$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft File: uSVP8yozKY2dXGFc_aRTFeFcfLU.mft (raw, json) Hash identifier: TrUWyGTJBUg9K77jUwyYXEBc6kAx8wOFpZZWc07Qhy0= Subject key identifier: 19:0E:76:DA:26:61:4B:85:25:30:4D:E1:54:C9:46:1A:BB:7E:59:4C Authority key identifier: B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 Certificate issuer: /CN=A91F3043/serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Certificate serial: 0584 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft Manifest number: 057D Signing time: Sun 19 May 2024 00:38:23 +0000 Manifest this update: Sun 19 May 2024 00:38:22 +0000 Manifest next update: Sun 26 May 2024 00:38:22 +0000 Files and hashes: 1: uSVP8yozKY2dXGFc_aRTFeFcfLU.crl (hash: y4V3AOnaEd1cuehnvFR29Gpjz0GZ5vj/Yem5VDUIqv8=) 2: BDFE68F491FD11EB84408D16C4F9AE02.roa (hash: upHJM3OU3AjTyMDlkbAZZQMntOq+98ARLD9pNjN3d3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1412 (0x584) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3043/serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Validity Not Before: May 19 00:38:22 2024 GMT Not After : May 26 00:38:22 2024 GMT Subject: CN=664949fe-7de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:de:0a:1e:cf:6a:26:85:c6:c9:17:f5:4f:4e: ed:eb:28:bf:85:c6:70:28:10:75:98:8f:a6:46:ce: 9d:3d:d1:d8:f0:e5:6b:b8:72:d1:4b:45:88:2b:0f: 99:ad:2f:a4:b5:b3:36:49:4f:25:14:20:de:8f:b5: 36:24:23:ed:d3:fc:f0:c9:57:9a:5d:4d:9a:93:93: b2:09:59:3d:e9:b4:99:28:2f:da:c0:80:11:34:d3: 8f:72:c9:67:54:f7:ea:56:f3:9a:9d:d5:7b:a8:c6: 23:79:f3:54:a0:89:30:6d:e4:2c:19:31:75:92:78: ea:59:54:3e:7a:53:64:82:11:29:3a:16:df:ca:45: 98:99:71:84:46:cc:78:30:b8:9c:8b:40:3d:e3:64: f4:61:87:85:92:56:8f:a7:72:01:04:80:77:3f:23: 91:c2:1c:45:99:c1:39:fa:d6:bb:b7:f2:d3:11:38: 60:2d:21:92:a1:ce:09:ec:9a:b8:1d:c4:8c:c4:6b: 5e:58:72:a1:4c:88:c3:70:c9:73:95:bb:b1:e9:42: 9a:13:5d:50:4c:00:3e:90:02:24:3a:09:8b:c4:75: fc:17:74:c3:52:75:aa:81:cf:ff:18:64:3d:dc:83: 38:d7:68:0e:37:63:f8:a3:1d:f8:2d:e7:30:d1:7c: 49:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0E:76:DA:26:61:4B:85:25:30:4D:E1:54:C9:46:1A:BB:7E:59:4C X509v3 Authority Key Identifier: keyid:B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d6:5c:72:ac:ec:98:3a:7f:04:ca:44:16:86:f7:ec:48:ca: c2:48:66:0e:19:ce:e2:35:2a:b3:7e:60:77:2f:87:c5:c3:5f: 1e:b1:6c:e5:87:7a:c0:e3:c8:21:e2:d1:49:13:32:15:d1:4a: c7:8a:0c:a3:a3:97:8e:bf:1c:73:62:32:86:19:c6:39:59:a5: cf:b0:ae:0a:f6:e3:c0:aa:31:5d:50:b7:da:8d:92:da:15:7d: bb:88:fc:1e:12:74:34:19:1f:ee:bb:45:e3:3d:99:9c:00:dd: fe:a1:7a:f8:27:b3:6e:c5:99:9a:ed:c1:8c:ef:f6:09:3d:eb: fe:ea:36:48:18:49:4c:f9:bf:1c:db:99:98:eb:6b:d0:e6:85: a4:29:bc:0d:86:ee:a4:af:5d:c7:31:f2:ab:87:04:ac:98:54: 9f:18:09:78:14:6e:86:fd:76:cd:7d:d8:97:c9:3a:8b:79:d5: 55:1d:a1:c0:d6:89:a5:bf:ee:e8:5a:f6:23:0d:2d:9f:77:26: 53:e0:f0:93:a7:ea:23:cb:6e:30:72:55:b1:70:53:90:36:b8: 70:2d:71:f3:0b:10:24:a0:d8:93:2d:91:42:b5:e4:a6:43:64: 7b:28:df:cd:2b:aa:43:9e:88:f1:eb:7f:85:e5:84:55:36:68: de:23:b4:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwNDMxMTAvBgNVBAUTKEI5MjU0RkYzMkEzMzI5OEQ5RDVDNjE1Q0ZEQTQ1MzE1 RTE1QzdDQjUwHhcNMjQwNTE5MDAzODIyWhcNMjQwNTI2MDAzODIyWjAYMRYwFAYD VQQDEw02NjQ5NDlmZS03ZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2N4KHs9qJoXGyRf1T07t6yi/hcZwKBB1mI+mRs6dPdHY8OVruHLRS0WIKw+Z rS+ktbM2SU8lFCDej7U2JCPt0/zwyVeaXU2ak5OyCVk96bSZKC/awIARNNOPcsln VPfqVvOandV7qMYjefNUoIkwbeQsGTF1knjqWVQ+elNkghEpOhbfykWYmXGERsx4 MLici0A942T0YYeFklaPp3IBBIB3PyORwhxFmcE5+ta7t/LTEThgLSGSoc4J7Jq4 HcSMxGteWHKhTIjDcMlzlbux6UKaE11QTAA+kAIkOgmLxHX8F3TDUnWqgc//GGQ9 3IM412gON2P4ox34Lecw0XxJsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkOdtom YUuFJTBN4VTJRhq7fllMMB8GA1UdIwQYMBaAFLklT/MqMymNnVxhXP2kUxXhXHy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA0My8zOTZDNUQ0MDkx RkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZMmRYR0ZjX2FSVEZlRmNm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTVlA4eW96S1kyZFhHRmNfYVJURmVGY2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzA0My8zOTZDNUQ0MDkxRkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZ MmRYR0ZjX2FSVEZlRmNmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq1lxyrOyYOn8EykQWhvfsSMrCSGYOGc7iNSqzfmB3L4fFw18esWzl h3rA48gh4tFJEzIV0UrHigyjo5eOvxxzYjKGGcY5WaXPsK4K9uPAqjFdULfajZLa FX27iPweEnQ0GR/uu0XjPZmcAN3+oXr4J7NuxZma7cGM7/YJPev+6jZIGElM+b8c 25mY62vQ5oWkKbwNhu6kr13HMfKrhwSsmFSfGAl4FG6G/XbNfdiXyTqLedVVHaHA 1omlv+7oWvYjDS2fdyZT4PCTp+ojy24wclWxcFOQNrhwLXHzCxAkoNiTLZFCteSm Q2R7KN/NK6pDnojx63+F5YRVNmjeI7Sp -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-fra.rpki-client.org