$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft File: uhYFabkV4kxq5sJIlNBPnUo5FpI.mft (raw, json) Hash identifier: wnIUvxOmgJpx2tyHQirTE7WmqU99iCYQvWrJ2MFa+c0= Subject key identifier: D0:65:BD:44:B7:8E:47:02:E2:37:F8:D6:1E:C9:07:9D:43:57:A4:82 Authority key identifier: BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92 Certificate issuer: /CN=A912CDCB/serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692 Certificate serial: 0417 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft Manifest number: 0414 Signing time: Sat 01 Jun 2024 03:07:02 +0000 Manifest this update: Sat 01 Jun 2024 03:07:01 +0000 Manifest next update: Sat 08 Jun 2024 03:07:01 +0000 Files and hashes: 1: uhYFabkV4kxq5sJIlNBPnUo5FpI.crl (hash: CD2XUU6El3aEPz/VCVeiqDfj16MeTUaV2Z6i6vxthAM=) 2: DAF98AAA20F111EC89E7D668C4F9AE02.roa (hash: jql66WIeHU5PdQKz58WCo9HnFbZyJdv+XlH/V28o6kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1047 (0x417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDCB/serialNumber=BA160569B915E24C6AE6C24894D04F9D4A391692 Validity Not Before: Jun 1 03:07:01 2024 GMT Not After : Jun 8 03:07:01 2024 GMT Subject: CN=665a9055-cb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:35:3c:14:62:af:0d:18:10:f7:74:01:b1:f5: 78:06:23:59:e1:6f:04:9a:35:82:cb:65:58:98:0f: 24:5f:cb:c7:f1:74:e4:a9:8b:d1:77:c0:84:c4:f6: 7d:14:1c:57:96:a4:9a:78:42:f2:ac:77:2c:c8:5d: 0c:dd:ec:d7:14:7e:da:ce:13:d9:84:23:ca:e8:ad: 24:c0:19:8e:cf:fd:3d:3c:31:36:c4:ff:ff:66:97: 39:c9:57:5b:91:69:db:15:6b:80:1e:39:c5:14:0a: ad:bc:c4:58:99:cd:9a:e3:2c:1f:94:3b:29:02:92: 44:f6:98:11:d8:19:c8:cd:b2:dc:07:0f:fd:7b:16: 28:ac:9d:b9:e2:4c:ce:6e:ef:1d:f9:a0:5a:98:f0: ff:a8:c9:2e:0e:4e:41:be:f8:27:a0:f1:d0:fc:53: 07:57:29:61:17:5f:11:50:60:36:b1:8b:6f:54:b3: 05:46:33:b1:39:4d:97:ae:46:87:cd:07:d1:40:7b: 8e:17:67:88:f8:68:f2:56:13:b3:f1:fd:e7:2c:00: c4:0c:df:6b:df:cd:68:87:2b:60:9d:1a:cf:f3:c6: c4:a7:32:35:1f:20:ed:d5:7c:6e:c2:16:5e:4c:e5: c5:ca:19:21:96:bc:2d:03:23:0c:81:bb:4b:dd:92: 2c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:65:BD:44:B7:8E:47:02:E2:37:F8:D6:1E:C9:07:9D:43:57:A4:82 X509v3 Authority Key Identifier: keyid:BA:16:05:69:B9:15:E2:4C:6A:E6:C2:48:94:D0:4F:9D:4A:39:16:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uhYFabkV4kxq5sJIlNBPnUo5FpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDCB/8A82094420EC11EC9D5D313BC4F9AE02/uhYFabkV4kxq5sJIlNBPnUo5FpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e4:c3:14:6e:e8:0a:fd:54:49:24:cd:77:34:5a:b0:4d:16: fa:77:0f:98:1d:5b:f8:cc:9f:ad:be:d1:75:53:a5:85:c9:47: 55:a1:55:9b:d4:37:63:3d:d9:a3:d7:c8:ff:24:bf:6d:2e:a3: 89:04:cf:37:d8:33:e8:66:ee:0e:d9:3c:42:cc:eb:c8:9f:8b: f3:4f:67:41:fd:75:0f:81:ce:33:10:d3:4c:54:c4:02:23:ae: 69:9f:81:90:53:23:4a:2d:e7:5b:12:ce:2c:07:07:59:37:ce: 1b:2d:d3:11:41:5e:67:53:c9:dc:6f:67:55:25:7e:d5:3b:42: 3e:ae:e2:fd:66:1f:c9:7f:11:d5:da:ab:cf:fe:ee:83:59:22: e0:ca:8b:d2:2f:cb:ab:0b:e8:81:82:4a:ee:39:b5:d8:73:fd: 30:46:36:e8:d7:7c:c3:97:e0:85:33:89:10:0d:d2:e0:8c:02: b8:b1:46:ba:60:b0:52:99:e6:cc:d7:41:12:34:bd:28:4b:c2: 51:32:b5:95:81:cd:75:64:a7:11:e3:4d:c5:ae:58:25:df:24: 3b:c6:f7:60:7c:63:c1:3f:d0:0a:f3:7b:35:95:19:e8:a4:b1: 3a:eb:eb:81:51:f0:d3:37:55:14:d0:65:4d:d5:09:01:4c:02: 5e:a3:d1:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQ0IxMTAvBgNVBAUTKEJBMTYwNTY5QjkxNUUyNEM2QUU2QzI0ODk0RDA0RjlE NEEzOTE2OTIwHhcNMjQwNjAxMDMwNzAxWhcNMjQwNjA4MDMwNzAxWjAYMRYwFAYD VQQDEw02NjVhOTA1NS1jYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zU8FGKvDRgQ93QBsfV4BiNZ4W8EmjWCy2VYmA8kX8vH8XTkqYvRd8CExPZ9 FBxXlqSaeELyrHcsyF0M3ezXFH7azhPZhCPK6K0kwBmOz/09PDE2xP//Zpc5yVdb kWnbFWuAHjnFFAqtvMRYmc2a4ywflDspApJE9pgR2BnIzbLcBw/9exYorJ254kzO bu8d+aBamPD/qMkuDk5BvvgnoPHQ/FMHVylhF18RUGA2sYtvVLMFRjOxOU2XrkaH zQfRQHuOF2eI+GjyVhOz8f3nLADEDN9r381ohytgnRrP88bEpzI1HyDt1XxuwhZe TOXFyhkhlrwtAyMMgbtL3ZIs3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBlvUS3 jkcC4jf41h7JB51DV6SCMB8GA1UdIwQYMBaAFLoWBWm5FeJMaubCSJTQT51KORaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDQi84QTgyMDk0NDIw RUMxMUVDOUQ1RDMxM0JDNEY5QUUwMi91aFlGYWJrVjRreHE1c0pJbE5CUG5VbzVG cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VoWUZhYmtWNGt4cTVzSklsTkJQblVvNUZwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDQi84QTgyMDk0NDIwRUMxMUVDOUQ1RDMxM0JDNEY5QUUwMi91aFlGYWJrVjRr eHE1c0pJbE5CUG5VbzVGcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv5MMUbugK/VRJJM13NFqwTRb6dw+YHVv4zJ+tvtF1U6WFyUdVoVWb 1DdjPdmj18j/JL9tLqOJBM832DPoZu4O2TxCzOvIn4vzT2dB/XUPgc4zENNMVMQC I65pn4GQUyNKLedbEs4sBwdZN84bLdMRQV5nU8ncb2dVJX7VO0I+ruL9Zh/JfxHV 2qvP/u6DWSLgyovSL8urC+iBgkruObXYc/0wRjbo13zDl+CFM4kQDdLgjAK4sUa6 YLBSmebM10ESNL0oS8JRMrWVgc11ZKcR403Frlgl3yQ7xvdgfGPBP9AK83s1lRno pLE66+uBUfDTN1UU0GVN1QkBTAJeo9Fl -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:22 2024 by rpki-client on console-ams.rpki-client.org