$ rpki-client -vvf rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft File: UHRCEm0jxuW-SuMZdJsnbhcum1w.mft (raw, json) Hash identifier: CDhGRGNq5fj5w0IWHlhNlFg055zyLE2uRr21iyzbzkg= Subject key identifier: 5A:74:D8:2E:2D:86:84:F0:AE:05:0C:34:20:14:DB:9B:9F:6F:CE:D4 Authority key identifier: 50:74:42:12:6D:23:C6:E5:BE:4A:E3:19:74:9B:27:6E:17:2E:9B:5C Certificate issuer: /CN=A91790ED/serialNumber=507442126D23C6E5BE4AE319749B276E172E9B5C Certificate serial: 0D8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft Manifest number: 0D8A Signing time: Sat 18 May 2024 18:32:08 +0000 Manifest this update: Sat 18 May 2024 18:32:08 +0000 Manifest next update: Sat 25 May 2024 18:32:08 +0000 Files and hashes: 1: UHRCEm0jxuW-SuMZdJsnbhcum1w.crl (hash: ENU5tENxwtfBU8Ff8M4PBWU75/j4uq+PbWuOpNEY2mM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.crl rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3466 (0xd8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91790ED/serialNumber=507442126D23C6E5BE4AE319749B276E172E9B5C Validity Not Before: May 18 18:32:08 2024 GMT Not After : May 25 18:32:08 2024 GMT Subject: CN=6648f428-34f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:40:9e:fa:2b:52:d9:8e:5f:64:02:99:bd:26: c7:78:d8:40:7f:6a:9e:e6:5f:61:65:17:46:d6:ea: f2:e6:ae:c2:7f:dc:97:f2:45:ef:fc:29:0f:05:50: 6c:08:ef:5a:8a:0e:9e:bd:ba:5a:62:02:5b:bd:29: 7b:19:88:d8:39:2f:82:97:f0:f1:51:52:d5:bc:4d: 3d:10:d7:01:ee:c5:f1:4f:e1:5c:e0:23:ea:91:af: 25:20:98:08:3d:7c:3a:97:f6:d1:3c:6a:87:68:a5: 73:26:e7:56:39:55:3a:ea:35:e1:ad:1a:56:ed:27: 8e:cc:14:98:bb:49:05:54:8f:18:2b:4e:57:6e:e1: e8:bc:72:5f:65:66:a7:f6:4f:37:73:31:6b:8d:d9: 5f:02:a0:97:a4:79:91:bc:6e:27:37:ce:64:6d:b4: 23:ff:0d:c6:f5:ea:a8:8c:b2:21:40:72:b0:37:46: fb:c3:c1:b1:d9:e4:f9:32:44:d1:9d:c8:2f:7a:d0: 1f:f2:7a:8f:fd:33:3d:ac:c5:fc:f4:74:98:eb:e2: 64:23:81:a3:ad:dd:06:9e:f4:32:95:a9:81:60:80: 6b:7d:fc:cb:90:76:cb:6d:6c:ac:b4:2b:08:08:bc: b7:c3:aa:44:b5:70:20:a0:0a:e9:5b:d6:26:87:f6: 7f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:74:D8:2E:2D:86:84:F0:AE:05:0C:34:20:14:DB:9B:9F:6F:CE:D4 X509v3 Authority Key Identifier: keyid:50:74:42:12:6D:23:C6:E5:BE:4A:E3:19:74:9B:27:6E:17:2E:9B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d1:56:b0:f2:84:29:33:3a:56:02:f5:d3:13:40:be:01:39: fe:23:74:8e:8d:85:2a:c3:e1:bc:ad:f6:c0:2d:c7:4f:ae:0d: c6:64:1d:48:70:0e:a7:e9:66:9c:26:a6:64:f0:4c:fe:b2:33: 9b:9e:a2:cc:db:6b:7e:d9:75:62:2f:11:90:49:4d:3f:3d:28: 70:c7:18:12:e0:f0:a4:61:69:e7:73:af:f8:61:23:f0:c4:e6: fa:f2:b9:91:59:b4:76:89:45:74:6c:77:c5:1d:22:62:67:e4: 8a:af:ab:e9:0a:01:5f:cc:30:36:9a:f7:94:41:f4:44:3d:74: d0:fb:b6:a9:af:25:23:36:99:c3:84:00:f6:b8:71:2d:26:29: 4e:a0:db:93:8b:35:8c:dd:57:6f:84:e2:25:79:92:20:b8:94: 5b:a8:50:46:fd:ef:4f:e5:ea:2e:7a:bb:35:4e:7f:ab:2a:67: 84:df:d1:d5:0b:af:00:dd:e9:45:bd:3d:a5:e4:8b:e2:b6:2c: 0b:e5:91:2c:29:0c:ec:01:98:81:5d:68:f0:29:20:6b:f1:a1: d0:b2:1d:27:6f:2d:ad:ae:47:99:40:42:24:11:53:94:81:01: 24:05:53:9b:5c:82:e4:13:5c:23:23:bf:e3:4a:e0:92:18:75: ee:d7:81:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzkwRUQxMTAvBgNVBAUTKDUwNzQ0MjEyNkQyM0M2RTVCRTRBRTMxOTc0OUIyNzZF MTcyRTlCNUMwHhcNMjQwNTE4MTgzMjA4WhcNMjQwNTI1MTgzMjA4WjAYMRYwFAYD VQQDEw02NjQ4ZjQyOC0zNGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwECe+itS2Y5fZAKZvSbHeNhAf2qe5l9hZRdG1ury5q7Cf9yX8kXv/CkPBVBs CO9aig6evbpaYgJbvSl7GYjYOS+Cl/DxUVLVvE09ENcB7sXxT+Fc4CPqka8lIJgI PXw6l/bRPGqHaKVzJudWOVU66jXhrRpW7SeOzBSYu0kFVI8YK05XbuHovHJfZWan 9k83czFrjdlfAqCXpHmRvG4nN85kbbQj/w3G9eqojLIhQHKwN0b7w8Gx2eT5MkTR ncgvetAf8nqP/TM9rMX89HSY6+JkI4Gjrd0GnvQylamBYIBrffzLkHbLbWystCsI CLy3w6pEtXAgoArpW9Ymh/Z/6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFp02C4t hoTwrgUMNCAU25ufb87UMB8GA1UdIwQYMBaAFFB0QhJtI8blvkrjGXSbJ24XLptc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTBFRC8wQUJCODY0MjlE MUIxMUU5QkRENkU1NzRDNEY5QUUwMi9VSFJDRW0wanh1Vy1TdU1aZEpzbmJoY3Vt MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIUkNFbTBqeHVXLVN1TVpkSnNuYmhjdW0xdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTBFRC8wQUJCODY0MjlEMUIxMUU5QkRENkU1NzRDNEY5QUUwMi9VSFJDRW0wanh1 Vy1TdU1aZEpzbmJoY3VtMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq0Vaw8oQpMzpWAvXTE0C+ATn+I3SOjYUqw+G8rfbALcdPrg3GZB1I cA6n6WacJqZk8Ez+sjObnqLM22t+2XViLxGQSU0/PShwxxgS4PCkYWnnc6/4YSPw xOb68rmRWbR2iUV0bHfFHSJiZ+SKr6vpCgFfzDA2mveUQfREPXTQ+7apryUjNpnD hAD2uHEtJilOoNuTizWM3VdvhOIleZIguJRbqFBG/e9P5eouers1Tn+rKmeE39HV C68A3elFvT2l5IvitiwL5ZEsKQzsAZiBXWjwKSBr8aHQsh0nby2trkeZQEIkEVOU gQEkBVObXILkE1wjI7/jSuCSGHXu14Gd -----END CERTIFICATE-----Generated at Sat May 18 19:21:04 2024 by rpki-client on console-fra.rpki-client.org