$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft File: UgGonTDEgplFBBjJVrh3JJcG6Vc.mft (raw, json) Hash identifier: XnTiRKkGgfUH2q60qjVRScXrCcSr54F+f0F5QYnI0wU= Subject key identifier: DD:BD:9F:04:FD:C1:B0:F2:CE:66:36:98:10:25:4B:60:40:A2:3B:61 Authority key identifier: 52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57 Certificate issuer: /CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957 Certificate serial: 046E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft Manifest number: 046B Signing time: Sun 19 May 2024 01:44:36 +0000 Manifest this update: Sun 19 May 2024 01:44:35 +0000 Manifest next update: Sun 26 May 2024 01:44:35 +0000 Files and hashes: 1: UgGonTDEgplFBBjJVrh3JJcG6Vc.crl (hash: +kKoCQz1oNA6bj9seQMIrnEsri1A7M+HGnOdlM9OHvk=) 2: FAF4A0E0FB3211EB967B1759C4F9AE02.roa (hash: GHQI2oVlmNqBRbXC33+cIrrrwUv8pL6iFzNWJzfgNy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1134 (0x46e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957 Validity Not Before: May 19 01:44:35 2024 GMT Not After : May 26 01:44:35 2024 GMT Subject: CN=66495983-60ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:6a:84:52:eb:b8:4c:af:a7:39:1c:f0:c9: 2c:49:cc:3b:28:c6:ad:e9:6a:4d:9c:a4:dd:ae:d9: 2e:79:df:e0:e5:02:dc:9d:ad:9f:12:6f:d9:72:30: 26:1d:7e:56:36:67:56:84:b5:03:ea:28:0b:2e:95: a9:66:d3:c2:f7:16:d9:a7:65:2d:50:67:25:81:f6: b6:94:61:72:12:16:59:af:17:ec:28:da:31:16:18: b4:6b:e6:eb:ed:06:fa:76:52:19:50:e3:81:cd:80: 6c:12:29:47:9d:f4:71:43:ee:8d:af:0a:d3:1a:ec: 65:33:b7:c4:e2:f6:86:23:23:f2:16:f6:cf:b7:d5: 38:1c:8a:76:3b:5d:78:54:72:d9:57:12:1e:79:08: 2e:51:2c:24:0c:bc:a0:db:50:2d:28:31:08:33:43: 3d:3c:5d:a7:67:4f:39:1f:1b:55:cc:44:36:b9:e5: d7:b8:ad:2d:d2:c4:91:6a:d9:b1:57:ed:df:d7:cc: 0a:10:d1:bf:bf:89:11:dc:ed:8a:3f:fa:fa:5d:c8: 6d:93:df:6f:6b:c2:2a:a9:f5:9a:19:71:09:9a:08: fc:35:e2:27:2a:2b:0f:d1:32:6a:38:46:da:0b:bf: f2:c7:ae:77:cb:61:35:66:ea:c3:da:1b:14:24:78: 94:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BD:9F:04:FD:C1:B0:F2:CE:66:36:98:10:25:4B:60:40:A2:3B:61 X509v3 Authority Key Identifier: keyid:52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:bf:a9:0b:ef:eb:6d:a7:90:44:0d:21:10:20:3e:79:4a:ee: c5:51:b0:12:11:4a:8a:c7:b6:a6:39:de:27:a9:73:cc:87:89: d3:5a:ae:31:d6:cb:2a:7b:0a:bd:b2:e5:fd:0c:af:9b:6a:07: 24:ae:d2:1c:5d:f4:5a:7c:d6:31:7b:7a:74:49:cd:7e:60:ee: 4d:d3:f8:f4:9d:46:72:fe:ff:e5:fe:f1:03:8a:5a:6f:0d:e6: 40:79:b6:b0:c7:51:35:cd:c3:20:24:3b:6a:68:3b:fa:06:6c: 7a:d4:12:2b:b0:89:40:37:cb:45:67:7b:a6:c0:68:b6:2c:65: 56:ba:08:85:b4:16:62:6e:08:10:0a:10:d3:46:86:1b:ff:c1: b8:8b:fe:af:83:d4:ca:d9:80:d9:af:08:ca:30:82:f1:27:c2: c3:65:c3:d0:59:0c:05:8d:a2:a8:99:1a:7f:d1:c4:38:84:a6: 86:43:e9:cd:26:79:0f:28:3a:61:16:51:d7:08:7c:fa:65:7f: 70:53:af:bf:dc:1c:83:7d:eb:9e:af:36:38:a6:89:67:67:6f: 6c:fb:1d:5b:14:dd:a5:2e:1b:e8:90:1e:67:f7:fc:78:fc:ac: 5d:ab:9f:5e:fb:a1:f7:39:4d:24:6b:11:09:d2:ba:49:a8:2a: ac:7f:73:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFOTQxMTAvBgNVBAUTKDUyMDFBODlEMzBDNDgyOTk0NTA0MThDOTU2Qjg3NzI0 OTcwNkU5NTcwHhcNMjQwNTE5MDE0NDM1WhcNMjQwNTI2MDE0NDM1WjAYMRYwFAYD VQQDEw02NjQ5NTk4My02MGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsl5qhFLruEyvpzkc8MksScw7KMat6WpNnKTdrtkued/g5QLcna2fEm/ZcjAm HX5WNmdWhLUD6igLLpWpZtPC9xbZp2UtUGclgfa2lGFyEhZZrxfsKNoxFhi0a+br 7Qb6dlIZUOOBzYBsEilHnfRxQ+6NrwrTGuxlM7fE4vaGIyPyFvbPt9U4HIp2O114 VHLZVxIeeQguUSwkDLyg21AtKDEIM0M9PF2nZ085HxtVzEQ2ueXXuK0t0sSRatmx V+3f18wKENG/v4kR3O2KP/r6Xchtk99va8IqqfWaGXEJmgj8NeInKisP0TJqOEba C7/yx653y2E1ZurD2hsUJHiU0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN29nwT9 wbDyzmY2mBAlS2BAojthMB8GA1UdIwQYMBaAFFIBqJ0wxIKZRQQYyVa4dySXBulX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U5NC9BMkE3MEM1QUZC MkYxMUVCQTg0MDlFNTRDNEY5QUUwMi9VZ0dvblRERWdwbEZCQmpKVnJoM0pKY0c2 VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VnR29uVERFZ3BsRkJCakpWcmgzSkpjRzZWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U5NC9BMkE3MEM1QUZCMkYxMUVCQTg0MDlFNTRDNEY5QUUwMi9VZ0dvblRERWdw bEZCQmpKVnJoM0pKY0c2VmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHv6kL7+ttp5BEDSEQID55Su7FUbASEUqKx7amOd4nqXPMh4nTWq4x 1ssqewq9suX9DK+bagckrtIcXfRafNYxe3p0Sc1+YO5N0/j0nUZy/v/l/vEDilpv DeZAebawx1E1zcMgJDtqaDv6Bmx61BIrsIlAN8tFZ3umwGi2LGVWugiFtBZibggQ ChDTRoYb/8G4i/6vg9TK2YDZrwjKMILxJ8LDZcPQWQwFjaKomRp/0cQ4hKaGQ+nN JnkPKDphFlHXCHz6ZX9wU6+/3ByDfeuerzY4polnZ29s+x1bFN2lLhvokB5n9/x4 /Kxdq59e+6H3OU0kaxEJ0rpJqCqsf3Os -----END CERTIFICATE-----Generated at Sun May 19 02:59:16 2024 by rpki-client on console-ams.rpki-client.org