$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft File: UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft (raw, json) Hash identifier: JUDZYqC+lH7s+FexnTyPO42UnfN3Xb5JZo7NNNbh32c= Subject key identifier: B8:B4:C6:F2:8F:0D:EB:16:BB:DF:88:9C:9E:71:65:72:6E:61:AE:B5 Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft Manifest number: 93 Signing time: Sun 19 May 2024 06:56:49 +0000 Manifest this update: Sun 19 May 2024 06:56:49 +0000 Manifest next update: Sun 26 May 2024 06:56:49 +0000 Files and hashes: 1: UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl (hash: zDfkVk96v5sB5jyBX+h40IeW3XvcGI7bBzAGa3eMNus=) 2: 8733FAE834E711EE903FDF16C4F9AE02.roa (hash: /wMPPY+3WSt9B5V1EbYUlu0zaPIB3pRXkDCUeyMnaIk=) 3: B7CBA93EE16D11EEA7216916C4F9AE02.roa (hash: OPifrJ/wF45Cw5qTNYepK0fVWtHHqEUc93TQnl39GPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Validity Not Before: May 19 06:56:49 2024 GMT Not After : May 26 06:56:49 2024 GMT Subject: CN=6649a2b1-aa6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:66:6a:d7:a4:0d:79:c2:39:61:cd:61:78: 26:42:6e:af:86:e8:76:59:eb:2b:19:1c:ab:e3:8f: 4d:63:73:15:73:5d:ff:96:4c:e9:92:66:09:f8:87: ce:f3:f3:df:27:2b:5d:ca:44:43:a1:08:af:2a:fb: de:81:a6:27:29:a7:54:fa:2d:c1:33:f1:c1:4d:d5: 0e:0f:17:f9:a3:70:c6:84:21:02:ec:de:c7:cf:5d: 13:5e:34:86:35:af:61:5e:ef:c3:e9:c2:58:c0:86: 87:35:a0:cc:27:31:d6:1e:8f:1a:cb:95:72:00:3d: e0:85:98:4a:39:c3:8a:4f:81:32:33:ea:20:23:42: 24:ed:5d:fe:13:e6:98:ae:b0:c8:ed:8d:d6:65:59: 8d:ff:73:18:10:fc:26:76:0c:8f:ef:d3:3d:6f:c7: bd:07:06:d5:a2:25:ea:d6:4b:fe:b7:b0:ef:f5:1f: 2d:e8:ad:11:e2:da:55:e0:2f:dc:c6:9d:f8:e7:02: 2a:43:c2:bd:64:ef:a5:28:5c:18:cd:0f:80:f1:b0: d8:db:67:d9:ac:f6:08:c0:c7:12:d1:65:e2:23:28: 76:49:fe:dc:95:8c:f5:61:1e:11:6f:8a:17:b0:43: f2:8c:cc:d8:4f:a7:8a:89:7b:50:09:6d:08:28:da: 7d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B4:C6:F2:8F:0D:EB:16:BB:DF:88:9C:9E:71:65:72:6E:61:AE:B5 X509v3 Authority Key Identifier: keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:a6:eb:36:d7:c9:f8:81:f1:87:9c:c8:36:c8:70:34:68:71: 9b:ec:68:21:aa:ba:2a:53:c7:e4:20:80:88:ca:19:a8:95:79: 2b:22:a0:18:14:3e:41:e2:af:05:99:ca:68:a5:4b:af:1b:db: c5:9e:dc:1a:d9:95:d1:4f:bf:83:71:a9:b8:cc:ad:06:f2:7b: 34:33:57:14:23:f3:08:63:c0:9e:07:54:5d:23:ca:86:28:09: 35:df:88:e2:9a:c2:3f:4d:d9:9a:00:ed:f0:f2:28:b4:8e:c9: 67:77:9a:5e:21:fd:79:ac:b8:46:c0:11:37:15:31:08:96:19: 4b:df:a1:4d:61:01:9c:91:97:de:1f:8b:8c:9a:1c:de:6d:7b: 13:68:86:99:f3:09:ff:02:9d:45:e9:d9:04:4f:4f:7e:88:03: 17:b2:28:a3:fd:78:5b:e7:2a:e8:7c:e0:e5:97:6f:cf:b2:f9: fa:6d:c2:41:a5:df:2c:fa:67:39:4c:b7:29:32:28:74:dc:a5: e2:e9:49:9d:e6:55:d3:9f:32:93:c4:31:e5:45:f2:10:bf:a5: 8d:fc:67:8f:1f:2f:25:2b:47:ba:52:6c:0a:d3:7a:03:38:18: 8d:19:82:78:38:b8:fb:24:6a:55:a2:ad:48:ef:26:ef:fa:3a: fd:52:1a:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwRkExMTAvBgNVBAUTKDUwQTU4MEYxQkQxMjVGMEFFREM1OTFGRkM4RENEQTlD NjZFMTJDOUYwHhcNMjQwNTE5MDY1NjQ5WhcNMjQwNTI2MDY1NjQ5WjAYMRYwFAYD VQQDEw02NjQ5YTJiMS1hYTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssBmatekDXnCOWHNYXgmQm6vhuh2WesrGRyr449NY3MVc13/lkzpkmYJ+IfO 8/PfJytdykRDoQivKvvegaYnKadU+i3BM/HBTdUODxf5o3DGhCEC7N7Hz10TXjSG Na9hXu/D6cJYwIaHNaDMJzHWHo8ay5VyAD3ghZhKOcOKT4EyM+ogI0Ik7V3+E+aY rrDI7Y3WZVmN/3MYEPwmdgyP79M9b8e9BwbVoiXq1kv+t7Dv9R8t6K0R4tpV4C/c xp345wIqQ8K9ZO+lKFwYzQ+A8bDY22fZrPYIwMcS0WXiIyh2Sf7clYz1YR4Rb4oX sEPyjMzYT6eKiXtQCW0IKNp9OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLi0xvKP DesWu9+InJ5xZXJuYa61MB8GA1UdIwQYMBaAFFClgPG9El8K7cWR/8jc2pxm4Syf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjBGQS8yMDZERkM1MDM0 RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3cnR4WkhfeU56YW5HYmhM SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLV0E4YjBTWHdydHhaSF95TnphbkdiaExKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjBGQS8yMDZERkM1MDM0RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3 cnR4WkhfeU56YW5HYmhMSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzpus218n4gfGHnMg2yHA0aHGb7GghqroqU8fkIICIyhmolXkrIqAY FD5B4q8FmcpopUuvG9vFntwa2ZXRT7+Dcam4zK0G8ns0M1cUI/MIY8CeB1RdI8qG KAk134jimsI/TdmaAO3w8ii0jslnd5peIf15rLhGwBE3FTEIlhlL36FNYQGckZfe H4uMmhzebXsTaIaZ8wn/Ap1F6dkET09+iAMXsiij/Xhb5yrofODll2/Psvn6bcJB pd8s+mc5TLcpMih03KXi6Umd5lXTnzKTxDHlRfIQv6WN/GePHy8lK0e6UmwK03oD OBiNGYJ4OLj7JGpVoq1I7ybv+jr9Uhrt -----END CERTIFICATE-----Generated at Sun May 19 07:40:40 2024 by rpki-client on console-fra.rpki-client.org