$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft File: UVabSMA4kUVORphTpn25Cb7CytY.mft (raw, json) Hash identifier: mbupBsrb0Fwz3qcjAHUsoMzLsjI75Ty1NL86aJwtQzA= Subject key identifier: D8:75:D3:2B:83:22:87:35:03:A0:89:5A:82:7B:4A:91:F6:31:79:58 Authority key identifier: 51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6 Certificate issuer: /CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6 Certificate serial: 1B4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft Manifest number: 1B33 Signing time: Sat 18 May 2024 16:40:18 +0000 Manifest this update: Sat 18 May 2024 16:40:17 +0000 Manifest next update: Sat 25 May 2024 16:40:17 +0000 Files and hashes: 1: UVabSMA4kUVORphTpn25Cb7CytY.crl (hash: i+HmuiKx/rl/VJl1Iz8KhvkGiPZI5KeZfaQWG944I4M=) 2: 0A93D802C98211EE90C9B71DC4F9AE02.roa (hash: vReq03Gn7h1BCKP22IwkaPi8aNfwelZqYb8YX29b0Fo=) 3: 2ADC134C973F11EEA24DBE15C4F9AE02.roa (hash: KbAWgwBBoHx2CRpDzOmGlIIM8xmr+9u457k+7yk+pvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6990 (0x1b4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6 Validity Not Before: May 18 16:40:17 2024 GMT Not After : May 25 16:40:17 2024 GMT Subject: CN=6648d9f2-77c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:24:0d:18:30:04:7d:c7:9f:f6:8c:c0:84: 6b:b1:a5:13:a2:e5:48:c6:8e:a1:b2:60:37:00:83: 0f:ae:9d:02:d9:51:02:78:d9:42:51:66:21:66:da: 1c:30:fc:cf:2b:b3:2b:e0:3d:30:68:33:80:3c:69: 10:62:3f:5d:7f:82:a1:a3:07:bb:8d:48:d7:3a:35: 2f:51:3e:48:a5:5f:1b:ed:1f:c7:4b:11:6d:d3:4a: d2:b5:fd:60:32:59:bf:b3:61:35:39:70:46:32:2b: a2:a3:ce:e1:00:5f:3a:e9:61:8a:c0:f6:b8:56:65: 67:49:e2:33:af:fa:1d:4e:d0:80:dc:df:f8:b2:3c: 85:99:cd:a3:46:39:76:86:b2:ce:e0:39:d9:e1:69: f7:f6:86:3a:3f:79:52:0f:40:80:2d:cb:9e:6e:2a: ae:dd:47:11:e9:aa:dc:bb:2a:f4:7e:30:6d:7e:8b: f6:0e:86:93:78:83:5b:ad:d9:26:30:5c:76:bc:87: c2:5a:48:d1:f0:62:e2:12:ec:af:a6:4c:d9:f2:c5: e7:5c:ee:b9:9a:16:5c:5f:44:61:aa:13:68:f5:94: b3:ea:5d:fd:91:7d:2c:72:8a:fa:a1:0a:02:84:59: ba:ec:79:af:70:cd:7d:e5:de:b0:3a:32:7d:6c:b0: 97:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:75:D3:2B:83:22:87:35:03:A0:89:5A:82:7B:4A:91:F6:31:79:58 X509v3 Authority Key Identifier: keyid:51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:e6:eb:b7:ad:04:9f:e2:bd:a6:f3:d8:a0:c4:f9:81:c7:50: 6c:76:5e:8e:d0:38:13:9a:12:3e:7c:88:83:a1:b0:0e:83:66: 89:ba:5d:90:2a:64:18:dd:57:46:c4:90:77:10:1f:8e:83:61: 90:92:a4:68:6d:7f:82:78:05:59:99:6c:e8:6e:00:87:66:e9: e5:3c:54:4d:b1:68:69:e5:6c:ed:cf:aa:37:e8:a1:1f:9a:d3: 16:c6:3a:f3:dc:ba:c1:95:3b:4b:56:6d:1d:14:06:36:f3:24: 2b:c6:10:05:a3:2d:c5:62:ad:05:5d:17:a2:ee:f5:6d:b9:b4: a0:f1:3f:1c:77:14:d4:e8:9d:6b:5d:1f:c4:da:19:94:e6:98: e6:63:9e:39:f3:0c:30:0b:2f:da:de:01:7b:d2:af:92:39:6e: 37:e3:88:ff:4c:87:56:e7:0d:83:97:a7:80:00:5c:c5:9e:f6: bd:50:91:fc:b7:d6:4f:40:1e:85:92:7d:ba:1a:70:1d:77:7d: 36:21:74:c4:8c:e4:f0:45:b6:b1:03:1d:2b:f7:aa:6e:9a:b9: 5d:db:02:26:eb:ce:30:b9:9b:a2:33:50:d0:f0:61:29:a3:0b: 9f:37:f2:d0:aa:65:b5:65:70:cc:ce:71:d3:cf:31:d9:b3:55: b8:24:35:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc2NzIxMTAvBgNVBAUTKDUxNTY5QjQ4QzAzODkxNDU0RTQ2OTg1M0E2N0RCOTA5 QkVDMkNBRDYwHhcNMjQwNTE4MTY0MDE3WhcNMjQwNTI1MTY0MDE3WjAYMRYwFAYD VQQDEw02NjQ4ZDlmMi03N2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEkkDRgwBH3Hn/aMwIRrsaUTouVIxo6hsmA3AIMPrp0C2VECeNlCUWYhZtoc MPzPK7Mr4D0waDOAPGkQYj9df4Khowe7jUjXOjUvUT5IpV8b7R/HSxFt00rStf1g Mlm/s2E1OXBGMiuio87hAF866WGKwPa4VmVnSeIzr/odTtCA3N/4sjyFmc2jRjl2 hrLO4DnZ4Wn39oY6P3lSD0CALcuebiqu3UcR6arcuyr0fjBtfov2DoaTeINbrdkm MFx2vIfCWkjR8GLiEuyvpkzZ8sXnXO65mhZcX0RhqhNo9ZSz6l39kX0scor6oQoC hFm67HmvcM195d6wOjJ9bLCXJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNh10yuD Ioc1A6CJWoJ7SpH2MXlYMB8GA1UdIwQYMBaAFFFWm0jAOJFFTkaYU6Z9uQm+wsrW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY3Mi80Mzc2NEJFQ0Y3 MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9VVmFiU01BNGtVVk9ScGhUcG4yNUNiN0N5 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VWYWJTTUE0a1VWT1JwaFRwbjI1Q2I3Q3l0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzY3Mi80Mzc2NEJFQ0Y3MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9VVmFiU01BNGtV Vk9ScGhUcG4yNUNiN0N5dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU5uu3rQSf4r2m89igxPmBx1Bsdl6O0DgTmhI+fIiDobAOg2aJul2Q KmQY3VdGxJB3EB+Og2GQkqRobX+CeAVZmWzobgCHZunlPFRNsWhp5Wztz6o36KEf mtMWxjrz3LrBlTtLVm0dFAY28yQrxhAFoy3FYq0FXRei7vVtubSg8T8cdxTU6J1r XR/E2hmU5pjmY5458wwwCy/a3gF70q+SOW4344j/TIdW5w2Dl6eAAFzFnva9UJH8 t9ZPQB6Fkn26GnAdd302IXTEjOTwRbaxAx0r96pumrld2wIm684wuZuiM1DQ8GEp owufN/LQqmW1ZXDMznHTzzHZs1W4JDVY -----END CERTIFICATE-----Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org