$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft File: uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json) Hash identifier: TgJXr/8iPb/Tw3IrdkPWuDnjdKW32aVtjUn+dao6y/o= Subject key identifier: 6D:78:49:70:D9:3D:E9:97:0D:03:69:B5:1C:45:06:7E:FB:22:09:16 Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 Certificate issuer: /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Certificate serial: 0F20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft Manifest number: 176C Signing time: Sat 04 May 2024 18:22:28 +0000 Manifest this update: Sat 04 May 2024 18:22:28 +0000 Manifest next update: Sat 11 May 2024 18:22:28 +0000 Files and hashes: 1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: 5uf9XyLPoJdzCvui6BzS5D9ZVqK5XDNkZ7KXaHmUX6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3872 (0xf20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Validity Not Before: May 4 18:22:28 2024 GMT Not After : May 11 18:22:28 2024 GMT Subject: CN=66367ce4-1ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bc:89:ee:d4:8d:02:d6:a2:dc:39:26:84:6a: d0:f2:ab:2f:8a:3e:b6:ba:df:13:ac:21:46:52:a8: 0a:91:2b:cd:1a:e8:2a:bd:aa:ce:f9:0a:b6:7a:06: c4:17:e4:25:db:b9:e3:b1:50:78:fc:52:3a:75:1a: 91:b0:2d:db:12:f9:45:45:50:9b:8e:b2:52:5d:7a: fd:e7:d6:3e:a2:49:d8:13:d1:6c:19:3d:4e:df:ad: e2:96:42:f4:c9:13:a2:4f:99:49:ed:6c:70:f2:90: ab:e5:32:31:34:04:a1:f5:a5:0f:36:5c:e5:48:f2: 26:bb:5f:79:c2:b9:90:58:a6:58:f9:c3:58:8b:5b: 8f:51:b8:05:4f:be:e5:25:cf:a2:d1:24:ab:3d:e6: 4a:01:67:06:f0:e7:bd:a7:e4:6a:82:39:0f:56:46: d2:e6:f0:11:92:67:31:d0:da:3c:6f:75:99:af:e6: 8c:1b:ad:7d:1b:1f:11:82:b3:46:ee:d9:df:f4:a0: 0b:11:ee:71:0d:7e:86:b9:9c:7e:1b:6d:3f:e2:e6: 42:43:60:25:3c:32:35:6a:a3:f3:8f:07:5a:cc:b3: 37:aa:11:9c:3b:07:2f:fd:17:a7:dd:08:d5:90:9d: e4:80:b8:6d:3f:3f:14:21:52:0b:cd:aa:20:ad:52: d9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:78:49:70:D9:3D:E9:97:0D:03:69:B5:1C:45:06:7E:FB:22:09:16 X509v3 Authority Key Identifier: keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:a0:40:ab:31:c5:42:3a:34:c6:9c:5e:be:f7:54:1e:e2:5e: 93:60:9f:bd:61:40:78:b5:9c:60:3d:db:0d:af:04:8e:a9:07: 4a:8c:97:1f:1f:db:e8:e4:30:a6:f6:7d:52:21:b0:62:4e:63: 99:bc:a3:6b:d5:2f:82:8c:03:4a:4f:3a:8d:98:53:72:6b:7d: aa:43:4a:f9:8d:11:f7:98:43:d1:e3:a5:09:01:c1:f9:66:50: 06:1e:ca:e3:93:0b:99:70:cb:ab:19:ff:35:98:bf:3c:c5:80: 0b:85:8a:88:a2:46:30:d9:80:9b:fc:8d:37:cb:07:75:a5:77: 1d:99:9d:60:ca:24:8d:4d:99:d9:2d:83:26:e8:02:f6:7a:d2: 6c:c7:6f:dd:bb:84:5f:3b:62:af:23:20:b3:ab:82:f2:9a:4d: 26:e4:8a:3f:48:6e:b5:e0:bf:db:1d:fb:f6:32:16:88:af:b4: da:aa:79:cb:e3:60:b4:44:6d:2b:79:14:d7:bf:50:6e:94:2a: 74:bd:fb:31:3c:22:34:64:f8:68:c9:4a:61:5c:55:b7:9b:b0: 9c:cd:d0:40:ab:51:10:8c:09:3f:6d:b9:1a:f0:0f:43:e5:1b: 03:11:b2:07:fd:6a:00:53:3b:2b:8d:fa:d3:b3:e0:c5:96:19: 97:39:d7:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF Q0IxMUZERDEwHhcNMjQwNTA0MTgyMjI4WhcNMjQwNTExMTgyMjI4WjAYMRYwFAYD VQQDEw02NjM2N2NlNC0xY2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ryJ7tSNAtai3DkmhGrQ8qsvij62ut8TrCFGUqgKkSvNGugqvarO+Qq2egbE F+Ql27njsVB4/FI6dRqRsC3bEvlFRVCbjrJSXXr959Y+oknYE9FsGT1O363ilkL0 yROiT5lJ7Wxw8pCr5TIxNASh9aUPNlzlSPImu195wrmQWKZY+cNYi1uPUbgFT77l Jc+i0SSrPeZKAWcG8Oe9p+RqgjkPVkbS5vARkmcx0No8b3WZr+aMG619Gx8RgrNG 7tnf9KALEe5xDX6GuZx+G20/4uZCQ2AlPDI1aqPzjwdazLM3qhGcOwcv/Ren3QjV kJ3kgLhtPz8UIVILzaogrVLZWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG14SXDZ PemXDQNptRxFBn77IgkWMB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj dG14eXU1X0tjNzdzc1JfZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWoECrMcVCOjTGnF6+91Qe4l6TYJ+9YUB4tZxgPdsNrwSOqQdKjJcf H9vo5DCm9n1SIbBiTmOZvKNr1S+CjANKTzqNmFNya32qQ0r5jRH3mEPR46UJAcH5 ZlAGHsrjkwuZcMurGf81mL88xYALhYqIokYw2YCb/I03ywd1pXcdmZ1gyiSNTZnZ LYMm6AL2etJsx2/du4RfO2KvIyCzq4Lymk0m5Io/SG614L/bHfv2MhaIr7TaqnnL 42C0RG0reRTXv1BulCp0vfsxPCI0ZPhoyUphXFW3m7CczdBAq1EQjAk/bbka8A9D 5RsDEbIH/WoAUzsrjfrTs+DFlhmXOdeM -----END CERTIFICATE-----Generated at Sat May 4 20:37:05 2024 by rpki-client on console-fra.rpki-client.org