$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json) Hash identifier: 0S0TvE5MLu997XTlf1rIW/7ozZfB9Gh7jTQW07w+O30= Subject key identifier: A9:81:29:53:6B:06:55:3A:BD:17:A3:D6:B3:B5:7E:02:A1:86:A3:6C Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft Manifest number: 0297 Signing time: Fri 31 May 2024 04:15:51 +0000 Manifest this update: Fri 31 May 2024 04:15:51 +0000 Manifest next update: Fri 07 Jun 2024 04:15:51 +0000 Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: tnoLmLEvaCL9xEKzHltzz8DnIyXXaJEuxetddTW/teA=) 2: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: x3rm2lsdWCq5H1iFBJa/qGikKwjQx3i5zJC/7qUndDc=) 3: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: zvdvwJcuOtvUPmpdaTRLd7yeeHSE1WLrW9/n0ZGLVFg=) 4: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: WhDHiwmwYVqE+pXVKGlpTjXIHPrjkD5Wxpz070fjZPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Validity Not Before: May 31 04:15:51 2024 GMT Not After : Jun 7 04:15:51 2024 GMT Subject: CN=66594ef7-8fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:8f:21:a1:67:c4:04:ac:48:47:da:74:54: 1b:6a:ec:fc:82:ea:8a:65:e9:38:65:8b:e4:ea:47: 8d:7e:e0:2c:79:f6:04:14:06:07:3d:0e:7a:76:43: 0d:02:06:e7:c5:14:03:19:da:74:7b:b4:a4:67:38: 82:27:5e:78:13:81:6b:01:d8:5e:7c:19:18:89:9c: ca:93:4f:ef:73:d2:1b:cb:c2:c2:11:b9:f6:64:11: 28:8e:96:29:2c:67:ae:78:48:7f:35:68:b6:51:45: da:cf:63:c2:e4:ea:42:7c:2b:92:5b:8b:c3:fa:16: 7c:b4:39:b8:6b:bc:cc:4d:95:fa:8c:4d:fb:53:d3: ca:48:90:e3:fd:6d:65:d4:ed:c1:71:fa:28:e2:79: c5:bd:97:66:8e:e7:a8:d9:45:20:42:bc:36:69:c8: b8:66:75:0a:60:c3:c0:fa:9e:de:f4:7a:85:1a:89: be:5b:94:c9:b9:ad:5f:fb:38:c9:26:12:0a:df:b1: e7:0f:f2:c1:89:29:c9:f3:97:73:d3:f9:2b:32:eb: 2c:98:7c:09:74:b4:ab:c4:60:78:e4:9f:d5:11:30: 62:5d:53:0a:d0:ee:9f:9e:31:a5:d5:ec:df:f9:aa: a4:95:ba:0c:50:c9:4a:47:9c:f3:8f:8e:2d:42:e3: 10:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:81:29:53:6B:06:55:3A:BD:17:A3:D6:B3:B5:7E:02:A1:86:A3:6C X509v3 Authority Key Identifier: keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:5e:e3:33:dd:f4:f3:09:76:7a:ec:cb:b3:75:52:78:75:57: d6:46:32:ff:4f:ae:bd:ee:c8:7c:4f:6c:5a:8b:14:ca:fe:f5: 36:8b:43:91:12:a8:69:a6:d5:f4:16:c1:63:8c:d9:76:ea:1f: 7e:28:f2:14:32:01:92:ab:aa:29:2c:64:41:25:de:1a:b6:5d: 2b:3d:c2:4c:bb:7f:6f:a5:e5:19:5d:1c:6f:9e:cf:b7:b7:22: 7f:d1:e6:dc:0a:ab:aa:0a:f5:b8:e8:21:40:8f:53:40:6e:d1: 49:33:e5:e3:3d:f2:99:04:08:e9:d5:61:2f:1a:76:b1:1b:91: e3:19:cf:3e:2a:4c:3e:74:72:30:28:27:a2:3f:9d:26:3b:96: 97:0d:cf:c0:00:df:a4:aa:fd:93:c5:61:48:62:23:e3:62:8e: 91:45:ef:47:0f:86:1a:b5:b7:a4:ef:9e:08:3b:da:a3:a6:85: f2:ee:4b:dc:18:b8:22:39:8e:cc:12:4f:56:1a:8a:ce:12:88: 8f:e6:cd:ea:47:06:47:05:9f:91:7b:1c:98:4b:25:cf:e2:3a: e2:07:56:95:3d:27:32:50:56:06:11:f9:33:4d:e4:e2:ad:50: c8:a9:93:54:18:47:6d:d6:bf:67:54:fe:40:e3:d6:2d:94:06: 82:2a:ae:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREQzcxMTAvBgNVBAUTKEI4ODkxMTE3ODA2OEQ1NzVERkRERjg0OTQwQ0FCRUFG NDUxQzhDMkIwHhcNMjQwNTMxMDQxNTUxWhcNMjQwNjA3MDQxNTUxWjAYMRYwFAYD VQQDEw02NjU5NGVmNy04ZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4mPIaFnxASsSEfadFQbauz8guqKZek4ZYvk6keNfuAsefYEFAYHPQ56dkMN AgbnxRQDGdp0e7SkZziCJ154E4FrAdhefBkYiZzKk0/vc9Iby8LCEbn2ZBEojpYp LGeueEh/NWi2UUXaz2PC5OpCfCuSW4vD+hZ8tDm4a7zMTZX6jE37U9PKSJDj/W1l 1O3Bcfoo4nnFvZdmjueo2UUgQrw2aci4ZnUKYMPA+p7e9HqFGom+W5TJua1f+zjJ JhIK37HnD/LBiSnJ85dz0/krMussmHwJdLSrxGB45J/VETBiXVMK0O6fnjGl1ezf +aqklboMUMlKR5zzj44tQuMQNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmBKVNr BlU6vRej1rO1fgKhhqNsMB8GA1UdIwQYMBaAFLiJEReAaNV13934SUDKvq9FHIwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNERDNy9GM0YxMDIwRUJC MTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFYWGYzZmhKUU1xLXIwVWNq Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJa1JGNEJvMVhYZjNmaEpRTXEtcjBVY2pDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NERDNy9GM0YxMDIwRUJCMTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFY WGYzZmhKUU1xLXIwVWNqQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsXuMz3fTzCXZ67MuzdVJ4dVfWRjL/T6697sh8T2xaixTK/vU2i0OR EqhpptX0FsFjjNl26h9+KPIUMgGSq6opLGRBJd4atl0rPcJMu39vpeUZXRxvns+3 tyJ/0ebcCquqCvW46CFAj1NAbtFJM+XjPfKZBAjp1WEvGnaxG5HjGc8+Kkw+dHIw KCeiP50mO5aXDc/AAN+kqv2TxWFIYiPjYo6RRe9HD4Yatbek754IO9qjpoXy7kvc GLgiOY7MEk9WGorOEoiP5s3qRwZHBZ+RexyYSyXP4jriB1aVPScyUFYGEfkzTeTi rVDIqZNUGEdt1r9nVP5A49YtlAaCKq4+ -----END CERTIFICATE-----Generated at Fri May 31 04:54:01 2024 by rpki-client on console-fra.rpki-client.org