$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.mft File: U3pyvmM5N4xMTSlwK-12dczMFGo.mft (raw, json) Hash identifier: 7bx0XQG3ijARQDQ0p6w9pAKEFtn28FB93v9JH1LM3Pg= Subject key identifier: E4:39:38:67:C8:AB:26:AB:2F:69:50:EF:3E:32:31:EB:41:60:CA:D4 Authority key identifier: 53:7A:72:BE:63:39:37:8C:4C:4D:29:70:2B:ED:76:75:CC:CC:14:6A Certificate issuer: /CN=A916EB98/serialNumber=537A72BE6339378C4C4D29702BED7675CCCC146A Certificate serial: 0AC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3pyvmM5N4xMTSlwK-12dczMFGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.mft Manifest number: 0ABE Signing time: Sat 18 May 2024 20:07:03 +0000 Manifest this update: Sat 18 May 2024 20:07:03 +0000 Manifest next update: Sat 25 May 2024 20:07:03 +0000 Files and hashes: 1: U3pyvmM5N4xMTSlwK-12dczMFGo.crl (hash: /eammebEZa3sQiRSJEfUyMDGpXVFEvNjyseHleu1XNU=) 2: DD716A222ACC11EAAB36B444C4F9AE02.roa (hash: Az6UxcKQ+xRSF1uMrnXEes28AnSu+Bs39OfvIf+XZd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.crl rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3pyvmM5N4xMTSlwK-12dczMFGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2756 (0xac4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB98/serialNumber=537A72BE6339378C4C4D29702BED7675CCCC146A Validity Not Before: May 18 20:07:03 2024 GMT Not After : May 25 20:07:03 2024 GMT Subject: CN=66490a67-ec24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e3:b4:ab:3b:b4:0f:48:ae:8c:fd:a5:63:be: 52:3c:aa:84:d8:0d:b8:c7:67:a5:05:53:a5:d8:13: 4d:30:c7:69:f7:5f:30:e9:0b:59:ea:f8:ed:fb:bd: dc:fd:a3:d0:5b:66:68:2b:bd:94:64:8f:de:30:b8: ba:3e:7c:7a:34:50:3e:87:9b:89:f7:53:e0:b9:aa: a0:86:e4:ff:23:f1:55:2e:27:45:1e:e5:92:de:bf: 96:3a:8f:a1:60:55:a1:87:48:fd:d0:fd:71:1d:a0: 78:64:91:02:c8:44:80:9c:21:13:2c:16:6a:a4:ac: 68:ec:7d:27:d6:cf:ee:c9:ea:2e:fa:4b:d1:fd:a2: ca:df:a4:eb:15:95:40:f7:0c:68:3e:ba:f4:5b:72: 13:1b:1b:43:40:16:08:85:dc:ff:12:5a:b2:2f:d2: 74:d9:3c:1c:2d:ac:7d:5e:d5:b5:b1:58:c9:6f:71: aa:c2:85:dd:5d:24:c4:c9:ab:7d:ab:31:b2:24:69: 03:0d:2c:7a:ec:2f:b5:16:b1:65:e7:c6:42:b4:30: 07:48:07:96:8c:8c:3b:8a:2b:c5:2f:a3:fb:b7:ed: c8:a2:d0:91:b1:ef:9e:b8:01:35:7f:9f:6a:e0:ef: 6d:19:98:ef:53:74:dc:19:5f:f7:a1:1f:a4:7d:4a: 6f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:39:38:67:C8:AB:26:AB:2F:69:50:EF:3E:32:31:EB:41:60:CA:D4 X509v3 Authority Key Identifier: keyid:53:7A:72:BE:63:39:37:8C:4C:4D:29:70:2B:ED:76:75:CC:CC:14:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3pyvmM5N4xMTSlwK-12dczMFGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b1:7d:c4:05:2d:c3:46:2c:c1:83:90:e0:8f:06:0b:2f:ae: 97:09:d4:0e:eb:f8:07:bf:a6:e4:16:22:d5:ed:34:be:97:56: 1b:32:22:08:4b:59:f7:84:95:e9:bc:b5:8e:84:7c:b4:2a:86: ea:04:22:06:27:8a:84:aa:4f:a6:11:9f:5e:c5:78:7f:ee:04: 40:14:58:3c:a3:70:12:45:90:e4:bc:d6:9d:27:c2:4b:e9:6f: 7f:fa:6c:37:49:cc:8a:eb:35:81:55:df:ae:4e:ed:c0:59:e8: ef:4d:89:d3:23:bb:0e:a1:7a:17:3a:fe:7b:00:af:7a:99:a6: d5:0e:e3:c8:9d:92:17:51:30:9c:69:e1:93:7f:dd:b8:45:42: a0:d9:cb:d7:36:e3:4e:75:b2:06:79:ed:ec:09:a4:84:de:5d: 9a:57:55:7f:e4:b1:9b:09:24:65:51:de:fb:92:3f:01:39:3c: 6a:7f:2f:8c:de:51:69:9f:86:cb:5c:92:47:fa:86:85:08:0d: 0d:34:3d:d6:ed:75:06:0a:b7:7e:a0:17:c1:2e:a0:05:23:e0: 65:19:76:8b:da:f3:22:8e:78:db:77:b5:32:43:eb:12:b8:ec: 9a:ee:01:12:16:27:77:14:36:8a:b6:81:a8:b7:d8:b7:e2:d4: 1c:f3:70:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCOTgxMTAvBgNVBAUTKDUzN0E3MkJFNjMzOTM3OEM0QzREMjk3MDJCRUQ3Njc1 Q0NDQzE0NkEwHhcNMjQwNTE4MjAwNzAzWhcNMjQwNTI1MjAwNzAzWjAYMRYwFAYD VQQDEw02NjQ5MGE2Ny1lYzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuO0qzu0D0iujP2lY75SPKqE2A24x2elBVOl2BNNMMdp918w6QtZ6vjt+73c /aPQW2ZoK72UZI/eMLi6Pnx6NFA+h5uJ91PguaqghuT/I/FVLidFHuWS3r+WOo+h YFWhh0j90P1xHaB4ZJECyESAnCETLBZqpKxo7H0n1s/uyeou+kvR/aLK36TrFZVA 9wxoPrr0W3ITGxtDQBYIhdz/ElqyL9J02TwcLax9XtW1sVjJb3GqwoXdXSTEyat9 qzGyJGkDDSx67C+1FrFl58ZCtDAHSAeWjIw7iivFL6P7t+3IotCRse+euAE1f59q 4O9tGZjvU3TcGV/3oR+kfUpveQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQ5OGfI qyarL2lQ7z4yMetBYMrUMB8GA1UdIwQYMBaAFFN6cr5jOTeMTE0pcCvtdnXMzBRq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI5OC9CMEZDMzVEQzJB Q0ExMUVBODc1NjI3NDBDNEY5QUUwMi9VM3B5dm1NNU40eE1UU2x3Sy0xMmRjek1G R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UzcHl2bU01TjR4TVRTbHdLLTEyZGN6TUZHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI5OC9CMEZDMzVEQzJBQ0ExMUVBODc1NjI3NDBDNEY5QUUwMi9VM3B5dm1NNU40 eE1UU2x3Sy0xMmRjek1GR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBysX3EBS3DRizBg5DgjwYLL66XCdQO6/gHv6bkFiLV7TS+l1YbMiII S1n3hJXpvLWOhHy0KobqBCIGJ4qEqk+mEZ9exXh/7gRAFFg8o3ASRZDkvNadJ8JL 6W9/+mw3ScyK6zWBVd+uTu3AWejvTYnTI7sOoXoXOv57AK96mabVDuPInZIXUTCc aeGTf924RUKg2cvXNuNOdbIGee3sCaSE3l2aV1V/5LGbCSRlUd77kj8BOTxqfy+M 3lFpn4bLXJJH+oaFCA0NND3W7XUGCrd+oBfBLqAFI+BlGXaL2vMijnjbd7UyQ+sS uOya7gESFid3FDaKtoGot9i34tQc83Ah -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org