$ rpki-client -vvf rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft File: uftCI-sDug7mzge0ZgIXr69xbV0.mft (raw, json) Hash identifier: 9L+scxPR98FDvih/OYMvfsxiY/V9XCkNsSGuhXKJnRg= Subject key identifier: 3C:D4:74:B2:9B:9C:D1:9C:9C:37:B7:33:2D:A1:9B:12:C6:76:D7:6A Authority key identifier: B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D Certificate issuer: /CN=A916D5A2/serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D Certificate serial: 05AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft Manifest number: 05A9 Signing time: Sat 01 Jun 2024 01:11:46 +0000 Manifest this update: Sat 01 Jun 2024 01:11:45 +0000 Manifest next update: Sat 08 Jun 2024 01:11:45 +0000 Files and hashes: 1: uftCI-sDug7mzge0ZgIXr69xbV0.crl (hash: 7NqQ8syq6Bie+TBS/0+B+YjI+bCsh9DDV09mK7ky/4U=) 2: 179D126A80BB11EB8827C40AC4F9AE02.roa (hash: CYfBP66AJd1mrtbfe4yzwaO2+r7Y6dCyFs9q2CaK+1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D5A2/serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D Validity Not Before: Jun 1 01:11:45 2024 GMT Not After : Jun 8 01:11:45 2024 GMT Subject: CN=665a7552-0569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:e4:53:57:f6:eb:d0:66:f2:da:b2:70:a3: 9f:bf:fc:67:e7:f3:6b:1b:21:a2:84:f7:e9:83:ae: ff:0f:2c:f7:60:4c:5e:d4:dc:ea:c8:72:a6:27:07: 54:47:20:ae:83:e3:79:be:db:b3:d5:e1:df:4a:b6: 9d:55:5a:a3:83:99:ab:22:f1:46:92:66:f1:c1:5b: f7:d6:e8:dc:32:06:c1:18:ee:b7:61:b3:05:00:99: eb:a9:ae:01:ed:72:ee:92:80:d0:6f:1c:22:7e:2c: 95:32:21:35:32:b9:56:64:04:be:15:60:62:57:e0: 8f:b2:b5:f8:c0:fe:1a:79:6b:99:95:3f:08:f1:4e: 3a:13:f7:4d:ac:1d:67:6e:8f:c2:c1:1e:d9:9f:d0: 77:5f:02:68:9e:e9:7f:a8:8f:05:4f:74:91:3a:4f: bb:28:fe:75:3d:c8:b7:3d:dc:68:fb:79:29:d9:84: 63:92:2a:69:73:29:52:bb:95:4f:6f:97:28:8b:30: b6:87:09:fe:0c:2b:4f:98:04:f6:52:78:f9:84:4e: 85:ca:3d:fc:a7:f5:73:b2:4e:0e:31:2c:c3:13:70: 52:ae:ac:d3:fc:9e:13:49:2c:59:eb:c4:da:23:09: c9:5c:cd:fc:30:1a:e1:d4:61:5b:75:bc:cd:ea:c3: a9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D4:74:B2:9B:9C:D1:9C:9C:37:B7:33:2D:A1:9B:12:C6:76:D7:6A X509v3 Authority Key Identifier: keyid:B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c4:cf:82:e7:e7:2e:a9:ad:11:6b:80:be:fb:98:14:5a:b6: 67:06:6d:c8:74:1d:2f:56:ff:fc:ec:12:16:5b:ba:58:05:38: 14:66:21:f8:0d:1a:82:97:8c:ec:dc:1e:0a:e3:99:81:69:d7: ad:12:28:9f:c9:9c:89:88:87:99:21:76:79:54:d2:b0:93:15: 10:c7:51:20:a1:5b:70:a3:9d:42:1d:50:7a:00:c4:9a:eb:ab: f3:c6:fc:d7:23:ef:ea:ce:c5:0d:2d:14:f1:24:42:34:6d:7d: 0d:66:b3:b4:79:bf:a6:58:00:33:80:80:2a:9a:dc:16:eb:ff: 0b:2b:d2:b6:cc:96:72:c1:93:10:b5:ac:2f:93:e9:d5:d1:eb: 3e:5a:4a:7d:4f:42:80:f6:21:af:38:04:1b:18:ba:9f:3d:e5: c7:64:9f:6a:df:9f:1e:b1:8b:38:c0:d8:e0:57:7b:be:2e:f7: d7:26:b1:6c:5e:c9:ae:ff:e0:d6:6a:f7:9a:d4:b4:3a:8d:ba: 73:d3:06:cb:7c:14:22:0b:9d:b1:41:48:b9:7e:b2:88:f2:87: 7c:ec:bd:d2:79:c8:52:58:60:50:cc:f7:95:f1:cf:ae:dc:e7: a6:a4:97:ee:dc:d6:97:4b:56:82:0c:16:56:f5:82:86:c2:cb: 2d:6f:f9:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ1QTIxMTAvBgNVBAUTKEI5RkI0MjIzRUIwM0JBMEVFNkNFMDdCNDY2MDIxN0FG QUY3MTZENUQwHhcNMjQwNjAxMDExMTQ1WhcNMjQwNjA4MDExMTQ1WjAYMRYwFAYD VQQDEw02NjVhNzU1Mi0wNTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAst3kU1f269Bm8tqycKOfv/xn5/NrGyGihPfpg67/Dyz3YExe1NzqyHKmJwdU RyCug+N5vtuz1eHfSradVVqjg5mrIvFGkmbxwVv31ujcMgbBGO63YbMFAJnrqa4B 7XLukoDQbxwifiyVMiE1MrlWZAS+FWBiV+CPsrX4wP4aeWuZlT8I8U46E/dNrB1n bo/CwR7Zn9B3XwJonul/qI8FT3SROk+7KP51Pci3Pdxo+3kp2YRjkippcylSu5VP b5coizC2hwn+DCtPmAT2Unj5hE6Fyj38p/Vzsk4OMSzDE3BSrqzT/J4TSSxZ68Ta IwnJXM38MBrh1GFbdbzN6sOpYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzUdLKb nNGcnDe3My2hmxLGdtdqMB8GA1UdIwQYMBaAFLn7QiPrA7oO5s4HtGYCF6+vcW1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDVBMi9DMjFBNTM4Njgw QjgxMUVCQkVCMTlFODNDNEY5QUUwMi91ZnRDSS1zRHVnN216Z2UwWmdJWHI2OXhi VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmdENJLXNEdWc3bXpnZTBaZ0lYcjY5eGJWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDVBMi9DMjFBNTM4NjgwQjgxMUVCQkVCMTlFODNDNEY5QUUwMi91ZnRDSS1zRHVn N216Z2UwWmdJWHI2OXhiVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNxM+C5+cuqa0Ra4C++5gUWrZnBm3IdB0vVv/87BIWW7pYBTgUZiH4 DRqCl4zs3B4K45mBadetEiifyZyJiIeZIXZ5VNKwkxUQx1EgoVtwo51CHVB6AMSa 66vzxvzXI+/qzsUNLRTxJEI0bX0NZrO0eb+mWAAzgIAqmtwW6/8LK9K2zJZywZMQ tawvk+nV0es+Wkp9T0KA9iGvOAQbGLqfPeXHZJ9q358esYs4wNjgV3u+LvfXJrFs Xsmu/+DWavea1LQ6jbpz0wbLfBQiC52xQUi5frKI8od87L3SechSWGBQzPeV8c+u 3OempJfu3NaXS1aCDBZW9YKGwsstb/lU -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:44 2024 by rpki-client on console-fra.rpki-client.org