$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft File: uwftRksoDVf6dxhB939S6n1QeSc.mft (raw, json) Hash identifier: J2zqbEHqeKaU0w3biLljXpfsshJKqDfThWg4ZNE5T6k= Subject key identifier: 4D:BF:F5:35:80:7A:A3:26:F7:83:A6:5B:37:C3:E7:62:C1:E5:1E:9E Authority key identifier: BB:07:ED:46:4B:28:0D:57:FA:77:18:41:F7:7F:52:EA:7D:50:79:27 Certificate issuer: /CN=A9193D85/serialNumber=BB07ED464B280D57FA771841F77F52EA7D507927 Certificate serial: 0F97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft Manifest number: 0F7F Signing time: Fri 31 May 2024 18:34:05 +0000 Manifest this update: Fri 31 May 2024 18:34:05 +0000 Manifest next update: Fri 07 Jun 2024 18:34:05 +0000 Files and hashes: 1: uwftRksoDVf6dxhB939S6n1QeSc.crl (hash: 1A9biwmIg2fViKZ+tDEY412OPXoLdNLsi5uCbVC5rBQ=) 2: AB2D69A4217A11EA9AB7211BC4F9AE02.roa (hash: pzFUGKlSlrla1++X9NgIJFwcgYI9JlvjgFwID6aF0UQ=) 3: 52138B923FCA11E9AB28853CC4F9AE02.roa (hash: fQXSv+FAL8joD9VxkyJ5Qf07Coph4JRLnSY5qQuvTmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.crl rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3991 (0xf97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193D85/serialNumber=BB07ED464B280D57FA771841F77F52EA7D507927 Validity Not Before: May 31 18:34:05 2024 GMT Not After : Jun 7 18:34:05 2024 GMT Subject: CN=665a181d-9b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fa:0c:60:d1:0b:42:bd:78:d3:2c:5c:86:7a: 0e:64:02:04:66:c5:51:8b:98:60:45:85:99:bc:5b: 40:67:89:f2:6d:25:ae:33:92:99:05:4b:18:bb:af: 25:10:80:62:27:71:45:70:ae:a3:5c:f0:fd:0d:42: c0:db:37:76:25:1d:c0:a6:01:5b:b7:5a:d0:80:1e: 43:9f:4c:f5:42:d2:a6:4c:91:7a:cc:e0:76:ec:06: f8:8b:4f:82:ab:4a:78:0d:db:e3:f5:94:b8:b3:3d: 1b:48:fb:d5:26:5a:21:4a:ed:90:7e:d0:c4:ef:2e: dd:66:ab:63:0a:25:21:c9:7c:6f:d2:a0:79:62:8d: 4d:c6:df:a1:c3:cc:c3:df:3a:ae:ea:2f:64:c7:73: 61:60:36:7c:27:8e:48:2f:26:a4:7c:f1:a5:a4:56: 44:eb:a5:cd:5a:21:e8:6a:b4:84:4a:8f:7f:ab:1d: de:b0:42:fd:c8:f5:61:ce:7d:e2:c1:03:6f:ee:18: b0:a9:7d:2a:d2:d3:cf:58:6b:b6:41:ab:de:36:e2: 45:0f:e9:77:80:be:8c:0c:f8:a1:c7:13:ef:45:fb: 84:3d:fd:31:e1:2a:7f:54:a3:0f:c5:db:7e:fa:ed: 63:8c:56:d1:d1:fa:f4:b4:77:d7:19:50:66:34:dc: 4a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BF:F5:35:80:7A:A3:26:F7:83:A6:5B:37:C3:E7:62:C1:E5:1E:9E X509v3 Authority Key Identifier: keyid:BB:07:ED:46:4B:28:0D:57:FA:77:18:41:F7:7F:52:EA:7D:50:79:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:7d:e6:03:fa:43:66:39:c4:6d:c4:3c:0b:74:56:bd:25:1e: 67:03:28:e9:c5:01:d7:36:08:a8:75:c5:b6:25:f8:ea:1f:6c: 60:69:52:ed:4e:d4:d9:e8:29:69:2f:80:8f:14:72:73:1e:21: d9:e4:cd:26:63:61:16:f5:92:d7:fb:72:7d:60:f3:a7:ea:4c: 95:6e:89:ef:a3:39:92:dd:82:b0:d1:95:aa:d9:53:1f:24:0e: da:35:d1:96:0b:48:de:6a:ff:5d:31:1f:ab:e0:82:77:2d:f9: 05:d8:1f:f1:04:0a:71:aa:5d:19:81:f8:b1:4c:fe:cb:43:fd: db:d7:2c:fa:6c:f1:a5:a2:07:01:bf:ba:61:49:55:b7:14:24: d2:9d:ca:d0:55:4a:58:fa:cd:f0:da:e1:7b:5d:e7:0d:53:40: 14:a5:ea:ed:bc:52:88:35:fc:1a:be:ae:8f:68:0d:4b:dd:16: e1:4e:bf:7b:98:52:ff:d6:87:c4:c8:a2:b9:92:17:53:ed:b3: ba:5a:c7:3c:82:41:1d:26:32:46:c5:7b:96:f3:1b:40:36:bf: a9:0d:df:fa:a5:1b:2b:70:17:3c:ea:ab:c0:1a:dd:f4:d5:1d: ff:11:61:55:f4:e8:61:34:c1:10:4a:d0:07:55:9c:69:2d:63: 8e:68:ab:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNEODUxMTAvBgNVBAUTKEJCMDdFRDQ2NEIyODBENTdGQTc3MTg0MUY3N0Y1MkVB N0Q1MDc5MjcwHhcNMjQwNTMxMTgzNDA1WhcNMjQwNjA3MTgzNDA1WjAYMRYwFAYD VQQDEw02NjVhMTgxZC05YjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PoMYNELQr140yxchnoOZAIEZsVRi5hgRYWZvFtAZ4nybSWuM5KZBUsYu68l EIBiJ3FFcK6jXPD9DULA2zd2JR3ApgFbt1rQgB5Dn0z1QtKmTJF6zOB27Ab4i0+C q0p4Ddvj9ZS4sz0bSPvVJlohSu2QftDE7y7dZqtjCiUhyXxv0qB5Yo1Nxt+hw8zD 3zqu6i9kx3NhYDZ8J45ILyakfPGlpFZE66XNWiHoarSESo9/qx3esEL9yPVhzn3i wQNv7hiwqX0q0tPPWGu2QaveNuJFD+l3gL6MDPihxxPvRfuEPf0x4Sp/VKMPxdt+ +u1jjFbR0fr0tHfXGVBmNNxK3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2/9TWA eqMm94OmWzfD52LB5R6eMB8GA1UdIwQYMBaAFLsH7UZLKA1X+ncYQfd/Uup9UHkn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Q4NS85MTUzMjUyMDNG QzkxMUU5OTc5QkI4M0JDNEY5QUUwMi91d2Z0Umtzb0RWZjZkeGhCOTM5UzZuMVFl U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V3ZnRSa3NvRFZmNmR4aEI5MzlTNm4xUWVTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Q4NS85MTUzMjUyMDNGQzkxMUU5OTc5QkI4M0JDNEY5QUUwMi91d2Z0Umtzb0RW ZjZkeGhCOTM5UzZuMVFlU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHfeYD+kNmOcRtxDwLdFa9JR5nAyjpxQHXNgiodcW2JfjqH2xgaVLt TtTZ6ClpL4CPFHJzHiHZ5M0mY2EW9ZLX+3J9YPOn6kyVbonvozmS3YKw0ZWq2VMf JA7aNdGWC0jeav9dMR+r4IJ3LfkF2B/xBApxql0ZgfixTP7LQ/3b1yz6bPGlogcB v7phSVW3FCTSncrQVUpY+s3w2uF7XecNU0AUpertvFKINfwavq6PaA1L3RbhTr97 mFL/1ofEyKK5khdT7bO6Wsc8gkEdJjJGxXuW8xtANr+pDd/6pRsrcBc86qvAGt30 1R3/EWFV9OhhNMEQStAHVZxpLWOOaKtO -----END CERTIFICATE-----Generated at Fri May 31 20:34:10 2024 by rpki-client on console-ams.rpki-client.org