$ rpki-client -vvf rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft File: U1n0WpMqsOo84GFn1fzHBltN2IU.mft (raw, json) Hash identifier: bubRcyDdYlwjG31eDb+MYeGRFGU/HTdHrBzy5WUuouM= Subject key identifier: 94:5A:C8:48:7E:D4:2D:4A:7C:DA:93:E5:D7:97:C8:2E:19:4C:AD:47 Authority key identifier: 53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85 Certificate issuer: /CN=A911367F/serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885 Certificate serial: 0B8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft Manifest number: 0B82 Signing time: Tue 30 Apr 2024 19:39:53 +0000 Manifest this update: Tue 30 Apr 2024 19:39:52 +0000 Manifest next update: Tue 07 May 2024 19:39:52 +0000 Files and hashes: 1: U1n0WpMqsOo84GFn1fzHBltN2IU.crl (hash: G5Uh+9MFYthrNciPga4+LKZWcVB36XK33sLRBBCeIFg=) 2: 6751E26C415511ECA2FD715CC4F9AE02.roa (hash: a/sC7ETDIVIboPEKOWwxdZFEr4Jd7KezTCrJldPHdYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2957 (0xb8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911367F/serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885 Validity Not Before: Apr 30 19:39:52 2024 GMT Not After : May 7 19:39:52 2024 GMT Subject: CN=66314909-570c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:e5:f2:99:4b:1f:71:5f:10:7a:1e:54:1a: 21:20:60:09:7d:8d:35:63:35:1d:ae:53:74:84:29: 9b:4f:f3:ed:17:87:10:af:98:0c:54:94:53:8a:96: 49:e5:07:3f:e1:7f:ce:e4:de:1a:5b:f2:ee:c1:80: ce:f5:8d:52:09:f6:7e:2e:5e:56:bb:ed:fe:0e:b6: 12:de:3c:9d:f1:20:33:04:51:e7:2f:3a:53:80:cc: 6e:2e:d0:29:e2:9c:8d:49:68:fe:c5:7f:71:9f:89: 4e:8e:23:4e:0d:20:47:29:12:76:44:d0:2e:7e:23: 3f:88:fb:5b:19:25:13:f5:c1:cb:1c:83:aa:41:7f: a2:c8:62:c1:c7:0d:60:74:d1:01:ee:4b:29:4b:b1: 3d:0e:c3:32:2f:d6:3a:bd:cf:6b:15:ca:e2:74:58: f4:ef:9d:03:04:e5:be:d4:26:3e:bc:0d:14:bd:43: 01:40:0f:0a:ba:17:25:eb:b6:58:a2:f7:c1:4d:df: f7:b2:ac:71:08:5e:65:83:67:fe:b8:91:0e:df:b7: f8:a9:4c:0b:23:b4:89:f3:1b:5d:33:6e:58:fd:01: c4:09:83:1a:5e:72:e6:a8:6b:41:06:01:33:e1:04: 47:f0:24:5b:dc:7c:6e:aa:61:42:b4:8f:6c:18:21: 52:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5A:C8:48:7E:D4:2D:4A:7C:DA:93:E5:D7:97:C8:2E:19:4C:AD:47 X509v3 Authority Key Identifier: keyid:53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:41:15:07:dc:ee:0d:39:d2:99:48:f8:fb:01:82:29:e1:b8: f3:40:33:3b:96:a8:69:49:51:2a:62:dc:8b:0b:a1:48:ba:b3: 9d:ea:2a:9e:63:14:50:bf:e9:20:1e:71:a0:b8:d8:81:ed:8a: 59:18:aa:73:6e:21:61:a5:96:34:a7:2c:17:e8:e0:80:85:bd: 8f:5a:a0:cc:0b:0c:68:31:3d:2a:07:33:d3:eb:2c:23:4d:c4: 62:d7:87:b3:7a:2b:95:1f:d3:e9:69:4e:c9:c9:5f:04:5e:2b: 18:b0:dc:c9:70:98:09:c2:c8:e1:c9:78:14:d6:78:5c:13:61: 97:93:98:76:8f:35:e5:20:78:3f:25:77:bd:bb:1c:ab:44:94: da:62:20:4b:e9:65:ec:05:a0:37:1a:42:b2:8e:30:d9:c3:68: 9c:29:10:16:8d:6c:58:55:3c:9c:24:05:b8:87:41:1b:f6:40: d3:8d:76:ba:d0:8c:bc:a2:5a:8b:24:5e:13:70:d5:6f:47:83: 20:c6:e3:a2:34:9e:16:b1:f7:5d:82:d3:da:d9:a2:ce:af:68: bc:55:b9:b2:ff:1b:da:38:e3:ea:f0:e7:5b:c7:a8:83:0b:5f: d6:60:24:d7:4a:7b:0c:2f:60:62:c3:43:a8:0a:16:37:4a:70: dc:bf:3a:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2N0YxMTAvBgNVBAUTKDUzNTlGNDVBOTMyQUIwRUEzQ0UwNjE2N0Q1RkNDNzA2 NUI0REQ4ODUwHhcNMjQwNDMwMTkzOTUyWhcNMjQwNTA3MTkzOTUyWjAYMRYwFAYD VQQDEw02NjMxNDkwOS01NzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXXl8plLH3FfEHoeVBohIGAJfY01YzUdrlN0hCmbT/PtF4cQr5gMVJRTipZJ 5Qc/4X/O5N4aW/LuwYDO9Y1SCfZ+Ll5Wu+3+DrYS3jyd8SAzBFHnLzpTgMxuLtAp 4pyNSWj+xX9xn4lOjiNODSBHKRJ2RNAufiM/iPtbGSUT9cHLHIOqQX+iyGLBxw1g dNEB7kspS7E9DsMyL9Y6vc9rFcridFj0750DBOW+1CY+vA0UvUMBQA8Kuhcl67ZY ovfBTd/3sqxxCF5lg2f+uJEO37f4qUwLI7SJ8xtdM25Y/QHECYMaXnLmqGtBBgEz 4QRH8CRb3HxuqmFCtI9sGCFSwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRayEh+ 1C1KfNqT5deXyC4ZTK1HMB8GA1UdIwQYMBaAFFNZ9FqTKrDqPOBhZ9X8xwZbTdiF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY3Ri83QTk0RDEyODA0 NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNPbzg0R0ZuMWZ6SEJsdE4y SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UxbjBXcE1xc09vODRHRm4xZnpIQmx0TjJJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzY3Ri83QTk0RDEyODA0NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNP bzg0R0ZuMWZ6SEJsdE4ySVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADQRUH3O4NOdKZSPj7AYIp4bjzQDM7lqhpSVEqYtyLC6FIurOd6iqe YxRQv+kgHnGguNiB7YpZGKpzbiFhpZY0pywX6OCAhb2PWqDMCwxoMT0qBzPT6ywj TcRi14ezeiuVH9PpaU7JyV8EXisYsNzJcJgJwsjhyXgU1nhcE2GXk5h2jzXlIHg/ JXe9uxyrRJTaYiBL6WXsBaA3GkKyjjDZw2icKRAWjWxYVTycJAW4h0Eb9kDTjXa6 0Iy8olqLJF4TcNVvR4MgxuOiNJ4WsfddgtPa2aLOr2i8Vbmy/xvaOOPq8Odbx6iD C1/WYCTXSnsML2Biw0OoChY3SnDcvzpM -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:49 2024 by rpki-client on console-ams.rpki-client.org