:5f:8d:07:c5:1b:40:b9:69:6b:30:3c:f2: 17:05:36:45:06:a5:70:8f:e4:56:2b:50:d8:09:ca:81:88:39: fb:20:a3:73:8a:37:7e:21:5a:e8:5a:e0:1a:4b:f3:94:30:75: d7:a3:2e:35:fc:73:7c:a1:57:52:95:3b:1e:72:89:be:fc:30: df:e5:45:eb:29:7b:93:64:fa:c6:c1:34:40:9e:ef:bc:de:c2: 1f:35:5a:87:b9:1d:bf:fd:23:e5:56:cf:d2:ad:10:0f:19:fc: f2:ea:9b:78:83:72:93:bd:fd:d8:dd:82:57:0f:b7:e7:41:6b: 8c:0f:0b:20:42:44:63:57:f3:4a:0b:24:1d:60:a9:92:15:df: f0:48:0c:4e:ce:e2:d9:86:db:07:98:55:86:8c:2b:84:54:b3: 03:96:e7:ea:51:63:db:1a:7f:2e:de:20:db:32:3c:a6:4f:51: fc:00:9f:31:55:5c:0a:14:42:ec:47:43:5e:9a:e3:98:0e:36: 61:fd:fc:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjQwNTE4MTcwNjM1WhcNMjQwNTI1MTcwNjM1WjAYMRYwFAYD VQQDEw02NjQ4ZTAxYi04NGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPPhSzQCbd8zwPNudMJgesJF9HzgXtUTBjZfGrRKGi86Dmr71CWRX9EDZmlD 8CZvHY1gg3SgJxgZDpqS2e+u0M9DB5996DMDoE7a8jsU7rO/zS56uCEcog2mrEU1 Luk+xiZ4uZX2GI5Yd2WT9x3vDFMJgdzzFyvM1VmMPJnpgaEf4T8jhIiLticKXF6g Z2wB+5KqYNOtFcIIKrTGqYYfMid8A3hjwqVDSVZ66uF+5sRNhTp4Tzf+kg15QDKr msIQvRLUUTRSABzxRBtu14vYtGRbDmgdfwnDzWXZ8XMCyCSRi76vnnh3UGLH9I0b E8PJOqukEp5RJWFWRFBSj+weZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHurXn6l G58Up/yRq29qNbY5evZRMB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAx ZVpLUnU2Ukg2aFFsR2sxZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl8V2Qp1TnXe+LBsLDBrrr/QlFYhYQSwP7REXfuPUD/XmwtZIlR3Z5 juEw5y82ttidg/Sf2F0wKlKAcpRfjQfFG0C5aWswPPIXBTZFBqVwj+RWK1DYCcqB iDn7IKNzijd+IVroWuAaS/OUMHXXoy41/HN8oVdSlTsecom+/DDf5UXrKXuTZPrG wTRAnu+83sIfNVqHuR2//SPlVs/SrRAPGfzy6pt4g3KTvf3Y3YJXD7fnQWuMDwsg QkRjV/NKCyQdYKmSFd/wSAxOzuLZhtsHmFWGjCuEVLMDlufqUWPbGn8u3iDbMjym T1H8AJ8xVVwKFELsR0NemuOYDjZh/fwR -----END CERTIFICATE-----Generated at Sat May 18 17:37:32 2024 by rpki-client on console-fra.rpki-client.org