$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft File: UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json) Hash identifier: 8WcBCv0+Fl30roqG9qA6pPiqZFGglMbiHKYlcKcW8WY= Subject key identifier: A8:11:43:3C:E2:E3:5B:5C:42:ED:A5:48:28:DB:1D:FD:8A:B4:88:27 Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft Manifest number: 0148 Signing time: Sat 25 May 2024 05:09:36 +0000 Manifest this update: Sat 25 May 2024 05:09:35 +0000 Manifest next update: Sat 01 Jun 2024 05:09:35 +0000 Files and hashes: 1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: Y0hAdnyxccQkuYoNA6d4zO+Ow+C26t9Gn3rqnmYM7Lg=) 2: C512161E3AF711ED8065EF72C4F9AE02.roa (hash: CLIH7di2J/3T/WykzxRsgyDYQ9PowqJrFEJoM7K6CJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Validity Not Before: May 25 05:09:35 2024 GMT Not After : Jun 1 05:09:35 2024 GMT Subject: CN=66517290-69a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:83:f2:fd:7b:0d:17:d8:6d:64:a9:be:62:9b: a4:40:fa:99:99:93:a6:6e:3d:2d:3c:e1:07:5c:7e: 57:ea:30:2e:b8:1a:51:4d:9f:2c:9b:80:27:cd:a2: 51:78:4f:df:4c:25:dd:1f:e5:be:88:53:f4:80:d8: 7e:da:1d:a9:13:3c:ca:9b:39:b9:7f:2a:cf:eb:cf: 5d:a2:5a:90:5a:3e:08:6a:ec:0f:4e:26:02:9c:c1: 14:59:96:08:2c:72:ff:ef:16:b8:b7:86:1c:f9:96: 04:08:fa:2f:4f:62:c7:d2:db:4e:82:57:f0:0a:ee: 4a:7a:ee:d9:1b:9a:9c:e2:16:91:57:a9:9f:e7:81: 8f:bb:2f:83:c5:6b:28:de:fd:a6:2f:80:c1:c5:18: 10:20:c9:27:56:fd:0c:79:ad:2d:95:7b:e8:d0:1b: b9:8c:79:5d:fe:01:b0:a7:26:c4:55:49:e7:7d:4a: d5:e1:ab:dc:2d:68:f0:d1:09:05:fe:ff:8e:7d:b2: c5:6f:6b:cb:7f:85:ea:c6:45:aa:55:a4:d6:3c:a2: 02:ab:8f:cb:ca:6d:df:5e:95:53:0b:1f:99:2f:db: 1f:73:ea:de:14:ff:39:01:80:e6:75:7f:7d:62:ca: 0d:28:a2:41:07:18:a9:cc:4d:d6:d1:96:c0:78:84: 13:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:11:43:3C:E2:E3:5B:5C:42:ED:A5:48:28:DB:1D:FD:8A:B4:88:27 X509v3 Authority Key Identifier: keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b1:bd:a0:d4:e6:b0:7c:6e:90:b7:3e:43:4d:2b:fc:d7:32: 69:6c:ec:80:38:06:97:8b:38:9b:39:9f:b2:32:52:1a:e7:32: 03:11:dc:97:77:71:5a:e9:21:55:6f:97:9c:30:5e:45:46:1b: 3e:29:d8:5e:1d:94:f9:15:ef:2d:73:90:a7:00:73:c6:97:ca: a1:93:33:c3:37:b0:d6:f2:19:6d:c3:51:4e:43:63:79:7d:f9: 45:02:93:f8:13:17:e0:da:61:74:c4:b2:e8:c0:e7:f5:77:70: 17:45:66:21:34:6e:ef:59:23:90:cf:b4:61:1f:8c:ca:9c:72: 82:84:3c:ae:05:ef:62:ad:b6:1c:e6:9b:3e:cf:6b:87:80:2c: 15:ee:e7:dd:01:15:c2:d1:e0:e2:10:34:c8:f8:b9:ab:aa:8d: 01:3d:c7:f3:f1:54:94:6e:58:9a:5a:9a:06:22:d6:1e:6b:38: 63:43:85:61:f2:ce:4b:0e:b0:16:8c:b5:7b:00:7f:55:be:47: fe:e1:71:d8:52:f2:82:ee:0e:52:cd:d4:6a:20:40:af:11:a3: 1c:f3:cd:e7:ed:2b:cc:7a:8c:3d:79:54:f1:a4:34:33:76:02: 21:4b:fd:17:6d:8d:32:c1:5b:50:90:43:25:c2:1b:13:ab:ac: e0:b3:90:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBRDYxMTAvBgNVBAUTKDUzMzJGOUFGMzA1MkNGM0Y4NUVBQkREMEFBRDY4MTUy Mzk1MkU2NTYwHhcNMjQwNTI1MDUwOTM1WhcNMjQwNjAxMDUwOTM1WjAYMRYwFAYD VQQDEw02NjUxNzI5MC02OWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIPy/XsNF9htZKm+YpukQPqZmZOmbj0tPOEHXH5X6jAuuBpRTZ8sm4AnzaJR eE/fTCXdH+W+iFP0gNh+2h2pEzzKmzm5fyrP689dolqQWj4IauwPTiYCnMEUWZYI LHL/7xa4t4Yc+ZYECPovT2LH0ttOglfwCu5Keu7ZG5qc4haRV6mf54GPuy+DxWso 3v2mL4DBxRgQIMknVv0Mea0tlXvo0Bu5jHld/gGwpybEVUnnfUrV4avcLWjw0QkF /v+OfbLFb2vLf4XqxkWqVaTWPKICq4/Lym3fXpVTCx+ZL9sfc+reFP85AYDmdX99 YsoNKKJBBxipzE3W0ZbAeIQTFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgRQzzi 41tcQu2lSCjbHf2KtIgnMB8GA1UdIwQYMBaAFFMy+a8wUs8/heq90KrWgVI5UuZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkFENi9ENjRGNEU5QzNB RjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6LUY2cjNRcXRhQlVqbFM1 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6TDVyekJTenotRjZyM1FxdGFCVWpsUzVsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkFENi9ENjRGNEU5QzNBRjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6 LUY2cjNRcXRhQlVqbFM1bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLsb2g1OawfG6Qtz5DTSv81zJpbOyAOAaXizibOZ+yMlIa5zIDEdyX d3Fa6SFVb5ecMF5FRhs+KdheHZT5Fe8tc5CnAHPGl8qhkzPDN7DW8hltw1FOQ2N5 fflFApP4Exfg2mF0xLLowOf1d3AXRWYhNG7vWSOQz7RhH4zKnHKChDyuBe9irbYc 5ps+z2uHgCwV7ufdARXC0eDiEDTI+Lmrqo0BPcfz8VSUbliaWpoGItYeazhjQ4Vh 8s5LDrAWjLV7AH9Vvkf+4XHYUvKC7g5SzdRqIECvEaMc883n7SvMeow9eVTxpDQz dgIhS/0XbY0ywVtQkEMlwhsTq6zgs5DP -----END CERTIFICATE-----Generated at Sat May 25 06:05:05 2024 by rpki-client on console-ams.rpki-client.org