$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft File: uf67oJzxCyh-7SzlZyKzyaDvEv8.mft (raw, json) Hash identifier: qKqEqVyV5ZgO8lubhGLsLj+To6ts80Up5Gm/nXf1Q+U= Subject key identifier: 82:68:3A:0E:4D:B0:25:B6:FF:19:74:BB:C2:39:46:D7:6E:7E:84:A1 Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF Certificate issuer: /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Certificate serial: 08C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft Manifest number: 08BD Signing time: Sat 18 May 2024 21:27:14 +0000 Manifest this update: Sat 18 May 2024 21:27:13 +0000 Manifest next update: Sat 25 May 2024 21:27:13 +0000 Files and hashes: 1: uf67oJzxCyh-7SzlZyKzyaDvEv8.crl (hash: nuy6ewN2GbslGmw7BxD2S8cXczzx+7vRJVjZ87p6TX0=) 2: 27030ADA8EB211EA9D09090FC4F9AE02.roa (hash: gLuoJW8vJX9f9pGeIxuvpKdQoZyIHfDvjf5EmSyhTPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2242 (0x8c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Validity Not Before: May 18 21:27:13 2024 GMT Not After : May 25 21:27:13 2024 GMT Subject: CN=66491d31-dbdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:75:45:e7:db:e0:c1:70:65:30:9d:07:62:d8: 48:7f:68:ba:bf:99:e7:6b:84:0d:67:ce:e8:86:1d: ce:da:75:54:e6:75:9b:43:b7:4e:83:57:c4:f0:da: 3b:88:77:21:14:7d:00:b0:6a:80:91:ba:74:e6:66: 7e:ea:3b:56:58:07:c8:14:c0:91:cc:d0:46:85:52: cb:f5:c4:8a:7f:52:03:ad:c2:ed:81:45:92:27:33: 71:e9:0f:05:c8:53:f1:45:46:ca:a5:42:4d:9c:d6: 54:fb:3c:cb:57:26:0f:cd:b9:4b:19:a1:72:61:01: 71:c1:d1:0d:03:d9:a0:4c:6e:e7:cb:19:1f:d5:e0: 7c:59:60:ae:ad:0d:0b:70:13:57:5e:0c:8e:9e:7a: 48:9f:bf:4a:6d:cf:50:c4:32:f0:b6:b8:7e:73:9e: 2d:97:f0:8f:3f:70:28:c3:30:f8:47:8e:1e:53:a3: 7a:d8:f4:7c:9c:95:96:a1:37:51:f2:cf:48:97:c0: b8:e0:66:c4:0f:3a:e3:e4:16:9c:53:c0:62:80:3b: d7:93:d5:93:45:26:9b:a4:a1:c6:41:92:a1:fb:66: 83:bb:0a:4f:31:3b:68:9c:95:92:e5:d8:c9:68:16: 55:52:f8:65:51:49:34:67:eb:88:9d:65:ae:05:ba: a1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:68:3A:0E:4D:B0:25:B6:FF:19:74:BB:C2:39:46:D7:6E:7E:84:A1 X509v3 Authority Key Identifier: keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9e:d5:2d:89:22:52:dc:dd:29:bd:e0:f2:54:87:c4:7c:90: 49:a7:79:51:00:82:07:a9:28:2a:3d:b8:9b:e2:b6:78:d9:d1: 58:53:66:20:e8:0c:44:37:2b:7e:3b:85:d1:3a:b7:1c:48:32: 02:8c:8a:83:25:b8:4b:57:c1:e2:c8:d1:41:2b:b6:41:2c:7e: c9:52:aa:67:59:c5:73:e2:df:16:80:13:43:1b:cc:b2:8d:00: 9c:43:84:e8:1e:74:1e:e9:ff:a8:c1:cf:8d:b8:a3:4b:5a:92: 2f:98:69:5d:7e:57:30:e4:fe:68:51:be:16:4e:64:f1:31:e7: 7e:c2:ec:d6:1a:e6:69:3b:02:65:32:42:31:22:5c:08:7e:02: 51:e7:47:a6:87:d6:e4:f8:22:64:07:ad:e4:41:13:79:4a:00: d1:07:ae:98:cd:76:cb:9a:0c:5d:e9:f4:78:97:47:35:80:5c: f6:49:d8:3a:6b:09:73:f0:1a:26:ff:24:f9:df:20:26:44:c0: bf:c3:fa:fb:b2:d4:01:78:73:aa:1e:b4:45:2a:24:f6:c6:0d: 9a:80:74:6b:47:37:6e:99:c3:8f:20:b9:9a:9a:3b:0e:40:01: 75:9e:85:8b:99:51:01:59:9f:cb:94:a0:98:72:64:0a:3b:a5: 0a:2a:c6:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCN0ExMTAvBgNVBAUTKEI5RkVCQkEwOUNGMTBCMjg3RUVEMkNFNTY3MjJCM0M5 QTBFRjEyRkYwHhcNMjQwNTE4MjEyNzEzWhcNMjQwNTI1MjEyNzEzWjAYMRYwFAYD VQQDEw02NjQ5MWQzMS1kYmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XVF59vgwXBlMJ0HYthIf2i6v5nna4QNZ87ohh3O2nVU5nWbQ7dOg1fE8No7 iHchFH0AsGqAkbp05mZ+6jtWWAfIFMCRzNBGhVLL9cSKf1IDrcLtgUWSJzNx6Q8F yFPxRUbKpUJNnNZU+zzLVyYPzblLGaFyYQFxwdENA9mgTG7nyxkf1eB8WWCurQ0L cBNXXgyOnnpIn79Kbc9QxDLwtrh+c54tl/CPP3AowzD4R44eU6N62PR8nJWWoTdR 8s9Il8C44GbEDzrj5BacU8BigDvXk9WTRSabpKHGQZKh+2aDuwpPMTtonJWS5djJ aBZVUvhlUUk0Z+uInWWuBbqhbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJoOg5N sCW2/xl0u8I5RtdufoShMB8GA1UdIwQYMBaAFLn+u6Cc8Qsofu0s5Wcis8mg7xL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI3QS81RDIxMTg0QzhF QjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5aC03U3psWnlLenlhRHZF djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmNjdvSnp4Q3loLTdTemxaeUt6eWFEdkV2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI3QS81RDIxMTg0QzhFQjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5 aC03U3psWnlLenlhRHZFdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ntUtiSJS3N0pveDyVIfEfJBJp3lRAIIHqSgqPbib4rZ42dFYU2Yg 6AxENyt+O4XROrccSDICjIqDJbhLV8HiyNFBK7ZBLH7JUqpnWcVz4t8WgBNDG8yy jQCcQ4ToHnQe6f+owc+NuKNLWpIvmGldflcw5P5oUb4WTmTxMed+wuzWGuZpOwJl MkIxIlwIfgJR50emh9bk+CJkB63kQRN5SgDRB66YzXbLmgxd6fR4l0c1gFz2Sdg6 awlz8Bom/yT53yAmRMC/w/r7stQBeHOqHrRFKiT2xg2agHRrRzdumcOPILmamjsO QAF1noWLmVEBWZ/LlKCYcmQKO6UKKsZW -----END CERTIFICATE-----Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org