$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft File: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft (raw, json) Hash identifier: NS8GtLa67l4GWI1loWf37Cq3EdyfipYJBuBsEOFvMvs= Subject key identifier: 60:50:79:42:5D:87:69:0B:44:4F:7E:96:77:A5:8A:EF:AD:A2:2B:E3 Authority key identifier: 50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23 Certificate issuer: /CN=A91FBDDF/serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft Manifest number: 6C Signing time: Sun 19 May 2024 07:31:31 +0000 Manifest this update: Sun 19 May 2024 07:31:31 +0000 Manifest next update: Sun 26 May 2024 07:31:31 +0000 Files and hashes: 1: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl (hash: pPUIiJvbFrJPQhGjC3qFBAb6vZ3lPzgWq+6uzbCtj4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBDDF/serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023 Validity Not Before: May 19 07:31:31 2024 GMT Not After : May 26 07:31:31 2024 GMT Subject: CN=6649aad3-b813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:08:61:a2:ff:44:32:59:9a:77:21:01:05: 99:fe:59:c8:30:ee:f4:f0:74:62:12:35:db:ca:7e: b1:ca:aa:e6:34:69:ee:c7:f8:88:1f:09:4b:9e:a4: e0:79:22:05:4b:4e:c4:0f:92:6a:1b:f7:f7:cb:89: bf:23:2e:cd:f9:3b:94:c8:a8:e7:24:4d:f8:cd:93: 8f:58:11:d9:15:39:69:35:e6:8c:24:72:c6:cd:38: b7:33:10:03:88:71:49:7b:ca:24:ad:ce:be:ed:17: 6a:e8:a0:49:a5:50:7d:d8:9d:fa:0c:b2:9a:ea:f7: 36:49:7d:62:fd:33:4f:8f:8f:70:26:d3:da:68:a5: 5e:d0:3a:cc:cf:cd:d7:c1:e5:00:39:ae:52:81:95: 09:00:19:8d:46:0a:b4:99:1c:dc:22:be:69:40:7f: 37:10:7f:e0:9e:bc:73:ce:4f:d2:84:56:e1:77:ef: bf:74:b6:e3:8b:8a:d8:7e:cc:07:be:df:5e:d3:53: c9:f4:97:10:78:bc:5e:00:cf:7f:21:1f:e0:cc:71: a2:15:27:72:a5:b2:64:cb:e1:41:ca:c9:8c:ad:89: 97:53:22:6e:d6:e9:0b:45:bd:8f:ad:9e:9f:a0:01: 36:6e:8f:eb:c0:df:53:74:b3:eb:13:4f:5f:3a:5f: 77:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:50:79:42:5D:87:69:0B:44:4F:7E:96:77:A5:8A:EF:AD:A2:2B:E3 X509v3 Authority Key Identifier: keyid:50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:92:9f:98:32:3b:e1:d3:43:47:36:2f:6a:a3:24:f4:f7:1f: 0c:30:4f:4e:f2:df:d1:a6:a0:5a:f6:41:ec:3d:cb:c7:e1:6e: 75:96:17:e0:6a:3a:29:49:4c:ef:50:27:d9:47:ba:da:fa:08: c8:20:96:d0:5e:b7:fd:b1:a5:cc:0f:e2:90:60:b9:2e:ea:7f: 76:c7:c0:f2:ed:8f:fb:c0:9e:f8:51:e9:0c:78:63:3f:a6:a6: 7e:06:dd:e6:33:fc:56:4b:0e:fd:08:e9:9e:91:0f:83:63:eb: 3b:78:97:46:00:2d:54:f5:e0:f1:36:47:14:3c:76:51:09:10: b5:ff:0d:63:aa:c4:cb:5c:08:cc:5c:57:b0:31:e6:c4:b5:91: ab:94:fe:71:7f:c0:18:47:00:b0:22:d2:7b:ca:c5:88:85:33: 0d:a4:5e:6a:d0:0c:70:eb:c6:80:ee:d0:0b:e3:78:35:e1:e7: 8c:3b:37:9f:5b:a7:fc:c8:13:92:1d:04:62:fa:96:1f:1c:b7: 9e:5c:cb:f4:e9:00:11:1e:b3:a9:d9:e9:af:ac:ef:f5:cc:21: a1:ad:f6:86:72:f4:bc:56:51:cc:42:77:68:a5:a3:8b:8f:4f: fb:3f:76:71:a5:ca:b1:54:34:0d:8c:3c:44:0e:3d:d1:9d:6d: 30:eb:ca:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkRERjExMC8GA1UEBRMoNTAzRDFCRjU2QjIyMjlCNTJBQTNGRjY4NTM0Njk5RjA2 RkQyNTAyMzAeFw0yNDA1MTkwNzMxMzFaFw0yNDA1MjYwNzMxMzFaMBgxFjAUBgNV BAMTDTY2NDlhYWQzLWI4MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0Jwhhov9EMlmadyEBBZn+Wcgw7vTwdGISNdvKfrHKquY0ae7H+IgfCUuepOB5 IgVLTsQPkmob9/fLib8jLs35O5TIqOckTfjNk49YEdkVOWk15owkcsbNOLczEAOI cUl7yiStzr7tF2rooEmlUH3YnfoMsprq9zZJfWL9M0+Pj3Am09popV7QOszPzdfB 5QA5rlKBlQkAGY1GCrSZHNwivmlAfzcQf+CevHPOT9KEVuF37790tuOLith+zAe+ 317TU8n0lxB4vF4Az38hH+DMcaIVJ3KlsmTL4UHKyYytiZdTIm7W6QtFvY+tnp+g ATZuj+vA31N0s+sTT186X3dRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYFB5Ql2H aQtET36Wd6WK762iK+MwHwYDVR0jBBgwFoAUUD0b9WsiKbUqo/9oU0aZ8G/SUCMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRERGLzQ3NUM2NEJFNzI0 NTExRUVBQTI5RUM3NEM0RjlBRTAyL1VEMGI5V3NpS2JVcW9fOW9VMGFaOEdfU1VD TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVUQwYjlXc2lLYlVxb185b1UwYVo4R19TVUNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RERGLzQ3NUM2NEJFNzI0NTExRUVBQTI5RUM3NEM0RjlBRTAyL1VEMGI5V3NpS2JV cW9fOW9VMGFaOEdfU1VDTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJqSn5gyO+HTQ0c2L2qjJPT3HwwwT07y39GmoFr2Qew9y8fhbnWWF+Bq OilJTO9QJ9lHutr6CMggltBet/2xpcwP4pBguS7qf3bHwPLtj/vAnvhR6Qx4Yz+m pn4G3eYz/FZLDv0I6Z6RD4Nj6zt4l0YALVT14PE2RxQ8dlEJELX/DWOqxMtcCMxc V7Ax5sS1kauU/nF/wBhHALAi0nvKxYiFMw2kXmrQDHDrxoDu0AvjeDXh54w7N59b p/zIE5IdBGL6lh8ct55cy/TpABEes6nZ6a+s7/XMIaGt9oZy9LxWUcxCd2ilo4uP T/s/dnGlyrFUNA2MPEQOPdGdbTDryh0= -----END CERTIFICATE-----Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org