$ rpki-client -vvf rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft File: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft (raw, json) Hash identifier: xMw4MVBUlNWEZX/oKjoiEaFvWtMrzibpzagtppSrKTQ= Subject key identifier: 63:4C:D9:DF:A3:EE:8C:0C:DA:8D:46:26:81:FE:38:31:F0:55:AC:CB Authority key identifier: BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4 Certificate issuer: /CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft Manifest number: F4 Signing time: Fri 31 May 2024 06:30:59 +0000 Manifest this update: Fri 31 May 2024 06:30:58 +0000 Manifest next update: Fri 07 Jun 2024 06:30:58 +0000 Files and hashes: 1: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl (hash: W3OYYW+EAAfB0ZmXNvFevlTYX8z2zaAu2Emrt8cglvs=) 2: 9E8DB380B2C611EDBC366A1DC4F9AE02.roa (hash: c8sSxOBhaka5oI+rejJqQKmQr9sb2fk2xAAz0q5NEqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4 Validity Not Before: May 31 06:30:58 2024 GMT Not After : Jun 7 06:30:58 2024 GMT Subject: CN=66596ea2-48d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:43:e5:75:d8:2b:ca:f3:3b:95:da:c3:65: 2a:2a:2b:24:95:c0:7d:d0:04:32:00:13:a8:35:9e: 6d:dd:59:10:b4:b6:a6:73:ab:03:ae:13:1d:0a:d8: 17:4a:26:c0:22:74:30:53:33:1c:32:cf:09:3d:03: 40:a4:a5:d5:05:24:27:c1:df:cb:94:f9:fc:f3:15: 08:b0:2c:00:25:aa:e1:29:dd:e4:cd:c5:a8:ba:09: 90:ab:0b:0e:6a:90:8f:1d:f2:eb:da:72:86:60:b9: cd:ab:d0:2b:ba:c3:c0:db:15:3d:34:c4:c5:c2:76: eb:58:33:7e:e0:60:70:75:07:28:6d:f4:ee:01:a8: 06:67:78:74:41:af:dc:3a:0b:6b:72:e1:cf:e7:f3: e4:a3:b7:36:c5:dd:24:f0:28:04:c8:da:04:94:aa: 09:d9:9a:92:88:ac:14:31:aa:0e:66:59:2d:25:f7: e9:59:ed:4e:8c:f4:33:f4:dd:08:9c:73:50:91:9b: 30:ef:e9:42:b2:c7:6d:51:3b:30:a6:0d:9a:9f:df: f3:d7:2e:1b:e7:8a:77:ef:f6:7a:68:59:bb:a5:f4: 73:e6:62:a7:31:51:a8:34:e6:b2:d1:1c:6d:7f:b0: 8f:ab:a6:75:f1:40:14:81:31:90:0c:f2:e0:db:57: c4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4C:D9:DF:A3:EE:8C:0C:DA:8D:46:26:81:FE:38:31:F0:55:AC:CB X509v3 Authority Key Identifier: keyid:BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:11:1e:94:fc:c2:64:be:00:7a:84:54:79:66:0a:bc:9a:21: 74:50:41:e0:7d:ba:ee:27:fc:f0:e0:9f:fc:95:24:85:fa:c9: 3c:fc:88:15:3a:dc:b6:c3:f4:fd:2a:0d:55:9e:f8:21:a4:73: 06:be:51:2e:3d:2c:6b:32:e4:4a:3e:14:47:eb:c7:94:fe:6d: 11:c1:eb:60:64:38:b6:b7:71:79:ca:d3:7c:bf:64:ef:5a:6e: 67:fb:bf:e4:dc:5a:98:a3:60:6b:81:8c:c1:9f:00:69:4d:c2: b4:24:cd:f6:7a:bd:9e:ee:25:b6:6d:34:db:3e:1d:2b:15:9a: 00:e5:82:fd:44:3f:6d:6f:84:0f:36:09:94:ee:d7:5d:db:57: cd:e3:49:b0:f7:95:30:73:93:9a:50:7a:b6:02:b5:09:29:1e: b3:30:51:95:6d:45:84:15:a7:d8:4e:5d:2c:2e:4c:76:13:a4: d4:26:f5:47:a6:9e:c8:e2:07:09:46:a6:fa:6b:08:0e:cf:46: 99:b2:22:c1:96:a2:af:56:b9:ed:12:24:90:63:99:76:c0:bc: ad:b0:2c:3f:b0:3e:cc:9f:d8:a0:92:c0:96:aa:67:31:2a:30: ae:28:45:17:4e:61:9e:a6:64:ba:5b:19:c2:22:56:6a:8f:1c: b6:d4:55:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxMjIxMTAvBgNVBAUTKEJCNEZBRTg1NTQwQTVBRDlGOTNDQjQ4MkM0NUM5NTc2 RjUyQTNCRjQwHhcNMjQwNTMxMDYzMDU4WhcNMjQwNjA3MDYzMDU4WjAYMRYwFAYD VQQDEw02NjU5NmVhMi00OGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfpD5XXYK8rzO5Xaw2UqKisklcB90AQyABOoNZ5t3VkQtLamc6sDrhMdCtgX SibAInQwUzMcMs8JPQNApKXVBSQnwd/LlPn88xUIsCwAJarhKd3kzcWougmQqwsO apCPHfLr2nKGYLnNq9ArusPA2xU9NMTFwnbrWDN+4GBwdQcobfTuAagGZ3h0Qa/c OgtrcuHP5/Pko7c2xd0k8CgEyNoElKoJ2ZqSiKwUMaoOZlktJffpWe1OjPQz9N0I nHNQkZsw7+lCssdtUTswpg2an9/z1y4b54p37/Z6aFm7pfRz5mKnMVGoNOay0Rxt f7CPq6Z18UAUgTGQDPLg21fEXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNM2d+j 7owM2o1GJoH+ODHwVazLMB8GA1UdIwQYMBaAFLtProVUClrZ+Ty0gsRclXb1Kjv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTEyMi8wRkQ0RUY0RUFF RUYxMUVEQTJFOUJDNjhDNEY5QUUwMi91MC11aFZRS1d0bjVQTFNDeEZ5VmR2VXFP X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UwLXVoVlFLV3RuNVBMU0N4RnlWZHZVcU9fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTEyMi8wRkQ0RUY0RUFFRUYxMUVEQTJFOUJDNjhDNEY5QUUwMi91MC11aFZRS1d0 bjVQTFNDeEZ5VmR2VXFPX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1ER6U/MJkvgB6hFR5Zgq8miF0UEHgfbruJ/zw4J/8lSSF+sk8/IgV Oty2w/T9Kg1VnvghpHMGvlEuPSxrMuRKPhRH68eU/m0RwetgZDi2t3F5ytN8v2Tv Wm5n+7/k3FqYo2BrgYzBnwBpTcK0JM32er2e7iW2bTTbPh0rFZoA5YL9RD9tb4QP NgmU7tdd21fN40mw95Uwc5OaUHq2ArUJKR6zMFGVbUWEFafYTl0sLkx2E6TUJvVH pp7I4gcJRqb6awgOz0aZsiLBlqKvVrntEiSQY5l2wLytsCw/sD7Mn9igksCWqmcx KjCuKEUXTmGepmS6WxnCIlZqjxy21FUe -----END CERTIFICATE-----Generated at Fri May 31 10:01:49 2024 by rpki-client on console-ams.rpki-client.org