$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft File: UNWU1Rjx1sCstQCbVwd49vEG1d4.mft (raw, json) Hash identifier: 0lSL2ulr4tyyFqcctP6vWP+bQOEuq3g44WHLKqxOJjM= Subject key identifier: 1F:B5:70:C3:1E:3D:F5:83:D5:82:60:7D:C2:37:FD:88:BE:CD:F2:C9 Authority key identifier: 50:D5:94:D5:18:F1:D6:C0:AC:B5:00:9B:57:07:78:F6:F1:06:D5:DE Certificate issuer: /CN=A918F0F7/serialNumber=50D594D518F1D6C0ACB5009B570778F6F106D5DE Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNWU1Rjx1sCstQCbVwd49vEG1d4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft Manifest number: 05B5 Signing time: Fri 31 May 2024 00:47:58 +0000 Manifest this update: Fri 31 May 2024 00:47:58 +0000 Manifest next update: Fri 07 Jun 2024 00:47:58 +0000 Files and hashes: 1: UNWU1Rjx1sCstQCbVwd49vEG1d4.crl (hash: RoOFU+b+fOEnh8gvnlnhFCIPJ6cRoDiRuylGNvicqQo=) 2: 365255DA7F1C11EB9D057A0EC4F9AE02.roa (hash: jBo3dS50uYqDBlTrTHHC+4gN8loyhHwYkoSkPTaw0cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.crl rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNWU1Rjx1sCstQCbVwd49vEG1d4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 00:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F0F7/serialNumber=50D594D518F1D6C0ACB5009B570778F6F106D5DE Validity Not Before: May 31 00:47:58 2024 GMT Not After : Jun 7 00:47:58 2024 GMT Subject: CN=66591e3e-a7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:64:75:4e:a2:8f:b8:b6:d1:1c:96:a2:f4:81: b3:ad:f0:2c:76:dd:8e:6d:9e:ad:39:d3:b2:0b:f1: 2c:8f:ff:c6:76:49:b1:7b:7d:18:e9:fb:11:bf:5c: 23:bf:bc:79:2b:da:ec:87:f5:0b:8a:42:48:a2:47: 52:51:d7:82:4f:52:16:c2:8f:84:24:08:fe:fd:11: 35:7f:95:f0:8c:1e:b2:4e:a3:27:0a:4b:72:13:07: 10:eb:90:69:4b:48:4c:46:78:63:f6:2b:47:17:59: df:2d:93:b7:85:39:42:84:09:a4:cd:40:44:6a:1b: 31:b0:2a:4b:9d:0e:12:6a:c8:3e:53:82:a6:4c:22: 42:2a:4f:85:9e:56:fb:bb:40:2f:c2:ed:d9:28:d1: 65:17:b4:af:32:60:ae:5b:90:32:b9:50:8a:e1:57: b6:6a:2d:79:ab:22:5b:7b:32:00:f4:01:17:1b:63: 19:b6:77:5b:71:52:bf:72:b5:b9:58:84:cf:ec:79: 2b:c5:05:2c:10:5e:5b:ec:5c:0e:74:92:e5:5e:63: b2:1f:45:fc:67:56:84:99:41:9f:21:27:67:7b:7b: 6f:e0:18:d0:33:6d:62:63:ae:55:09:fc:af:4b:e8: fc:04:95:f3:ca:d3:08:f1:ff:13:ad:71:47:40:8b: b9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B5:70:C3:1E:3D:F5:83:D5:82:60:7D:C2:37:FD:88:BE:CD:F2:C9 X509v3 Authority Key Identifier: keyid:50:D5:94:D5:18:F1:D6:C0:AC:B5:00:9B:57:07:78:F6:F1:06:D5:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNWU1Rjx1sCstQCbVwd49vEG1d4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ba:94:08:b5:1e:d7:3e:bd:d7:cd:84:b5:e4:4f:98:7e:6b: c8:f5:fd:e8:20:23:4a:b5:7f:c2:c5:af:57:19:ec:e9:48:cf: 02:e3:95:4b:79:6b:a5:f0:b8:13:23:8d:5f:45:9e:d9:29:e5: 62:64:5e:0f:b0:35:4d:09:18:12:8b:16:c1:b9:fb:36:d6:1e: 73:fd:51:7a:46:90:e7:4d:a4:88:81:36:e9:b2:2c:73:9d:63: 08:3b:19:e9:68:fc:e3:69:2d:6b:19:23:62:5a:40:42:43:1a: a5:e1:f9:67:b9:a6:b7:e2:8c:08:6d:80:03:09:16:03:fd:53: 16:c7:d4:40:5b:1b:04:db:59:64:ed:6a:f5:d3:0e:78:5e:6f: 2e:49:82:f4:6f:09:f6:23:b6:0b:fd:eb:4c:0e:a4:54:6e:83: d5:11:84:ca:b1:b8:85:58:c9:6d:f7:f0:66:8e:32:0f:5b:92: 66:d6:b2:4d:0f:9f:01:b5:53:32:a0:9c:63:7a:8a:5c:6f:80: 60:84:5e:34:2e:3f:30:56:42:dc:a7:8f:cb:0e:ed:3d:92:e0: ca:5e:aa:55:a9:7b:e0:17:75:b7:8b:de:67:48:a4:d4:03:f7: 92:56:ff:95:40:0a:d9:33:9b:74:62:76:9c:d4:ec:06:a7:11: e1:14:10:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYwRjcxMTAvBgNVBAUTKDUwRDU5NEQ1MThGMUQ2QzBBQ0I1MDA5QjU3MDc3OEY2 RjEwNkQ1REUwHhcNMjQwNTMxMDA0NzU4WhcNMjQwNjA3MDA0NzU4WjAYMRYwFAYD VQQDEw02NjU5MWUzZS1hN2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mR1TqKPuLbRHJai9IGzrfAsdt2ObZ6tOdOyC/Esj//Gdkmxe30Y6fsRv1wj v7x5K9rsh/ULikJIokdSUdeCT1IWwo+EJAj+/RE1f5XwjB6yTqMnCktyEwcQ65Bp S0hMRnhj9itHF1nfLZO3hTlChAmkzUBEahsxsCpLnQ4Sasg+U4KmTCJCKk+Fnlb7 u0Avwu3ZKNFlF7SvMmCuW5AyuVCK4Ve2ai15qyJbezIA9AEXG2MZtndbcVK/crW5 WITP7HkrxQUsEF5b7FwOdJLlXmOyH0X8Z1aEmUGfISdne3tv4BjQM21iY65VCfyv S+j8BJXzytMI8f8TrXFHQIu55wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+1cMMe PfWD1YJgfcI3/Yi+zfLJMB8GA1UdIwQYMBaAFFDVlNUY8dbArLUAm1cHePbxBtXe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjBGNy9DQjc4QjdDODdG MUExMUVCOTJGRTk4MERDNEY5QUUwMi9VTldVMVJqeDFzQ3N0UUNiVndkNDl2RUcx ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VOV1UxUmp4MXNDc3RRQ2JWd2Q0OXZFRzFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjBGNy9DQjc4QjdDODdGMUExMUVCOTJGRTk4MERDNEY5QUUwMi9VTldVMVJqeDFz Q3N0UUNiVndkNDl2RUcxZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEupQItR7XPr3XzYS15E+YfmvI9f3oICNKtX/Cxa9XGezpSM8C45VL eWul8LgTI41fRZ7ZKeViZF4PsDVNCRgSixbBufs21h5z/VF6RpDnTaSIgTbpsixz nWMIOxnpaPzjaS1rGSNiWkBCQxql4flnuaa34owIbYADCRYD/VMWx9RAWxsE21lk 7Wr10w54Xm8uSYL0bwn2I7YL/etMDqRUboPVEYTKsbiFWMlt9/BmjjIPW5Jm1rJN D58BtVMyoJxjeopcb4BghF40Lj8wVkLcp4/LDu09kuDKXqpVqXvgF3W3i95nSKTU A/eSVv+VQArZM5t0Ynac1OwGpxHhFBAN -----END CERTIFICATE-----Generated at Fri May 31 01:33:50 2024 by rpki-client on console-ams.rpki-client.org