$ rpki-client -vvf rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft File: uXp_AVpzYHTfOERcmAdDeCGdKZU.mft (raw, json) Hash identifier: tQQshzmwQ14weGhIl0H6vOdXmy0oBjn9460QZibHD+I= Subject key identifier: 52:BF:07:9C:E6:B4:5C:85:48:B0:43:63:15:27:05:1F:A6:41:60:01 Authority key identifier: B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 Certificate issuer: /CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft Manifest number: 3B Signing time: Wed 15 May 2024 08:25:06 +0000 Manifest this update: Wed 15 May 2024 08:25:05 +0000 Manifest next update: Wed 22 May 2024 08:25:05 +0000 Files and hashes: 1: uXp_AVpzYHTfOERcmAdDeCGdKZU.crl (hash: WV0Zri2cIHC4Se5t8LGZO4yCNKHJ26xn4QY3fttTMjQ=) 2: BAB65090BD7811EEB634A117C4F9AE02.roa (hash: DFZxkNn6nNZHERWm5f3XteRUaBE12w803zvTM2ryGo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995 Validity Not Before: May 15 08:25:05 2024 GMT Not After : May 22 08:25:05 2024 GMT Subject: CN=66447161-6183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:be:7e:e2:52:03:1d:1e:8f:ac:bd:42:8d:2b: 19:fa:e4:2f:79:d9:66:ee:25:ff:e5:95:7f:bf:6f: 42:05:dc:3a:12:fc:99:48:c1:80:1f:bd:48:79:35: b4:f3:0b:9a:6b:18:21:3f:f8:db:7d:9d:43:fb:5c: fe:90:53:37:49:31:55:a9:f6:bc:0a:4f:c5:a9:45: 5c:90:a2:35:91:dc:c6:82:02:fb:4e:0b:8b:4a:97: ea:30:d2:5d:e9:16:47:f1:f9:d9:45:7d:27:a3:28: d7:09:7f:e0:6d:6e:15:bb:07:db:a5:58:d4:3d:ba: 11:a3:00:4e:9e:07:be:d6:96:c7:eb:67:05:e3:45: 28:47:9c:2d:cc:b6:10:63:0d:bd:5a:91:40:50:d0: 0e:81:7d:85:e5:03:21:56:de:06:14:40:be:1f:8b: a1:55:a6:7a:3f:79:af:0c:c6:e5:6c:8c:af:d2:8f: 02:e2:f7:0c:ae:b7:65:4f:54:9c:cf:6c:fa:9b:db: 1c:33:cf:4b:95:a8:18:31:21:d9:3c:ea:1c:6a:8b: 92:34:a5:1c:0a:c3:9c:ef:55:ae:b1:b3:2f:65:49: 64:2c:a6:78:48:ef:d4:ff:8e:91:57:76:8f:2e:c1: da:cc:bb:10:a0:5d:e8:cf:c8:6e:74:72:a2:29:1c: 86:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BF:07:9C:E6:B4:5C:85:48:B0:43:63:15:27:05:1F:A6:41:60:01 X509v3 Authority Key Identifier: keyid:B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b2:49:0d:04:78:35:ac:32:63:03:17:fd:42:48:f0:86:7d: 2f:16:34:a6:1d:ef:b9:aa:96:93:3b:b9:63:c2:e0:98:7d:f9: a7:44:ac:c2:3c:69:26:52:c7:e6:34:61:fe:9c:07:be:d7:fd: a2:2d:d1:27:fd:b6:ae:f2:29:12:77:21:d4:47:d5:36:14:47: 64:6d:e0:a8:bf:54:29:f5:6f:f8:07:ea:96:4b:48:c5:ed:02: 3d:eb:b3:3a:e5:c8:bd:68:5a:e7:00:cc:ff:87:d5:76:a7:b2: 4f:fd:ad:16:0a:70:50:c3:09:69:ab:b3:70:2a:a2:f0:31:7b: ea:ac:c1:b8:04:51:76:ae:f4:22:2e:0a:4e:ba:14:8a:a1:05: 27:cc:18:f8:db:ed:75:b1:b6:d9:7d:a3:27:e5:9a:b6:86:8e: ea:0c:0e:8d:3b:69:0a:82:77:a9:5b:3b:95:2b:f7:9b:73:96: 4e:53:f2:55:e1:30:79:98:4e:58:91:7a:c2:6a:37:f7:d2:75: c8:0c:5b:c8:10:6e:e4:60:b3:15:f3:81:72:f6:a1:01:c4:fd: 48:1d:aa:cf:9e:d0:65:e4:de:ad:38:1d:b9:80:93:48:d9:55: 02:f8:3a:e8:77:5d:34:cb:a7:aa:af:e8:91:1c:2c:43:5d:28: e9:72:9e:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MjBENDExMC8GA1UEBRMoQjk3QTdGMDE1QTczNjA3NERGMzg0NDVDOTgwNzQzNzgy MTlEMjk5NTAeFw0yNDA1MTUwODI1MDVaFw0yNDA1MjIwODI1MDVaMBgxFjAUBgNV BAMTDTY2NDQ3MTYxLTYxODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdvn7iUgMdHo+svUKNKxn65C952WbuJf/llX+/b0IF3DoS/JlIwYAfvUh5NbTz C5prGCE/+Nt9nUP7XP6QUzdJMVWp9rwKT8WpRVyQojWR3MaCAvtOC4tKl+ow0l3p Fkfx+dlFfSejKNcJf+BtbhW7B9ulWNQ9uhGjAE6eB77WlsfrZwXjRShHnC3MthBj Db1akUBQ0A6BfYXlAyFW3gYUQL4fi6FVpno/ea8MxuVsjK/SjwLi9wyut2VPVJzP bPqb2xwzz0uVqBgxIdk86hxqi5I0pRwKw5zvVa6xsy9lSWQspnhI79T/jpFXdo8u wdrMuxCgXejPyG50cqIpHIY/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUr8HnOa0 XIVIsENjFScFH6ZBYAEwHwYDVR0jBBgwFoAUuXp/AVpzYHTfOERcmAdDeCGdKZUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyMEQ0LzBFM0YwQzY2QkMx NjExRUVCOTA1OUM4NkM0RjlBRTAyL3VYcF9BVnB6WUhUZk9FUmNtQWREZUNHZEta VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdVhwX0FWcHpZSFRmT0VSY21BZERlQ0dkS1pVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy MEQ0LzBFM0YwQzY2QkMxNjExRUVCOTA1OUM4NkM0RjlBRTAyL3VYcF9BVnB6WUhU Zk9FUmNtQWREZUNHZEtaVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACOySQ0EeDWsMmMDF/1CSPCGfS8WNKYd77mqlpM7uWPC4Jh9+adErMI8 aSZSx+Y0Yf6cB77X/aIt0Sf9tq7yKRJ3IdRH1TYUR2Rt4Ki/VCn1b/gH6pZLSMXt Aj3rszrlyL1oWucAzP+H1Xansk/9rRYKcFDDCWmrs3AqovAxe+qswbgEUXau9CIu Ck66FIqhBSfMGPjb7XWxttl9oyflmraGjuoMDo07aQqCd6lbO5Ur95tzlk5T8lXh MHmYTliResJqN/fSdcgMW8gQbuRgsxXzgXL2oQHE/Ugdqs+e0GXk3q04HbmAk0jZ VQL4Ouh3XTTLp6qv6JEcLENdKOlynjg= -----END CERTIFICATE-----Generated at Wed May 15 09:04:08 2024 by rpki-client on console-ams.rpki-client.org