$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft File: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft (raw, json) Hash identifier: bmjfoPXOKC6qxW3xXGDyjxsNcVeT73SUYDJv5bx+Ty0= Subject key identifier: 35:47:12:C7:FE:58:77:51:77:D7:E4:EC:B3:01:6E:96:6E:16:46:D5 Authority key identifier: B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD Certificate issuer: /CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Certificate serial: 037D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft Manifest number: 03ED Signing time: Sun 19 May 2024 02:51:18 +0000 Manifest this update: Sun 19 May 2024 02:51:18 +0000 Manifest next update: Sun 26 May 2024 02:51:18 +0000 Files and hashes: 1: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl (hash: AtaPJYaPKTrILLKX6dqPZVNJiYFiTO522zAVdliyCxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 893 (0x37d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Validity Not Before: May 19 02:51:18 2024 GMT Not After : May 26 02:51:18 2024 GMT Subject: CN=66496926-f5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:66:7f:c0:c7:db:c0:0f:84:49:b1:09:ba:4b: 2d:61:9d:f6:49:ef:3a:24:01:b5:67:d2:92:63:9b: 5a:72:d6:ca:26:59:2a:f4:3c:b1:3c:c2:83:fd:76: 88:fc:bf:59:9f:4d:1a:c0:9e:de:98:3b:07:71:73: 9b:06:4c:e1:86:92:0b:03:3f:48:ce:a5:7e:ff:9b: f8:e7:59:8b:ae:e3:e8:0f:9b:e4:a8:9c:f7:af:40: ca:aa:a4:89:21:da:6c:7b:63:c5:bd:53:6b:37:12: e4:1a:3e:f9:1d:25:69:1f:c2:6b:91:03:cc:42:07: 4d:9b:16:ae:f3:34:79:24:0c:b5:b4:12:84:be:6a: 8d:72:2f:44:c9:d2:e7:79:74:c6:c4:e2:55:c8:2a: 45:1d:5e:13:1c:10:58:a1:4b:17:d8:08:4c:27:28: 03:75:8b:7d:25:15:05:53:50:19:7c:9b:b5:eb:21: 06:b2:f9:9b:83:7b:8c:55:04:73:db:2a:fd:cb:ae: ff:7d:2d:ed:7e:2c:1e:ce:06:c4:98:3b:62:5b:0f: 46:ed:88:5c:8b:19:27:b1:c5:f8:15:9f:c2:c9:bd: d7:7d:fa:6c:e1:7c:5c:b3:3a:59:3d:a8:40:7e:bd: 05:75:ab:d7:fa:65:0c:87:6b:a5:5c:e3:07:2c:4a: b7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:47:12:C7:FE:58:77:51:77:D7:E4:EC:B3:01:6E:96:6E:16:46:D5 X509v3 Authority Key Identifier: keyid:B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:2b:91:13:fb:ec:d5:f5:5a:85:a0:38:ed:2c:ac:84:e4:d8: ff:96:0f:02:07:6a:9f:31:a0:92:b5:5c:c7:da:9f:11:a7:8a: a3:42:10:0b:25:b7:6b:34:98:94:af:dc:6b:d0:75:64:14:fb: eb:83:2b:cb:8b:69:d9:c3:5d:8a:66:e0:81:e3:8d:0d:7c:43: 45:d1:19:5f:0b:6a:24:68:60:3d:19:f5:72:08:5f:c7:3d:c2: 32:27:cc:71:55:42:38:51:57:e5:28:a8:e6:5b:d2:40:db:99: 2a:67:12:9f:04:69:95:16:9f:2e:bb:b1:3b:56:cd:ba:24:81: 10:d6:9c:d9:d7:9f:b2:a6:7f:e2:7e:8a:5d:42:1c:6c:40:49: 07:a4:e0:a1:05:64:43:dd:15:ac:36:0d:c2:9e:0f:f6:f3:32: 57:85:d4:c7:65:8e:42:02:73:5d:79:9b:4b:ae:95:eb:24:72: 06:34:3c:b3:6d:fd:79:6f:13:a1:be:82:68:a6:de:0e:2c:d1: dd:bd:21:20:a5:27:90:06:94:db:79:e3:5e:13:46:68:98:36: 63:9c:3f:41:90:82:4e:a7:2c:32:b5:6c:82:47:80:b9:00:aa: 45:12:da:ab:6d:98:f4:f9:65:98:1f:8c:49:4f:62:fa:78:68: 4d:46:30:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEI4Rjg0NkI0MzUzQjY0MjlBQzQwNDNGMzJCQjc4OTRD RjgzODU1RkQwHhcNMjQwNTE5MDI1MTE4WhcNMjQwNTI2MDI1MTE4WjAYMRYwFAYD VQQDEw02NjQ5NjkyNi1mNWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGZ/wMfbwA+ESbEJukstYZ32Se86JAG1Z9KSY5tactbKJlkq9DyxPMKD/XaI /L9Zn00awJ7emDsHcXObBkzhhpILAz9IzqV+/5v451mLruPoD5vkqJz3r0DKqqSJ Idpse2PFvVNrNxLkGj75HSVpH8JrkQPMQgdNmxau8zR5JAy1tBKEvmqNci9EydLn eXTGxOJVyCpFHV4THBBYoUsX2AhMJygDdYt9JRUFU1AZfJu16yEGsvmbg3uMVQRz 2yr9y67/fS3tfiwezgbEmDtiWw9G7YhcixknscX4FZ/Cyb3Xffps4XxcszpZPahA fr0FdavX+mUMh2ulXOMHLEq3qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVHEsf+ WHdRd9fk7LMBbpZuFkbVMB8GA1UdIwQYMBaAFLj4RrQ1O2QprEBD8yu3iUz4OFX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pDbXNRRVB6SzdlSlRQZzRW ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQaEd0RFU3WkNtc1FFUHpLN2VKVFBnNFZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pD bXNRRVB6SzdlSlRQZzRWZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATK5ET++zV9VqFoDjtLKyE5Nj/lg8CB2qfMaCStVzH2p8Rp4qjQhAL JbdrNJiUr9xr0HVkFPvrgyvLi2nZw12KZuCB440NfENF0RlfC2okaGA9GfVyCF/H PcIyJ8xxVUI4UVflKKjmW9JA25kqZxKfBGmVFp8uu7E7Vs26JIEQ1pzZ15+ypn/i fopdQhxsQEkHpOChBWRD3RWsNg3Cng/28zJXhdTHZY5CAnNdeZtLrpXrJHIGNDyz bf15bxOhvoJopt4OLNHdvSEgpSeQBpTbeeNeE0ZomDZjnD9BkIJOpywytWyCR4C5 AKpFEtqrbZj0+WWYH4xJT2L6eGhNRjD7 -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org