$ rpki-client -vvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft File: _UXMVAPGTPsjCqfe7RC8aCKNdHM.mft (raw, json) Hash identifier: 2vsQRc/udutzop13ufsU5aO3AU7oXgR+HUYKnJwdFFg= Subject key identifier: 22:C6:A9:78:A4:73:3B:AF:77:F6:69:4D:4E:EC:FE:50:61:8A:A2:F4 Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 Certificate issuer: /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft Manifest number: 87 Signing time: Sun 19 May 2024 07:07:01 +0000 Manifest this update: Sun 19 May 2024 07:07:01 +0000 Manifest next update: Sun 26 May 2024 07:07:01 +0000 Files and hashes: 1: _UXMVAPGTPsjCqfe7RC8aCKNdHM.crl (hash: TizSi+jhCC/RMKVYl9Qb++ik9AtD5FJnl0uN1KfWg9A=) 2: 6B62D92248D511EEBE05CC7FC4F9AE02.roa (hash: xcyXmRo63jwFZIE2FuEzx/fEPPWZDFFK+9ecvt7qZsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Validity Not Before: May 19 07:07:01 2024 GMT Not After : May 26 07:07:01 2024 GMT Subject: CN=6649a515-6200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e2:58:65:a3:a1:c1:68:45:7d:5a:52:98:6c: 3e:c4:92:08:54:0b:1c:e2:cb:d4:f3:42:e8:87:3c: 6f:57:81:4b:0d:f4:6c:1c:ae:22:31:08:67:e8:8a: a5:05:4f:30:b6:aa:33:00:48:e9:fe:18:f5:f4:f9: 9d:e1:af:6a:74:df:b8:8e:a8:76:1b:fc:c9:9c:9c: 0d:8c:71:62:42:0e:81:84:be:6d:11:8d:45:7e:20: 36:35:3d:4e:42:53:d4:73:9b:4d:f2:75:07:87:1d: f3:65:8b:6f:24:c9:23:b1:d9:66:b0:19:6b:8d:a6: 12:af:8f:be:02:6a:29:68:ba:fc:47:b4:69:98:82: 8e:43:3f:39:79:b8:68:c1:3f:ea:9a:89:51:e9:e5: 27:d4:6c:38:9a:00:23:03:ac:fa:2a:cd:51:40:02: 93:45:40:d5:f5:9c:70:7e:26:58:0d:7c:66:52:d1: e3:b2:32:f9:db:49:b8:d3:bc:38:a1:7d:ac:d6:cf: 6a:4b:cb:38:1e:71:be:47:48:35:12:88:63:7e:52: aa:7b:3d:a4:2b:5f:37:c1:cc:5c:c0:f2:a2:76:8a: 82:90:cb:02:51:77:9c:88:32:d6:72:e0:1e:8b:d0: fa:55:2c:90:53:98:32:53:eb:0a:99:5e:ef:6d:5c: 0d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C6:A9:78:A4:73:3B:AF:77:F6:69:4D:4E:EC:FE:50:61:8A:A2:F4 X509v3 Authority Key Identifier: keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:fe:f0:e5:c2:eb:11:b5:10:90:5e:00:fd:ed:2f:87:ad:60: fd:06:9e:60:e2:23:60:63:cd:37:e5:00:d0:e4:c2:0d:df:ee: 76:5d:4a:90:73:36:53:6f:ed:de:37:d5:d2:32:48:2d:01:f5: e0:d2:49:3f:5a:7b:9a:13:01:b4:68:07:d8:02:f8:92:9c:ad: cf:f2:61:4c:87:4d:60:c7:bb:92:7a:ce:25:58:eb:5e:04:f4: d8:da:68:22:62:19:95:8d:fa:9f:e8:e1:0d:4e:74:3c:61:c0: 87:f8:b8:08:ff:c9:02:54:70:91:e5:87:ce:41:18:c1:9c:16: b3:44:21:de:c2:bd:d1:3b:c7:48:9b:fd:96:30:34:f5:34:48: d0:ac:95:9c:eb:8f:e2:ce:c1:55:6d:cc:80:ce:ab:c5:4c:38: 65:1d:be:32:fe:c3:72:0a:69:f7:1e:32:53:4d:55:8d:52:c6: db:5a:da:a0:08:91:c4:94:fe:f1:19:46:f8:0b:33:f2:05:d3: 00:34:c6:15:5c:69:a5:39:e0:e0:ed:04:7f:0e:a9:3e:22:0d: 8d:76:3c:82:e3:6f:ea:07:d2:a1:37:54:30:db:ba:bd:b5:e9: 1b:4f:da:22:66:07:02:96:47:ea:26:06:54:bf:1c:4d:e5:40: 23:96:a1:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCQ0MxMTAvBgNVBAUTKEZENDVDQzU0MDNDNjRDRkIyMzBBQTdERUVEMTBCQzY4 MjI4RDc0NzMwHhcNMjQwNTE5MDcwNzAxWhcNMjQwNTI2MDcwNzAxWjAYMRYwFAYD VQQDEw02NjQ5YTUxNS02MjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uJYZaOhwWhFfVpSmGw+xJIIVAsc4svU80LohzxvV4FLDfRsHK4iMQhn6Iql BU8wtqozAEjp/hj19Pmd4a9qdN+4jqh2G/zJnJwNjHFiQg6BhL5tEY1FfiA2NT1O QlPUc5tN8nUHhx3zZYtvJMkjsdlmsBlrjaYSr4++AmopaLr8R7RpmIKOQz85ebho wT/qmolR6eUn1Gw4mgAjA6z6Ks1RQAKTRUDV9ZxwfiZYDXxmUtHjsjL520m407w4 oX2s1s9qS8s4HnG+R0g1EohjflKqez2kK183wcxcwPKidoqCkMsCUXeciDLWcuAe i9D6VSyQU5gyU+sKmV7vbVwN2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLGqXik czuvd/ZpTU7s/lBhiqL0MB8GA1UdIwQYMBaAFP1FzFQDxkz7Iwqn3u0QvGgijXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkJDQy85MDRFNTBGMDQ4 RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQc2pDcWZlN1JDOGFDS05k SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VWE1WQVBHVFBzakNxZmU3UkM4YUNLTmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkJDQy85MDRFNTBGMDQ4RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQ c2pDcWZlN1JDOGFDS05kSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj/vDlwusRtRCQXgD97S+HrWD9Bp5g4iNgY8035QDQ5MIN3+52XUqQ czZTb+3eN9XSMkgtAfXg0kk/WnuaEwG0aAfYAviSnK3P8mFMh01gx7uSes4lWOte BPTY2mgiYhmVjfqf6OENTnQ8YcCH+LgI/8kCVHCR5YfOQRjBnBazRCHewr3RO8dI m/2WMDT1NEjQrJWc64/izsFVbcyAzqvFTDhlHb4y/sNyCmn3HjJTTVWNUsbbWtqg CJHElP7xGUb4CzPyBdMANMYVXGmlOeDg7QR/Dqk+Ig2NdjyC42/qB9KhN1Qw27q9 tekbT9oiZgcClkfqJgZUvxxN5UAjlqG/ -----END CERTIFICATE-----Generated at Sun May 19 08:25:03 2024 by rpki-client on console-ams.rpki-client.org