$ rpki-client -vvf rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft File: UHF-n6DMN8QGf4M-kPt-chDzxZM.mft (raw, json) Hash identifier: AE3SJC+XeUJMj/pgvUJBVYVqWKdlps6bAjtcaYIzPZ8= Subject key identifier: 12:D8:AD:F6:C3:75:32:7A:DD:82:FB:1D:1E:A2:F7:09:F3:B3:5C:9C Authority key identifier: 50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93 Certificate issuer: /CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593 Certificate serial: 06AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft Manifest number: 06A6 Signing time: Sat 01 Jun 2024 00:06:36 +0000 Manifest this update: Sat 01 Jun 2024 00:06:36 +0000 Manifest next update: Sat 08 Jun 2024 00:06:36 +0000 Files and hashes: 1: UHF-n6DMN8QGf4M-kPt-chDzxZM.crl (hash: vw0iPODJLGe0sYWUtURXJ2vvgGEXmckZ1Y7MYi+GZCI=) 2: BDAC3ACA1E7111EB93874336C4F9AE02.roa (hash: 94ZEhCloSNNdL8tuIKR2FHNPzGO7lqHRz+YRirwFlKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1707 (0x6ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593 Validity Not Before: Jun 1 00:06:36 2024 GMT Not After : Jun 8 00:06:36 2024 GMT Subject: CN=665a660c-a681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:5f:c7:b3:00:32:97:11:9e:d4:eb:f5:cd: 79:6d:53:20:a0:b4:f5:e1:f3:ab:79:90:94:68:3c: ea:a6:9e:28:e5:44:35:e4:14:59:86:7b:95:a3:73: 92:22:8c:77:9b:3d:ef:c8:92:b8:34:99:f8:f0:67: 6e:65:50:b2:f7:e9:58:42:76:07:46:3f:b5:6a:72: 21:ab:52:14:68:e0:a4:54:f0:86:c8:12:53:cc:3e: 16:0c:ab:83:46:ad:6d:d3:80:9c:24:f9:19:ae:3c: 26:2c:64:d7:39:bd:9c:84:98:fb:1b:61:51:1f:8f: 96:1f:ee:c9:22:da:27:da:33:cb:fc:4c:84:47:50: 40:28:62:9c:90:0d:2e:0f:c4:b9:97:90:ae:62:d8: 48:ca:1c:75:ed:2d:90:35:59:b4:f0:ef:53:fb:87: da:f0:49:e2:23:40:a1:07:ea:ab:b1:02:a9:f4:f6: d3:40:b7:38:18:b5:34:f1:61:dd:11:e3:34:8c:b7: 2a:41:60:ec:5e:26:02:46:2e:55:20:9f:25:d8:fa: a3:30:dc:e2:42:22:4e:d3:a2:32:8b:7c:a8:bf:2d: 3f:c9:36:82:0b:9e:f3:22:03:6f:5d:b3:da:5c:df: d0:00:72:a9:3a:84:ee:a5:97:24:a1:fc:be:24:63: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D8:AD:F6:C3:75:32:7A:DD:82:FB:1D:1E:A2:F7:09:F3:B3:5C:9C X509v3 Authority Key Identifier: keyid:50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7d:79:71:2a:61:74:2d:98:62:b3:a2:1a:39:61:0f:75:62: 03:5f:39:31:67:f5:ba:ce:8f:8d:16:28:b3:b7:1b:bb:dd:f5: a4:a6:76:fe:59:46:9f:60:72:36:cd:72:ea:be:97:10:ed:c9: f3:15:90:90:49:38:e5:bc:f1:e4:4f:0e:39:25:28:a2:ad:e2: 68:71:0d:36:b4:d8:d9:2f:90:80:d0:44:3e:6c:e7:9f:61:d2: 1b:77:8b:41:96:66:f6:3c:41:6b:cd:c3:9e:b3:3b:ee:1b:07: 25:00:13:01:75:47:ce:81:43:6b:8c:1d:c8:1c:af:c3:d1:e8: 40:63:42:0f:f3:3b:ee:61:44:5c:0a:59:c0:af:84:f6:b0:77: 79:3d:e8:8e:dd:0a:6e:98:73:7b:28:82:72:4f:83:14:7b:09: e1:f5:6c:94:d2:86:88:23:c7:4a:ea:1c:83:04:b7:3c:b3:43: 9d:a1:67:0a:e2:25:a8:a5:aa:72:87:90:a4:ac:65:5a:bc:ec: 69:e6:7d:30:e5:ad:76:fe:83:01:9a:65:57:fb:b6:f3:58:14: 84:a1:ea:a9:c9:71:59:c2:ef:87:9b:6e:62:d6:a6:01:b0:bf: ee:03:d5:c7:f6:3a:b5:9d:b4:e8:83:f7:62:94:67:2f:d9:65: d1:c9:6b:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MkIxMTAvBgNVBAUTKDUwNzE3RTlGQTBDQzM3QzQwNjdGODMzRTkwRkI3RTcy MTBGM0M1OTMwHhcNMjQwNjAxMDAwNjM2WhcNMjQwNjA4MDAwNjM2WjAYMRYwFAYD VQQDEw02NjVhNjYwYy1hNjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAru1fx7MAMpcRntTr9c15bVMgoLT14fOreZCUaDzqpp4o5UQ15BRZhnuVo3OS Iox3mz3vyJK4NJn48GduZVCy9+lYQnYHRj+1anIhq1IUaOCkVPCGyBJTzD4WDKuD Rq1t04CcJPkZrjwmLGTXOb2chJj7G2FRH4+WH+7JIton2jPL/EyER1BAKGKckA0u D8S5l5CuYthIyhx17S2QNVm08O9T+4fa8EniI0ChB+qrsQKp9PbTQLc4GLU08WHd EeM0jLcqQWDsXiYCRi5VIJ8l2PqjMNziQiJO06Iyi3yovy0/yTaCC57zIgNvXbPa XN/QAHKpOoTupZckofy+JGPOzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLYrfbD dTJ63YL7HR6i9wnzs1ycMB8GA1UdIwQYMBaAFFBxfp+gzDfEBn+DPpD7fnIQ88WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyQi9EODNENjI5NDFF NkYxMUVCQUExMzlFMzNDNEY5QUUwMi9VSEYtbjZETU44UUdmNE0ta1B0LWNoRHp4 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIRi1uNkRNTjhRR2Y0TS1rUHQtY2hEenhaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTUyQi9EODNENjI5NDFFNkYxMUVCQUExMzlFMzNDNEY5QUUwMi9VSEYtbjZETU44 UUdmNE0ta1B0LWNoRHp4Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+fXlxKmF0LZhis6IaOWEPdWIDXzkxZ/W6zo+NFiiztxu73fWkpnb+ WUafYHI2zXLqvpcQ7cnzFZCQSTjlvPHkTw45JSiireJocQ02tNjZL5CA0EQ+bOef YdIbd4tBlmb2PEFrzcOeszvuGwclABMBdUfOgUNrjB3IHK/D0ehAY0IP8zvuYURc ClnAr4T2sHd5PeiO3QpumHN7KIJyT4MUewnh9WyU0oaII8dK6hyDBLc8s0OdoWcK 4iWopapyh5CkrGVavOxp5n0w5a12/oMBmmVX+7bzWBSEoeqpyXFZwu+Hm25i1qYB sL/uA9XH9jq1nbTog/dilGcv2WXRyWt3 -----END CERTIFICATE-----Generated at Sat Jun 1 00:32:59 2024 by rpki-client on console-fra.rpki-client.org