$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft File: uxh7m1B2e7e7wih3IL02wLjQaJY.mft (raw, json) Hash identifier: oy779T5RPm57/2TfnTUYRWYx10HA1V5rwbOW4L+HZbw= Subject key identifier: 60:CB:D1:D6:ED:F8:1B:46:24:FD:B9:1D:CA:25:55:B0:33:B6:95:27 Authority key identifier: BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96 Certificate issuer: /CN=A9191E43/serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft Manifest number: 022E Signing time: Sat 01 Jun 2024 05:14:11 +0000 Manifest this update: Sat 01 Jun 2024 05:14:10 +0000 Manifest next update: Sat 08 Jun 2024 05:14:10 +0000 Files and hashes: 1: uxh7m1B2e7e7wih3IL02wLjQaJY.crl (hash: rVm2UTd16A1dSqL5g4Cl4AuKb1HjcjPZ5f6X7hVKtp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E43/serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896 Validity Not Before: Jun 1 05:14:10 2024 GMT Not After : Jun 8 05:14:10 2024 GMT Subject: CN=665aae22-005f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:45:79:3d:1b:77:42:c7:21:9d:ab:71:61:62: 1d:39:7e:00:83:af:06:93:af:42:76:68:9d:e4:a8: 52:4a:ea:98:22:e3:e5:2a:ef:f9:ba:db:6c:7f:cd: 51:8f:32:93:6e:98:7c:4c:a3:d0:6a:1a:1f:79:8b: 93:f4:23:62:af:ba:4a:d1:b4:68:a7:dc:e1:e7:c0: 35:f1:dd:04:c4:34:62:90:b9:1c:54:59:38:df:b2: 49:f1:7c:f5:b5:3b:d1:df:71:b4:c5:ec:33:4e:e4: b4:d9:84:8c:bd:f1:45:31:7f:71:62:6f:9b:19:2b: a2:68:c5:73:b7:c1:fd:30:60:4a:32:38:bc:bb:bc: dc:61:ef:f8:fe:96:d9:67:69:05:d9:b9:9b:88:b2: 7d:75:9f:a9:07:4f:29:50:ba:e0:ad:df:c4:e7:3b: 94:57:bf:52:3a:d4:e1:b1:84:09:0f:e2:29:99:5b: 80:f8:a1:02:a1:24:41:c3:70:5c:8a:10:ad:37:e0: 96:2b:69:32:eb:72:4f:4a:a0:8e:19:f8:0d:66:da: 7c:49:62:75:0c:bd:2a:8a:17:f3:00:40:4e:d0:1f: c0:c4:62:ba:f4:34:db:40:40:4c:25:4b:97:ee:33: a7:16:df:f4:24:7b:36:17:7d:1b:bf:22:ac:13:28: 3b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CB:D1:D6:ED:F8:1B:46:24:FD:B9:1D:CA:25:55:B0:33:B6:95:27 X509v3 Authority Key Identifier: keyid:BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a2:ff:14:e2:08:f4:30:45:b2:6d:57:ef:36:a3:d5:62:79: d8:a3:f1:46:9b:41:59:a0:c1:07:6f:9b:2e:bd:f9:c2:59:a3: e0:0c:e4:83:79:9b:99:09:4b:e5:94:f1:80:33:28:1c:17:93: 9c:3b:ed:33:0a:2f:bb:1b:11:2a:c2:bd:08:52:c9:f6:34:e4: 32:80:e0:61:7b:02:8d:ac:2a:33:f2:ae:54:61:84:6d:ad:58: 46:e4:22:ea:2c:f5:43:11:bb:4a:2d:7c:e3:c5:55:bf:01:02: 4f:b9:c5:21:37:7f:54:97:b0:80:ef:66:42:4d:c3:62:30:de: ab:8f:3f:94:3b:5e:1b:7a:96:c5:21:ca:b1:48:a5:44:fe:82: 59:6e:26:f1:cd:16:f6:21:ef:14:57:34:6f:6d:7f:a7:3d:ed: a0:44:da:aa:c4:55:56:ff:cf:91:d3:54:08:fb:44:e5:34:4b: 31:3a:25:11:68:e2:e1:ae:90:fa:44:c5:53:a7:d9:be:9e:d1: 28:57:3f:32:1c:41:9d:15:d2:e0:a8:aa:5e:f0:be:36:81:e5: 0f:55:1b:3b:5b:c0:75:f4:12:74:cb:b3:54:70:2f:ad:a1:38: 70:b7:e6:75:d7:b8:91:65:03:54:cb:89:1d:20:c8:be:3c:1f: ae:d6:12:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNDMxMTAvBgNVBAUTKEJCMTg3QjlCNTA3NjdCQjdCQkMyMjg3NzIwQkQzNkMw QjhEMDY4OTYwHhcNMjQwNjAxMDUxNDEwWhcNMjQwNjA4MDUxNDEwWjAYMRYwFAYD VQQDEw02NjVhYWUyMi0wMDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkV5PRt3QschnatxYWIdOX4Ag68Gk69Cdmid5KhSSuqYIuPlKu/5uttsf81R jzKTbph8TKPQahofeYuT9CNir7pK0bRop9zh58A18d0ExDRikLkcVFk437JJ8Xz1 tTvR33G0xewzTuS02YSMvfFFMX9xYm+bGSuiaMVzt8H9MGBKMji8u7zcYe/4/pbZ Z2kF2bmbiLJ9dZ+pB08pULrgrd/E5zuUV79SOtThsYQJD+IpmVuA+KECoSRBw3Bc ihCtN+CWK2ky63JPSqCOGfgNZtp8SWJ1DL0qihfzAEBO0B/AxGK69DTbQEBMJUuX 7jOnFt/0JHs2F30bvyKsEyg7iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDL0dbt +BtGJP25HcolVbAztpUnMB8GA1UdIwQYMBaAFLsYe5tQdnu3u8IodyC9NsC40GiW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU0My81MDhEQTExOEUy MDExMUVDOTdDQjMxNUNDNEY5QUUwMi91eGg3bTFCMmU3ZTd3aWgzSUwwMndMalFh SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4aDdtMUIyZTdlN3dpaDNJTDAyd0xqUWFKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU0My81MDhEQTExOEUyMDExMUVDOTdDQjMxNUNDNEY5QUUwMi91eGg3bTFCMmU3 ZTd3aWgzSUwwMndMalFhSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANov8U4gj0MEWybVfvNqPVYnnYo/FGm0FZoMEHb5suvfnCWaPgDOSD eZuZCUvllPGAMygcF5OcO+0zCi+7GxEqwr0IUsn2NOQygOBhewKNrCoz8q5UYYRt rVhG5CLqLPVDEbtKLXzjxVW/AQJPucUhN39Ul7CA72ZCTcNiMN6rjz+UO14bepbF IcqxSKVE/oJZbibxzRb2Ie8UVzRvbX+nPe2gRNqqxFVW/8+R01QI+0TlNEsxOiUR aOLhrpD6RMVTp9m+ntEoVz8yHEGdFdLgqKpe8L42geUPVRs7W8B19BJ0y7NUcC+t oThwt+Z117iRZQNUy4kdIMi+PB+u1hJu -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:43 2024 by rpki-client on console-fra.rpki-client.org