$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76F3/AE32AA2010E811EB8525153AC4F9AE02/rU-MTCOd4Dl2wC2iEiJGV98oJ6g.mft File: rU-MTCOd4Dl2wC2iEiJGV98oJ6g.mft (raw, json) Hash identifier: CVz9Z8fhzQ2eQEs7ziuVxjB+B/iSKS9fBv7wwxA9fdk= Subject key identifier: 98:5C:2B:D7:DD:4A:AA:94:B1:61:AE:44:27:19:A0:2D:CD:99:8A:86 Authority key identifier: AD:4F:8C:4C:23:9D:E0:39:76:C0:2D:A2:12:22:46:57:DF:28:27:A8 Certificate issuer: /CN=A91E76F3/serialNumber=AD4F8C4C239DE03976C02DA212224657DF2827A8 Certificate serial: 06C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU-MTCOd4Dl2wC2iEiJGV98oJ6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E76F3/AE32AA2010E811EB8525153AC4F9AE02/rU-MTCOd4Dl2wC2iEiJGV98oJ6g.mft Manifest number: 06C2 Signing time: Sat 18 May 2024 23:03:30 +0000 Manifest this update: Sat 18 May 2024 23:03:29 +0000 Manifest next update: Sat 25 May 2024 23:03:29 +0000 Files and hashes: 1: rU-MTCOd4Dl2wC2iEiJGV98oJ6g.crl (hash: D/uRb6USAH1xa9cTOA3wGnr7VFST8WmV84vkhyJvcDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E76F3/AE32AA2010E811EB8525153AC4F9AE02/rU-MTCOd4Dl2wC2iEiJGV98oJ6g.crl rsync://rpki.apnic.net/member_repository/A91E76F3/AE32AA2010E811EB8525153AC4F9AE02/rU-MTCOd4Dl2wC2iEiJGV98oJ6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU-MTCOd4Dl2wC2iEiJGV98oJ6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E76F3/serialNumber=AD4F8C4C239DE03976C02DA212224657DF2827A8 Validity Not Before: May 18 23:03:29 2024 GMT Not After : May 25 23:03:29 2024 GMT Subject: CN=664933c2-fede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:3d:a1:7b:fb:89:9f:06:bd:5b:a6:e8:65:32: 67:8b:9b:6c:24:20:c5:da:22:00:b5:98:1b:6a:39: 4f:d1:96:b1:55:0a:aa:b9:e7:8a:50:90:0d:49:e3: 71:6b:d1:2f:88:44:04:27:18:33:f3:d4:20:52:95: 37:aa:ed:d6:5a:23:42:09:9b:1e:eb:dc:b4:16:1f: 2a:f6:12:e8:ef:71:01:09:c6:59:61:5c:04:5d:30: ac:42:63:42:69:66:8f:26:53:07:0b:18:72:ed:b6: c6:3c:e9:63:da:bf:f1:96:95:52:55:aa:27:4c:30: 79:26:95:4b:ab:5b:f8:fc:e0:9c:bf:52:56:18:51: 73:bf:58:10:eb:ee:e1:a5:b1:c3:0c:ce:57:89:a9: d2:04:da:86:c3:73:14:15:50:85:77:70:43:e1:f2: 64:40:ce:01:26:0f:91:f0:29:4a:63:9b:d4:0a:78: 6e:9e:e8:37:a0:69:ac:a4:a8:f3:67:f8:3e:54:d4: a4:33:67:34:48:85:39:7c:05:29:da:6a:c0:4f:57: f5:ac:e6:25:ed:02:7c:31:cd:c9:13:42:18:64:49: ad:d6:94:51:10:b1:80:11:36:d1:9f:fa:46:28:90: f1:92:a0:cc:f5:69:b6:8d:83:6e:2b:c4:63:5d:b2: b1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5C:2B:D7:DD:4A:AA:94:B1:61:AE:44:27:19:A0:2D:CD:99:8A:86 X509v3 Authority Key Identifier: keyid:AD:4F:8C:4C:23:9D:E0:39:76:C0:2D:A2:12:22:46:57:DF:28:27:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E76F3/AE32AA2010E811EB8525153AC4F9AE02/rU-MTCOd4Dl2wC2iEiJGV98oJ6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU-MTCOd4Dl2wC2iEiJGV98oJ6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76F3/AE32AA2010E811EB8525153AC4F9AE02/rU-MTCOd4Dl2wC2iEiJGV98oJ6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ad:39:35:b8:91:58:4e:34:c4:56:56:5f:fa:8c:5e:c8:c8: 10:85:1a:2a:71:0c:e9:8f:b1:c6:6f:56:f4:f3:4b:a8:62:4f: e3:47:b3:d1:b5:07:16:80:d8:c8:ea:47:22:12:3f:fc:35:86: 0c:69:47:c1:e1:cd:52:2d:40:d3:69:5d:90:4e:0f:de:9e:d9: ea:1c:68:1d:45:b7:8b:6e:29:74:4d:db:29:6a:bc:33:dc:34: d1:33:d5:15:c1:bd:43:1b:c9:0a:ce:69:03:e7:11:4f:e6:74: 8a:a0:e0:01:c6:46:14:e8:c9:3d:ef:89:86:91:02:b1:dd:41: d1:53:6d:52:65:17:49:7f:5b:e8:7f:4b:2d:88:e5:9c:40:fb: 06:eb:12:a1:d1:7b:89:22:c3:07:5d:ea:b3:70:fd:fd:33:da: f3:d4:5c:20:67:df:a2:fb:70:1d:07:02:6c:61:3f:69:a6:f8: 3b:99:53:b1:7b:1e:57:9a:b7:89:02:b0:d1:ea:8b:6f:e8:53: d4:ac:96:e9:f8:15:92:ba:b0:96:f5:66:00:46:16:b3:e6:14: 67:51:3a:35:a3:5e:64:75:07:5c:c6:df:9b:be:01:b1:d1:76: 6c:6f:9c:33:cc:b8:d2:39:e4:61:12:c3:0f:a3:db:85:a4:d9: b7:0d:51:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2RjMxMTAvBgNVBAUTKEFENEY4QzRDMjM5REUwMzk3NkMwMkRBMjEyMjI0NjU3 REYyODI3QTgwHhcNMjQwNTE4MjMwMzI5WhcNMjQwNTI1MjMwMzI5WjAYMRYwFAYD VQQDEw02NjQ5MzNjMi1mZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+T2he/uJnwa9W6boZTJni5tsJCDF2iIAtZgbajlP0ZaxVQqqueeKUJANSeNx a9EviEQEJxgz89QgUpU3qu3WWiNCCZse69y0Fh8q9hLo73EBCcZZYVwEXTCsQmNC aWaPJlMHCxhy7bbGPOlj2r/xlpVSVaonTDB5JpVLq1v4/OCcv1JWGFFzv1gQ6+7h pbHDDM5XianSBNqGw3MUFVCFd3BD4fJkQM4BJg+R8ClKY5vUCnhunug3oGmspKjz Z/g+VNSkM2c0SIU5fAUp2mrAT1f1rOYl7QJ8Mc3JE0IYZEmt1pRRELGAETbRn/pG KJDxkqDM9Wm2jYNuK8RjXbKxQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhcK9fd SqqUsWGuRCcZoC3NmYqGMB8GA1UdIwQYMBaAFK1PjEwjneA5dsAtohIiRlffKCeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzZGMy9BRTMyQUEyMDEw RTgxMUVCODUyNTE1M0FDNEY5QUUwMi9yVS1NVENPZDREbDJ3QzJpRWlKR1Y5OG9K NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVLU1UQ09kNERsMndDMmlFaUpHVjk4b0o2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzZGMy9BRTMyQUEyMDEwRTgxMUVCODUyNTE1M0FDNEY5QUUwMi9yVS1NVENPZDRE bDJ3QzJpRWlKR1Y5OG9KNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/rTk1uJFYTjTEVlZf+oxeyMgQhRoqcQzpj7HGb1b080uoYk/jR7PR tQcWgNjI6kciEj/8NYYMaUfB4c1SLUDTaV2QTg/entnqHGgdRbeLbil0Tdsparwz 3DTRM9UVwb1DG8kKzmkD5xFP5nSKoOABxkYU6Mk974mGkQKx3UHRU21SZRdJf1vo f0stiOWcQPsG6xKh0XuJIsMHXeqzcP39M9rz1FwgZ9+i+3AdBwJsYT9ppvg7mVOx ex5XmreJArDR6otv6FPUrJbp+BWSurCW9WYARhaz5hRnUTo1o15kdQdcxt+bvgGx 0XZsb5wzzLjSOeRhEsMPo9uFpNm3DVFW -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org