$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft File: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft (raw, json) Hash identifier: 4iZF7CDYBlAWJw994iGg5eE5RC4Eer7aiExkKp/VO3U= Subject key identifier: 38:9B:9E:0B:49:91:03:CB:E8:AC:E7:39:53:BE:F1:3D:7E:FD:C6:A2 Authority key identifier: 52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 Certificate issuer: /CN=A91AFA16/serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Certificate serial: 0A8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft Manifest number: 0A88 Signing time: Sat 18 May 2024 20:13:35 +0000 Manifest this update: Sat 18 May 2024 20:13:35 +0000 Manifest next update: Sat 25 May 2024 20:13:35 +0000 Files and hashes: 1: Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl (hash: zaqf4tJFYyVoUwRpKyKFlPgXUJ8JNaTMDAR4hYHefoM=) 2: 11DB043CF61E11EEB39BD261C4F9AE02.roa (hash: /5CCqw1EtUstMrkUM6asomv231tJ85ybbdA6hr7U5Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2703 (0xa8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFA16/serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894 Validity Not Before: May 18 20:13:35 2024 GMT Not After : May 25 20:13:35 2024 GMT Subject: CN=66490bef-d42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6c:cd:8e:e8:f6:b8:7d:12:62:03:60:6f:e5: 10:da:dd:8e:a1:b6:8f:69:0c:4e:a9:13:37:67:e2: 1b:77:78:8e:d9:6f:51:33:cd:c6:63:78:97:39:3a: 2e:62:05:56:e8:38:b5:0e:6d:af:85:76:4b:00:c2: 30:de:51:f5:17:5e:60:9d:d8:65:80:31:0b:07:ac: ab:03:a1:88:39:5c:40:d5:1a:9a:bd:ea:d5:c1:52: b3:52:0c:3e:ba:be:9e:5d:a3:d9:96:45:cd:88:e5: d0:69:15:17:5a:8e:0a:23:5b:57:e9:1a:54:09:9f: 84:ad:4a:e9:17:36:f6:2b:f6:13:fc:7a:b8:83:3d: 9f:6b:6a:e7:61:aa:98:cc:b4:37:61:3f:c8:0f:fd: 15:88:58:f9:cb:6f:6a:f0:6e:8d:a6:d3:80:1b:14: a5:59:14:2a:28:ca:22:ca:a9:1c:08:69:ba:7d:78: 2b:37:bb:a8:c0:09:8e:94:81:ee:29:6d:0e:33:e3: 0b:a3:31:9b:bc:3c:15:e4:b8:d7:ab:f3:7c:d1:0f: 97:18:a7:0b:1c:88:80:38:9e:3f:9e:67:d1:7b:d0: 62:9a:af:19:ee:72:45:88:0d:37:82:69:c5:4e:92: c2:cd:af:87:d1:9c:80:18:c3:08:73:12:f6:76:00: 22:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9B:9E:0B:49:91:03:CB:E8:AC:E7:39:53:BE:F1:3D:7E:FD:C6:A2 X509v3 Authority Key Identifier: keyid:52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:5a:cc:b9:8b:98:69:5a:55:48:be:12:27:e0:c2:9c:cc:c4: e0:70:5c:0f:4e:48:69:5b:07:e0:d4:8b:a3:dd:04:94:72:ea: de:66:8c:9f:18:4c:a3:66:89:11:99:01:d7:03:a7:6f:a2:ea: 96:74:57:88:9b:f3:98:46:37:5a:6f:87:2b:36:41:10:0a:38: a4:82:5e:63:f2:be:bb:a2:3b:b5:14:b3:36:df:e3:df:18:15: 82:51:8a:77:85:6b:68:54:37:af:48:ff:c6:43:ee:f5:e4:67: df:4b:1e:05:64:3a:6c:7a:24:81:63:0a:3e:da:ba:9e:da:3d: 7b:0c:d0:c8:17:b8:30:21:28:c7:a0:1c:10:ba:fe:3a:53:7a: c2:42:78:ba:ed:bc:76:e7:33:39:e6:e8:d7:19:7a:d5:a2:74: 72:3a:0e:59:7f:3a:b1:01:81:71:69:28:67:cb:db:a3:35:0f: 4b:2d:f4:10:94:54:54:bc:d1:0e:57:05:55:9d:43:1f:17:7c: d2:dd:75:fa:e4:15:95:18:c4:11:5b:4f:2f:9a:3f:11:25:94: 29:a9:33:6d:4b:d5:5c:47:96:fb:ed:9b:eb:1c:49:32:0b:b9: 27:0c:de:93:5a:1c:e3:ce:4b:02:f8:dd:af:fb:13:2b:d7:42: 14:b1:ff:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZBMTYxMTAvBgNVBAUTKDUyRkQxREUyNERBRjhERDVGQzNBQTAwNzhCMDc3MzJG QzI3NDc4OTQwHhcNMjQwNTE4MjAxMzM1WhcNMjQwNTI1MjAxMzM1WjAYMRYwFAYD VQQDEw02NjQ5MGJlZi1kNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmzNjuj2uH0SYgNgb+UQ2t2OobaPaQxOqRM3Z+Ibd3iO2W9RM83GY3iXOTou YgVW6Di1Dm2vhXZLAMIw3lH1F15gndhlgDELB6yrA6GIOVxA1RqaverVwVKzUgw+ ur6eXaPZlkXNiOXQaRUXWo4KI1tX6RpUCZ+ErUrpFzb2K/YT/Hq4gz2fa2rnYaqY zLQ3YT/ID/0ViFj5y29q8G6NptOAGxSlWRQqKMoiyqkcCGm6fXgrN7uowAmOlIHu KW0OM+MLozGbvDwV5LjXq/N80Q+XGKcLHIiAOJ4/nmfRe9Bimq8Z7nJFiA03gmnF TpLCza+H0ZyAGMMIcxL2dgAiQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDibngtJ kQPL6KznOVO+8T1+/caiMB8GA1UdIwQYMBaAFFL9HeJNr43V/DqgB4sHcy/CdHiU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkExNi9DNTU0MjA4MDM1 QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpkWDhPcUFIaXdkekw4SjBl SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V2MGQ0azJ2amRYOE9xQUhpd2R6TDhKMGVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkExNi9DNTU0MjA4MDM1QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpk WDhPcUFIaXdkekw4SjBlSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjWsy5i5hpWlVIvhIn4MKczMTgcFwPTkhpWwfg1Iuj3QSUcureZoyf GEyjZokRmQHXA6dvouqWdFeIm/OYRjdab4crNkEQCjikgl5j8r67oju1FLM23+Pf GBWCUYp3hWtoVDevSP/GQ+715GffSx4FZDpseiSBYwo+2rqe2j17DNDIF7gwISjH oBwQuv46U3rCQni67bx25zM55ujXGXrVonRyOg5ZfzqxAYFxaShny9ujNQ9LLfQQ lFRUvNEOVwVVnUMfF3zS3XX65BWVGMQRW08vmj8RJZQpqTNtS9VcR5b77ZvrHEky C7knDN6TWhzjzksC+N2v+xMr10IUsf+l -----END CERTIFICATE-----Generated at Sat May 18 21:31:30 2024 by rpki-client on console-ams.rpki-client.org