$ rpki-client -vvf rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft File: UuFqm4muyCoM8IXPWufcPrCPDJE.mft (raw, json) Hash identifier: joALBKQ2ye1KcuePoTtfcgKmR1IPbl8uHhZh2zBe7TM= Subject key identifier: 91:C5:B4:B4:D5:24:0F:EB:86:22:5E:34:E0:52:43:D9:2E:D8:00:8E Authority key identifier: 52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91 Certificate issuer: /CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91 Certificate serial: 0F06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft Manifest number: 0EFF Signing time: Sat 18 May 2024 18:15:07 +0000 Manifest this update: Sat 18 May 2024 18:15:07 +0000 Manifest next update: Sat 25 May 2024 18:15:07 +0000 Files and hashes: 1: UuFqm4muyCoM8IXPWufcPrCPDJE.crl (hash: GYqEbfVFJrUq1NARZJ5ozjU+eMU/PRdNvJT2iFL1+N4=) 2: 63B80D12552011E9BA55007FC4F9AE02.roa (hash: n1i1YmWWdcSZ0jWXOEfV3AX2jqQJCh/2fT33rCzMokc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3846 (0xf06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91 Validity Not Before: May 18 18:15:07 2024 GMT Not After : May 25 18:15:07 2024 GMT Subject: CN=6648f02b-5a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:c9:f6:04:7b:7a:59:91:b6:82:ec:7c:e5: 00:4a:45:42:87:bf:e7:4b:c5:86:c4:de:a7:ab:4d: 17:78:c1:db:85:fd:58:dc:8c:00:46:cf:4b:d8:f6: bd:df:37:33:6c:32:e0:b9:93:a9:47:26:54:97:ee: ee:af:6f:15:63:d1:b8:41:64:56:45:20:f2:af:21: 00:4d:1a:9e:2a:97:c0:d1:84:68:df:79:ab:83:19: 7f:23:af:0a:d8:b8:55:1e:4f:51:3e:a6:a5:56:e2: 93:aa:4d:d4:83:c0:b0:e6:c2:50:b3:42:8d:4d:49: 9c:4f:8b:7c:65:44:83:98:1f:66:1f:e1:2f:1e:d6: 20:58:89:72:99:80:1c:72:91:b8:95:fe:de:fb:89: 85:c2:9e:0d:3a:b9:73:5d:cc:78:5a:30:fc:3e:92: 65:c1:d2:6b:20:96:6f:c0:ab:db:50:d9:f3:97:e9: a7:04:4f:b5:79:d9:07:90:c0:ad:7b:b7:ab:85:81: e6:00:e6:fa:52:94:dc:2f:5a:de:54:5d:36:74:32: f8:13:c4:e8:a2:75:00:be:79:f3:a4:dc:a8:25:b1: 41:ae:45:9e:6e:cd:08:e6:8a:0c:bf:a0:92:b1:39: b8:55:a1:96:06:fd:1d:44:a7:92:15:61:d2:09:ca: 16:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C5:B4:B4:D5:24:0F:EB:86:22:5E:34:E0:52:43:D9:2E:D8:00:8E X509v3 Authority Key Identifier: keyid:52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:36:ec:b1:0a:0d:56:ef:4a:e1:91:e0:9b:70:71:c7:80:4a: 79:5f:1b:ca:78:c3:18:c5:a1:d6:a8:ee:29:95:db:b2:bb:c7: 9a:73:f4:17:c2:10:24:11:bb:96:b0:cf:8b:eb:31:72:28:28: f3:c4:55:fa:11:f4:e8:e5:67:72:a4:6d:f5:4d:9a:89:59:2a: d8:da:8e:0b:ad:dd:7c:db:11:dd:69:39:66:86:3c:2c:45:2c: 7e:98:00:bf:50:81:3a:7a:1a:7b:de:03:ae:2b:1a:f3:e7:03: c9:fd:9d:2e:89:60:e4:d2:52:b7:59:96:7e:73:4c:52:ae:05: e0:fc:a6:62:ca:c8:d8:98:68:2c:5d:4e:fd:fd:55:97:d3:fa: 17:6d:1c:28:83:e2:ce:d6:c2:e7:bc:d4:7e:4a:bf:89:19:2b: 4d:4b:4a:7c:4f:c0:3a:e2:10:8d:e8:87:3c:a6:4d:78:ae:f2: 35:7c:2c:40:bb:f0:3a:b5:d5:17:2e:4f:12:96:52:8a:e1:38: 43:9f:f1:58:65:dc:2a:a4:e5:0d:fc:88:d5:0d:15:25:a5:0c: 2d:e3:b3:93:88:d2:14:fc:3a:ec:ab:d4:6d:43:61:37:b7:97: 3b:8e:c0:c3:87:d1:2a:0c:b5:8d:16:26:7f:70:67:42:6e:ec: 29:4f:94:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNBMjAxMTAvBgNVBAUTKDUyRTE2QTlCODlBRUM4MkEwQ0YwODVDRjVBRTdEQzNF QjA4RjBDOTEwHhcNMjQwNTE4MTgxNTA3WhcNMjQwNTI1MTgxNTA3WjAYMRYwFAYD VQQDEw02NjQ4ZjAyYi01YTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbTJ9gR7elmRtoLsfOUASkVCh7/nS8WGxN6nq00XeMHbhf1Y3IwARs9L2Pa9 3zczbDLguZOpRyZUl+7ur28VY9G4QWRWRSDyryEATRqeKpfA0YRo33mrgxl/I68K 2LhVHk9RPqalVuKTqk3Ug8Cw5sJQs0KNTUmcT4t8ZUSDmB9mH+EvHtYgWIlymYAc cpG4lf7e+4mFwp4NOrlzXcx4WjD8PpJlwdJrIJZvwKvbUNnzl+mnBE+1edkHkMCt e7erhYHmAOb6UpTcL1reVF02dDL4E8ToonUAvnnzpNyoJbFBrkWebs0I5ooMv6CS sTm4VaGWBv0dRKeSFWHSCcoWLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHFtLTV JA/rhiJeNOBSQ9ku2ACOMB8GA1UdIwQYMBaAFFLhapuJrsgqDPCFz1rn3D6wjwyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0EyMC8yMjY2QUUyMjU1 MUIxMUU5OEJBMEMwNzNDNEY5QUUwMi9VdUZxbTRtdXlDb004SVhQV3VmY1ByQ1BE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1RnFtNG11eUNvTThJWFBXdWZjUHJDUERKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0EyMC8yMjY2QUUyMjU1MUIxMUU5OEJBMEMwNzNDNEY5QUUwMi9VdUZxbTRtdXlD b004SVhQV3VmY1ByQ1BESkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdNuyxCg1W70rhkeCbcHHHgEp5XxvKeMMYxaHWqO4plduyu8eac/QX whAkEbuWsM+L6zFyKCjzxFX6EfTo5WdypG31TZqJWSrY2o4Lrd182xHdaTlmhjws RSx+mAC/UIE6ehp73gOuKxrz5wPJ/Z0uiWDk0lK3WZZ+c0xSrgXg/KZiysjYmGgs XU79/VWX0/oXbRwog+LO1sLnvNR+Sr+JGStNS0p8T8A64hCN6Ic8pk14rvI1fCxA u/A6tdUXLk8SllKK4ThDn/FYZdwqpOUN/IjVDRUlpQwt47OTiNIU/Drsq9RtQ2E3 t5c7jsDDh9EqDLWNFiZ/cGdCbuwpT5Ty -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org