$ rpki-client -vvf rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft File: UyQGWmE9LRB4F5xiFjcczGp3UHo.mft (raw, json) Hash identifier: VDvYzECiIsaIVZwQ2xOUf7BBMpZxEVp8u8iu/C6ymf0= Subject key identifier: A9:BB:4C:D5:72:FC:79:9C:0F:18:3F:83:14:66:B5:69:69:8B:29:43 Authority key identifier: 53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A Certificate issuer: /CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft Manifest number: 22 Signing time: Sun 19 May 2024 08:35:28 +0000 Manifest this update: Sun 19 May 2024 08:35:28 +0000 Manifest next update: Sun 26 May 2024 08:35:28 +0000 Files and hashes: 1: UyQGWmE9LRB4F5xiFjcczGp3UHo.crl (hash: 8PwqfsB0FUY+/hyxhSHKRnfI9407PEnJHpTxlQ1agcQ=) 2: 2805F2D6E5B511EEB34EF35AC4F9AE02.roa (hash: 3mOiLmkKHt67b5K3b4t6LJbsgjd5IafkmgGkq4SBWUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A Validity Not Before: May 19 08:35:28 2024 GMT Not After : May 26 08:35:28 2024 GMT Subject: CN=6649b9d0-a0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f8:8a:fa:fe:08:99:f8:8d:27:3a:86:aa:c6: 52:6b:f5:a7:0c:cc:10:96:dc:1f:31:53:69:79:80: 74:17:6a:20:05:bc:36:b8:e5:f9:5a:53:53:2b:44: 60:58:a4:8d:31:80:47:72:18:3f:93:c0:49:d4:df: 51:58:71:76:d8:06:b4:b7:fa:5a:f1:86:1a:66:b4: 08:2b:5c:86:af:a1:f6:e5:29:fc:b2:cc:72:a5:39: 0a:a3:cc:a1:ba:13:36:eb:c4:d9:d3:e1:95:e0:00: 8b:7b:86:49:8f:1b:fb:8d:81:0a:94:db:bf:c2:8d: cd:73:3a:75:2d:1c:dd:8d:f6:65:61:65:ba:f5:a2: 20:97:7e:c0:cc:b1:6e:e1:31:97:1d:dd:9b:f7:0a: 1f:34:6a:6e:cf:c9:cc:6e:31:29:7a:f5:eb:32:88: d6:1f:a2:7e:f5:45:0c:60:dc:c3:56:b8:90:02:c2: 6b:ce:8c:48:97:5c:38:28:34:3a:03:71:17:6d:b8: 5a:0e:96:c6:c2:1b:3f:f2:a7:25:55:39:e4:74:00: b4:35:18:0c:3c:91:45:4c:cf:2a:74:82:bd:f7:8b: 04:00:7d:19:c7:2a:15:b0:8e:bf:c4:72:9d:cb:91: 92:9f:b2:67:58:a3:6b:37:53:d8:fc:f2:82:b6:ca: 42:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BB:4C:D5:72:FC:79:9C:0F:18:3F:83:14:66:B5:69:69:8B:29:43 X509v3 Authority Key Identifier: keyid:53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:a2:be:f7:e0:77:14:6e:02:72:61:0f:4b:f9:9a:14:5b:c2: 75:fd:2b:3a:42:bc:75:0f:7c:d2:ba:78:cf:c0:1c:fd:02:7e: 7d:08:9d:39:1b:a8:70:15:c5:b0:6e:e9:d8:36:21:e3:9c:b2: b5:06:0d:12:1f:f8:2d:a1:ee:7e:1e:50:5c:ca:8e:b4:d4:a2: b4:5c:73:68:a5:ab:21:c8:b7:59:33:2a:3e:bd:f9:79:a5:8e: 40:85:0b:27:7e:0e:1f:74:09:ac:33:8e:93:bc:2b:35:6c:a2: d4:18:35:44:b8:1c:22:02:9d:a5:84:34:53:69:07:ac:20:41: 23:a3:d5:81:52:36:e6:30:2a:71:e4:a5:1d:9f:f6:55:77:dc: 14:2a:88:51:8b:f4:2f:b9:05:a8:2c:90:da:b1:6d:04:16:e6: f0:7c:6a:2c:6a:41:93:26:89:69:fc:b5:82:f7:57:31:12:ea: 5a:53:f4:df:9a:59:74:c3:cf:47:11:b2:9c:3b:00:48:0c:ab: bc:c0:7a:c8:82:ac:3b:36:28:1c:e8:ef:7d:8c:20:91:32:17: e5:19:9c:98:cf:e9:d9:91:bd:c3:39:a7:c6:b2:62:e2:85:2c: 72:fe:01:6f:7d:cb:fe:b1:f4:8e:fd:2e:76:04:16:93:4d:94: 91:7c:23:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEVDNDExMC8GA1UEBRMoNTMyNDA2NUE2MTNEMkQxMDc4MTc5QzYyMTYzNzFDQ0M2 QTc3NTA3QTAeFw0yNDA1MTkwODM1MjhaFw0yNDA1MjYwODM1MjhaMBgxFjAUBgNV BAMTDTY2NDliOWQwLWEwYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd+Ir6/giZ+I0nOoaqxlJr9acMzBCW3B8xU2l5gHQXaiAFvDa45flaU1MrRGBY pI0xgEdyGD+TwEnU31FYcXbYBrS3+lrxhhpmtAgrXIavofblKfyyzHKlOQqjzKG6 EzbrxNnT4ZXgAIt7hkmPG/uNgQqU27/Cjc1zOnUtHN2N9mVhZbr1oiCXfsDMsW7h MZcd3Zv3Ch80am7PycxuMSl69esyiNYfon71RQxg3MNWuJACwmvOjEiXXDgoNDoD cRdtuFoOlsbCGz/ypyVVOeR0ALQ1GAw8kUVMzyp0gr33iwQAfRnHKhWwjr/Ecp3L kZKfsmdYo2s3U9j88oK2ykJPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqbtM1XL8 eZwPGD+DFGa1aWmLKUMwHwYDVR0jBBgwFoAUUyQGWmE9LRB4F5xiFjcczGp3UHow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RUM0LzQ1MDY0NzkwRTVC MTExRUU5RTM1QzMzM0M0RjlBRTAyL1V5UUdXbUU5TFJCNEY1eGlGamNjekdwM1VI by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXlRR1dtRTlMUkI0RjV4aUZqY2N6R3AzVUhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 RUM0LzQ1MDY0NzkwRTVCMTExRUU5RTM1QzMzM0M0RjlBRTAyL1V5UUdXbUU5TFJC NEY1eGlGamNjekdwM1VIby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABiivvfgdxRuAnJhD0v5mhRbwnX9KzpCvHUPfNK6eM/AHP0Cfn0InTkb qHAVxbBu6dg2IeOcsrUGDRIf+C2h7n4eUFzKjrTUorRcc2ilqyHIt1kzKj69+Xml jkCFCyd+Dh90CawzjpO8KzVsotQYNUS4HCICnaWENFNpB6wgQSOj1YFSNuYwKnHk pR2f9lV33BQqiFGL9C+5BagskNqxbQQW5vB8aixqQZMmiWn8tYL3VzES6lpT9N+a WXTDz0cRspw7AEgMq7zAesiCrDs2KBzo732MIJEyF+UZnJjP6dmRvcM5p8ayYuKF LHL+AW99y/6x9I79LnYEFpNNlJF8I9c= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org