$ rpki-client -vvf rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft File: uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft (raw, json) Hash identifier: KYCKWKgycEe1HZw1yvoE8MksPCr/yaGP/Fv1vNSwW+8= Subject key identifier: F0:EB:55:A0:7A:37:2C:5C:18:B6:C3:B8:55:47:08:AF:7C:5F:66:A9 Authority key identifier: B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74 Certificate issuer: /CN=A91103CF/serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74 Certificate serial: 02C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft Manifest number: 02BE Signing time: Sat 27 Apr 2024 03:27:42 +0000 Manifest this update: Sat 27 Apr 2024 03:27:41 +0000 Manifest next update: Sat 04 May 2024 03:27:41 +0000 Files and hashes: 1: uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl (hash: h7hnQzrCIP8mr7JQ4JKiKD4ngJDWdn5Aw+bTHppg+xA=) 2: 931A51C07F5811EE82ECE456C4F9AE02.roa (hash: zf2+17plh3siOxScOTpZsDeWJyTqxQmvL8SXYqmaBqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91103CF/serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74 Validity Not Before: Apr 27 03:27:41 2024 GMT Not After : May 4 03:27:41 2024 GMT Subject: CN=662c70ad-d83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c7:f7:64:db:ee:8b:bc:d4:26:a8:33:ad:ab: 4b:c1:6a:b8:e2:36:f4:c7:c7:4e:f5:56:f6:70:b8: d9:5b:a7:38:25:ec:58:8a:8f:48:d4:03:47:d3:cc: 07:9f:bb:f4:9e:a2:14:f1:d1:45:db:3d:b1:ea:84: 78:85:d2:2c:6b:64:24:9e:89:23:79:9f:33:95:07: 0b:4c:57:70:a3:39:cf:15:31:82:99:90:aa:b6:52: d9:4e:5f:fa:93:12:e8:d5:0e:d6:2e:ac:76:03:b1: dd:da:52:48:e2:c8:dc:6d:34:8c:dd:33:d9:db:74: fd:f1:fd:3f:39:a0:f5:67:be:be:5b:52:76:e2:e6: 8d:d8:bb:c1:b4:9c:0d:54:e3:d5:9c:38:62:6c:8f: 26:38:2a:a8:42:c2:7c:31:2a:29:43:f0:38:3e:74: ed:91:8f:39:bb:dc:e3:9e:79:43:f9:97:1d:15:f4: 89:94:60:b4:81:a8:51:64:ff:da:a4:5f:a3:2e:e1: 9d:40:b5:e8:36:72:d0:6a:12:62:1d:c2:8a:30:93: f0:a1:ab:56:77:06:83:48:01:34:72:c7:dd:51:d6: 7d:af:8d:61:ca:b8:63:fe:60:6b:9d:68:09:a8:61: 1e:13:0f:49:c4:d2:00:ac:1c:56:84:b8:06:3e:66: 0b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EB:55:A0:7A:37:2C:5C:18:B6:C3:B8:55:47:08:AF:7C:5F:66:A9 X509v3 Authority Key Identifier: keyid:B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:10:ef:1a:86:a1:df:26:da:42:10:04:5e:73:b7:74:c4:dd: 54:0a:f2:23:36:ea:89:c9:55:df:74:d1:1a:39:06:f0:44:92: 9b:37:71:e3:82:63:3e:83:ec:ba:8b:b5:93:99:95:85:bc:b9: 3b:27:c2:4c:84:39:8d:15:e9:9c:be:d1:35:9a:81:b3:7e:34: e5:5a:6e:7c:02:cd:27:e0:34:20:1c:d3:6e:8c:ca:0b:af:f5: 11:d1:ff:8a:61:e1:9b:18:d4:f8:7b:8b:41:98:12:06:40:2b: 94:73:7a:40:89:c0:ca:74:bf:5a:73:16:d3:0a:a4:1a:40:38: c0:89:35:17:18:b3:ea:87:a1:1b:04:ed:08:89:2b:d6:b9:8c: 6e:c1:af:a6:64:a6:08:05:40:1d:3b:6d:55:36:69:41:e0:b1: f2:16:20:e8:a2:2f:30:04:20:78:9b:b1:a6:72:cd:b1:86:02: 40:11:89:7b:7d:8a:ca:69:00:0e:55:3d:3f:1b:ea:12:25:4e: 4e:fa:d9:47:92:94:33:6a:e0:bd:97:9d:25:f8:52:53:87:28: 90:02:7c:a2:8e:1f:5e:68:1d:22:67:c7:5e:6c:c3:7c:cc:d1: ea:c9:c6:fc:ac:a9:c8:f2:dc:ee:57:90:79:8d:a7:b4:f0:a7: 3b:aa:73:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzQ0YxMTAvBgNVBAUTKEI4QUQ4RDkxNkNEOTQ4MkI2REE1NUQzMDdDRTk1QzA3 QTk1QjJGNzQwHhcNMjQwNDI3MDMyNzQxWhcNMjQwNTA0MDMyNzQxWjAYMRYwFAYD VQQDEw02NjJjNzBhZC1kODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMf3ZNvui7zUJqgzratLwWq44jb0x8dO9Vb2cLjZW6c4JexYio9I1ANH08wH n7v0nqIU8dFF2z2x6oR4hdIsa2QknokjeZ8zlQcLTFdwoznPFTGCmZCqtlLZTl/6 kxLo1Q7WLqx2A7Hd2lJI4sjcbTSM3TPZ23T98f0/OaD1Z76+W1J24uaN2LvBtJwN VOPVnDhibI8mOCqoQsJ8MSopQ/A4PnTtkY85u9zjnnlD+ZcdFfSJlGC0gahRZP/a pF+jLuGdQLXoNnLQahJiHcKKMJPwoatWdwaDSAE0csfdUdZ9r41hyrhj/mBrnWgJ qGEeEw9JxNIArBxWhLgGPmYLowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDrVaB6 NyxcGLbDuFVHCK98X2apMB8GA1UdIwQYMBaAFLitjZFs2UgrbaVdMHzpXAepWy90 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDNDRi8xN0Q2RTRDMkE2 OEExMUVDQTlBNjM1NTFDNEY5QUUwMi91SzJOa1d6WlNDdHRwVjB3Zk9sY0I2bGJM M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLMk5rV3paU0N0dHBWMHdmT2xjQjZsYkwzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDNDRi8xN0Q2RTRDMkE2OEExMUVDQTlBNjM1NTFDNEY5QUUwMi91SzJOa1d6WlND dHRwVjB3Zk9sY0I2bGJMM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMEO8ahqHfJtpCEARec7d0xN1UCvIjNuqJyVXfdNEaOQbwRJKbN3Hj gmM+g+y6i7WTmZWFvLk7J8JMhDmNFemcvtE1moGzfjTlWm58As0n4DQgHNNujMoL r/UR0f+KYeGbGNT4e4tBmBIGQCuUc3pAicDKdL9acxbTCqQaQDjAiTUXGLPqh6Eb BO0IiSvWuYxuwa+mZKYIBUAdO21VNmlB4LHyFiDooi8wBCB4m7Gmcs2xhgJAEYl7 fYrKaQAOVT0/G+oSJU5O+tlHkpQzauC9l50l+FJThyiQAnyijh9eaB0iZ8debMN8 zNHqycb8rKnI8tzuV5B5jae08Kc7qnMg -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:22 2024 by rpki-client on console-ams.rpki-client.org