$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft File: uNk1BsinkdH5_6W2fDiBbdwD7ms.mft (raw, json) Hash identifier: uTbEKw1MmYSktSO3Mmo0twsflVZH8FAA1iyguXcqZzY= Subject key identifier: D1:DD:88:70:A1:D6:C0:3E:72:3E:F5:1C:1F:21:37:33:22:DE:32:30 Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B Certificate issuer: /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Certificate serial: 0970 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft Manifest number: 096B Signing time: Sat 04 May 2024 21:11:19 +0000 Manifest this update: Sat 04 May 2024 21:11:19 +0000 Manifest next update: Sat 11 May 2024 21:11:19 +0000 Files and hashes: 1: uNk1BsinkdH5_6W2fDiBbdwD7ms.crl (hash: yVP3qs9psNJrKZkVWTYeQiJIcO2IDyKieuBbZzNCfbE=) 2: C01674A86BF011EA87B33D25C4F9AE02.roa (hash: 41vzsNFWtlDB3OOheuZb6doD/XkheVi/JY4sN43fJrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2416 (0x970) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B Validity Not Before: May 4 21:11:19 2024 GMT Not After : May 11 21:11:19 2024 GMT Subject: CN=6636a477-21e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:3b:b6:7d:35:08:9f:84:3b:a4:dc:2d:58: 47:d9:27:ef:6b:e3:c2:63:50:53:c4:6f:1f:e3:89: fe:91:30:d7:d6:8d:07:0a:61:c9:4f:95:46:b1:20: 15:12:28:c3:0a:ae:e2:a7:aa:35:9e:d7:a7:9a:17: c7:a6:b8:d1:23:69:79:10:20:b2:b1:bd:5a:08:42: 93:18:94:e6:db:29:41:85:ae:fa:2b:64:3a:db:c5: 0c:43:ad:81:fe:60:be:76:22:d7:b0:81:55:39:25: bc:36:17:fe:c8:1c:6b:ff:f3:d2:9d:ac:a3:ab:69: 9e:87:a8:49:e9:69:45:e5:29:c8:54:3c:1f:47:41: ee:0e:d2:55:0e:9a:19:92:4d:c9:04:a8:1a:b7:57: af:c7:6c:0e:83:c3:be:45:0c:f8:f8:08:1e:d6:09: ed:d0:63:0b:eb:f2:65:72:a9:c0:3b:37:7f:9c:a5: 5f:b5:70:66:eb:4a:4d:7e:93:49:dd:2e:2f:ec:7a: 5a:3d:de:d3:0b:90:fb:27:0f:ed:eb:4f:5b:ba:6a: 03:ba:2c:73:e4:36:4f:14:dc:43:cb:57:7f:de:74: 67:0a:99:c7:db:a7:1b:2d:7f:2f:97:36:73:0f:80: 89:f0:41:2d:4c:d8:97:3f:c1:e1:f5:aa:56:1c:2f: ee:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DD:88:70:A1:D6:C0:3E:72:3E:F5:1C:1F:21:37:33:22:DE:32:30 X509v3 Authority Key Identifier: keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a9:b9:0a:49:dc:ed:cf:b4:8c:b1:b8:30:0a:2b:ba:d2:ad: 22:a5:8f:1b:ed:1a:a3:dd:99:24:d0:98:09:de:46:83:90:7d: f0:45:0f:8e:26:db:8d:1a:f1:38:1e:df:0e:90:6d:9f:6e:5a: 61:8c:0b:18:ee:13:06:ca:d6:a6:10:c1:ac:8a:3a:79:43:cb: 42:56:94:5d:42:7c:12:04:cb:86:24:c2:af:cf:be:c4:e9:7b: 9e:91:59:87:8d:16:ed:d7:b9:ac:27:3e:3c:43:f2:c1:89:a5: 37:1a:7f:21:4f:00:a7:16:93:f3:5b:6b:e0:a0:76:f3:74:4e: 0f:b7:38:69:f4:6e:88:15:92:da:65:4b:ee:25:ab:96:14:5c: cf:ed:a3:51:85:e3:1c:ec:4c:9a:dd:d0:a9:db:e9:a1:ba:35: e2:16:0a:e4:ed:92:e0:ce:fa:43:55:03:31:08:68:45:99:49: c9:7b:c9:7e:e4:ec:3b:88:9e:12:88:82:00:ce:0a:f3:4e:84: a2:30:02:33:cc:d6:1f:a0:0d:f5:33:c9:31:dc:4c:77:df:8e: 0c:5f:c9:dc:5f:21:a8:ef:cc:e7:d7:78:07:fc:3a:db:2b:0c: 50:1c:c6:38:d8:0b:8f:d9:c3:bf:0b:12:1a:09:4d:7f:93:0f: 97:6d:6a:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBERUMxMTAvBgNVBAUTKEI4RDkzNTA2QzhBNzkxRDFGOUZGQTVCNjdDMzg4MTZE REMwM0VFNkIwHhcNMjQwNTA0MjExMTE5WhcNMjQwNTExMjExMTE5WjAYMRYwFAYD VQQDEw02NjM2YTQ3Ny0yMWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxU7tn01CJ+EO6TcLVhH2Sfva+PCY1BTxG8f44n+kTDX1o0HCmHJT5VGsSAV EijDCq7ip6o1ntenmhfHprjRI2l5ECCysb1aCEKTGJTm2ylBha76K2Q628UMQ62B /mC+diLXsIFVOSW8Nhf+yBxr//PSnayjq2meh6hJ6WlF5SnIVDwfR0HuDtJVDpoZ kk3JBKgat1evx2wOg8O+RQz4+Age1gnt0GML6/JlcqnAOzd/nKVftXBm60pNfpNJ 3S4v7HpaPd7TC5D7Jw/t609bumoDuixz5DZPFNxDy1d/3nRnCpnH26cbLX8vlzZz D4CJ8EEtTNiXP8Hh9apWHC/uRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHdiHCh 1sA+cj71HB8hNzMi3jIwMB8GA1UdIwQYMBaAFLjZNQbIp5HR+f+ltnw4gW3cA+5r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMERFQy8xNzJEMEEyNDZC RUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtkSDVfNlcyZkRpQmJkd0Q3 bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VOazFCc2lua2RINV82VzJmRGlCYmR3RDdtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MERFQy8xNzJEMEEyNDZCRUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtk SDVfNlcyZkRpQmJkd0Q3bXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuqbkKSdztz7SMsbgwCiu60q0ipY8b7Rqj3Zkk0JgJ3kaDkH3wRQ+O JtuNGvE4Ht8OkG2fblphjAsY7hMGytamEMGsijp5Q8tCVpRdQnwSBMuGJMKvz77E 6XuekVmHjRbt17msJz48Q/LBiaU3Gn8hTwCnFpPzW2vgoHbzdE4Ptzhp9G6IFZLa ZUvuJauWFFzP7aNRheMc7Eya3dCp2+mhujXiFgrk7ZLgzvpDVQMxCGhFmUnJe8l+ 5Ow7iJ4SiIIAzgrzToSiMAIzzNYfoA31M8kx3Ex3344MX8ncXyGo78zn13gH/Drb KwxQHMY42AuP2cO/CxIaCU1/kw+XbWqs -----END CERTIFICATE-----Generated at Sat May 4 22:06:51 2024 by rpki-client on console-ams.rpki-client.org