$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft File: uLRz022lJgglzQu_YvbsGQ00Ahg.mft (raw, json) Hash identifier: nj4qFDq1jORJ0IV0JhUXbARXOGK0qlRmSLvEG7Sz1Mo= Subject key identifier: 00:A0:3F:C0:A4:47:C9:DE:95:BB:8E:46:A2:79:82:4A:CC:62:01:BC Authority key identifier: B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 Certificate issuer: /CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Certificate serial: 33D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft Manifest number: 33CD Signing time: Sat 18 May 2024 14:19:00 +0000 Manifest this update: Sat 18 May 2024 14:19:00 +0000 Manifest next update: Sat 25 May 2024 14:19:00 +0000 Files and hashes: 1: uLRz022lJgglzQu_YvbsGQ00Ahg.crl (hash: eTLjilWuUV5cbH8l4ANlV8bK5u3vAEKRvZUwTy1BrY4=) 2: 75C18F96305811EB94E3192FC4F9AE02.roa (hash: UzsieRuJZfKKtvrR8Sja2Ma73F9hqR2aOcUuvBHYQ7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13266 (0x33d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Validity Not Before: May 18 14:19:00 2024 GMT Not After : May 25 14:19:00 2024 GMT Subject: CN=6648b8d4-3eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:df:38:41:b6:07:49:ee:9e:50:c7:fc:16:ea: ce:a8:69:40:08:2a:f7:bc:98:a3:f2:9f:8e:4b:62: f8:12:f1:12:e6:dc:d7:4c:af:16:0e:23:f3:9d:d5: 0e:21:ee:f6:03:65:e0:88:3c:06:d5:d6:3c:cc:92: 7f:fb:02:3b:5f:73:5c:30:3f:c0:67:3a:ea:81:19: 7d:68:45:be:11:b4:eb:c7:83:89:3c:64:d9:7c:5b: 5a:8b:da:9e:7d:73:b4:8c:aa:2c:a4:b6:2c:8e:30: 40:d3:90:04:7d:d6:b3:8e:7e:c3:92:bb:6c:15:6b: f0:c2:57:f2:de:77:90:3a:45:a3:e2:a0:52:bb:25: f4:fd:76:89:33:dd:c7:27:5d:5e:af:89:b4:3c:20: ac:a6:34:f1:78:68:e3:f7:d5:82:a5:01:7e:aa:bc: 96:69:31:be:3a:b6:9e:fa:de:83:e5:9c:b9:e8:3e: 2b:61:e0:e7:c6:ae:c9:f2:43:b1:b9:6c:a7:cf:c8: 94:11:a0:17:4a:50:77:a0:6f:6b:7e:50:e8:f5:d5: 4b:ab:2d:f5:96:d8:4f:1d:5c:27:d8:d5:e4:d2:02: 9a:5c:d8:1f:f3:66:0f:ae:d6:94:06:a9:4b:eb:44: de:59:a5:46:43:71:3c:3d:0c:11:4c:2d:22:b9:fd: 15:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A0:3F:C0:A4:47:C9:DE:95:BB:8E:46:A2:79:82:4A:CC:62:01:BC X509v3 Authority Key Identifier: keyid:B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:66:cf:33:79:1d:90:54:1a:01:3e:18:76:7b:76:ec:07:5a: 7f:4d:6b:39:36:77:c0:c0:56:31:dc:15:a3:74:78:3c:72:3e: a0:13:91:a1:4b:f7:3c:ef:06:18:54:14:2d:90:d2:15:57:e5: db:da:ac:14:7e:e3:5a:40:48:56:de:ae:60:d5:78:3c:7e:c0: c4:c2:15:33:b1:09:f8:e4:77:a8:42:fd:b2:d3:e5:a8:36:ba: e9:a1:e7:de:58:32:62:8c:65:99:9a:d6:2c:f7:49:b5:f3:67: 9a:f6:f2:74:58:ec:ca:cd:30:2b:33:0f:9e:aa:12:83:36:7d: 9d:4b:52:ce:e4:2c:eb:69:06:d4:90:68:49:d1:ce:5f:c3:24: 23:7c:2a:31:85:9c:f8:94:16:20:6c:9b:1c:54:c0:d8:b1:29: ac:53:f5:e4:02:09:c6:3f:44:5f:79:c1:c6:9d:5a:9c:19:9e: d5:a5:b6:c2:06:37:bb:26:7e:11:27:29:7e:ee:1f:8b:69:a0: fb:cd:94:cf:28:a0:61:00:da:ee:59:bf:24:f0:83:21:d1:18: 24:c6:19:53:c4:05:3a:93:0b:bf:02:92:67:17:92:b0:15:3f: 4d:0f:ae:7e:ed:57:24:db:0b:25:aa:32:58:16:d4:b3:3f:fc: 00:56:9d:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEODExMTAvBgNVBAUTKEI4QjQ3M0QzNkRBNTI2MDgyNUNEMEJCRjYyRjZFQzE5 MEQzNDAyMTgwHhcNMjQwNTE4MTQxOTAwWhcNMjQwNTI1MTQxOTAwWjAYMRYwFAYD VQQDEw02NjQ4YjhkNC0zZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmN84QbYHSe6eUMf8FurOqGlACCr3vJij8p+OS2L4EvES5tzXTK8WDiPzndUO Ie72A2XgiDwG1dY8zJJ/+wI7X3NcMD/AZzrqgRl9aEW+EbTrx4OJPGTZfFtai9qe fXO0jKospLYsjjBA05AEfdazjn7DkrtsFWvwwlfy3neQOkWj4qBSuyX0/XaJM93H J11er4m0PCCspjTxeGjj99WCpQF+qryWaTG+Orae+t6D5Zy56D4rYeDnxq7J8kOx uWynz8iUEaAXSlB3oG9rflDo9dVLqy31lthPHVwn2NXk0gKaXNgf82YPrtaUBqlL 60TeWaVGQ3E8PQwRTC0iuf0V9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACgP8Ck R8nelbuORqJ5gkrMYgG8MB8GA1UdIwQYMBaAFLi0c9NtpSYIJc0Lv2L27BkNNAIY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ4MS80NzA1OUREODFE NkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpnZ2x6UXVfWXZic0dRMDBB aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VMUnowMjJsSmdnbHpRdV9ZdmJzR1EwMEFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ4MS80NzA1OUREODFENkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpn Z2x6UXVfWXZic0dRMDBBaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvZs8zeR2QVBoBPhh2e3bsB1p/TWs5NnfAwFYx3BWjdHg8cj6gE5Gh S/c87wYYVBQtkNIVV+Xb2qwUfuNaQEhW3q5g1Xg8fsDEwhUzsQn45HeoQv2y0+Wo NrrpoefeWDJijGWZmtYs90m182ea9vJ0WOzKzTArMw+eqhKDNn2dS1LO5CzraQbU kGhJ0c5fwyQjfCoxhZz4lBYgbJscVMDYsSmsU/XkAgnGP0RfecHGnVqcGZ7VpbbC Bje7Jn4RJyl+7h+LaaD7zZTPKKBhANruWb8k8IMh0RgkxhlTxAU6kwu/ApJnF5Kw FT9ND65+7Vck2wslqjJYFtSzP/wAVp3n -----END CERTIFICATE-----Generated at Sat May 18 15:26:07 2024 by rpki-client on console-fra.rpki-client.org