$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE63C/E27A55A6456311EDAAB5E164C4F9AE02/UYw4xLA2ROAncichcLhSl3E_jN8.mft File: UYw4xLA2ROAncichcLhSl3E_jN8.mft (raw, json) Hash identifier: 4thQ4uPZFWT+DUeqhUZdrmM60LZyp1N2dEeDc9fNJAI= Subject key identifier: 9E:06:AE:77:0B:A8:CE:B0:4F:F6:54:44:6E:AB:97:68:00:24:DD:56 Authority key identifier: 51:8C:38:C4:B0:36:44:E0:27:72:27:21:70:B8:52:97:71:3F:8C:DF Certificate issuer: /CN=A91AE63C/serialNumber=518C38C4B03644E02772272170B85297713F8CDF Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYw4xLA2ROAncichcLhSl3E_jN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE63C/E27A55A6456311EDAAB5E164C4F9AE02/UYw4xLA2ROAncichcLhSl3E_jN8.mft Manifest number: 0132 Signing time: Sun 19 May 2024 05:00:21 +0000 Manifest this update: Sun 19 May 2024 05:00:20 +0000 Manifest next update: Sun 26 May 2024 05:00:20 +0000 Files and hashes: 1: UYw4xLA2ROAncichcLhSl3E_jN8.crl (hash: NHz1wok3t6NAqOtVUf/XyjB1pq8vYfa/FPDztJBgwaA=) 2: 4010EC26456811ED94F35B6BC4F9AE02.roa (hash: o/0z6eqVRVSlCoRA7VHMF4C80D97+OmikMfzGtKn4vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE63C/E27A55A6456311EDAAB5E164C4F9AE02/UYw4xLA2ROAncichcLhSl3E_jN8.crl rsync://rpki.apnic.net/member_repository/A91AE63C/E27A55A6456311EDAAB5E164C4F9AE02/UYw4xLA2ROAncichcLhSl3E_jN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYw4xLA2ROAncichcLhSl3E_jN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE63C/serialNumber=518C38C4B03644E02772272170B85297713F8CDF Validity Not Before: May 19 05:00:20 2024 GMT Not After : May 26 05:00:20 2024 GMT Subject: CN=66498765-22b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6a:1f:fd:99:fc:6f:c3:79:63:c9:14:23:7e: 9e:31:e5:5f:95:0d:82:99:27:0e:2a:17:37:2e:29: 92:1c:20:2a:94:79:5f:4a:f5:5c:c3:74:a7:6d:23: 2e:93:ff:96:a0:cb:0a:53:c3:4f:83:d3:d4:85:52: 1d:55:d9:72:e3:39:b4:48:cb:0a:6d:c9:09:a2:d9: cb:f4:9b:ed:ae:f6:63:25:62:12:ec:69:a4:94:72: 47:a6:d2:ad:43:39:57:6c:bd:81:ff:9d:45:01:72: 1b:a4:64:de:20:af:5d:1f:87:1e:b1:56:ed:50:bb: 32:e0:f6:c1:76:fb:c0:f9:d0:9a:c9:ad:78:15:60: 4e:f7:54:f1:8f:21:f9:e2:a9:3d:ca:81:e2:00:8c: 3d:e5:87:d1:aa:da:46:54:80:da:40:25:a5:00:10: e2:dd:1d:88:64:9f:7d:e0:dc:76:18:0e:aa:42:e0: 77:c6:53:c0:e3:92:b9:a3:5a:37:9f:8b:d8:1e:4e: 8c:af:07:57:dd:0e:0e:f8:35:26:a8:b3:66:df:e3: 8f:80:55:04:d4:b2:40:6e:d0:6b:63:da:26:3e:f9: 17:22:ad:0d:f9:8d:63:53:e3:4f:ad:a3:36:8b:16: 55:76:03:4e:ee:c7:80:9c:17:71:46:3d:6b:ea:dc: 90:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:06:AE:77:0B:A8:CE:B0:4F:F6:54:44:6E:AB:97:68:00:24:DD:56 X509v3 Authority Key Identifier: keyid:51:8C:38:C4:B0:36:44:E0:27:72:27:21:70:B8:52:97:71:3F:8C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE63C/E27A55A6456311EDAAB5E164C4F9AE02/UYw4xLA2ROAncichcLhSl3E_jN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYw4xLA2ROAncichcLhSl3E_jN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE63C/E27A55A6456311EDAAB5E164C4F9AE02/UYw4xLA2ROAncichcLhSl3E_jN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:0f:93:52:bd:d0:00:06:69:03:68:56:92:75:de:0a:67:12: eb:38:26:4c:e6:95:b8:7d:27:92:1e:04:4e:e0:88:70:42:5b: 46:9d:93:c0:3a:85:c7:5b:30:e7:b4:2e:4b:71:55:8a:15:2f: 03:8b:34:09:5e:b5:84:61:b3:df:e3:86:4a:76:bf:30:47:f4: 2b:f4:c1:53:53:a6:bd:c8:1d:f6:d8:9a:d2:a7:08:a0:5d:73: a5:ea:06:c6:68:fe:46:d8:a0:16:dc:52:1d:71:a6:c6:da:00: ce:ae:6d:26:82:3e:e4:02:4e:99:c2:9a:38:6f:58:89:5c:82: f4:37:3a:7c:88:89:3d:29:b5:64:cd:38:b8:eb:9d:37:6d:b9: 51:4b:56:35:81:11:3e:cc:73:8e:20:64:28:73:59:27:c6:2d: cc:34:ce:70:c6:89:11:42:7f:89:ef:99:c9:fb:36:ed:3a:c8: d0:57:77:6e:56:a5:2a:e6:96:a3:d3:ae:4a:ee:8c:8d:8e:56: 43:cb:b5:d1:6a:69:5f:03:e5:45:77:ef:5f:db:73:d2:10:a6: 2b:00:28:49:23:cb:96:ee:2e:8f:23:c7:70:b5:5e:72:96:26: d5:b2:c4:7c:b8:ec:61:79:a0:ea:85:fe:ff:c1:2f:00:87:ee: a3:42:f7:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2M0MxMTAvBgNVBAUTKDUxOEMzOEM0QjAzNjQ0RTAyNzcyMjcyMTcwQjg1Mjk3 NzEzRjhDREYwHhcNMjQwNTE5MDUwMDIwWhcNMjQwNTI2MDUwMDIwWjAYMRYwFAYD VQQDEw02NjQ5ODc2NS0yMmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Wof/Zn8b8N5Y8kUI36eMeVflQ2CmScOKhc3LimSHCAqlHlfSvVcw3SnbSMu k/+WoMsKU8NPg9PUhVIdVdly4zm0SMsKbckJotnL9JvtrvZjJWIS7GmklHJHptKt QzlXbL2B/51FAXIbpGTeIK9dH4cesVbtULsy4PbBdvvA+dCaya14FWBO91TxjyH5 4qk9yoHiAIw95YfRqtpGVIDaQCWlABDi3R2IZJ994Nx2GA6qQuB3xlPA45K5o1o3 n4vYHk6MrwdX3Q4O+DUmqLNm3+OPgFUE1LJAbtBrY9omPvkXIq0N+Y1jU+NPraM2 ixZVdgNO7seAnBdxRj1r6tyQgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4GrncL qM6wT/ZURG6rl2gAJN1WMB8GA1UdIwQYMBaAFFGMOMSwNkTgJ3InIXC4UpdxP4zf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTYzQy9FMjdBNTVBNjQ1 NjMxMUVEQUFCNUUxNjRDNEY5QUUwMi9VWXc0eExBMlJPQW5jaWNoY0xoU2wzRV9q TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VZdzR4TEEyUk9BbmNpY2hjTGhTbDNFX2pOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTYzQy9FMjdBNTVBNjQ1NjMxMUVEQUFCNUUxNjRDNEY5QUUwMi9VWXc0eExBMlJP QW5jaWNoY0xoU2wzRV9qTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFD5NSvdAABmkDaFaSdd4KZxLrOCZM5pW4fSeSHgRO4IhwQltGnZPA OoXHWzDntC5LcVWKFS8DizQJXrWEYbPf44ZKdr8wR/Qr9MFTU6a9yB322JrSpwig XXOl6gbGaP5G2KAW3FIdcabG2gDOrm0mgj7kAk6Zwpo4b1iJXIL0Nzp8iIk9KbVk zTi46503bblRS1Y1gRE+zHOOIGQoc1knxi3MNM5wxokRQn+J75nJ+zbtOsjQV3du VqUq5paj065K7oyNjlZDy7XRamlfA+VFd+9f23PSEKYrAChJI8uW7i6PI8dwtV5y libVssR8uOxheaDqhf7/wS8Ah+6jQvf7 -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org