$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft File: UzSpQuM2kLKBJhu645cTXb6kE5c.mft (raw, json) Hash identifier: qwKhH3wUTUYopbk9ha4xpz1NMqfcpmfHOaHMiaRaHLw= Subject key identifier: 9C:CE:31:3D:65:B7:89:EF:79:85:D8:AB:0D:D1:EC:8E:C3:2C:D9:52 Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 Certificate issuer: /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Certificate serial: 0775 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft Manifest number: 0770 Signing time: Sat 18 May 2024 22:15:48 +0000 Manifest this update: Sat 18 May 2024 22:15:48 +0000 Manifest next update: Sat 25 May 2024 22:15:48 +0000 Files and hashes: 1: UzSpQuM2kLKBJhu645cTXb6kE5c.crl (hash: tkI70cL7gDtZVVXzJxUAdujVCNOjRWJnTYLbG2ZDbqw=) 2: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (hash: a44q470Zn26jNPmmshLml4weGKBkDVuukU2z66KMlGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1909 (0x775) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Validity Not Before: May 18 22:15:48 2024 GMT Not After : May 25 22:15:48 2024 GMT Subject: CN=66492894-f5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:74:48:20:48:26:7b:11:c3:4e:d9:8f:0f:31: e7:32:56:55:cc:78:f4:e3:73:cc:a5:3b:e0:49:84: 91:90:a3:93:35:85:3c:b8:5a:3a:ac:b4:48:86:8a: 12:ff:9c:26:b9:ee:61:8d:7b:25:84:9e:23:c7:c3: 6f:8a:70:bd:27:82:eb:f7:57:39:d1:e3:eb:46:2c: 04:0c:11:88:6e:64:c7:83:d9:85:28:0b:8c:be:f5: 66:25:ec:76:80:4d:ef:61:ea:66:6e:ce:8e:75:fc: 8c:8e:a7:d9:69:a1:d4:df:2d:89:5f:79:90:b2:27: 24:c3:f0:a0:42:27:b6:0a:a7:55:e7:0c:eb:13:aa: 75:db:38:30:86:ac:73:aa:f8:13:8d:3c:39:35:b1: 26:a6:43:a6:58:94:0c:cb:14:b4:33:79:b6:8a:85: bb:15:ec:12:08:10:e5:83:3c:79:02:43:87:9f:78: cd:1b:86:d3:5f:21:9b:e3:24:f8:63:93:6b:9d:ca: 96:c1:b5:44:f8:50:6f:c7:83:c7:12:21:2a:58:e8: 4d:6b:96:81:4a:51:6d:18:66:9d:b8:a4:6d:b1:48: 43:67:5e:26:b9:fe:47:a7:06:1c:c7:06:73:fb:f5: ec:4e:51:52:2a:20:0a:6b:77:a8:2e:a4:28:b0:74: db:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CE:31:3D:65:B7:89:EF:79:85:D8:AB:0D:D1:EC:8E:C3:2C:D9:52 X509v3 Authority Key Identifier: keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:3c:d0:7f:bf:64:5e:07:48:82:de:8c:3e:b4:3f:1c:c4:87: dd:08:27:19:52:56:1c:1b:dc:52:43:d7:f2:de:9b:a9:ee:cb: 47:0a:ed:ca:f6:68:f1:b9:16:83:d2:d8:a4:b5:0b:dd:fb:ac: 1a:46:0e:e1:89:3b:e6:10:a0:93:97:48:df:0e:08:36:a6:ba: 49:ec:9c:bc:4b:ea:a9:f1:fd:8d:de:93:78:65:ce:8a:1f:b2: 26:d3:76:7c:4c:28:3b:f0:f3:7c:cc:08:81:9f:a7:86:eb:40: 5d:6e:0a:c6:2b:b9:9d:b4:3f:e8:05:12:f3:1e:c9:46:14:f3: 1e:d7:dd:e1:39:a1:3e:0f:04:cb:aa:1a:4b:a5:e5:7d:6c:a0: 0d:57:52:ce:8c:79:6d:81:1a:4c:0c:ac:93:56:f0:97:46:e9: 56:06:62:82:87:03:c5:f7:d5:97:b2:7c:c6:53:6b:a6:94:74: c9:d7:6f:10:73:7c:95:66:08:ed:8e:58:c0:96:7b:87:9f:51: 8b:a6:e4:96:42:79:0e:73:84:da:4a:88:f4:01:a9:d2:c1:fe: 12:a1:43:72:ed:c2:3e:3c:ba:03:52:f0:91:eb:23:91:0e:28: d6:04:24:0c:01:5d:ee:1f:7d:1e:56:cf:5d:90:f5:e4:de:aa: bd:c3:80:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwMjIxMTAvBgNVBAUTKDUzMzRBOTQyRTMzNjkwQjI4MTI2MUJCQUUzOTcxMzVE QkVBNDEzOTcwHhcNMjQwNTE4MjIxNTQ4WhcNMjQwNTI1MjIxNTQ4WjAYMRYwFAYD VQQDEw02NjQ5Mjg5NC1mNWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnRIIEgmexHDTtmPDzHnMlZVzHj043PMpTvgSYSRkKOTNYU8uFo6rLRIhooS /5wmue5hjXslhJ4jx8NvinC9J4Lr91c50ePrRiwEDBGIbmTHg9mFKAuMvvVmJex2 gE3vYepmbs6OdfyMjqfZaaHU3y2JX3mQsickw/CgQie2CqdV5wzrE6p12zgwhqxz qvgTjTw5NbEmpkOmWJQMyxS0M3m2ioW7FewSCBDlgzx5AkOHn3jNG4bTXyGb4yT4 Y5NrncqWwbVE+FBvx4PHEiEqWOhNa5aBSlFtGGaduKRtsUhDZ14muf5HpwYcxwZz +/XsTlFSKiAKa3eoLqQosHTbQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzOMT1l t4nveYXYqw3R7I7DLNlSMB8GA1UdIwQYMBaAFFM0qULjNpCygSYbuuOXE12+pBOX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMi85RDhEOTQ1OENG RUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtMS0JKaHU2NDVjVFhiNmtF NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6U3BRdU0ya0xLQkpodTY0NWNUWGI2a0U1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTAyMi85RDhEOTQ1OENGRUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtM S0JKaHU2NDVjVFhiNmtFNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1PNB/v2ReB0iC3ow+tD8cxIfdCCcZUlYcG9xSQ9fy3pup7stHCu3K 9mjxuRaD0tiktQvd+6waRg7hiTvmEKCTl0jfDgg2prpJ7Jy8S+qp8f2N3pN4Zc6K H7Im03Z8TCg78PN8zAiBn6eG60BdbgrGK7mdtD/oBRLzHslGFPMe193hOaE+DwTL qhpLpeV9bKANV1LOjHltgRpMDKyTVvCXRulWBmKChwPF99WXsnzGU2umlHTJ128Q c3yVZgjtjljAlnuHn1GLpuSWQnkOc4TaSoj0AanSwf4SoUNy7cI+PLoDUvCR6yOR DijWBCQMAV3uH30eVs9dkPXk3qq9w4Ao -----END CERTIFICATE-----Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org