$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC74/F05DC05CEF2911EDBD0C1429C4F9AE02/UT_g6iSLXjH7dHUyPkOVlM8Vaak.mft File: UT_g6iSLXjH7dHUyPkOVlM8Vaak.mft (raw, json) Hash identifier: gTb36HU8+5VjMAUaoNcCQu7Js29fHukiDgguxGXcC50= Subject key identifier: 58:A1:04:77:51:4D:5E:AD:13:B5:5E:9A:B2:31:81:FC:88:61:3D:1F Authority key identifier: 51:3F:E0:EA:24:8B:5E:31:FB:74:75:32:3E:43:95:94:CF:15:69:A9 Certificate issuer: /CN=A912AC74/serialNumber=513FE0EA248B5E31FB7475323E439594CF1569A9 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT_g6iSLXjH7dHUyPkOVlM8Vaak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC74/F05DC05CEF2911EDBD0C1429C4F9AE02/UT_g6iSLXjH7dHUyPkOVlM8Vaak.mft Manifest number: BA Signing time: Wed 01 May 2024 06:46:14 +0000 Manifest this update: Wed 01 May 2024 06:46:13 +0000 Manifest next update: Wed 08 May 2024 06:46:13 +0000 Files and hashes: 1: UT_g6iSLXjH7dHUyPkOVlM8Vaak.crl (hash: lsI9J0t3Sx0sKl8xSfEwsvUqyJ1nquVhtFvL1iuQJSk=) 2: 0743ABACEF2E11ED84156122C4F9AE02.roa (hash: fIftzQAjdD18Z5q/NSke5TzCF1BvaO6fgVjFmUu5rWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC74/F05DC05CEF2911EDBD0C1429C4F9AE02/UT_g6iSLXjH7dHUyPkOVlM8Vaak.crl rsync://rpki.apnic.net/member_repository/A912AC74/F05DC05CEF2911EDBD0C1429C4F9AE02/UT_g6iSLXjH7dHUyPkOVlM8Vaak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT_g6iSLXjH7dHUyPkOVlM8Vaak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC74/serialNumber=513FE0EA248B5E31FB7475323E439594CF1569A9 Validity Not Before: May 1 06:46:13 2024 GMT Not After : May 8 06:46:13 2024 GMT Subject: CN=6631e536-359d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:a7:c3:b6:2c:4e:78:69:2b:e9:c9:64:6e: 80:a6:b2:83:4d:5e:d7:04:c3:1e:a2:55:99:a6:93: f5:17:79:51:d2:84:93:ed:7b:68:dd:51:d1:68:cc: d3:28:c4:ae:91:29:a3:da:cb:5c:f9:e8:59:d7:53: e8:c9:46:77:32:fb:3d:ef:31:a4:8a:55:eb:fa:0f: 9b:58:22:4a:84:70:83:e4:2a:d9:43:66:a3:c8:da: 57:b9:fb:48:81:e8:a5:4e:8a:05:a4:c8:e9:eb:37: f1:74:1f:80:4b:46:5e:4a:a4:f1:7c:ce:7c:73:fa: 65:79:81:c6:3b:05:85:b7:a7:b1:47:bc:7b:c3:02: 44:9b:d6:14:7b:1c:1d:8a:c7:36:95:61:a8:22:56: 7b:90:18:ac:74:56:46:31:3f:c7:ef:ba:ca:51:ca: 2f:ba:6e:15:56:67:49:c1:a7:00:cc:39:33:45:c1: b2:d8:02:a7:01:b4:e2:cd:30:fa:73:a4:75:b9:45: 72:5c:2a:56:8e:79:f5:83:76:39:63:bf:69:e5:43: cc:3c:5a:d8:25:bc:30:57:c1:71:98:2b:ae:1f:b0: 87:50:96:44:ce:0f:ec:b9:af:1d:77:47:a3:b3:a1: 9e:b4:d0:70:6c:46:77:20:a0:45:03:d5:4a:08:9e: e0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A1:04:77:51:4D:5E:AD:13:B5:5E:9A:B2:31:81:FC:88:61:3D:1F X509v3 Authority Key Identifier: keyid:51:3F:E0:EA:24:8B:5E:31:FB:74:75:32:3E:43:95:94:CF:15:69:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC74/F05DC05CEF2911EDBD0C1429C4F9AE02/UT_g6iSLXjH7dHUyPkOVlM8Vaak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT_g6iSLXjH7dHUyPkOVlM8Vaak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC74/F05DC05CEF2911EDBD0C1429C4F9AE02/UT_g6iSLXjH7dHUyPkOVlM8Vaak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:db:4a:9e:bb:a5:43:b5:4f:3e:c3:4e:b9:2d:c1:f9:61:3d: 01:cc:9a:a9:11:61:eb:39:c7:8b:a3:f2:e1:c6:90:b8:08:d6: 05:eb:49:40:88:35:2b:8f:85:cb:7b:9a:c4:8f:8e:bf:33:c3: ca:59:e1:0a:83:48:b3:f2:20:89:c2:2a:86:55:b8:78:2a:eb: d9:94:2d:a8:7b:1a:15:2a:48:eb:dd:13:fe:03:68:52:6b:00: 47:d9:3e:7c:14:8a:df:22:c6:49:46:48:e6:06:94:b3:b1:19: 4a:66:e2:d9:68:b4:39:44:9e:46:63:45:99:84:95:fd:0b:00: 08:cc:8a:11:5f:ab:04:07:d6:7e:1d:0e:62:20:83:d0:90:a5: c2:4e:5b:cc:b1:ca:ef:d1:c1:8c:de:a9:2f:f0:a9:b3:eb:8a: dd:98:31:3d:44:78:fb:b0:30:ff:4c:cf:67:8b:e2:ec:64:33: f8:73:27:07:a3:f7:95:e1:42:36:be:2c:5d:6d:60:b7:a8:1f: f3:99:1d:56:24:f9:62:f3:1e:9e:ee:e5:de:03:df:3e:66:ab: ec:e9:07:96:d1:a8:f2:58:4f:f3:b5:73:8b:26:6f:15:9b:74: 53:5e:04:cf:1c:a9:9f:78:57:d6:d1:7e:71:3d:38:e6:0c:03: 78:9c:8f:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDNzQxMTAvBgNVBAUTKDUxM0ZFMEVBMjQ4QjVFMzFGQjc0NzUzMjNFNDM5NTk0 Q0YxNTY5QTkwHhcNMjQwNTAxMDY0NjEzWhcNMjQwNTA4MDY0NjEzWjAYMRYwFAYD VQQDEw02NjMxZTUzNi0zNTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1unw7YsTnhpK+nJZG6AprKDTV7XBMMeolWZppP1F3lR0oST7Xto3VHRaMzT KMSukSmj2stc+ehZ11PoyUZ3Mvs97zGkilXr+g+bWCJKhHCD5CrZQ2ajyNpXuftI geilTooFpMjp6zfxdB+AS0ZeSqTxfM58c/pleYHGOwWFt6exR7x7wwJEm9YUexwd isc2lWGoIlZ7kBisdFZGMT/H77rKUcovum4VVmdJwacAzDkzRcGy2AKnAbTizTD6 c6R1uUVyXCpWjnn1g3Y5Y79p5UPMPFrYJbwwV8FxmCuuH7CHUJZEzg/sua8dd0ej s6GetNBwbEZ3IKBFA9VKCJ7g9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFihBHdR TV6tE7VemrIxgfyIYT0fMB8GA1UdIwQYMBaAFFE/4Ooki14x+3R1Mj5DlZTPFWmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM3NC9GMDVEQzA1Q0VG MjkxMUVEQkQwQzE0MjlDNEY5QUUwMi9VVF9nNmlTTFhqSDdkSFV5UGtPVmxNOFZh YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VUX2c2aVNMWGpIN2RIVXlQa09WbE04VmFhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUM3NC9GMDVEQzA1Q0VGMjkxMUVEQkQwQzE0MjlDNEY5QUUwMi9VVF9nNmlTTFhq SDdkSFV5UGtPVmxNOFZhYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr20qeu6VDtU8+w065LcH5YT0BzJqpEWHrOceLo/LhxpC4CNYF60lA iDUrj4XLe5rEj46/M8PKWeEKg0iz8iCJwiqGVbh4KuvZlC2oexoVKkjr3RP+A2hS awBH2T58FIrfIsZJRkjmBpSzsRlKZuLZaLQ5RJ5GY0WZhJX9CwAIzIoRX6sEB9Z+ HQ5iIIPQkKXCTlvMscrv0cGM3qkv8Kmz64rdmDE9RHj7sDD/TM9ni+LsZDP4cycH o/eV4UI2vixdbWC3qB/zmR1WJPli8x6e7uXeA98+Zqvs6QeW0ajyWE/ztXOLJm8V m3RTXgTPHKmfeFfW0X5xPTjmDAN4nI/D -----END CERTIFICATE-----Generated at Wed May 1 07:55:37 2024 by rpki-client on console-fra.rpki-client.org