$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft File: uRm6CzrV4m_DHTlL4TK7yof8yFI.mft (raw, json) Hash identifier: Gaq3YtIq1Xt2La6G3MWqRMqpJXmYx6Jyfs258D9PrcI= Subject key identifier: 06:14:7B:B5:1E:CA:1C:89:0C:5F:1C:FA:B7:14:4D:59:43:C0:46:F7 Authority key identifier: B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52 Certificate issuer: /CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852 Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft Manifest number: 018C Signing time: Sun 19 May 2024 04:42:59 +0000 Manifest this update: Sun 19 May 2024 04:42:59 +0000 Manifest next update: Sun 26 May 2024 04:42:59 +0000 Files and hashes: 1: uRm6CzrV4m_DHTlL4TK7yof8yFI.crl (hash: LlokHqOINuDIv/Z3Bg2/fOqrhy2O12aU40ipuqV5WxM=) 2: 4C0F405E1E1C11EDA19CF560C4F9AE02.roa (hash: jv/N2H+KYp4FGtw91v8rSz3P7h2Tpl75XLmcGGh/Aro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852 Validity Not Before: May 19 04:42:59 2024 GMT Not After : May 26 04:42:59 2024 GMT Subject: CN=66498353-9c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:89:7c:3f:3e:96:e4:7b:ba:df:43:c5:36:f0: a1:cf:ad:ff:fa:4c:df:dc:29:5f:9f:64:e3:a6:f2: f7:06:1c:5f:16:a7:4b:e4:6d:fc:f8:aa:81:05:c4: ed:38:d8:c7:a1:b6:90:79:00:d2:9e:4c:36:4e:52: 0a:8a:1d:55:3f:c3:07:1f:fb:13:d8:03:c2:db:20: 25:31:8e:79:88:73:ef:68:e2:58:84:20:4d:67:49: 19:15:61:8c:f3:f8:be:a8:32:bc:fe:d5:64:87:31: f8:e0:05:0b:91:15:2f:9e:bf:c8:73:b5:53:3a:a5: 98:eb:57:6b:ef:57:1a:c7:4b:fd:b1:ea:e8:65:28: 6c:63:a5:15:1d:3c:e9:16:8a:bb:0f:90:d7:3a:94: d8:f3:60:83:8d:9e:bc:92:28:52:80:35:dc:49:12: b1:37:7e:e3:e8:f4:f8:16:60:84:fc:86:03:cb:03: 88:ad:ac:2d:d3:10:8f:07:19:d8:42:8e:97:db:49: 36:b3:e0:d5:6c:07:cb:b4:f2:c9:08:3f:ab:03:e4: 86:12:7e:d9:1b:b5:e5:b7:f1:e0:07:7d:7e:2c:c3: 18:ed:4d:68:8a:70:5b:27:ee:3e:bc:ed:18:85:f4: dc:ed:11:93:63:91:6d:35:11:aa:f0:1e:1b:32:d1: 19:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:14:7B:B5:1E:CA:1C:89:0C:5F:1C:FA:B7:14:4D:59:43:C0:46:F7 X509v3 Authority Key Identifier: keyid:B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:b0:78:ae:f1:1b:ae:3b:61:79:56:dc:f9:9a:e2:71:3c:7c: b3:26:5e:3f:80:c6:63:bb:0e:a8:2a:6d:ec:a1:f1:3f:fa:a8: bb:a0:2e:f2:eb:a8:24:1e:e4:41:d4:fe:63:07:81:68:fe:7f: de:75:c0:79:8a:2c:52:7d:45:f0:57:7c:a5:30:df:53:b1:60: 9b:62:6e:93:74:a4:e5:2b:3a:fe:59:2f:ea:ea:99:be:3c:29: 6c:77:e0:fb:f3:9d:57:48:4f:c9:5b:ce:95:4f:1a:aa:1d:e4: 6b:c5:db:69:ab:ed:92:14:f0:66:4a:d9:20:b1:d3:b8:95:2b: 2e:66:67:c2:db:36:fb:80:d6:fe:e9:c3:67:ef:48:3d:83:38: c3:8e:ec:c7:d2:ca:fe:c3:31:7f:54:e5:c1:0a:58:b2:0d:a9: 85:d9:51:da:aa:b1:2f:d8:f1:44:c5:58:7e:ba:6a:34:cf:d4: e5:ab:a8:8f:02:9f:85:6f:54:87:4c:ac:e8:53:65:40:82:f0: 9c:11:70:ef:71:c9:3c:ff:71:25:2a:be:fa:70:21:b5:fa:3f: cb:02:21:6c:dd:6e:5e:d8:a6:98:5a:6f:ac:6c:5f:70:f7:7c: 99:44:af:41:ac:04:49:50:46:82:93:d1:0d:67:1f:d0:88:77: a5:01:79:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU0QzYxMTAvBgNVBAUTKEI5MTlCQTBCM0FENUUyNkZDMzFEMzk0QkUxMzJCQkNB ODdGQ0M4NTIwHhcNMjQwNTE5MDQ0MjU5WhcNMjQwNTI2MDQ0MjU5WjAYMRYwFAYD VQQDEw02NjQ5ODM1My05YzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ol8Pz6W5Hu630PFNvChz63/+kzf3Clfn2TjpvL3BhxfFqdL5G38+KqBBcTt ONjHobaQeQDSnkw2TlIKih1VP8MHH/sT2APC2yAlMY55iHPvaOJYhCBNZ0kZFWGM 8/i+qDK8/tVkhzH44AULkRUvnr/Ic7VTOqWY61dr71cax0v9seroZShsY6UVHTzp Foq7D5DXOpTY82CDjZ68kihSgDXcSRKxN37j6PT4FmCE/IYDywOIrawt0xCPBxnY Qo6X20k2s+DVbAfLtPLJCD+rA+SGEn7ZG7Xlt/HgB31+LMMY7U1oinBbJ+4+vO0Y hfTc7RGTY5FtNRGq8B4bMtEZeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYUe7Ue yhyJDF8c+rcUTVlDwEb3MB8GA1UdIwQYMBaAFLkZugs61eJvwx05S+Eyu8qH/MhS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTRDNi9FQUI5NDdBODFF MTgxMUVEOTQ3OTM2NURDNEY5QUUwMi91Um02Q3pyVjRtX0RIVGxMNFRLN3lvZjh5 RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VSbTZDenJWNG1fREhUbEw0VEs3eW9mOHlGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTRDNi9FQUI5NDdBODFFMTgxMUVEOTQ3OTM2NURDNEY5QUUwMi91Um02Q3pyVjRt X0RIVGxMNFRLN3lvZjh5RkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlsHiu8RuuO2F5Vtz5muJxPHyzJl4/gMZjuw6oKm3sofE/+qi7oC7y 66gkHuRB1P5jB4Fo/n/edcB5iixSfUXwV3ylMN9TsWCbYm6TdKTlKzr+WS/q6pm+ PClsd+D7851XSE/JW86VTxqqHeRrxdtpq+2SFPBmStkgsdO4lSsuZmfC2zb7gNb+ 6cNn70g9gzjDjuzH0sr+wzF/VOXBCliyDamF2VHaqrEv2PFExVh+umo0z9Tlq6iP Ap+Fb1SHTKzoU2VAgvCcEXDvcck8/3ElKr76cCG1+j/LAiFs3W5e2KaYWm+sbF9w 93yZRK9BrARJUEaCk9ENZx/QiHelAXna -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org