$ rpki-client -vvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft File: aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json) Hash identifier: NP9RaAV5eXKw/iqbNEB7oCAvPbT1dcp2wtdraTMYD6M= Subject key identifier: 3A:22:79:13:11:1B:0F:D7:2C:F6:2C:AA:B4:93:2D:20:5D:D1:AC:27 Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 Certificate issuer: /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Certificate serial: 0970 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft Manifest number: 095F Signing time: Thu 02 May 2024 21:11:24 +0000 Manifest this update: Thu 02 May 2024 21:11:24 +0000 Manifest next update: Thu 09 May 2024 21:11:24 +0000 Files and hashes: 1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: 5aDuK21HcZNJ7R3CadDkHqnlsxVYOvIdHaLcpzwM14o=) 2: EA7A8118DCCC11ECAFD2715CC4F9AE02.roa (hash: jYfYvo6c9Uctow0tEjbRvX1Vhcvx4MlD93YOip7bp2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2416 (0x970) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Validity Not Before: May 2 21:11:24 2024 GMT Not After : May 9 21:11:24 2024 GMT Subject: CN=6634017c-6a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:09:ff:41:97:b3:0c:0c:fc:f0:ac:d5:8e:a7: 14:47:78:99:9f:f9:0c:82:b5:ee:5d:34:35:62:ad: 18:2c:af:c0:63:c2:cc:4f:45:ae:b7:56:ad:cf:d2: 99:25:12:c5:0d:7a:af:9a:ea:fb:cb:3e:ee:ef:21: db:ee:9c:35:83:cc:c0:5f:db:8b:ed:19:47:c2:8f: 5e:40:ca:7e:02:4c:59:98:ff:17:6d:9b:b3:bb:15: 5f:b7:5b:75:d8:6b:ed:34:92:f1:2a:87:39:21:17: 34:35:b1:13:60:20:ab:83:6a:14:86:25:b8:f6:b9: da:64:f1:a6:28:ea:f8:15:d2:32:3a:9b:32:60:2e: 1f:df:56:56:82:43:4c:10:b7:0d:28:38:23:c0:d0: 7e:d8:5e:56:54:ff:b5:42:88:4a:54:0a:88:b6:d4: 29:bb:10:82:ab:d1:f2:c6:9d:9a:26:69:11:3b:7d: 38:c5:e0:31:84:f9:95:16:34:74:99:f2:07:dd:6a: 88:08:23:a0:ff:70:dd:42:0a:2f:57:c1:cb:77:61: 99:df:d4:ef:fa:da:14:6c:21:a6:30:da:43:bb:bf: c1:57:b4:e1:a8:8a:5e:30:3d:31:52:59:35:f5:38: 60:5d:4c:9a:d6:0a:66:c7:92:8e:f2:7d:72:42:ca: 35:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:22:79:13:11:1B:0F:D7:2C:F6:2C:AA:B4:93:2D:20:5D:D1:AC:27 X509v3 Authority Key Identifier: keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:a7:25:a3:2d:7f:29:26:7e:01:42:81:37:38:82:e6:a1:be: 0d:d8:79:d2:f7:b1:b2:e3:fe:9f:c4:b3:a2:09:17:84:19:ff: fe:5f:bd:4c:20:5a:cb:d6:13:1f:6e:ff:4f:77:2e:12:81:1f: 47:d5:55:4d:f4:10:73:fe:ed:a7:28:71:4f:c9:a8:9e:16:30: 54:aa:b5:2d:ce:10:af:b8:83:b6:cf:3e:2b:c7:73:ed:fa:db: 33:21:5e:12:37:d8:89:5a:e1:b2:75:07:2f:bc:9b:93:15:4f: c7:4d:09:61:da:f9:48:7d:89:6a:9f:b6:f9:a5:8a:34:be:38: e0:00:ea:19:de:36:48:25:f4:6a:78:34:b6:5f:3a:4f:d7:9c: a8:45:32:3e:dc:53:2b:e2:e2:61:a3:3b:7e:e8:42:54:10:17: 9f:94:80:2e:2e:d5:87:bc:1c:f3:07:15:63:57:52:20:b7:2e: c3:03:9d:e1:fe:56:82:c2:bc:94:b9:c1:83:55:ae:98:d1:99: 68:f3:b5:aa:66:26:3f:f1:d7:73:69:3a:fc:a9:0d:75:b0:fb: 89:41:9f:65:6e:33:19:26:4a:f8:f0:a0:ef:09:2d:a8:78:a6: 5f:2b:44:7d:c8:c6:c6:cf:9a:01:c3:28:ff:37:be:74:cf:73: b6:e6:9d:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RkMxMTAvBgNVBAUTKDY5NDA4RjZCMUNBMDI4MTY2ODNDQ0U0QzA4RTAwNDkz MjUxOTQ0QjIwHhcNMjQwNTAyMjExMTI0WhcNMjQwNTA5MjExMTI0WjAYMRYwFAYD VQQDEw02NjM0MDE3Yy02YThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswn/QZezDAz88KzVjqcUR3iZn/kMgrXuXTQ1Yq0YLK/AY8LMT0Wut1atz9KZ JRLFDXqvmur7yz7u7yHb7pw1g8zAX9uL7RlHwo9eQMp+AkxZmP8XbZuzuxVft1t1 2GvtNJLxKoc5IRc0NbETYCCrg2oUhiW49rnaZPGmKOr4FdIyOpsyYC4f31ZWgkNM ELcNKDgjwNB+2F5WVP+1QohKVAqIttQpuxCCq9Hyxp2aJmkRO304xeAxhPmVFjR0 mfIH3WqICCOg/3DdQgovV8HLd2GZ39Tv+toUbCGmMNpDu7/BV7ThqIpeMD0xUlk1 9ThgXUya1gpmx5KO8n1yQso1cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoieRMR Gw/XLPYsqrSTLSBd0awnMB8GA1UdIwQYMBaAFGlAj2scoCgWaDzOTAjgBJMlGUSy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZGQy9BQjFGNEVDQTcy OUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tCWm9QTTVNQ09BRWt5VVpS TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FVQ1BheHlnS0Jab1BNNU1DT0FFa3lVWlJMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZGQy9BQjFGNEVDQTcyOUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tC Wm9QTTVNQ09BRWt5VVpSTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGpyWjLX8pJn4BQoE3OILmob4N2HnS97Gy4/6fxLOiCReEGf/+X71M IFrL1hMfbv9Pdy4SgR9H1VVN9BBz/u2nKHFPyaieFjBUqrUtzhCvuIO2zz4rx3Pt +tszIV4SN9iJWuGydQcvvJuTFU/HTQlh2vlIfYlqn7b5pYo0vjjgAOoZ3jZIJfRq eDS2XzpP15yoRTI+3FMr4uJhozt+6EJUEBeflIAuLtWHvBzzBxVjV1Igty7DA53h /laCwryUucGDVa6Y0Zlo87WqZiY/8ddzaTr8qQ11sPuJQZ9lbjMZJkr48KDvCS2o eKZfK0R9yMbGz5oBwyj/N750z3O25p01 -----END CERTIFICATE-----Generated at Thu May 2 22:13:15 2024 by rpki-client on console-fra.rpki-client.org