$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft File: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft (raw, json) Hash identifier: pGpdgd6YByREYVTpI7UOaWkuKGIRCiEDEXbOeH3uTF8= Subject key identifier: 09:D7:F2:AC:E5:4E:68:92:F5:DC:29:B9:4E:A1:65:BD:55:EA:90:13 Authority key identifier: 50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57 Certificate issuer: /CN=A9137242/serialNumber=50FBB403643473F991273626277A922C0706AC57 Certificate serial: 0CA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft Manifest number: 1355 Signing time: Tue 30 Apr 2024 19:07:22 +0000 Manifest this update: Tue 30 Apr 2024 19:07:21 +0000 Manifest next update: Tue 07 May 2024 19:07:21 +0000 Files and hashes: 1: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl (hash: sV6zV71ZMjoRDbyk1xTKwYfhDCVwSk0laKynerOdGHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3233 (0xca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137242/serialNumber=50FBB403643473F991273626277A922C0706AC57 Validity Not Before: Apr 30 19:07:21 2024 GMT Not After : May 7 19:07:21 2024 GMT Subject: CN=66314169-7799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bb:e5:e4:02:fe:29:9a:23:e6:7d:c9:13:35: ef:0a:8b:7d:0b:07:c3:44:ed:ca:c7:4c:c7:df:2f: 4e:b8:b6:27:97:a9:33:f8:03:7d:40:4e:26:1d:a9: 54:26:6a:9e:9e:db:a2:a1:cf:6d:7c:84:33:f8:22: b1:12:c2:23:1a:7d:c1:2a:05:28:b3:a1:88:62:a8: f4:f7:46:cf:2d:b5:8a:73:43:27:f4:b9:b6:2f:80: 4c:91:c7:5e:fb:f2:17:d2:7b:ac:94:a0:1f:e2:db: 99:c7:83:c7:d3:e6:3b:e3:f3:19:df:8b:f0:8e:3b: ac:95:be:ea:4e:6d:88:16:02:f5:71:7e:d2:5a:d0: c3:20:c5:63:6d:2b:6f:d3:85:e7:67:4b:ad:99:22: ac:f3:4b:6b:2f:cb:8f:7b:fa:be:e6:a4:7b:ec:50: f5:87:df:b1:11:96:30:e6:23:60:30:d9:26:fa:94: 42:60:a4:77:54:36:49:80:b3:08:5e:aa:c3:2b:d1: 68:3f:20:1c:f1:90:b7:d7:be:27:51:be:86:83:99: 4d:65:81:3b:70:69:de:c4:23:1a:4f:f4:d6:7d:a8: f1:f2:74:79:d2:b0:cc:19:e2:4a:83:63:64:4f:54: df:2d:61:21:a3:75:74:a8:61:06:7f:2b:83:ce:a1: d1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D7:F2:AC:E5:4E:68:92:F5:DC:29:B9:4E:A1:65:BD:55:EA:90:13 X509v3 Authority Key Identifier: keyid:50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:bf:ac:53:25:c6:c5:df:f7:ab:b6:82:7e:e8:9e:9f:cf:e4: 75:98:20:bf:a0:62:f2:b8:c4:40:7f:3c:77:69:7b:2a:06:2c: d0:de:57:99:3e:a9:68:f9:0f:2b:3b:7d:67:f5:b4:e3:22:51: d6:36:27:2b:69:30:2b:39:d3:c3:0e:cc:b2:9d:40:42:4c:e6: 16:5e:5e:97:38:7c:f9:e1:15:b3:a3:f9:2a:7f:12:0f:2e:e2: 8e:8e:03:8c:75:51:72:e1:ea:9f:d1:82:d6:8e:53:43:f1:24: e7:57:df:c4:19:00:90:65:cd:d4:3e:dc:61:b9:d8:5a:7f:21: f6:55:9b:de:ff:78:5a:a2:7e:75:d3:d4:4e:61:a6:a1:59:5a: ea:96:80:4b:03:cf:d0:be:30:db:bf:a8:73:79:6c:a4:e5:f2: 2d:72:9a:34:bb:04:55:11:9d:37:d4:98:bc:0e:23:34:f3:94: 00:b7:67:ca:5e:88:31:c3:ce:37:b9:c3:50:84:9e:92:37:f9: 98:3b:cc:ca:e1:eb:44:5d:e0:67:2f:04:93:5d:75:9f:11:08: 08:2f:32:c4:77:b1:cf:4e:31:af:5e:6a:24:49:fc:9b:de:e5: 8c:20:a1:3c:b2:81:2a:6e:db:b1:ca:e0:67:48:8b:dd:7d:c6: b4:2c:8b:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcyNDIxMTAvBgNVBAUTKDUwRkJCNDAzNjQzNDczRjk5MTI3MzYyNjI3N0E5MjJD MDcwNkFDNTcwHhcNMjQwNDMwMTkwNzIxWhcNMjQwNTA3MTkwNzIxWjAYMRYwFAYD VQQDEw02NjMxNDE2OS03Nzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Lvl5AL+KZoj5n3JEzXvCot9CwfDRO3Kx0zH3y9OuLYnl6kz+AN9QE4mHalU Jmqentuioc9tfIQz+CKxEsIjGn3BKgUos6GIYqj090bPLbWKc0Mn9Lm2L4BMkcde +/IX0nuslKAf4tuZx4PH0+Y74/MZ34vwjjuslb7qTm2IFgL1cX7SWtDDIMVjbStv 04XnZ0utmSKs80trL8uPe/q+5qR77FD1h9+xEZYw5iNgMNkm+pRCYKR3VDZJgLMI XqrDK9FoPyAc8ZC3174nUb6Gg5lNZYE7cGnexCMaT/TWfajx8nR50rDMGeJKg2Nk T1TfLWEho3V0qGEGfyuDzqHR6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnX8qzl TmiS9dwpuU6hZb1V6pATMB8GA1UdIwQYMBaAFFD7tANkNHP5kSc2Jid6kiwHBqxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzI0Mi8wQjYwODc5NkNB MzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNfbVJKelltSjNxU0xBY0dy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VQdTBBMlEwY19tUkp6WW1KM3FTTEFjR3JGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzI0Mi8wQjYwODc5NkNBMzQxMUU5QkM3NjkwNTVDNEY5QUUwMi9VUHUwQTJRMGNf bVJKelltSjNxU0xBY0dyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8v6xTJcbF3/ertoJ+6J6fz+R1mCC/oGLyuMRAfzx3aXsqBizQ3leZ Pqlo+Q8rO31n9bTjIlHWNicraTArOdPDDsyynUBCTOYWXl6XOHz54RWzo/kqfxIP LuKOjgOMdVFy4eqf0YLWjlND8STnV9/EGQCQZc3UPtxhudhafyH2VZve/3haon51 09ROYaahWVrqloBLA8/QvjDbv6hzeWyk5fItcpo0uwRVEZ031Ji8DiM085QAt2fK Xogxw843ucNQhJ6SN/mYO8zK4etEXeBnLwSTXXWfEQgILzLEd7HPTjGvXmokSfyb 3uWMIKE8soEqbtuxyuBnSIvdfca0LIsC -----END CERTIFICATE-----Generated at Tue Apr 30 21:37:55 2024 by rpki-client on console-fra.rpki-client.org