$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft File: vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft (raw, json) Hash identifier: SC4e9rQR19eKq+9YfhpYZR6GLnzbcP4ZEr6Af0uBaYw= Subject key identifier: B1:66:F2:C6:E3:FB:CB:2A:73:A4:7F:10:1F:53:28:77:4D:AD:44:E4 Authority key identifier: BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12 Certificate issuer: /CN=A9181EBC/serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312 Certificate serial: 05D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft Manifest number: 05C8 Signing time: Fri 31 May 2024 00:37:19 +0000 Manifest this update: Fri 31 May 2024 00:37:18 +0000 Manifest next update: Fri 07 Jun 2024 00:37:18 +0000 Files and hashes: 1: vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl (hash: +3EUQLO01xeCk7TzYRw0GmOVHwEvhdtkk8xq0B8QwU0=) 2: 62D6FB5474D811EB99569279C4F9AE02.roa (hash: 22SG0N7IDRpw/UfyebZlKgm6Mx25si98uz9Q1Sh3QKY=) 3: 625827FC74D811EB99569279C4F9AE02.roa (hash: JFFWfCjD5qtOtFQ9ijhF8tjATTHGoLJqHkkNlTzi7cE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 00:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1490 (0x5d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EBC/serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312 Validity Not Before: May 31 00:37:18 2024 GMT Not After : Jun 7 00:37:18 2024 GMT Subject: CN=66591bbf-b6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:17:47:65:6b:ea:43:0a:72:56:e6:d9:a2: 99:fb:76:8a:52:e8:f9:1e:50:45:e0:7a:46:a1:c1: 8f:1b:46:ba:37:c5:61:41:76:16:7f:d2:e1:55:71: 72:e9:a9:45:e6:0d:a3:80:e9:8e:7b:d5:0c:3b:46: 93:d6:93:e8:c4:c0:b0:68:d7:08:54:52:dd:a9:2e: 7c:67:3b:c3:34:3e:ab:64:c8:14:91:04:65:21:ad: 29:ad:56:51:16:15:22:14:3f:8b:26:84:9b:58:93: ad:e3:3c:79:ac:85:34:8e:c2:8b:5c:eb:63:d9:c1: d2:fc:21:ae:3f:26:06:68:ae:e1:42:a9:cc:68:ca: 38:eb:66:f4:be:85:69:0f:36:c2:d1:98:f6:00:68: 8c:20:3e:22:bd:91:a6:83:73:f9:69:7a:a3:bd:ae: 33:9f:a5:36:14:1f:eb:55:ab:99:3e:6d:f2:45:44: af:40:ed:e3:94:12:45:01:82:66:f0:37:1f:5f:24: b8:c4:f0:bd:86:3c:de:52:92:a5:52:36:66:f5:af: 28:ab:0d:45:76:1f:b8:d3:7f:6b:18:93:83:2c:1d: e3:75:e5:4c:59:e8:f3:c0:20:8c:bc:7c:7e:d4:35: 0f:59:e3:c4:1d:79:98:bc:8c:15:5f:9d:89:a6:42: 71:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:66:F2:C6:E3:FB:CB:2A:73:A4:7F:10:1F:53:28:77:4D:AD:44:E4 X509v3 Authority Key Identifier: keyid:BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:dc:1f:59:95:47:42:78:7d:74:49:13:99:02:68:7d:57:1f: 99:98:59:78:77:e9:9e:06:f8:63:43:e8:d5:6a:8b:6e:ce:cb: e7:a2:38:ba:19:ba:b9:44:62:34:3c:bb:81:e1:8f:4d:81:2c: 24:3b:d4:68:d2:30:5c:3d:70:60:04:23:0c:cf:70:1a:1a:49: fe:2d:a7:61:b2:57:67:b5:ed:af:38:53:64:95:cc:58:f4:de: c9:b2:7e:db:3a:be:8b:01:56:f7:25:93:29:c5:95:1a:56:88: 9e:b5:9b:b5:35:3f:a8:9c:6f:46:90:7e:1c:bb:1f:a7:de:e2: 3f:a1:67:5c:21:23:76:83:74:7f:a8:7d:04:aa:43:e8:00:95: d0:d1:a4:ef:73:59:d6:8e:95:a1:1c:15:e8:c1:f3:f2:50:80: aa:35:bb:9e:8d:d9:68:22:fb:f3:70:65:ef:f1:7b:cd:b3:58: c5:be:70:17:dc:cc:dd:46:29:90:7f:05:3f:73:80:7b:2c:bc: 07:ff:fd:66:9e:26:b5:31:7a:c6:19:8d:42:10:af:38:ff:e3: 48:b6:1f:e6:75:d7:01:16:c7:b0:1b:2e:cb:7e:9f:1d:30:d0: 1c:81:4d:d8:b9:aa:4f:7b:d4:b0:54:64:b0:d8:b4:df:ff:9f: dd:49:f9:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQkMxMTAvBgNVBAUTKEJENDhCQUZBMzJBRDJFOTNCODg5Q0YzRTM4NjlBQzAz NEExNzIzMTIwHhcNMjQwNTMxMDAzNzE4WhcNMjQwNjA3MDAzNzE4WjAYMRYwFAYD VQQDEw02NjU5MWJiZi1iNmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmMXR2Vr6kMKclbm2aKZ+3aKUuj5HlBF4HpGocGPG0a6N8VhQXYWf9LhVXFy 6alF5g2jgOmOe9UMO0aT1pPoxMCwaNcIVFLdqS58ZzvDND6rZMgUkQRlIa0prVZR FhUiFD+LJoSbWJOt4zx5rIU0jsKLXOtj2cHS/CGuPyYGaK7hQqnMaMo462b0voVp DzbC0Zj2AGiMID4ivZGmg3P5aXqjva4zn6U2FB/rVauZPm3yRUSvQO3jlBJFAYJm 8DcfXyS4xPC9hjzeUpKlUjZm9a8oqw1Fdh+4039rGJODLB3jdeVMWejzwCCMvHx+ 1DUPWePEHXmYvIwVX52JpkJx/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFm8sbj +8sqc6R/EB9TKHdNrUTkMB8GA1UdIwQYMBaAFL1IuvoyrS6TuInPPjhprANKFyMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVCQy8zODgzNDE0ODc0 RDYxMUVCQkNCREZBNzNDNEY5QUUwMi92VWk2LWpLdExwTzRpYzgtT0dtc0Ewb1hJ eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZVaTYtakt0THBPNGljOC1PR21zQTBvWEl4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVCQy8zODgzNDE0ODc0RDYxMUVCQkNCREZBNzNDNEY5QUUwMi92VWk2LWpLdExw TzRpYzgtT0dtc0Ewb1hJeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM3B9ZlUdCeH10SROZAmh9Vx+ZmFl4d+meBvhjQ+jVaotuzsvnoji6 Gbq5RGI0PLuB4Y9NgSwkO9Ro0jBcPXBgBCMMz3AaGkn+Ladhsldnte2vOFNklcxY 9N7Jsn7bOr6LAVb3JZMpxZUaVoietZu1NT+onG9GkH4cux+n3uI/oWdcISN2g3R/ qH0EqkPoAJXQ0aTvc1nWjpWhHBXowfPyUICqNbuejdloIvvzcGXv8XvNs1jFvnAX 3MzdRimQfwU/c4B7LLwH//1mnia1MXrGGY1CEK84/+NIth/mddcBFsewGy7Lfp8d MNAcgU3YuapPe9SwVGSw2LTf/5/dSfnm -----END CERTIFICATE-----Generated at Fri May 31 01:33:49 2024 by rpki-client on console-ams.rpki-client.org