$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft File: uG8rXtaXoSH08p1YIDcs8UBVEgs.mft (raw, json) Hash identifier: 8eXtPKOVy2Gbs0mHx3fNisqwWn4hMyhztuaQArpTOhU= Subject key identifier: 1D:89:D9:35:69:93:DC:60:46:27:68:99:DA:2A:4D:04:FD:F3:ED:6A Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft Manifest number: 8F Signing time: Sun 19 May 2024 07:01:06 +0000 Manifest this update: Sun 19 May 2024 07:01:05 +0000 Manifest next update: Sun 26 May 2024 07:01:05 +0000 Files and hashes: 1: uG8rXtaXoSH08p1YIDcs8UBVEgs.crl (hash: 4tSeE/1R/w8/I4yAa35QYWtcX7G2RrbESY70nNAwvvs=) 2: A915A3543FEC11EE99AC0F43C4F9AE02.roa (hash: Zcn6K1Xsm3ZgaUeGXnfJEHlcjqEmSwEDrqkEaYWqQ6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Validity Not Before: May 19 07:01:05 2024 GMT Not After : May 26 07:01:05 2024 GMT Subject: CN=6649a3b1-ec6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:3c:fb:3f:4f:c8:39:1b:6f:a8:23:1b:15: 63:cb:c1:42:9a:c1:ea:56:41:60:aa:de:b0:2b:45: 95:c3:b1:85:39:fc:15:2d:a8:f8:c2:fa:30:8c:a8: 50:51:04:c2:12:ca:89:11:e4:60:7b:d6:54:7b:0c: c5:17:0c:cb:fc:3b:a2:a3:a0:cd:5e:ed:fb:44:0a: 50:03:21:77:f1:f8:7b:63:c0:db:dd:74:6b:c1:c2: de:7d:b9:71:9a:c6:e1:d3:33:a7:82:9d:63:50:96: e8:da:fc:9b:ad:cb:2d:48:a0:a0:9d:e7:d6:92:3e: 59:eb:77:bf:60:ee:60:4d:08:44:fc:d3:f8:4d:d4: f9:d1:6e:ca:71:ad:b9:62:58:13:b3:d5:03:99:c1: f3:73:7f:94:0d:00:25:c3:5d:68:a8:45:2a:ee:88: 97:6d:dd:b3:71:16:f9:29:f3:9f:0f:60:e0:b7:e1: de:61:b9:4c:46:40:d8:b6:93:7e:3d:8f:c8:9c:84: dd:c7:65:f0:34:1d:4e:92:f7:49:88:b9:ce:93:7f: b3:7e:be:3e:7c:69:ec:4d:80:6e:75:aa:eb:a7:ca: 64:9e:8c:cf:ef:05:b2:9e:da:48:68:77:df:ba:b0: 72:a6:46:9c:7a:18:36:87:82:cd:c1:db:48:82:e2: 91:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:89:D9:35:69:93:DC:60:46:27:68:99:DA:2A:4D:04:FD:F3:ED:6A X509v3 Authority Key Identifier: keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c3:29:d1:b8:41:24:73:fa:05:a3:17:c4:80:d7:37:b1:15: ac:cb:2b:61:97:9b:a1:8e:a0:e1:a6:b7:70:be:36:c8:26:cc: 68:2b:61:af:a2:38:b2:ea:ac:da:7a:e2:90:4f:ff:ee:1e:a9: 1f:c2:c8:36:80:8d:51:7d:f5:29:41:26:26:19:3c:1a:38:4d: 50:c3:98:c6:0a:bd:89:7b:ca:47:8c:e7:8e:80:cf:f6:43:a1: c6:2b:cf:68:62:70:aa:35:91:d7:ed:59:82:39:f0:f7:b6:5a: fa:c1:53:95:2a:93:fa:c8:50:ea:7d:0d:05:19:b1:d7:f3:8c: 77:8c:17:1d:f7:01:6d:e6:11:2a:80:dd:37:3a:75:76:d6:b1: 3b:ae:65:b0:61:ea:c7:c8:6d:42:28:71:3b:ae:20:2f:d5:e1: 1e:f7:68:97:b5:65:34:29:86:a7:cb:7c:29:86:fa:ac:14:64: d6:c9:0c:ae:27:a8:a1:f3:ae:3d:22:a9:cb:f9:fa:ed:1c:59: 7a:44:98:47:8d:33:ce:32:e8:f1:2c:05:48:c0:48:42:5e:d0: 33:81:1e:f4:d1:10:89:86:96:5b:56:be:20:26:a9:af:7a:8c: b8:cb:d2:16:b7:20:40:d0:6a:86:57:98:1f:01:fa:d5:e8:28: c8:e9:21:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQzYxMTAvBgNVBAUTKEI4NkYyQjVFRDY5N0ExMjFGNEYyOUQ1ODIwMzcyQ0Yx NDA1NTEyMEIwHhcNMjQwNTE5MDcwMTA1WhcNMjQwNTI2MDcwMTA1WjAYMRYwFAYD VQQDEw02NjQ5YTNiMS1lYzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNY8+z9PyDkbb6gjGxVjy8FCmsHqVkFgqt6wK0WVw7GFOfwVLaj4wvowjKhQ UQTCEsqJEeRge9ZUewzFFwzL/Duio6DNXu37RApQAyF38fh7Y8Db3XRrwcLefblx msbh0zOngp1jUJbo2vybrcstSKCgnefWkj5Z63e/YO5gTQhE/NP4TdT50W7Kca25 YlgTs9UDmcHzc3+UDQAlw11oqEUq7oiXbd2zcRb5KfOfD2Dgt+HeYblMRkDYtpN+ PY/InITdx2XwNB1OkvdJiLnOk3+zfr4+fGnsTYBudarrp8pknozP7wWyntpIaHff urBypkacehg2h4LNwdtIguKRjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2J2TVp k9xgRidomdoqTQT98+1qMB8GA1UdIwQYMBaAFLhvK17Wl6Eh9PKdWCA3LPFAVRIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBDNi8zRkNFQkQyMjNG RUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9TSDA4cDFZSURjczhVQlZF Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VHOHJYdGFYb1NIMDhwMVlJRGNzOFVCVkVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBDNi8zRkNFQkQyMjNGRUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9T SDA4cDFZSURjczhVQlZFZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApwynRuEEkc/oFoxfEgNc3sRWsyythl5uhjqDhprdwvjbIJsxoK2Gv ojiy6qzaeuKQT//uHqkfwsg2gI1RffUpQSYmGTwaOE1Qw5jGCr2Je8pHjOeOgM/2 Q6HGK89oYnCqNZHX7VmCOfD3tlr6wVOVKpP6yFDqfQ0FGbHX84x3jBcd9wFt5hEq gN03OnV21rE7rmWwYerHyG1CKHE7riAv1eEe92iXtWU0KYany3wphvqsFGTWyQyu J6ih8649IqnL+frtHFl6RJhHjTPOMujxLAVIwEhCXtAzgR700RCJhpZbVr4gJqmv eoy4y9IWtyBA0GqGV5gfAfrV6CjI6SFa -----END CERTIFICATE-----Generated at Sun May 19 07:40:44 2024 by rpki-client on console-fra.rpki-client.org