$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft File: UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json) Hash identifier: 8neC6rjzUzEewMQpjZCm0O7M/YZDUdAroKSHz/TW4Fw= Subject key identifier: CC:90:38:A1:2E:5C:21:54:B0:16:1C:7F:E6:1B:09:30:52:39:C2:3B Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 Certificate issuer: /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft Manifest number: 42 Signing time: Sun 19 May 2024 08:12:01 +0000 Manifest this update: Sun 19 May 2024 08:12:00 +0000 Manifest next update: Sun 26 May 2024 08:12:00 +0000 Files and hashes: 1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: i5ws8gMR9hN/S0pIUXC9G8iWF1yvD6fo4pNgte2Dyvw=) 2: 3055F0C8BAAC11EEB1F2C972C4F9AE02.roa (hash: 7jzOqvzUj7kJ8Y4zUUKzQ2gjUk/CKGVV3DYS1ROQx2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4 Validity Not Before: May 19 08:12:00 2024 GMT Not After : May 26 08:12:00 2024 GMT Subject: CN=6649b451-0767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cc:0b:95:ed:a2:e8:43:ed:db:2a:3b:a0:28: d3:9b:61:e5:ae:8e:29:02:a6:70:e2:ce:25:3d:f2: 36:ff:59:2e:1c:93:ce:f6:68:ba:80:ba:3c:93:db: b7:53:d7:56:b8:a6:10:35:87:69:85:bd:fb:2d:d2: 23:30:04:bf:3a:42:da:2f:2d:37:b1:4d:fc:f2:35: 1d:39:03:e6:e8:da:ce:d6:de:7d:14:c7:9e:75:17: a1:2c:3e:62:7d:86:14:98:c2:5b:a7:a7:3e:ea:20: c3:5f:f9:7f:1f:ba:0d:89:48:4e:43:26:a6:8f:3b: 11:12:62:99:a4:9c:5e:c2:a5:bf:8b:cf:9e:13:b8: 28:59:e3:a6:0f:3d:d3:e4:e0:71:36:9c:6f:37:e4: ad:7a:a9:82:15:a1:ec:95:31:af:3b:f8:8c:df:2d: 1d:dd:13:b2:4c:1c:64:f5:68:81:8c:d3:e4:09:bc: 94:81:1e:00:8c:30:dd:92:a3:b8:2f:a7:45:9d:86: fc:64:40:04:d8:af:2f:fa:db:55:c4:65:e9:68:5e: ee:39:e8:2e:43:89:bb:06:db:23:51:a3:3b:80:f9: c2:62:1b:06:80:28:a4:4a:cf:82:d9:d9:35:c4:37: 61:bb:d6:1e:93:3c:74:f9:84:e7:20:aa:76:2e:cd: 2c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:90:38:A1:2E:5C:21:54:B0:16:1C:7F:E6:1B:09:30:52:39:C2:3B X509v3 Authority Key Identifier: keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:28:92:2c:30:43:ab:83:11:a6:43:7c:be:fd:7e:b7:c7:9d: 79:fa:f5:fe:ed:b3:17:e7:f4:07:e7:90:ea:23:f6:18:ac:8b: 66:e3:56:ad:73:3c:cb:be:68:80:d4:87:7c:76:39:cc:b5:de: d6:e7:7f:26:3e:bf:8d:d0:ad:63:34:49:14:ef:80:3c:7a:39: 41:53:e9:55:df:c6:29:92:71:e8:d4:bb:0e:ec:88:d4:f1:8a: 95:48:97:6e:53:fd:63:68:00:cd:42:fd:15:ac:01:05:1a:11: 6c:f9:d9:b2:b2:19:2f:ea:9d:b8:6d:0f:da:9d:b6:e1:c0:2a: 81:5c:16:ed:c6:bf:b5:25:5b:d0:3d:a6:e9:46:be:1f:46:1f: fc:71:fc:d2:27:4b:d3:7f:2d:ca:9c:5e:7e:c2:e4:25:7a:58: 2c:e3:a8:09:11:d4:0a:3c:51:a2:b7:e4:e8:5a:42:04:5d:3c: ef:9f:a4:6d:84:4d:a3:24:da:4e:11:31:91:fd:cb:dc:64:8b: 4d:27:53:66:6c:77:6b:24:83:e5:57:a6:04:6b:24:97:ab:4c: 8e:bd:cc:63:7a:50:d9:fd:a4:94:be:49:a6:0b:ca:f1:de:fa: 88:03:b2:0e:6c:0b:42:18:ac:e8:9d:c9:78:a2:d5:b8:f7:b7: 39:20:af:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QTg1MTExMC8GA1UEBRMoNTBBMERDOTU1OEE2QzQwRERDRDUzNUZCN0I1QzBCRUVB NjZFMDRFNDAeFw0yNDA1MTkwODEyMDBaFw0yNDA1MjYwODEyMDBaMBgxFjAUBgNV BAMTDTY2NDliNDUxLTA3NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJzAuV7aLoQ+3bKjugKNObYeWujikCpnDiziU98jb/WS4ck872aLqAujyT27dT 11a4phA1h2mFvfst0iMwBL86QtovLTexTfzyNR05A+bo2s7W3n0Ux551F6EsPmJ9 hhSYwlunpz7qIMNf+X8fug2JSE5DJqaPOxESYpmknF7Cpb+Lz54TuChZ46YPPdPk 4HE2nG835K16qYIVoeyVMa87+IzfLR3dE7JMHGT1aIGM0+QJvJSBHgCMMN2So7gv p0WdhvxkQATYry/621XEZeloXu456C5DibsG2yNRozuA+cJiGwaAKKRKz4LZ2TXE N2G71h6TPHT5hOcgqnYuzSznAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzJA4oS5c IVSwFhx/5hsJMFI5wjswHwYDVR0jBBgwFoAUUKDclVimxA3c1TX7e1wL7qZuBOQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBODUxLzhCQzUxMjdDQjlE RjExRUU5NEI0MjQyQUM0RjlBRTAyL1VLRGNsVmlteEEzYzFUWDdlMXdMN3FadUJP US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUtEY2xWaW14QTNjMVRYN2Uxd0w3cVp1Qk9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB ODUxLzhCQzUxMjdDQjlERjExRUU5NEI0MjQyQUM0RjlBRTAyL1VLRGNsVmlteEEz YzFUWDdlMXdMN3FadUJPUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMookiwwQ6uDEaZDfL79frfHnXn69f7tsxfn9AfnkOoj9hisi2bjVq1z PMu+aIDUh3x2Ocy13tbnfyY+v43QrWM0SRTvgDx6OUFT6VXfximScejUuw7siNTx ipVIl25T/WNoAM1C/RWsAQUaEWz52bKyGS/qnbhtD9qdtuHAKoFcFu3Gv7UlW9A9 pulGvh9GH/xx/NInS9N/LcqcXn7C5CV6WCzjqAkR1Ao8UaK35OhaQgRdPO+fpG2E TaMk2k4RMZH9y9xki00nU2Zsd2skg+VXpgRrJJerTI69zGN6UNn9pJS+SaYLyvHe +ogDsg5sC0IYrOidyXii1bj3tzkgr2g= -----END CERTIFICATE-----Generated at Sun May 19 09:32:20 2024 by rpki-client on console-ams.rpki-client.org