$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft File: uXgEM1AwWT1tlle8RdvRFLEpHSg.mft (raw, json) Hash identifier: oHw26jJAVNZTN+RMtxsS07CEr0XsyFXrOHh3egRGYxk= Subject key identifier: 02:04:63:B2:9B:C8:FB:80:D4:15:EB:94:44:41:41:66:1B:A6:20:9E Authority key identifier: B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28 Certificate issuer: /CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28 Certificate serial: 0392 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft Manifest number: 038F Signing time: Sun 19 May 2024 02:38:58 +0000 Manifest this update: Sun 19 May 2024 02:38:58 +0000 Manifest next update: Sun 26 May 2024 02:38:58 +0000 Files and hashes: 1: uXgEM1AwWT1tlle8RdvRFLEpHSg.crl (hash: vkxzQa6DDJ6Fu/4+nCoyWnrN1u4aNmSf0yuXqZ01gIc=) 2: E8E2B0AE546511EC8B4A436BC4F9AE02.roa (hash: 0phu+tJMxSS2dc3lXAV/zfhAZUkWDerNss4m8iV6lFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 914 (0x392) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28 Validity Not Before: May 19 02:38:58 2024 GMT Not After : May 26 02:38:58 2024 GMT Subject: CN=66496642-f556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:52:77:da:b1:d2:cf:9d:c3:b4:19:67:4c:a5: e5:5e:c3:68:fd:c4:44:8e:9b:13:c2:36:70:06:05: 13:03:2a:a0:a8:31:64:c6:71:30:55:b1:32:af:03: 1c:e7:25:4b:63:b2:ea:0e:06:af:53:fa:cf:ad:44: 19:69:f2:8c:1c:c3:15:1c:55:26:d0:c6:42:26:41: a0:60:ff:23:69:66:1c:ff:ba:22:b7:2e:4a:96:e2: 0f:dc:df:b0:6f:ad:e9:8d:3f:aa:e7:e5:e1:54:7e: 1c:65:dd:af:89:15:1a:ed:ab:85:31:00:e6:35:fa: 60:74:28:57:bd:32:26:91:60:d1:4b:38:13:ad:59: ae:30:49:5c:14:c8:a4:18:59:42:8f:15:3a:2b:6a: c8:a1:97:51:79:aa:97:1c:88:f5:fe:d7:e3:98:d5: 73:3b:94:33:f5:22:d1:14:3e:44:71:76:c3:a5:65: e1:fa:26:1e:62:1f:85:7e:73:3b:a9:7b:a9:b9:54: ff:d3:b7:32:68:f5:12:2f:75:af:86:bf:27:62:1f: 4e:1a:16:69:d3:c0:08:75:02:63:a3:b8:ef:cb:0b: 29:ab:75:ea:07:90:7c:8a:f6:c9:fc:18:4c:80:ec: 98:a8:68:4b:3a:ac:28:e2:8a:70:95:a1:56:4b:a6: a1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:04:63:B2:9B:C8:FB:80:D4:15:EB:94:44:41:41:66:1B:A6:20:9E X509v3 Authority Key Identifier: keyid:B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:6a:3c:ae:eb:43:1b:d4:61:3c:a6:1a:d0:b3:c6:a3:b8:33: 16:90:07:4f:f6:c7:3b:f9:b9:bc:5a:de:da:e4:7d:98:43:a6: 10:8f:ae:93:d6:69:72:d7:bd:82:e4:78:66:06:1b:ff:71:7c: e2:6b:2d:86:88:c2:74:61:c6:8c:70:dd:3d:75:f2:54:ad:2e: 35:f9:23:6b:09:cc:5e:59:b3:1f:35:1f:75:f7:79:78:8a:bc: 22:49:2a:b0:a1:86:5c:c8:12:b7:23:b6:f2:7b:bf:d2:10:4b: e2:81:cb:03:f2:2e:d5:3a:ad:7b:64:26:70:8d:20:00:cd:3a: b8:29:1d:f0:be:77:27:0a:8b:b5:7c:28:59:c2:46:b1:d6:af: 81:d9:f0:b9:1b:8f:c0:76:60:5e:4c:b8:3e:2b:9c:f9:9a:1a: 3a:6b:75:ca:48:15:23:17:59:34:f3:42:47:09:a2:d7:bf:e1: 25:e4:c0:0b:90:65:a5:9c:95:28:08:04:d2:17:71:4c:37:b6: 4a:f8:ff:61:6d:77:bd:b8:e5:64:96:45:78:ea:35:11:1e:c4: 39:63:ca:11:83:42:9d:98:83:16:d9:33:e7:ca:ef:6e:d2:37: 6e:3b:d9:95:c2:45:f4:ae:a6:b7:71:d1:7a:68:01:75:04:e0: af:97:d0:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkzMTAxMTAvBgNVBAUTKEI5NzgwNDMzNTAzMDU5M0Q2RDk2NTdCQzQ1REJEMTE0 QjEyOTFEMjgwHhcNMjQwNTE5MDIzODU4WhcNMjQwNTI2MDIzODU4WjAYMRYwFAYD VQQDEw02NjQ5NjY0Mi1mNTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVJ32rHSz53DtBlnTKXlXsNo/cREjpsTwjZwBgUTAyqgqDFkxnEwVbEyrwMc 5yVLY7LqDgavU/rPrUQZafKMHMMVHFUm0MZCJkGgYP8jaWYc/7oity5KluIP3N+w b63pjT+q5+XhVH4cZd2viRUa7auFMQDmNfpgdChXvTImkWDRSzgTrVmuMElcFMik GFlCjxU6K2rIoZdReaqXHIj1/tfjmNVzO5Qz9SLRFD5EcXbDpWXh+iYeYh+FfnM7 qXupuVT/07cyaPUSL3Wvhr8nYh9OGhZp08AIdQJjo7jvywspq3XqB5B8ivbJ/BhM gOyYqGhLOqwo4opwlaFWS6ah8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIEY7Kb yPuA1BXrlERBQWYbpiCeMB8GA1UdIwQYMBaAFLl4BDNQMFk9bZZXvEXb0RSxKR0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTMxMC9EMUIxRDM0NDU0 NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dUMXRsbGU4UmR2UkZMRXBI U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYZ0VNMUF3V1QxdGxsZThSZHZSRkxFcEhTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTMxMC9EMUIxRDM0NDU0NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dU MXRsbGU4UmR2UkZMRXBIU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFajyu60Mb1GE8phrQs8ajuDMWkAdP9sc7+bm8Wt7a5H2YQ6YQj66T 1mly172C5HhmBhv/cXziay2GiMJ0YcaMcN09dfJUrS41+SNrCcxeWbMfNR9193l4 irwiSSqwoYZcyBK3I7bye7/SEEvigcsD8i7VOq17ZCZwjSAAzTq4KR3wvncnCou1 fChZwkax1q+B2fC5G4/AdmBeTLg+K5z5mho6a3XKSBUjF1k080JHCaLXv+El5MAL kGWlnJUoCATSF3FMN7ZK+P9hbXe9uOVklkV46jURHsQ5Y8oRg0KdmIMW2TPnyu9u 0jduO9mVwkX0rqa3cdF6aAF1BOCvl9CK -----END CERTIFICATE-----Generated at Sun May 19 03:14:50 2024 by rpki-client on console-fra.rpki-client.org