$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft File: UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json) Hash identifier: 3kUBC+F1/1Rn6D0sjwcXCNwJ2M65UaHZjUtzis4UFVo= Subject key identifier: AD:27:B6:1F:12:CD:D5:11:A4:D1:5D:42:24:CC:DC:FE:0B:8F:60:32 Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507 Certificate serial: 0B25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft Manifest number: 0B08 Signing time: Sat 18 May 2024 20:01:34 +0000 Manifest this update: Sat 18 May 2024 20:01:34 +0000 Manifest next update: Sat 25 May 2024 20:01:34 +0000 Files and hashes: 1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: c0bqa5+a9QLRpm2u7xV6IG7iZWtS91/mn85uiV7uroM=) 2: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: TQmQSnccYn9RdDaPIWHz3I+xXgULEgcde15Yil802tY=) 3: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: cAygPF0dsBX1wYUCyZIW25KS6kuT3P0mPGPIqFTVNDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2853 (0xb25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507 Validity Not Before: May 18 20:01:34 2024 GMT Not After : May 25 20:01:34 2024 GMT Subject: CN=6649091e-7c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:de:dc:4f:71:5e:9c:54:af:f4:93:6f:e8:17: 24:11:e2:47:19:3a:b3:f4:f6:fe:18:f0:ff:4c:58: 5a:9f:86:50:ac:d4:90:df:dc:2e:7b:51:74:4f:16: c7:fc:41:8a:e2:4c:cb:29:bf:7a:6b:c8:f1:f0:29: b4:cb:ba:59:2e:ba:4b:c2:67:3a:17:f0:01:4e:9e: 3b:60:33:a9:d7:4f:a5:33:88:f7:c7:d8:6b:f5:b6: 75:03:50:1e:d0:5c:07:bf:75:b5:73:dd:ce:f0:55: c0:f1:fb:67:eb:af:c9:27:01:b4:59:62:a1:bc:79: 2a:ad:3a:57:76:90:21:c5:cc:10:ed:c6:9d:9d:64: 21:e8:4d:0a:ef:50:b9:ab:35:52:c9:20:7c:14:01: 21:00:a0:0c:de:f0:3b:c2:b6:d6:68:0d:8f:21:1b: c5:09:84:b1:fc:1a:57:11:58:82:bb:df:44:70:78: bf:33:58:f0:44:d2:04:62:f4:62:5e:d5:58:4e:70: ef:5c:7b:33:47:ba:26:71:02:50:09:11:be:f5:c1: b5:71:36:84:19:06:94:d7:02:8f:ee:fd:bd:4e:14: 04:7a:b0:f2:81:4f:73:66:aa:83:18:5c:50:bc:fe: cb:8f:f8:e7:32:4c:3b:fd:48:af:9f:0b:bf:84:c4: 76:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:27:B6:1F:12:CD:D5:11:A4:D1:5D:42:24:CC:DC:FE:0B:8F:60:32 X509v3 Authority Key Identifier: keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:26:6d:02:ae:d6:95:f8:eb:5b:bc:e0:a2:a5:87:98:7b:a7: 28:99:eb:99:51:21:ab:7a:d1:68:e2:fc:15:5a:c3:53:fc:b5: 72:6d:e7:19:c2:98:58:bf:b7:b0:69:df:a1:92:27:04:a4:ae: 42:a7:95:f1:97:ea:c8:07:c0:20:3f:a1:7a:06:ae:1f:60:4a: 5f:27:1b:48:76:fa:14:5b:1f:32:d6:ab:4d:ef:ed:25:bd:fa: 93:7c:63:82:79:e1:8a:e0:50:ee:63:85:25:56:40:c0:24:2d: 43:69:ef:bc:4c:80:b3:08:3f:36:6a:78:4e:7b:29:c2:96:43: 85:20:34:40:66:1e:b0:86:d7:91:67:5a:bd:49:ef:09:9e:bf: 83:8f:af:f3:11:b7:16:cc:0c:53:56:5c:6b:84:23:2e:72:2b: f9:c8:65:55:ba:d1:35:9b:a7:be:2a:bf:8c:41:ac:56:54:5a: 90:a1:f7:3d:22:c1:46:34:03:c2:90:88:e4:c3:1f:6c:01:e0: 66:c5:28:54:81:bc:7e:18:6f:4a:77:55:dc:35:cc:b2:8a:bd: aa:b3:c5:de:ac:36:3c:b1:b7:da:a4:61:12:6e:06:04:aa:eb: da:45:69:c7:d9:fe:eb:d4:01:24:1b:61:32:f4:6d:7c:dc:93: ec:a3:57:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VCMEMxMTAvBgNVBAUTKDUwNkQ3ODBFRDE3OTc0ODBGMTUyNTEzNDdGQzI4NDQz RDcyRTk1MDcwHhcNMjQwNTE4MjAwMTM0WhcNMjQwNTI1MjAwMTM0WjAYMRYwFAYD VQQDEw02NjQ5MDkxZS03YzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyN7cT3FenFSv9JNv6BckEeJHGTqz9Pb+GPD/TFhan4ZQrNSQ39wue1F0TxbH /EGK4kzLKb96a8jx8Cm0y7pZLrpLwmc6F/ABTp47YDOp10+lM4j3x9hr9bZ1A1Ae 0FwHv3W1c93O8FXA8ftn66/JJwG0WWKhvHkqrTpXdpAhxcwQ7cadnWQh6E0K71C5 qzVSySB8FAEhAKAM3vA7wrbWaA2PIRvFCYSx/BpXEViCu99EcHi/M1jwRNIEYvRi XtVYTnDvXHszR7omcQJQCRG+9cG1cTaEGQaU1wKP7v29ThQEerDygU9zZqqDGFxQ vP7Lj/jnMkw7/Uivnwu/hMR2BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0nth8S zdURpNFdQiTM3P4Lj2AyMB8GA1UdIwQYMBaAFFBteA7ReXSA8VJRNH/ChEPXLpUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUIwQy82MTM3NUI2QTIy MkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJRHhVbEUwZjhLRVE5Y3Vs UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VHMTREdEY1ZElEeFVsRTBmOEtFUTljdWxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUIwQy82MTM3NUI2QTIyMkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJ RHhVbEUwZjhLRVE5Y3VsUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCJm0CrtaV+OtbvOCipYeYe6comeuZUSGretFo4vwVWsNT/LVybecZ wphYv7ewad+hkicEpK5Cp5Xxl+rIB8AgP6F6Bq4fYEpfJxtIdvoUWx8y1qtN7+0l vfqTfGOCeeGK4FDuY4UlVkDAJC1Dae+8TICzCD82anhOeynClkOFIDRAZh6whteR Z1q9Se8Jnr+Dj6/zEbcWzAxTVlxrhCMuciv5yGVVutE1m6e+Kr+MQaxWVFqQofc9 IsFGNAPCkIjkwx9sAeBmxShUgbx+GG9Kd1XcNcyyir2qs8XerDY8sbfapGESbgYE quvaRWnH2f7r1AEkG2Ey9G183JPso1eC -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org