$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft File: UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft (raw, json) Hash identifier: +vl5Uo20GYY+uARscKB3CGLCWSG2bsGVyZ1S+6p3tjE= Subject key identifier: 0B:01:BB:C9:8F:B2:07:A1:8D:C8:03:76:AE:97:B1:BA:E5:BF:A6:C8 Authority key identifier: 50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C Certificate issuer: /CN=A91A3D65/serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft Manifest number: 0115 Signing time: Sat 01 Jun 2024 06:42:10 +0000 Manifest this update: Sat 01 Jun 2024 06:42:09 +0000 Manifest next update: Sat 08 Jun 2024 06:42:09 +0000 Files and hashes: 1: UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl (hash: t2rUAk/aNUA6wK0AYgARilgBZUShXWZ1VSCNhXaLHEA=) 2: 57DD65D0D1FB11EDA0A31C2FC4F9AE02.roa (hash: doXTgB0s6IAGi0/6jjpUunwpI4VBrvzse5QbTKBBb00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3D65/serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C Validity Not Before: Jun 1 06:42:09 2024 GMT Not After : Jun 8 06:42:09 2024 GMT Subject: CN=665ac2c2-3dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:86:82:63:f6:86:c8:46:b5:32:6e:07:38: dd:cc:b1:cf:38:4c:51:88:cf:3b:c1:be:4f:18:f1: 8f:87:5a:47:90:af:4b:11:8d:a4:35:31:b2:f9:71: 79:32:de:2e:e6:25:e7:85:11:cb:9f:aa:be:d6:7b: 71:ae:ed:e1:73:6d:a3:5e:b9:15:ab:56:8a:bf:80: 5f:3e:83:96:77:a7:81:87:25:85:a8:30:83:b3:82: 4c:8d:c6:14:8b:a2:a0:87:a5:3d:dc:1b:7b:fe:f3: 56:e4:c1:b6:6f:24:db:8f:8c:f6:ef:fc:e9:43:34: 01:b5:3c:ad:49:77:46:2a:d8:f4:05:bc:36:ea:cc: bf:a7:a7:f5:b6:ee:fe:61:e9:d2:f6:78:8e:fd:db: 17:60:83:ca:11:dc:fa:1b:08:cb:f7:05:2b:fd:cd: 52:a1:bd:2e:cf:b2:ba:cf:3a:53:0d:cc:06:57:b2: e8:da:3c:22:f6:ca:93:26:73:66:75:24:08:d8:44: 0f:f2:28:b0:e6:a9:2e:f9:bc:94:62:a9:1e:1f:33: 2f:1e:8c:f0:9d:a7:26:3a:68:2c:a8:6a:12:b7:b2: 8a:af:91:9d:a7:ee:67:96:c5:61:03:d3:85:8a:a7: 2f:ce:58:dc:c3:37:95:8c:0b:56:a2:a0:47:23:52: d6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:01:BB:C9:8F:B2:07:A1:8D:C8:03:76:AE:97:B1:BA:E5:BF:A6:C8 X509v3 Authority Key Identifier: keyid:50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:81:1b:48:32:c5:5d:21:96:a1:44:1a:64:76:46:77:00:2e: cc:ef:77:95:59:c2:04:43:74:bf:9d:ae:6a:72:3a:b5:9b:31: 16:18:06:98:c7:13:07:c2:39:f8:ad:1e:e5:c2:f9:5b:c4:f6: e2:03:a6:d5:7a:26:77:d6:55:11:27:4b:75:9f:ff:fa:fb:b9: cb:dd:55:95:09:98:9c:cf:67:ae:b0:87:1e:62:21:37:bf:30: 91:b3:34:07:17:c0:32:f7:2a:6f:d3:e4:71:ea:82:ac:5d:7a: 06:d2:a5:cc:2d:c0:59:0c:e5:15:ff:d9:b9:d7:9b:8a:91:f0: 5f:7c:8a:8c:f5:42:8d:a6:21:f7:9c:08:d6:93:ee:99:da:84: 59:5b:58:74:ee:52:ff:9a:1b:2a:71:9a:b1:16:b1:8a:9d:ed: 31:ba:a8:c2:3d:55:64:c4:b1:25:96:83:5d:ce:2b:67:86:13: 1c:af:0a:4c:d7:b0:40:4d:86:d7:eb:2a:32:b7:cc:17:9d:42: 75:c4:9b:8a:62:22:b3:d9:63:53:fb:96:95:78:e2:a3:2d:fa: 0b:b1:be:d0:a2:7c:84:b8:8f:69:46:5f:0a:83:fa:3f:e8:35: ad:b2:e6:aa:61:83:06:92:56:05:ea:d7:dd:6d:c2:56:13:86: ef:0c:13:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNENjUxMTAvBgNVBAUTKDUwMDhCRTA0MUY5OTk3QjI1OUQyNTg0NDgzQTUzQTBE RkYwQjE3OEMwHhcNMjQwNjAxMDY0MjA5WhcNMjQwNjA4MDY0MjA5WjAYMRYwFAYD VQQDEw02NjVhYzJjMi0zZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7iGgmP2hshGtTJuBzjdzLHPOExRiM87wb5PGPGPh1pHkK9LEY2kNTGy+XF5 Mt4u5iXnhRHLn6q+1ntxru3hc22jXrkVq1aKv4BfPoOWd6eBhyWFqDCDs4JMjcYU i6Kgh6U93Bt7/vNW5MG2byTbj4z27/zpQzQBtTytSXdGKtj0Bbw26sy/p6f1tu7+ YenS9niO/dsXYIPKEdz6GwjL9wUr/c1Sob0uz7K6zzpTDcwGV7Lo2jwi9sqTJnNm dSQI2EQP8iiw5qku+byUYqkeHzMvHozwnacmOmgsqGoSt7KKr5Gdp+5nlsVhA9OF iqcvzljcwzeVjAtWoqBHI1LWDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsBu8mP sgehjcgDdq6Xsbrlv6bIMB8GA1UdIwQYMBaAFFAIvgQfmZeyWdJYRIOlOg3/CxeM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Q2NS9FQTFFNjJENjdD NzUxMUVEOEJFNjVCMzhDNEY5QUUwMi9VQWktQkItWmw3SlowbGhFZzZVNkRmOExG NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VBaS1CQi1abDdKWjBsaEVnNlU2RGY4TEY0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0Q2NS9FQTFFNjJENjdDNzUxMUVEOEJFNjVCMzhDNEY5QUUwMi9VQWktQkItWmw3 SlowbGhFZzZVNkRmOExGNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUgRtIMsVdIZahRBpkdkZ3AC7M73eVWcIEQ3S/na5qcjq1mzEWGAaY xxMHwjn4rR7lwvlbxPbiA6bVeiZ31lURJ0t1n//6+7nL3VWVCZicz2eusIceYiE3 vzCRszQHF8Ay9ypv0+Rx6oKsXXoG0qXMLcBZDOUV/9m515uKkfBffIqM9UKNpiH3 nAjWk+6Z2oRZW1h07lL/mhsqcZqxFrGKne0xuqjCPVVkxLElloNdzitnhhMcrwpM 17BATYbX6yoyt8wXnUJ1xJuKYiKz2WNT+5aVeOKjLfoLsb7QonyEuI9pRl8Kg/o/ 6DWtsuaqYYMGklYF6tfdbcJWE4bvDBPJ -----END CERTIFICATE-----Generated at Sat Jun 1 07:09:20 2024 by rpki-client on console-fra.rpki-client.org