$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft File: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft (raw, json) Hash identifier: 2vSTuCdXRsY0Kz4u0K4l5D3Z2SqqaMN7of93NYgOOrc= Subject key identifier: 3E:B0:7F:01:B1:57:5C:8F:96:F3:82:83:D5:93:62:35:5A:AA:E9:4B Authority key identifier: B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2 Certificate issuer: /CN=A9133E16/serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2 Certificate serial: 081E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft Manifest number: 081E Signing time: Thu 02 May 2024 21:56:38 +0000 Manifest this update: Thu 02 May 2024 21:56:38 +0000 Manifest next update: Thu 09 May 2024 21:56:38 +0000 Files and hashes: 1: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl (hash: Nv4YTCUrFsAXu2GQhZUVIrteP8RO8jl27h1f/mFFzFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2078 (0x81e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133E16/serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2 Validity Not Before: May 2 21:56:38 2024 GMT Not After : May 9 21:56:38 2024 GMT Subject: CN=66340c16-60c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:bd:ca:d1:fa:7e:08:b0:32:81:4c:e9:25: 89:e1:33:9f:13:c2:84:64:b5:96:ce:90:57:dc:4a: dc:ed:dc:9c:e8:78:a0:48:cf:e1:88:01:1e:ae:55: 00:84:42:22:d2:44:f2:f3:b4:14:e1:17:a6:0f:c3: b9:fd:65:03:1e:fe:7e:b8:7a:aa:9e:b2:3e:63:36: af:39:42:34:ee:b5:85:a2:4a:f1:81:25:7f:2c:a3: 98:55:94:f7:8c:4d:f6:1a:aa:40:8c:2a:ed:60:4b: b0:f4:81:64:88:e3:bb:1b:da:6a:8a:7e:bd:72:e3: 57:4e:8b:61:ca:13:05:fa:ce:37:42:6a:f5:68:37: 74:74:37:da:43:78:ff:23:43:67:c2:d4:07:dc:b4: 68:db:86:11:33:85:b8:ba:69:0e:00:4e:f7:83:5a: 42:7f:b3:5e:9c:b9:6a:8f:41:c4:35:e7:1c:d0:fd: 14:9d:eb:92:a4:ff:c7:b5:2c:5f:d7:de:b5:7c:50: 5d:a8:e0:b1:16:e5:4a:ce:04:e5:21:83:d1:4f:06: f3:a5:85:2a:10:28:64:d3:29:a9:fc:2a:fa:d4:5b: c0:c3:92:77:6d:66:f6:13:16:5f:b3:5a:75:66:fc: 47:04:e4:3c:90:f9:41:8e:28:5f:58:ed:e4:c5:c9: ac:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B0:7F:01:B1:57:5C:8F:96:F3:82:83:D5:93:62:35:5A:AA:E9:4B X509v3 Authority Key Identifier: keyid:B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:62:54:d8:7d:09:c6:aa:3a:e6:4d:cf:60:00:6c:05:2e:cd: c6:43:aa:8a:f5:3e:76:ef:45:78:5c:93:4f:4b:36:b3:64:88: a4:52:df:0b:71:27:e3:9c:95:fa:5b:fa:e8:80:64:2d:97:3b: a8:af:38:36:f7:52:cc:96:2f:74:79:c9:df:ae:fe:5b:21:b9: 9c:ff:bc:c7:20:e6:cb:50:9f:a6:1b:5d:f9:53:b3:d8:ab:cc: dc:7d:34:ae:4d:a3:3a:33:b0:2c:b1:7c:36:92:db:b7:a3:02: ae:29:d3:43:48:0d:33:18:8a:b9:14:70:2d:f5:a7:a7:38:30: 90:68:86:99:d4:92:e0:d7:26:a0:64:cc:ee:dd:ba:2e:25:ea: 92:10:9b:a6:ed:57:3c:60:a8:4b:27:d7:14:d3:7e:75:82:e8: 94:d3:0a:67:82:60:51:b1:fc:63:79:67:3f:69:1e:55:98:e1: 57:b8:8c:71:a9:7f:89:e6:5c:23:11:25:a7:ce:3c:48:4a:f1: 69:8c:9f:aa:13:a9:64:9d:ae:a8:84:63:55:81:3c:61:a7:b3: 19:7b:77:e6:67:1f:79:42:c6:35:eb:c7:1a:18:1d:6a:bc:cd: f2:c2:3c:e0:ec:cb:0b:59:82:92:80:73:c2:d0:25:80:74:e7: e4:34:b7:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNFMTYxMTAvBgNVBAUTKEI5QTBCRUZGOTJBRjdDREUxOTAwODUwNTJGMUY0RjFG OTJCREE0RjIwHhcNMjQwNTAyMjE1NjM4WhcNMjQwNTA5MjE1NjM4WjAYMRYwFAYD VQQDEw02NjM0MGMxNi02MGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4K9ytH6fgiwMoFM6SWJ4TOfE8KEZLWWzpBX3Erc7dyc6HigSM/hiAEerlUA hEIi0kTy87QU4RemD8O5/WUDHv5+uHqqnrI+YzavOUI07rWFokrxgSV/LKOYVZT3 jE32GqpAjCrtYEuw9IFkiOO7G9pqin69cuNXTothyhMF+s43Qmr1aDd0dDfaQ3j/ I0NnwtQH3LRo24YRM4W4umkOAE73g1pCf7NenLlqj0HENecc0P0UneuSpP/HtSxf 1961fFBdqOCxFuVKzgTlIYPRTwbzpYUqEChk0ymp/Cr61FvAw5J3bWb2ExZfs1p1 ZvxHBOQ8kPlBjihfWO3kxcmsTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6wfwGx V1yPlvOCg9WTYjVaqulLMB8GA1UdIwQYMBaAFLmgvv+Sr3zeGQCFBS8fTx+SvaTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9ENTA5NEZBNkFD NzQxMUVBODZFQTlGNDhDNEY5QUUwMi91YUMtXzVLdmZONFpBSVVGTHg5UEg1Szlw UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VhQy1fNUt2Zk40WkFJVUZMeDlQSDVLOXBQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0UxNi9ENTA5NEZBNkFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi91YUMtXzVLdmZO NFpBSVVGTHg5UEg1SzlwUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCYlTYfQnGqjrmTc9gAGwFLs3GQ6qK9T5270V4XJNPSzazZIikUt8L cSfjnJX6W/rogGQtlzuorzg291LMli90ecnfrv5bIbmc/7zHIObLUJ+mG135U7PY q8zcfTSuTaM6M7AssXw2ktu3owKuKdNDSA0zGIq5FHAt9aenODCQaIaZ1JLg1yag ZMzu3bouJeqSEJum7Vc8YKhLJ9cU0351guiU0wpngmBRsfxjeWc/aR5VmOFXuIxx qX+J5lwjESWnzjxISvFpjJ+qE6lkna6ohGNVgTxhp7MZe3fmZx95QsY168caGB1q vM3ywjzg7MsLWYKSgHPC0CWAdOfkNLe2 -----END CERTIFICATE-----Generated at Thu May 2 22:28:48 2024 by rpki-client on console-ams.rpki-client.org