$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft File: u9oqUrUEjxqKq79cJBcmASd8svM.mft (raw, json) Hash identifier: P2lF5cT0gMPSMCVVmVdfSm9nb5k6mZ7xxYeN50InDe0= Subject key identifier: 55:D9:1A:F2:FF:71:D8:8D:EB:EF:67:FC:40:1C:71:EE:FE:8C:E3:10 Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft Manifest number: 32 Signing time: Tue 21 May 2024 08:18:52 +0000 Manifest this update: Tue 21 May 2024 08:18:52 +0000 Manifest next update: Tue 28 May 2024 08:18:52 +0000 Files and hashes: 1: u9oqUrUEjxqKq79cJBcmASd8svM.crl (hash: thXbt8BGvydKpyvZyBb/8HeVlBzMHBOvwgf1/P57n2o=) 2: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (hash: Zf2aGirHutcUGM8OKVSuTfZK9xWSl0wXe0Qvn8CL4Y4=) 3: 6133230CEB3311EEA75DE77DC4F9AE02.roa (hash: Ro0WjrfgWaHXMYveHr1ptLiLsehp8t34UtftOvsWgq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Validity Not Before: May 21 08:18:52 2024 GMT Not After : May 28 08:18:52 2024 GMT Subject: CN=664c58ec-9455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2d:8d:9b:fb:37:f8:a5:63:10:70:4f:9f:6f: 39:5c:5f:a5:0c:a0:96:2c:3b:3f:ca:c1:9e:00:6d: e6:80:0c:ee:98:e9:9a:d2:5e:ad:d6:4a:12:9c:9d: 81:98:00:fb:37:ea:d1:db:b0:fe:2d:20:4f:53:75: 47:4b:dd:82:37:f3:87:06:00:35:63:9a:69:cf:9c: bc:74:1e:61:43:c0:93:57:61:6f:59:25:89:81:16: 3b:d1:d2:47:4b:16:62:a7:ca:e3:34:3e:64:e5:8f: 4c:2e:41:0e:3a:bf:a9:7e:fe:d6:3d:1e:dd:53:a1: cc:0c:63:20:f2:51:12:b3:3b:08:b5:db:2c:07:0c: e5:4f:7c:19:7b:bf:61:66:72:bc:f9:2c:e1:ac:7d: e2:b6:d6:b1:fb:fe:5d:54:d5:84:78:55:97:35:92: 05:b0:b8:f4:7f:77:16:cf:7c:6c:0b:54:57:ba:7e: 05:8f:46:90:6b:ee:07:cc:d8:74:c0:a7:80:9f:16: 3d:36:22:d2:05:e9:08:38:c7:a6:ae:44:a8:f3:37: 0a:14:d5:d4:f8:6d:34:15:2c:5a:c9:d7:71:65:c8: f0:29:c3:e6:2d:63:5b:9d:e7:91:d9:e5:5b:ac:49: 67:5d:74:bb:95:88:2e:76:af:f1:52:fd:83:77:bc: 55:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D9:1A:F2:FF:71:D8:8D:EB:EF:67:FC:40:1C:71:EE:FE:8C:E3:10 X509v3 Authority Key Identifier: keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:04:f7:2e:9e:a7:ea:54:45:b5:76:91:68:81:df:5e:4a:de: 8d:db:a6:81:59:7c:5b:10:e8:35:a8:a6:c7:d4:e1:0b:01:e2: f3:71:a7:cf:73:0c:af:65:e6:2e:68:24:83:5b:35:63:95:99: 77:18:b1:92:c2:01:eb:0c:06:37:80:b4:d8:2f:41:d0:4b:c6: 95:90:a7:35:90:ff:1a:87:78:66:db:c6:1e:56:68:cb:c4:64: 15:63:4d:35:dc:4b:97:02:f6:47:cf:6b:e7:1f:af:8a:7e:e3: e8:d4:c8:0f:4a:85:d3:df:b5:85:0c:27:fd:28:2e:be:83:77: 48:ba:5b:45:12:02:31:3a:92:ab:c3:62:b3:d2:ab:9e:8d:5e: 77:8c:ae:ea:58:52:0f:cb:80:25:8b:65:be:f9:55:f2:67:3d: 6d:2a:88:b0:66:19:b6:df:35:16:ce:5d:c9:fc:48:e7:b6:8e: cb:49:24:93:81:ad:34:dd:b7:9a:92:34:78:81:58:cb:1e:f5: 2c:12:01:77:9f:11:b6:86:d6:ad:05:41:a5:97:a9:30:2f:f0: 73:f2:93:e9:99:bb:a7:4d:ac:d5:c1:3a:f5:51:fd:0e:9d:8a: db:e4:a1:78:8d:54:f8:be:1f:70:f7:55:e9:ba:0b:56:cb:b9: 2d:1d:9e:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QkE4MjExMC8GA1UEBRMoQkJEQTJBNTJCNTA0OEYxQThBQUJCRjVDMjQxNzI2MDEy NzdDQjJGMzAeFw0yNDA1MjEwODE4NTJaFw0yNDA1MjgwODE4NTJaMBgxFjAUBgNV BAMTDTY2NGM1OGVjLTk0NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtLY2b+zf4pWMQcE+fbzlcX6UMoJYsOz/KwZ4AbeaADO6Y6ZrSXq3WShKcnYGY APs36tHbsP4tIE9TdUdL3YI384cGADVjmmnPnLx0HmFDwJNXYW9ZJYmBFjvR0kdL FmKnyuM0PmTlj0wuQQ46v6l+/tY9Ht1TocwMYyDyURKzOwi12ywHDOVPfBl7v2Fm crz5LOGsfeK21rH7/l1U1YR4VZc1kgWwuPR/dxbPfGwLVFe6fgWPRpBr7gfM2HTA p4CfFj02ItIF6Qg4x6auRKjzNwoU1dT4bTQVLFrJ13FlyPApw+YtY1ud55HZ5Vus SWdddLuViC52r/FS/YN3vFVNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVdka8v9x 2I3r72f8QBxx7v6M4xAwHwYDVR0jBBgwFoAUu9oqUrUEjxqKq79cJBcmASd8svMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCQTgyL0YyNjAxNEU4Q0U1 QTExRUU4QzNCRDAzQUM0RjlBRTAyL3U5b3FVclVFanhxS3E3OWNKQmNtQVNkOHN2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdTlvcVVyVUVqeHFLcTc5Y0pCY21BU2Q4c3ZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC QTgyL0YyNjAxNEU4Q0U1QTExRUU4QzNCRDAzQUM0RjlBRTAyL3U5b3FVclVFanhx S3E3OWNKQmNtQVNkOHN2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADEE9y6ep+pURbV2kWiB315K3o3bpoFZfFsQ6DWopsfU4QsB4vNxp89z DK9l5i5oJINbNWOVmXcYsZLCAesMBjeAtNgvQdBLxpWQpzWQ/xqHeGbbxh5WaMvE ZBVjTTXcS5cC9kfPa+cfr4p+4+jUyA9KhdPftYUMJ/0oLr6Dd0i6W0USAjE6kqvD YrPSq56NXneMrupYUg/LgCWLZb75VfJnPW0qiLBmGbbfNRbOXcn8SOe2jstJJJOB rTTdt5qSNHiBWMse9SwSAXefEbaG1q0FQaWXqTAv8HPyk+mZu6dNrNXBOvVR/Q6d itvkoXiNVPi+H3D3Vem6C1bLuS0dnsQ= -----END CERTIFICATE-----Generated at Tue May 21 10:37:07 2024 by rpki-client on console-fra.rpki-client.org