$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft File: Ska_UrGTBkf9JbeWkm28YUBL4-0.mft (raw, json) Hash identifier: GT0Y/dr2OzwSz74eUncFpVAeE5u7vsE4k0NJgyG+luA= Subject key identifier: DC:E0:2A:05:5F:D8:46:9E:D2:69:E6:12:33:6E:93:83:57:01:22:44 Authority key identifier: 4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED Certificate issuer: /CN=A91A8859/serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED Certificate serial: 0B88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft Manifest number: 0B81 Signing time: Sat 18 May 2024 19:22:44 +0000 Manifest this update: Sat 18 May 2024 19:22:44 +0000 Manifest next update: Sat 25 May 2024 19:22:44 +0000 Files and hashes: 1: Ska_UrGTBkf9JbeWkm28YUBL4-0.crl (hash: uXhYnhvBnrL2/Yzfu5JDX7c9qyxuGqOXGyccabVtZGw=) 2: 692ABA5A09DF11EAA6052433C4F9AE02.roa (hash: 1daJAtZ38rr+rWAF22et7iVxT40J3/uKzCIMj6f+mYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2952 (0xb88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8859/serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED Validity Not Before: May 18 19:22:44 2024 GMT Not After : May 25 19:22:44 2024 GMT Subject: CN=66490004-3bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bc:82:06:33:aa:76:59:c1:d2:b4:d5:b0:8f: 7a:2e:33:c4:5a:c3:95:9a:fb:94:5e:fb:d7:16:cd: 98:20:e5:9d:64:39:6e:d6:7e:3a:26:f3:f8:8c:0c: 02:65:a8:e9:49:8f:1d:97:75:f4:f4:06:6d:0c:a3: 20:dd:71:37:8d:02:ca:c5:9d:c0:5a:8a:33:a4:13: 66:02:71:30:07:12:9c:51:cb:eb:3d:c9:3a:af:7c: 6c:62:42:67:f4:27:9b:31:37:4f:e3:f5:b5:1a:32: 89:01:72:c2:c3:59:e2:e5:47:f7:38:56:e2:40:50: 80:fd:86:47:a4:e0:f0:a4:ed:49:52:fe:4f:85:04: d5:40:c8:51:06:d7:2c:b3:b1:23:66:b1:4c:af:f6: a6:f3:71:aa:23:f9:90:c4:3d:b5:2c:69:1b:6f:32: ff:bc:ef:08:34:56:0d:1a:07:d7:f2:fe:a5:6c:aa: 4a:e3:79:00:cd:97:56:99:43:4c:ed:70:a4:99:b1: 19:7b:b3:41:db:28:e4:0d:7d:07:42:c4:5e:0a:f0: 3d:bf:b1:37:9e:85:51:2e:ae:47:02:10:76:6c:5f: 9b:61:47:f3:c1:b5:fb:f6:d5:e5:a2:33:47:01:9a: 8f:5d:6c:60:6a:16:07:9b:ee:ef:15:0d:a1:eb:da: 5a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E0:2A:05:5F:D8:46:9E:D2:69:E6:12:33:6E:93:83:57:01:22:44 X509v3 Authority Key Identifier: keyid:4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:f3:fb:eb:26:90:5a:91:6c:cf:35:bc:42:5e:06:fc:41:cc: 93:fd:1a:26:90:a5:ba:1d:b0:8b:0c:63:82:51:8f:16:4d:b5: ea:8b:e9:e5:eb:cb:2a:72:32:41:65:b1:52:b5:d0:d3:ab:81: d9:89:34:f3:ca:36:f6:35:bf:23:7c:64:a6:52:20:ef:f5:09: 6c:ff:65:a9:6b:df:16:98:c3:07:65:aa:ca:50:de:25:2e:f4: 88:9e:9d:28:00:e9:81:ff:eb:08:09:21:2c:0e:49:3d:55:0d: c6:f7:24:ad:0b:16:cf:44:36:69:c6:63:e1:a5:2b:60:20:1f: 57:8d:71:d0:3d:3e:42:47:5a:c7:c9:cd:b3:45:cf:97:13:7f: 1d:b2:7a:c7:3e:e3:50:a8:2a:2b:b1:2a:40:7a:09:03:96:af: a7:db:cc:11:37:c1:8c:5c:e8:b1:24:35:3e:32:ab:88:89:04: 43:fa:f5:f8:5f:6a:3c:ca:9e:6e:23:ff:16:72:93:ff:9d:76: 8d:21:f2:44:dc:e2:3b:69:f1:53:93:3c:9f:5f:3c:20:5a:d5: e5:3b:16:a0:e0:db:ec:06:c9:cc:e8:83:4d:ee:bd:ac:8c:2b: 36:75:4d:2b:72:8c:37:88:84:30:c0:1c:6b:c4:b9:a5:00:5f: d2:a2:f4:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg4NTkxMTAvBgNVBAUTKDRBNDZCRjUyQjE5MzA2NDdGRDI1Qjc5NjkyNkRCQzYx NDA0QkUzRUQwHhcNMjQwNTE4MTkyMjQ0WhcNMjQwNTI1MTkyMjQ0WjAYMRYwFAYD VQQDEw02NjQ5MDAwNC0zYmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LyCBjOqdlnB0rTVsI96LjPEWsOVmvuUXvvXFs2YIOWdZDlu1n46JvP4jAwC ZajpSY8dl3X09AZtDKMg3XE3jQLKxZ3AWoozpBNmAnEwBxKcUcvrPck6r3xsYkJn 9CebMTdP4/W1GjKJAXLCw1ni5Uf3OFbiQFCA/YZHpODwpO1JUv5PhQTVQMhRBtcs s7EjZrFMr/am83GqI/mQxD21LGkbbzL/vO8INFYNGgfX8v6lbKpK43kAzZdWmUNM 7XCkmbEZe7NB2yjkDX0HQsReCvA9v7E3noVRLq5HAhB2bF+bYUfzwbX79tXlojNH AZqPXWxgahYHm+7vFQ2h69palQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzgKgVf 2Eae0mnmEjNuk4NXASJEMB8GA1UdIwQYMBaAFEpGv1KxkwZH/SW3lpJtvGFAS+Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODg1OS84REJEN0RCQTA1 MjcxMUVBOEYxN0M3MzFDNEY5QUUwMi9Ta2FfVXJHVEJrZjlKYmVXa20yOFlVQkw0 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NrYV9VckdUQmtmOUpiZVdrbTI4WVVCTDQtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODg1OS84REJEN0RCQTA1MjcxMUVBOEYxN0M3MzFDNEY5QUUwMi9Ta2FfVXJHVEJr ZjlKYmVXa20yOFlVQkw0LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj8/vrJpBakWzPNbxCXgb8QcyT/RomkKW6HbCLDGOCUY8WTbXqi+nl 68sqcjJBZbFStdDTq4HZiTTzyjb2Nb8jfGSmUiDv9Qls/2Wpa98WmMMHZarKUN4l LvSInp0oAOmB/+sICSEsDkk9VQ3G9yStCxbPRDZpxmPhpStgIB9XjXHQPT5CR1rH yc2zRc+XE38dsnrHPuNQqCorsSpAegkDlq+n28wRN8GMXOixJDU+MquIiQRD+vX4 X2o8yp5uI/8WcpP/nXaNIfJE3OI7afFTkzyfXzwgWtXlOxag4NvsBsnM6INN7r2s jCs2dU0rcow3iIQwwBxrxLmlAF/SovSK -----END CERTIFICATE-----Generated at Sat May 18 20:16:01 2024 by rpki-client on console-ams.rpki-client.org