$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft File: RUCi-buGGfZIYtCWyEyTjoivPGw.mft (raw, json) Hash identifier: r/LFPNX/n5rDYTpHtrd5M0yf3yl8VvKUqg4mlxrmHF4= Subject key identifier: D9:CC:BE:16:30:B9:DF:FC:88:95:10:19:D0:65:27:EF:CA:5D:40:FA Authority key identifier: 45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C Certificate issuer: /CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft Manifest number: A8 Signing time: Sun 19 May 2024 06:39:06 +0000 Manifest this update: Sun 19 May 2024 06:39:06 +0000 Manifest next update: Sun 26 May 2024 06:39:06 +0000 Files and hashes: 1: RUCi-buGGfZIYtCWyEyTjoivPGw.crl (hash: dXuwkMg4tfrglmHISuZYrfhwuQJmqR6JSKibPJWcsGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C Validity Not Before: May 19 06:39:06 2024 GMT Not After : May 26 06:39:06 2024 GMT Subject: CN=66499e8a-c1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d6:f1:98:24:4c:f7:9d:51:bf:11:ef:d3:22: 16:37:8b:5f:ce:41:bb:8e:37:b0:71:c3:e0:ec:8d: 3f:9b:d9:91:59:b3:1a:84:da:de:30:58:78:31:bb: 47:9c:3f:0d:ff:2b:d2:01:40:73:7d:af:22:91:5b: 90:07:12:30:1a:fa:b7:57:4a:4c:8f:dc:59:89:e3: 3a:e4:f3:b3:f6:4c:cd:e7:eb:a9:d1:32:79:2d:99: ad:17:82:17:c6:b7:3c:e5:4b:54:5c:d0:9b:9e:9b: 63:7e:cd:fe:33:79:0a:ea:b2:a5:43:64:39:11:e2: f5:db:75:71:01:34:aa:83:3e:02:a1:4b:ac:5b:82: 21:93:af:82:e6:38:17:a8:b6:a8:47:55:1d:fe:ca: 79:17:09:c3:34:a0:cd:1a:fc:d1:b0:45:af:bb:4e: bb:10:d4:7a:de:91:78:8b:2e:20:90:e4:dd:29:df: ea:18:24:90:af:c1:60:bd:d8:a2:9f:47:b5:75:54: 15:c0:11:d8:ca:73:4b:d3:c0:ce:12:0e:88:22:d7: 26:63:64:bf:26:b2:ea:e8:44:79:bd:af:5c:71:96: 05:09:a7:99:92:7a:32:39:68:79:40:cb:53:1a:db: d9:17:60:88:f9:55:24:70:bf:4a:b1:02:16:ef:68: e2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CC:BE:16:30:B9:DF:FC:88:95:10:19:D0:65:27:EF:CA:5D:40:FA X509v3 Authority Key Identifier: keyid:45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:19:31:8a:9c:ca:fe:2b:e0:18:b8:78:de:40:4b:a9:95:cf: 05:90:c0:3d:ad:c2:2e:2b:62:68:25:3d:92:13:a7:be:d8:96: c8:d9:f7:40:06:03:c8:80:f3:b1:d0:bb:0c:dc:a2:7d:f3:15: 4f:aa:26:7f:05:12:8a:2d:4d:33:3a:3b:58:11:14:01:ad:bb: 92:04:2a:25:35:c9:9f:fc:31:d7:6a:1f:85:87:44:4d:7a:94: 72:44:22:12:c9:28:af:d0:fd:73:db:a6:07:fb:af:f2:24:38: 30:41:22:24:a9:97:30:2e:33:a3:de:23:6f:88:db:bd:39:02: a4:e8:d4:c4:2e:34:a0:ca:66:df:95:3f:21:8d:4b:76:81:42: e0:c2:5c:86:0e:c9:bd:b2:91:20:26:4e:2b:9c:b1:9f:83:4e: 1e:6e:17:a9:82:bf:ca:d0:7a:7f:e1:ab:1c:25:db:6f:4b:a5: 05:f0:cc:ef:a3:1f:b4:9b:50:ee:91:8d:9f:f6:7f:11:fb:c0: f3:47:22:18:a4:92:03:90:d0:bc:52:19:cf:42:01:c7:41:69: 55:6f:0e:0b:88:89:a5:18:3a:be:51:3c:61:5a:ee:6c:fe:8d: 8b:23:9c:01:ec:f0:c1:cd:d7:cd:75:38:91:1d:68:d6:eb:ed: 3f:a9:6c:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENGM0QxMTAvBgNVBAUTKDQ1NDBBMkY5QkI4NjE5RjY0ODYyRDA5NkM4NEM5MzhF ODhBRjNDNkMwHhcNMjQwNTE5MDYzOTA2WhcNMjQwNTI2MDYzOTA2WjAYMRYwFAYD VQQDEw02NjQ5OWU4YS1jMWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNbxmCRM951RvxHv0yIWN4tfzkG7jjewccPg7I0/m9mRWbMahNreMFh4MbtH nD8N/yvSAUBzfa8ikVuQBxIwGvq3V0pMj9xZieM65POz9kzN5+up0TJ5LZmtF4IX xrc85UtUXNCbnptjfs3+M3kK6rKlQ2Q5EeL123VxATSqgz4CoUusW4Ihk6+C5jgX qLaoR1Ud/sp5FwnDNKDNGvzRsEWvu067ENR63pF4iy4gkOTdKd/qGCSQr8Fgvdii n0e1dVQVwBHYynNL08DOEg6IItcmY2S/JrLq6ER5va9ccZYFCaeZknoyOWh5QMtT GtvZF2CI+VUkcL9KsQIW72jijQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnMvhYw ud/8iJUQGdBlJ+/KXUD6MB8GA1UdIwQYMBaAFEVAovm7hhn2SGLQlshMk46Irzxs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0YzRC9ERTI5RDUwQzEz RjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dmWklZdENXeUV5VGpvaXZQ R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JVQ2ktYnVHR2ZaSVl0Q1d5RXlUam9pdlBHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0YzRC9ERTI5RDUwQzEzRjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dm WklZdENXeUV5VGpvaXZQR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaGTGKnMr+K+AYuHjeQEuplc8FkMA9rcIuK2JoJT2SE6e+2JbI2fdA BgPIgPOx0LsM3KJ98xVPqiZ/BRKKLU0zOjtYERQBrbuSBColNcmf/DHXah+Fh0RN epRyRCISySiv0P1z26YH+6/yJDgwQSIkqZcwLjOj3iNviNu9OQKk6NTELjSgymbf lT8hjUt2gULgwlyGDsm9spEgJk4rnLGfg04ebhepgr/K0Hp/4ascJdtvS6UF8Mzv ox+0m1DukY2f9n8R+8DzRyIYpJIDkNC8UhnPQgHHQWlVbw4LiImlGDq+UTxhWu5s /o2LI5wB7PDBzdfNdTiRHWjW6+0/qWwp -----END CERTIFICATE-----Generated at Sun May 19 07:40:45 2024 by rpki-client on console-fra.rpki-client.org