$ rpki-client -vvf rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft File: rUk9yaPSQDSDYoWHBR93lRWJFnk.mft (raw, json) Hash identifier: oUbXlATDqxaSn29zAui+8FYFkWOXJSekXMcSgfoexqc= Subject key identifier: 3F:30:97:A5:33:42:46:D9:83:77:F2:B7:2A:F6:2C:83:26:E7:C5:15 Authority key identifier: AD:49:3D:C9:A3:D2:40:34:83:62:85:87:05:1F:77:95:15:89:16:79 Certificate issuer: /CN=A918B418/serialNumber=AD493DC9A3D2403483628587051F779515891679 Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft Manifest number: 0190 Signing time: Sun 19 May 2024 04:41:57 +0000 Manifest this update: Sun 19 May 2024 04:41:56 +0000 Manifest next update: Sun 26 May 2024 04:41:56 +0000 Files and hashes: 1: rUk9yaPSQDSDYoWHBR93lRWJFnk.crl (hash: isdXK7uJG2qHk7U/g4Car6bJvkueFWfO+o7Zb+D/+H0=) 2: 8275E1721C5311EDA75CF137C4F9AE02.roa (hash: qAtsrDW3MjpZ+nPaCP9Zu04qg26yjosIHxl5jbJJoQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.crl rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B418/serialNumber=AD493DC9A3D2403483628587051F779515891679 Validity Not Before: May 19 04:41:56 2024 GMT Not After : May 26 04:41:56 2024 GMT Subject: CN=66498314-5037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:24:ed:80:09:c0:61:30:a5:57:a1:69:bf: 12:86:69:17:5a:04:39:f4:95:e7:73:f8:e0:6a:44: 17:78:ef:a4:72:4f:ad:93:68:cb:97:af:0b:ba:b7: 7a:4b:92:12:01:62:96:c4:e4:bb:79:84:2e:9e:6f: d2:40:11:21:bd:15:23:d6:b4:5f:20:72:28:88:07: 84:35:a2:06:8c:f4:db:9c:33:85:a7:74:d1:dd:a2: fb:49:4e:12:9a:f8:57:00:85:1d:6a:2a:44:3d:8e: 3c:60:2c:04:d3:4b:0a:f8:d6:a5:8f:29:6d:94:db: a7:22:6d:e8:ab:23:70:dd:f8:7e:90:8d:f8:bd:6b: d0:a3:79:90:69:fb:64:95:43:68:0b:ad:f8:8b:72: 2c:23:57:25:a5:58:fa:12:2b:e7:b1:37:67:44:f4: 3b:a8:39:18:4b:14:e9:af:15:88:b2:0a:e6:c4:b1: f2:05:0a:fd:89:ba:64:5e:a7:81:4e:97:90:ec:20: d6:f1:6c:74:3d:f3:d6:c3:b0:e1:e1:52:79:94:0c: 04:a3:8d:10:5c:09:fc:aa:49:e3:df:aa:fa:d8:89: 6a:b4:81:ff:ba:b4:16:75:03:79:6a:ac:25:98:80: 4f:49:0c:95:ac:9f:17:27:66:1e:c9:6a:26:ae:14: 7d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:30:97:A5:33:42:46:D9:83:77:F2:B7:2A:F6:2C:83:26:E7:C5:15 X509v3 Authority Key Identifier: keyid:AD:49:3D:C9:A3:D2:40:34:83:62:85:87:05:1F:77:95:15:89:16:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:7a:af:71:3f:e1:de:19:4b:90:cb:59:9e:08:c7:33:c8:0c: 4d:c9:b6:51:3c:e5:df:d3:db:65:ca:ec:eb:f9:43:28:7f:74: 3c:58:e8:a2:37:b9:8d:96:9e:68:4c:57:5c:ed:c2:f3:84:f9: db:dc:81:76:b5:82:4d:7c:5c:16:ea:7e:e1:b8:4e:0f:fc:3b: 03:3b:22:64:e1:c6:4f:d5:67:41:88:5a:ec:56:d0:19:25:b4: d6:2e:53:f2:e9:32:64:5e:b7:68:b8:f7:dc:ef:7d:e3:cd:a2: 54:8d:23:27:ab:94:22:b1:92:37:1a:56:e4:6e:bf:c3:44:f1: e9:7f:38:1f:1f:58:7b:99:f7:01:13:9e:52:64:5d:41:29:1e: 8f:4f:40:b3:b0:c3:fb:bb:d6:01:9a:c8:98:4c:4a:9e:15:f8: 08:0d:02:c8:ce:14:9d:3d:b7:8f:51:13:e5:88:6d:ff:1f:1d: 35:fb:6a:e9:df:8d:09:06:67:b4:54:77:3c:7f:91:21:44:d1: 7c:76:72:b4:3d:b2:8d:f2:0c:0d:b3:56:fa:b7:79:97:03:e7: e0:17:4a:c0:25:d8:68:be:de:39:33:6b:46:7c:1f:0f:af:c4: c3:a5:72:ba:7a:4f:d7:b3:46:42:6c:a9:0d:d1:40:7b:d9:2c: dc:96:66:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI0MTgxMTAvBgNVBAUTKEFENDkzREM5QTNEMjQwMzQ4MzYyODU4NzA1MUY3Nzk1 MTU4OTE2NzkwHhcNMjQwNTE5MDQ0MTU2WhcNMjQwNTI2MDQ0MTU2WjAYMRYwFAYD VQQDEw02NjQ5ODMxNC01MDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZok7YAJwGEwpVehab8ShmkXWgQ59JXnc/jgakQXeO+kck+tk2jLl68Lurd6 S5ISAWKWxOS7eYQunm/SQBEhvRUj1rRfIHIoiAeENaIGjPTbnDOFp3TR3aL7SU4S mvhXAIUdaipEPY48YCwE00sK+NaljyltlNunIm3oqyNw3fh+kI34vWvQo3mQaftk lUNoC634i3IsI1clpVj6EivnsTdnRPQ7qDkYSxTprxWIsgrmxLHyBQr9ibpkXqeB TpeQ7CDW8Wx0PfPWw7Dh4VJ5lAwEo40QXAn8qknj36r62IlqtIH/urQWdQN5aqwl mIBPSQyVrJ8XJ2YeyWomrhR9EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8wl6Uz QkbZg3fytyr2LIMm58UVMB8GA1UdIwQYMBaAFK1JPcmj0kA0g2KFhwUfd5UViRZ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjQxOC9BRDBEQzQ4MDFD NEYxMUVEQUFEMzEzODZDNEY5QUUwMi9yVWs5eWFQU1FEU0RZb1dIQlI5M2xSV0pG bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVazl5YVBTUURTRFlvV0hCUjkzbFJXSkZuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjQxOC9BRDBEQzQ4MDFDNEYxMUVEQUFEMzEzODZDNEY5QUUwMi9yVWs5eWFQU1FE U0RZb1dIQlI5M2xSV0pGbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAeq9xP+HeGUuQy1meCMczyAxNybZRPOXf09tlyuzr+UMof3Q8WOii N7mNlp5oTFdc7cLzhPnb3IF2tYJNfFwW6n7huE4P/DsDOyJk4cZP1WdBiFrsVtAZ JbTWLlPy6TJkXrdouPfc733jzaJUjSMnq5QisZI3Glbkbr/DRPHpfzgfH1h7mfcB E55SZF1BKR6PT0CzsMP7u9YBmsiYTEqeFfgIDQLIzhSdPbePURPliG3/Hx01+2rp 340JBme0VHc8f5EhRNF8dnK0PbKN8gwNs1b6t3mXA+fgF0rAJdhovt45M2tGfB8P r8TDpXK6ek/Xs0ZCbKkN0UB72SzclmZE -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org