$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft File: 0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json) Hash identifier: RUUie5ciQjzJRCI4BkejCnKm73fkbgIWY6jgW/PkOkg= Subject key identifier: 6E:D6:8D:90:76:07:82:7C:13:7A:C5:73:37:B0:86:32:4B:C9:5B:5B Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Certificate serial: 0A12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft Manifest number: 0A0B Signing time: Thu 30 May 2024 21:02:33 +0000 Manifest this update: Thu 30 May 2024 21:02:32 +0000 Manifest next update: Thu 06 Jun 2024 21:02:32 +0000 Files and hashes: 1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: EK01Xm2sYn+vD0V5w293B/TDM/QbUYmQjA36je/+Zbk=) 2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: QoMzWv+zlvph7lrjhvkUoh86qb7MSEvRWB21jNC66Lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 20:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2578 (0xa12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Validity Not Before: May 30 21:02:32 2024 GMT Not After : Jun 6 21:02:32 2024 GMT Subject: CN=6658e969-24b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:c1:f2:b7:21:24:1a:af:e6:a7:48:a0:f9: f1:0f:c4:39:5f:15:85:57:6d:a9:95:55:ed:6b:3e: 66:45:f6:5d:00:c6:60:97:a9:07:7c:b4:dc:c9:90: 9d:f4:1a:79:f1:32:bb:9e:89:8b:e3:4a:56:f9:48: c1:30:41:04:58:28:b3:14:95:e2:83:a8:80:63:70: f3:42:7e:91:eb:f7:44:3a:47:e9:f6:6f:27:f6:8a: 2b:f8:80:86:82:80:b5:37:48:9c:12:05:2d:a8:4f: ce:f9:83:dc:90:53:0e:a7:7c:d7:d2:79:89:98:ac: 46:6a:f2:4a:a2:48:03:f0:59:48:e2:ed:72:0d:b6: 5d:5c:b6:47:9d:83:5c:85:a2:a3:59:69:4d:f3:6f: 89:7b:56:cb:db:74:0d:39:97:5b:66:41:ea:36:49: 7f:a3:7c:5e:9d:f2:c1:ed:02:16:23:d9:36:8e:b3: 08:f7:83:30:dd:f0:0b:2c:f5:3e:bc:4b:fb:7e:57: 47:17:f4:a7:50:55:d8:bb:6e:20:5c:d0:2e:14:b3: 54:fa:e3:de:a8:2f:7a:88:7a:c4:99:07:58:5c:e9: df:3b:b9:97:f0:d3:54:9c:a3:f6:90:0a:ac:ef:a8: 4b:fd:df:3d:be:d2:04:c7:6b:1e:0d:70:0b:71:5d: f3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D6:8D:90:76:07:82:7C:13:7A:C5:73:37:B0:86:32:4B:C9:5B:5B X509v3 Authority Key Identifier: keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:98:89:00:75:a4:7a:e7:ed:02:51:fd:ab:05:5a:a3:8b:87: 9a:6f:bd:1f:72:a6:2f:3f:c8:d5:ef:5c:1d:b7:f0:00:e5:47: 02:e0:bc:08:6b:e7:fe:01:e1:5a:70:9a:cb:1d:61:6c:af:4d: 12:98:84:4e:28:b6:d6:8c:a2:56:20:e0:c7:fb:87:d6:81:e2: 8b:b8:0e:8f:1c:af:5e:a7:36:cf:cc:44:f2:b5:01:3a:49:39: 7a:8c:f3:44:32:75:25:4e:c6:20:de:5e:be:42:a3:ca:f5:1b: 70:93:c5:8a:40:25:9c:7e:28:64:61:58:ac:79:8a:87:f8:12: c1:a4:d5:25:2f:95:5a:04:70:e0:5a:80:2c:99:a1:a2:08:99: 86:b9:f0:b4:01:8f:16:d5:37:c4:fd:64:9f:16:39:72:95:7b: fd:18:f9:9e:c4:b0:8b:47:5e:7b:a2:7a:29:e5:9f:69:4a:99: a8:3c:60:3b:9c:61:d1:01:41:4c:63:67:93:34:0b:e8:18:a1: 29:b5:8c:31:3f:9c:d7:42:6a:a8:6f:1c:64:6e:bb:d6:7e:97: f0:a6:44:84:eb:3c:ea:f9:f5:c2:b2:32:6a:c7:9e:06:74:67: 19:33:e3:27:27:04:aa:93:04:62:e1:4f:04:a9:9e:35:37:a5: ea:9f:d6:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3Q0YxMTAvBgNVBAUTKEQyRUMwNzkwQkM0RUJEMzQwN0M5NTA3NEU2QjU2QjQw MDAzODEyREEwHhcNMjQwNTMwMjEwMjMyWhcNMjQwNjA2MjEwMjMyWjAYMRYwFAYD VQQDEw02NjU4ZTk2OS0yNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw3B8rchJBqv5qdIoPnxD8Q5XxWFV22plVXtaz5mRfZdAMZgl6kHfLTcyZCd 9Bp58TK7nomL40pW+UjBMEEEWCizFJXig6iAY3DzQn6R6/dEOkfp9m8n9oor+ICG goC1N0icEgUtqE/O+YPckFMOp3zX0nmJmKxGavJKokgD8FlI4u1yDbZdXLZHnYNc haKjWWlN82+Je1bL23QNOZdbZkHqNkl/o3xenfLB7QIWI9k2jrMI94Mw3fALLPU+ vEv7fldHF/SnUFXYu24gXNAuFLNU+uPeqC96iHrEmQdYXOnfO7mX8NNUnKP2kAqs 76hL/d89vtIEx2seDXALcV3zKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7WjZB2 B4J8E3rFczewhjJLyVtbMB8GA1UdIwQYMBaAFNLsB5C8Tr00B8lQdOa1a0AAOBLa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODdDRi9FNjg1QjEyQTRF RDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZUUUh5VkIwNXJWclFBQTRF dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB1d0hrTHhPdlRRSHlWQjA1clZyUUFBNEV0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODdDRi9FNjg1QjEyQTRFRDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZU UUh5VkIwNXJWclFBQTRFdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkmIkAdaR65+0CUf2rBVqji4eab70fcqYvP8jV71wdt/AA5UcC4LwI a+f+AeFacJrLHWFsr00SmIROKLbWjKJWIODH+4fWgeKLuA6PHK9epzbPzETytQE6 STl6jPNEMnUlTsYg3l6+QqPK9Rtwk8WKQCWcfihkYViseYqH+BLBpNUlL5VaBHDg WoAsmaGiCJmGufC0AY8W1TfE/WSfFjlylXv9GPmexLCLR157onop5Z9pSpmoPGA7 nGHRAUFMY2eTNAvoGKEptYwxP5zXQmqobxxkbrvWfpfwpkSE6zzq+fXCsjJqx54G dGcZM+MnJwSqkwRi4U8EqZ41N6Xqn9al -----END CERTIFICATE-----Generated at Thu May 30 21:37:31 2024 by rpki-client on console-fra.rpki-client.org