$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.mft File: uvgLngYKGXeZFoErAACdd3OoSwA.mft (raw, json) Hash identifier: U4vSeWEfQ74YVzOlWvHin7pglSXgyr71IEz1Fz0TKFc= Subject key identifier: 94:CD:94:37:D1:97:B6:3A:03:D8:B6:5E:22:F0:53:90:45:2A:C1:24 Authority key identifier: BA:F8:0B:9E:06:0A:19:77:99:16:81:2B:00:00:9D:77:73:A8:4B:00 Certificate issuer: /CN=A91D73BB/serialNumber=BAF80B9E060A19779916812B00009D7773A84B00 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvgLngYKGXeZFoErAACdd3OoSwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.mft Manifest number: 1F Signing time: Sun 19 May 2024 08:33:04 +0000 Manifest this update: Sun 19 May 2024 08:33:04 +0000 Manifest next update: Sun 26 May 2024 08:33:04 +0000 Files and hashes: 1: uvgLngYKGXeZFoErAACdd3OoSwA.crl (hash: WEPsaSDSrJ/tRAsPc6mlcpDYLtfwpWKtG13UemvfQSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.crl rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvgLngYKGXeZFoErAACdd3OoSwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73BB/serialNumber=BAF80B9E060A19779916812B00009D7773A84B00 Validity Not Before: May 19 08:33:04 2024 GMT Not After : May 26 08:33:04 2024 GMT Subject: CN=6649b940-a114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:55:5c:27:9c:62:79:ae:95:83:4a:b9:96:4d: d3:75:15:5a:f0:c6:e9:ab:8c:d0:cd:fe:f8:f4:0e: 43:bd:30:00:8d:e0:f4:9b:98:a5:0d:63:0c:bb:e0: a6:60:f4:7d:86:c9:bd:6c:72:62:70:26:aa:8c:d9: 93:e8:60:81:cb:dd:7b:83:2f:6f:de:65:fc:35:37: ea:62:9f:41:6b:2a:a7:32:2a:e0:d6:41:75:b4:dc: 44:79:f7:a6:e7:4e:98:bd:ad:69:ff:ed:4c:7f:7f: 63:c9:f9:70:79:73:76:97:e0:a7:59:7f:c9:f4:2b: c9:07:74:6b:cd:7a:83:76:40:e5:96:0d:c9:31:bb: 0e:25:44:aa:39:ce:26:f8:81:28:88:f7:be:71:33: de:90:26:7c:b3:9e:46:2d:58:61:7f:3e:05:e7:0e: a2:d4:ec:6c:98:e3:73:42:b0:5a:c5:9d:47:23:1d: 50:63:08:dc:02:af:4b:a5:96:05:55:18:a7:65:ed: 3a:d1:43:6e:66:9c:5c:1c:65:e4:e5:9f:10:bd:bd: ac:83:11:aa:a8:62:50:76:a3:c6:f5:60:a0:49:be: fc:7f:79:51:7c:98:06:72:7a:98:68:2e:2c:a3:f7: ff:25:a5:3f:09:d9:fe:a2:fe:63:95:bc:46:78:40: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CD:94:37:D1:97:B6:3A:03:D8:B6:5E:22:F0:53:90:45:2A:C1:24 X509v3 Authority Key Identifier: keyid:BA:F8:0B:9E:06:0A:19:77:99:16:81:2B:00:00:9D:77:73:A8:4B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvgLngYKGXeZFoErAACdd3OoSwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:cf:ad:42:ca:45:06:b8:9d:0d:e2:df:9e:fb:37:f3:96:c6: 95:a3:54:5f:9c:97:fd:5d:5a:01:70:91:97:96:9f:7b:ab:64: 12:fc:a4:9b:8b:f2:9f:fa:76:b8:3a:fc:a2:e4:40:88:0b:48: fe:00:27:b6:b6:a3:b4:a0:70:df:e4:be:a4:c0:96:5a:af:0c: 61:f1:93:6d:07:9e:8d:92:76:5b:c2:11:63:9b:a5:5d:b9:9a: 32:ae:d3:5b:2e:a0:19:6b:26:f5:e3:f6:66:65:74:05:1a:09: e9:f7:bb:76:cf:57:1b:6e:fc:5d:f5:4e:72:8c:4a:1d:70:43: 25:9b:91:6b:4f:f2:1c:1b:9e:f4:25:1c:47:b0:5f:c7:e9:7b: a9:6f:d7:b0:62:e9:9b:3b:25:d5:4b:43:20:39:1b:fd:83:60: ff:5a:8a:ea:84:cf:0f:96:2a:09:f2:09:bf:b5:4e:d3:95:60: b5:a5:ee:3d:8f:0e:f3:c9:ed:a7:0c:90:68:8d:f9:48:2a:2d: 37:35:ce:6d:56:6f:9d:15:e5:c8:50:7c:39:27:e2:09:ce:b6: ef:38:29:31:1a:64:05:76:d6:2e:c9:79:7f:57:2a:a9:82:43: 2f:e2:14:8f:e2:c3:e4:83:13:01:fc:2a:43:e8:7e:56:b1:3f: f1:d9:5e:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NzNCQjExMC8GA1UEBRMoQkFGODBCOUUwNjBBMTk3Nzk5MTY4MTJCMDAwMDlENzc3 M0E4NEIwMDAeFw0yNDA1MTkwODMzMDRaFw0yNDA1MjYwODMzMDRaMBgxFjAUBgNV BAMTDTY2NDliOTQwLWExMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiVVwnnGJ5rpWDSrmWTdN1FVrwxumrjNDN/vj0DkO9MACN4PSbmKUNYwy74KZg 9H2Gyb1scmJwJqqM2ZPoYIHL3XuDL2/eZfw1N+pin0FrKqcyKuDWQXW03ER596bn Tpi9rWn/7Ux/f2PJ+XB5c3aX4KdZf8n0K8kHdGvNeoN2QOWWDckxuw4lRKo5zib4 gSiI975xM96QJnyznkYtWGF/PgXnDqLU7GyY43NCsFrFnUcjHVBjCNwCr0ullgVV GKdl7TrRQ25mnFwcZeTlnxC9vayDEaqoYlB2o8b1YKBJvvx/eVF8mAZyephoLiyj 9/8lpT8J2f6i/mOVvEZ4QHMZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlM2UN9GX tjoD2LZeIvBTkEUqwSQwHwYDVR0jBBgwFoAUuvgLngYKGXeZFoErAACdd3OoSwAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3M0JCLzk3Q0YwOTY2RTY1 MjExRUVCRUU5QTc4N0M0RjlBRTAyL3V2Z0xuZ1lLR1hlWkZvRXJBQUNkZDNPb1N3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdXZnTG5nWUtHWGVaRm9FckFBQ2RkM09vU3dBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3 M0JCLzk3Q0YwOTY2RTY1MjExRUVCRUU5QTc4N0M0RjlBRTAyL3V2Z0xuZ1lLR1hl WkZvRXJBQUNkZDNPb1N3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEfPrULKRQa4nQ3i3577N/OWxpWjVF+cl/1dWgFwkZeWn3urZBL8pJuL 8p/6drg6/KLkQIgLSP4AJ7a2o7SgcN/kvqTAllqvDGHxk20Hno2SdlvCEWObpV25 mjKu01suoBlrJvXj9mZldAUaCen3u3bPVxtu/F31TnKMSh1wQyWbkWtP8hwbnvQl HEewX8fpe6lv17Bi6Zs7JdVLQyA5G/2DYP9aiuqEzw+WKgnyCb+1TtOVYLWl7j2P DvPJ7acMkGiN+UgqLTc1zm1Wb50V5chQfDkn4gnOtu84KTEaZAV21i7JeX9XKqmC Qy/iFI/iw+SDEwH8KkPoflaxP/HZXqY= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org