$ rpki-client -vvf rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft File: uttpn6AqlXLm70n0-Rof4Kc8LI0.mft (raw, json) Hash identifier: LAgiLiOUtv7SvU3QZFQALPJo9EN6/4RDyq44C/ZZOao= Subject key identifier: A4:7A:7F:E0:F7:0D:FD:86:CC:58:79:D7:DC:7A:51:07:48:C3:CE:E3 Authority key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D Certificate issuer: /CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Certificate serial: 0748 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft Manifest number: 0734 Signing time: Sat 18 May 2024 22:33:40 +0000 Manifest this update: Sat 18 May 2024 22:33:40 +0000 Manifest next update: Sat 25 May 2024 22:33:40 +0000 Files and hashes: 1: uttpn6AqlXLm70n0-Rof4Kc8LI0.crl (hash: Qo3jY+geauPAVceM0xNqkoS8tU2pyD9WbW9TNITL0Vk=) 2: C8BD376C3ADF11EC85EB255FC4F9AE02.roa (hash: rGiBXfLgXAx0W9IcsclAmSuytxX7gc86SS7UaNtwkCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1864 (0x748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Validity Not Before: May 18 22:33:40 2024 GMT Not After : May 25 22:33:40 2024 GMT Subject: CN=66492cc4-a923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:9d:7a:42:89:06:95:1f:9a:c7:2c:e5:7d: e7:be:0c:2d:e2:91:bc:06:76:e8:8b:1d:d4:0b:dc: bf:fa:c6:4c:14:82:b0:a6:7f:54:23:ee:79:28:03: 7e:96:49:c3:df:3f:bd:b5:e2:7e:56:66:f4:93:8a: 39:ff:45:ca:e1:3b:30:49:0d:fc:3e:04:be:64:a5: 54:d8:e8:50:5b:84:6c:fe:84:2f:e5:8b:44:32:49: a4:9e:ca:c0:a0:ef:25:c0:f3:e9:34:f5:0b:41:1c: 00:e4:05:b7:62:3f:7f:14:0e:64:9e:b0:23:08:86: 19:5f:20:99:a5:b8:7f:78:bf:6f:57:b2:f5:48:3a: 3c:b0:78:3c:e8:2e:1c:bb:99:63:e7:d7:4d:22:05: a4:82:09:3b:8d:71:27:f0:13:26:a5:79:8d:0d:3b: f0:cc:ea:e6:f8:2d:2e:66:ce:3a:ca:54:b0:75:de: 7b:5c:89:00:bc:94:ab:c2:e8:11:a0:d6:99:04:6b: ba:20:9f:04:0d:af:a6:0a:11:48:07:30:25:88:52: 5d:cc:c8:ba:ca:48:3a:08:79:94:38:98:92:fe:25: 8d:69:3a:a9:f0:f6:cd:92:e2:32:02:2b:73:ff:fa: 62:df:c3:21:0d:39:3e:6f:4f:8b:dc:a4:e7:cd:5a: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7A:7F:E0:F7:0D:FD:86:CC:58:79:D7:DC:7A:51:07:48:C3:CE:E3 X509v3 Authority Key Identifier: keyid:BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:84:4e:95:da:57:3a:64:0c:33:fc:2d:91:6b:4e:63:ea:c8: c1:88:26:c0:8a:81:84:79:93:86:48:80:c9:30:4b:33:de:91: e5:1a:8a:a9:38:82:ef:9d:6f:93:0a:a1:f8:d4:02:aa:7d:d7: f5:f5:a1:f3:f7:69:32:e2:d2:f5:3e:1c:62:64:5e:75:f2:9f: 4a:51:a4:53:79:15:0a:40:f6:19:df:d0:9f:fb:2c:36:26:03: 21:2b:51:4f:68:c8:e7:0c:a8:89:c5:66:cc:dd:39:7b:e1:bc: 1d:0e:11:44:34:ba:28:45:2f:1d:68:e4:aa:ed:21:67:8e:28: a9:20:f0:36:78:ce:dc:ce:6d:04:42:2a:c4:a3:35:1f:cb:9c: 41:6d:c6:23:b6:05:89:ae:75:24:3b:67:1b:1a:34:20:cd:1f: 87:fe:5a:13:cd:88:c9:68:71:f7:4c:23:d8:02:d2:8e:70:bc: 42:04:91:86:85:3f:05:0c:01:71:ba:3e:7f:db:3d:6c:f5:ea: c1:fc:59:98:4e:15:fc:78:6b:80:b7:2e:0f:86:20:69:b4:13: 48:a8:e7:42:38:4a:06:44:7f:97:f8:92:05:1b:6e:f5:1a:ab: 17:f7:63:2f:f6:7e:02:2f:59:09:1e:fc:52:34:59:c2:12:5f: ba:ca:8b:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3QjkxMTAvBgNVBAUTKEJBREI2OTlGQTAyQTk1NzJFNkVGNDlGNEY5MUExRkUw QTczQzJDOEQwHhcNMjQwNTE4MjIzMzQwWhcNMjQwNTI1MjIzMzQwWjAYMRYwFAYD VQQDEw02NjQ5MmNjNC1hOTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqludekKJBpUfmscs5X3nvgwt4pG8Bnboix3UC9y/+sZMFIKwpn9UI+55KAN+ lknD3z+9teJ+Vmb0k4o5/0XK4TswSQ38PgS+ZKVU2OhQW4Rs/oQv5YtEMkmknsrA oO8lwPPpNPULQRwA5AW3Yj9/FA5knrAjCIYZXyCZpbh/eL9vV7L1SDo8sHg86C4c u5lj59dNIgWkggk7jXEn8BMmpXmNDTvwzOrm+C0uZs46ylSwdd57XIkAvJSrwugR oNaZBGu6IJ8EDa+mChFIBzAliFJdzMi6ykg6CHmUOJiS/iWNaTqp8PbNkuIyAitz //pi38MhDTk+b0+L3KTnzVpZUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKR6f+D3 Df2GzFh519x6UQdIw87jMB8GA1UdIwQYMBaAFLrbaZ+gKpVy5u9J9PkaH+CnPCyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjdCOS84NEJBNzQ4MkYw Q0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxYTG03MG4wLVJvZjRLYzhM STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V0dHBuNkFxbFhMbTcwbjAtUm9mNEtjOExJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjdCOS84NEJBNzQ4MkYwQ0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxY TG03MG4wLVJvZjRLYzhMSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyhE6V2lc6ZAwz/C2Ra05j6sjBiCbAioGEeZOGSIDJMEsz3pHlGoqp OILvnW+TCqH41AKqfdf19aHz92ky4tL1PhxiZF518p9KUaRTeRUKQPYZ39Cf+yw2 JgMhK1FPaMjnDKiJxWbM3Tl74bwdDhFENLooRS8daOSq7SFnjiipIPA2eM7czm0E QirEozUfy5xBbcYjtgWJrnUkO2cbGjQgzR+H/loTzYjJaHH3TCPYAtKOcLxCBJGG hT8FDAFxuj5/2z1s9erB/FmYThX8eGuAty4PhiBptBNIqOdCOEoGRH+X+JIFG271 GqsX92Mv9n4CL1kJHvxSNFnCEl+6youZ -----END CERTIFICATE-----Generated at Sun May 19 00:16:20 2024 by rpki-client on console-fra.rpki-client.org