$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft File: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft (raw, json) Hash identifier: TDBHZbwpoTAbYRgQX1NJzp8jm0R5ZWSok37GuJ1f7ws= Subject key identifier: 00:70:D3:16:D1:82:85:92:50:60:02:97:2C:EB:1D:69:5F:BF:D1:75 Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68 Certificate issuer: /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft Manifest number: 40 Signing time: Sun 19 May 2024 08:12:05 +0000 Manifest this update: Sun 19 May 2024 08:12:04 +0000 Manifest next update: Sun 26 May 2024 08:12:04 +0000 Files and hashes: 1: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl (hash: pTr4KpbQZlG0yfDHXL3w1BK0f9fHm38jkeOjiNeAO7s=) 2: 8FD49B16BAE411EE9198A471C4F9AE02.roa (hash: u+JMYeb8gD5HU0OlGXo0Chq6M3KLkPgFbtazxXNmZmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968 Validity Not Before: May 19 08:12:04 2024 GMT Not After : May 26 08:12:04 2024 GMT Subject: CN=6649b455-38ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:8c:05:17:61:7d:99:c0:50:6a:0c:c8:cf: 38:e7:2e:6e:72:31:a7:2e:4c:1e:28:d0:0b:10:e5: 68:9e:b9:03:97:0c:08:a3:17:27:59:b1:dc:4a:ca: 61:ff:b9:1e:13:cb:03:29:42:6f:ec:6b:80:27:2f: 18:6a:95:48:77:49:f7:6f:16:0f:7e:4d:84:d7:47: 6d:f5:a7:ef:62:32:37:f2:0d:1f:ba:08:84:ba:df: 07:f9:ef:6e:85:b6:e2:d6:20:87:bc:3a:c8:b4:05: e2:9f:97:1b:a7:60:a9:86:6c:b4:36:5f:a7:ec:40: 84:3d:f0:9b:de:7f:93:bf:93:46:a2:3f:8e:ad:07: d5:89:b3:58:4c:8d:2f:21:e7:a6:97:2f:86:a5:bf: 55:da:06:56:32:5e:78:e4:ec:6d:9c:0f:24:5c:9f: cd:4c:a1:7c:99:20:a3:d0:32:4e:e8:91:fb:e8:21: 39:36:00:ed:1d:1d:39:96:10:75:12:ce:07:80:40: 40:43:04:92:77:67:8e:88:73:f8:4f:e0:45:b8:e8: 07:15:90:62:9e:fc:bd:78:db:cf:3a:c2:a1:70:9d: 98:86:34:08:3c:5d:04:a9:3b:7c:a7:03:ae:d3:20: 4c:9a:bd:81:2e:f4:b4:d5:da:6f:6c:f1:85:d6:e4: b0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:70:D3:16:D1:82:85:92:50:60:02:97:2C:EB:1D:69:5F:BF:D1:75 X509v3 Authority Key Identifier: keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:76:67:bf:4c:a1:98:88:1d:d3:2d:3f:c2:dd:53:5e:d4:9a: e8:fe:07:b8:07:74:65:c2:f2:67:33:6e:f8:6e:be:63:ea:02: b7:c5:06:4b:b8:37:19:3e:0f:bb:d4:9a:7c:97:3d:73:56:19: 4a:f1:0f:e9:e9:4d:f5:23:a3:c8:fa:5c:60:41:f7:9a:fc:44: ca:18:55:e4:75:6a:6c:23:bc:03:99:1c:1c:11:b3:da:8d:b0: bb:d5:6c:6f:b7:6e:6b:27:b8:19:10:1c:23:ad:7e:d4:b4:93: 67:6b:29:cd:6f:e0:f2:bf:b0:23:39:e9:1e:82:2b:ff:b4:74: a3:ef:59:f6:e2:81:d9:c2:0a:56:77:c4:a5:a5:d7:f4:19:84: c1:60:f1:a7:1a:fe:24:e9:49:94:d6:8b:48:d1:50:ad:53:59: 71:48:7f:b9:32:09:3c:82:45:43:a5:c1:62:32:6e:e0:1e:9a: 01:8b:f9:d4:28:7a:14:ce:8c:b1:49:8c:2f:0a:23:cd:9b:d8: 55:3c:e8:a0:a3:38:71:fe:9c:f3:69:03:dd:ed:9c:85:8e:de: 6a:1b:ec:9e:91:dd:a4:45:83:1a:39:cc:06:ab:d0:4a:1b:2d: 9d:ba:4e:c6:b6:8b:61:21:d9:72:2d:e6:0e:28:04:de:3a:c6: b5:20:75:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QTg1MTExMC8GA1UEBRMoQjkyNTBGREUzRkFCRDU5RkE1NjA4MjMwRkVBN0EyM0M0 QjRDODk2ODAeFw0yNDA1MTkwODEyMDRaFw0yNDA1MjYwODEyMDRaMBgxFjAUBgNV BAMTDTY2NDliNDU1LTM4YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoAYwFF2F9mcBQagzIzzjnLm5yMacuTB4o0AsQ5WieuQOXDAijFydZsdxKymH/ uR4TywMpQm/sa4AnLxhqlUh3SfdvFg9+TYTXR231p+9iMjfyDR+6CIS63wf5726F tuLWIIe8Osi0BeKflxunYKmGbLQ2X6fsQIQ98Jvef5O/k0aiP46tB9WJs1hMjS8h 56aXL4alv1XaBlYyXnjk7G2cDyRcn81MoXyZIKPQMk7okfvoITk2AO0dHTmWEHUS zgeAQEBDBJJ3Z46Ic/hP4EW46AcVkGKe/L142886wqFwnZiGNAg8XQSpO3ynA67T IEyavYEu9LTV2m9s8YXW5LBvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAHDTFtGC hZJQYAKXLOsdaV+/0XUwHwYDVR0jBBgwFoAUuSUP3j+r1Z+lYIIw/qeiPEtMiWgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBODUxLzk1QTYxMTlDQjlE RjExRUU5NEI0MjQyQUM0RjlBRTAyL3VTVVAzai1yMVotbFlJSXdfcWVpUEV0TWlX Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdVNVUDNqLXIxWi1sWUlJd19xZWlQRXRNaVdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB ODUxLzk1QTYxMTlDQjlERjExRUU5NEI0MjQyQUM0RjlBRTAyL3VTVVAzai1yMVot bFlJSXdfcWVpUEV0TWlXZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAl2Z79MoZiIHdMtP8LdU17Umuj+B7gHdGXC8mczbvhuvmPqArfFBku4 Nxk+D7vUmnyXPXNWGUrxD+npTfUjo8j6XGBB95r8RMoYVeR1amwjvAOZHBwRs9qN sLvVbG+3bmsnuBkQHCOtftS0k2drKc1v4PK/sCM56R6CK/+0dKPvWfbigdnCClZ3 xKWl1/QZhMFg8aca/iTpSZTWi0jRUK1TWXFIf7kyCTyCRUOlwWIybuAemgGL+dQo ehTOjLFJjC8KI82b2FU86KCjOHH+nPNpA93tnIWO3mob7J6R3aRFgxo5zAar0Eob LZ26Tsa2i2Eh2XIt5g4oBN46xrUgdfk= -----END CERTIFICATE-----Generated at Sun May 19 09:32:20 2024 by rpki-client on console-ams.rpki-client.org