$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json) Hash identifier: RaZADfcyZCSM0cHhwmImwQgzSHX0rv2LRn49Cg8IN3c= Subject key identifier: 8E:F3:E1:04:D4:58:87:48:EF:F2:EE:F8:BC:40:3C:8C:6F:CA:6C:97 Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft Manifest number: 07F4 Signing time: Sat 04 May 2024 22:05:24 +0000 Manifest this update: Sat 04 May 2024 22:05:23 +0000 Manifest next update: Sat 11 May 2024 22:05:23 +0000 Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: vpcLZjnFwV46u4ktMT08NcPz36sB7UeGr1G5oDCo+do=) 2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: JxZWn5gUtZs3FqzsBx/u0h4tz2O2P41zy+u5PnGJhgM=) 3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: 85e5q4B8Tonp2u+9ZiIqMVSULJtcSozfDDexZXqSpSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Validity Not Before: May 4 22:05:23 2024 GMT Not After : May 11 22:05:23 2024 GMT Subject: CN=6636b123-9029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:2b:aa:2a:a1:a6:88:d8:3a:87:f3:68:43: dc:5d:b0:bd:8a:e2:0d:6e:47:d0:c3:64:a8:e5:de: 7a:cf:49:53:76:8a:3f:72:bd:57:f8:68:33:29:9c: bb:44:8c:91:28:41:97:b9:42:b5:0b:37:0d:7f:a0: b5:ec:45:38:89:b8:6a:f9:0d:1c:7e:f7:be:27:a1: 8f:8f:fe:dc:12:18:6f:8c:9c:ad:ba:72:3f:af:8a: 76:ea:e2:86:24:52:43:fd:71:7a:dc:6f:10:06:c3: e5:a8:5f:25:ee:9a:ba:04:cd:64:ed:fa:37:b5:b1: f9:74:21:b6:70:6e:1e:8e:aa:b6:b9:5e:dd:aa:29: 55:54:d7:04:ed:1d:26:fb:f1:b6:c8:09:2e:34:2a: 31:b8:69:11:9c:6d:f6:d7:3f:bc:47:bb:c2:3e:7e: 45:98:5b:86:48:3e:ba:75:60:93:79:33:d0:08:6f: 5a:6f:94:2f:0a:31:a0:9f:e1:c6:6f:71:00:3f:be: fa:3b:dc:37:a7:2a:9b:00:9e:15:48:aa:65:4f:db: 19:1a:b3:e8:77:07:b0:96:6d:cb:86:a9:46:d4:10: d0:25:44:62:11:54:c1:91:12:1c:26:e3:ef:24:a2: 03:6e:e8:36:29:be:cc:96:a6:79:46:9d:60:33:b1: 52:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F3:E1:04:D4:58:87:48:EF:F2:EE:F8:BC:40:3C:8C:6F:CA:6C:97 X509v3 Authority Key Identifier: keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:fb:8e:48:d2:22:30:6c:62:20:93:47:44:45:20:93:df:9c: ae:c4:6a:59:c5:60:e1:b4:15:b5:15:5b:80:44:4e:c1:71:6f: 73:bc:59:17:1b:65:cb:c7:88:64:fd:79:7b:53:81:ba:da:97: 78:c3:40:99:1a:0b:6c:c5:94:c7:70:a9:1f:55:82:6f:62:d9: fa:e5:3a:64:64:5e:61:22:09:8b:46:a0:bc:a5:e1:59:95:43: 22:5c:dc:a9:e4:b2:6a:57:b3:e0:43:31:90:ef:b8:4c:45:fb: 3c:0c:f8:39:08:29:c8:f1:f2:b8:7a:99:37:c4:ee:76:93:42: e3:f3:08:d0:4e:64:8a:1a:3e:39:d2:63:87:9d:62:15:74:ba: 78:07:4c:e6:48:e2:b3:d6:1c:92:aa:f9:42:f7:cd:cb:1b:2f: 80:c9:bf:0f:f1:2c:47:24:75:3e:98:4e:eb:bc:e9:d4:6d:75: 92:c8:80:31:fc:20:fd:41:fa:2d:51:5f:9d:18:8d:a4:72:00: 25:fe:b5:e7:38:83:68:43:d4:b5:bd:8e:a0:54:ea:04:06:58: d0:af:31:eb:76:5d:61:cf:a7:7e:08:88:f0:09:cd:af:ba:a7: c3:5e:04:4d:71:51:d3:ce:d1:ca:85:6e:80:67:72:2d:72:7b: 07:6c:4b:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5 RTBERTg1MTcwHhcNMjQwNTA0MjIwNTIzWhcNMjQwNTExMjIwNTIzWjAYMRYwFAYD VQQDEw02NjM2YjEyMy05MDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqErqiqhpojYOofzaEPcXbC9iuINbkfQw2So5d56z0lTdoo/cr1X+GgzKZy7 RIyRKEGXuUK1CzcNf6C17EU4ibhq+Q0cfve+J6GPj/7cEhhvjJytunI/r4p26uKG JFJD/XF63G8QBsPlqF8l7pq6BM1k7fo3tbH5dCG2cG4ejqq2uV7dqilVVNcE7R0m +/G2yAkuNCoxuGkRnG321z+8R7vCPn5FmFuGSD66dWCTeTPQCG9ab5QvCjGgn+HG b3EAP776O9w3pyqbAJ4VSKplT9sZGrPodwewlm3LhqlG1BDQJURiEVTBkRIcJuPv JKIDbug2Kb7MlqZ5Rp1gM7FSCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7z4QTU WIdI7/Lu+LxAPIxvymyXMB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1 NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTIzQy9FNTYyMUE2OEI1NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9U Y1p0SS13QTNQTlNlRGVoUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2+45I0iIwbGIgk0dERSCT35yuxGpZxWDhtBW1FVuARE7BcW9zvFkX G2XLx4hk/Xl7U4G62pd4w0CZGgtsxZTHcKkfVYJvYtn65TpkZF5hIgmLRqC8peFZ lUMiXNyp5LJqV7PgQzGQ77hMRfs8DPg5CCnI8fK4epk3xO52k0Lj8wjQTmSKGj45 0mOHnWIVdLp4B0zmSOKz1hySqvlC983LGy+Ayb8P8SxHJHU+mE7rvOnUbXWSyIAx /CD9QfotUV+dGI2kcgAl/rXnOINoQ9S1vY6gVOoEBljQrzHrdl1hz6d+CIjwCc2v uqfDXgRNcVHTztHKhW6AZ3ItcnsHbEs1 -----END CERTIFICATE-----Generated at Sun May 5 00:12:26 2024 by rpki-client on console-fra.rpki-client.org