$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft File: UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft (raw, json) Hash identifier: wDIqRvwzyC1mjBGq3kiMVPvDJZCUvbOysyQat80hWUA= Subject key identifier: 11:96:6E:D0:67:AE:06:88:11:D9:2F:6D:C3:B6:D2:85:D3:1E:F8:75 Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2 Certificate issuer: /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft Manifest number: 2E Signing time: Thu 19 Sep 2024 05:57:16 +0000 Manifest this update: Thu 19 Sep 2024 05:57:16 +0000 Manifest next update: Thu 26 Sep 2024 05:57:16 +0000 Files and hashes: 1: UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl (hash: g14VYpEkETysZckjSxpv55fZTma1UZhqzJ6prEIKOxY=) 2: 8B584EC2337D11EF9D71B72DC4F9AE02.roa (hash: /YUxnx7XKt88d6KR3YrNJ+z6x4A8VeRz9jNPl+bg9ic=) 3: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (hash: plIi+41lWpb6w3VNKuTTjFw/cUn/OAD0m7eyUjEewck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2 Validity Not Before: Sep 19 05:57:16 2024 GMT Not After : Sep 26 05:57:16 2024 GMT Subject: CN=66ebbd3c-cab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:e0:74:25:45:4f:f8:54:a1:7b:e2:cc:9b: a2:a3:24:a2:30:fa:77:17:6b:27:ba:8e:9a:71:1f: 96:ca:77:1f:50:73:46:b3:9b:7e:99:83:28:d9:74: 50:fc:da:b3:95:87:c2:b7:1b:be:1c:29:cc:b2:43: e9:4e:2e:80:d7:1c:19:bf:84:db:37:96:a5:7b:df: 03:e7:b3:1d:af:c6:c5:62:69:bc:04:57:f6:21:e0: 64:6a:16:6b:c4:d9:b0:90:57:b5:d7:7f:1c:da:5b: d2:21:ee:17:0d:fe:25:3c:b5:74:9b:30:f5:0e:4c: 48:60:de:14:b6:5a:48:51:f5:c7:6e:76:90:2f:f3: c8:97:d5:44:87:2d:97:f5:2f:f3:71:51:b2:45:b5: 43:28:12:84:6b:9c:5b:38:c7:b4:e0:cf:f6:92:58: 07:59:88:8d:cc:25:50:0f:90:26:70:af:5a:17:ac: bb:e2:3d:18:21:8a:34:02:ac:37:37:af:82:a4:14: 8e:42:06:f0:e4:f8:ea:e1:23:e0:3a:d7:e5:0c:f4: b1:f0:5b:7f:ea:1d:e1:f7:06:ea:ab:ba:bb:e6:8c: 45:cc:be:5c:99:f0:d5:3b:d8:6b:95:8d:c3:d0:76: 1c:6f:73:53:65:c9:1a:51:e7:93:01:16:d6:1b:87: 14:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:96:6E:D0:67:AE:06:88:11:D9:2F:6D:C3:B6:D2:85:D3:1E:F8:75 X509v3 Authority Key Identifier: keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:94:34:f1:10:fc:fe:66:2b:9a:16:94:e6:6f:bd:90:9a:1b: 41:c6:28:ec:c3:5f:73:cb:cc:5b:91:5f:b3:d2:ec:6a:dc:92: f5:35:bb:fe:71:e6:c8:60:1c:e8:fc:cc:f0:80:26:3b:67:b5: ef:75:fa:6c:6b:76:3a:0f:15:cc:7d:01:05:c2:11:44:68:07: e8:d0:22:e5:1b:cf:1b:e4:4b:eb:15:03:36:3e:43:6e:84:06: 5b:c8:6b:8b:20:74:9d:a2:ac:8f:b4:89:b7:f1:9d:32:d7:09: 47:d1:87:7c:64:40:19:de:26:ef:fd:c0:a4:a3:a0:81:c4:09: 20:ed:3d:e6:a4:77:c6:fa:5c:ce:d5:33:3a:36:b5:30:fe:18: 16:c5:78:14:93:18:5b:81:fd:09:20:ae:13:92:dd:dc:7e:35: 6c:49:7c:1d:42:cc:c0:18:82:64:f0:f7:9f:5e:18:91:f5:9e: 6c:32:30:3f:2c:a9:d7:01:82:9a:8f:76:28:1b:17:19:b1:ab: ed:a8:b1:10:97:cd:62:3f:22:0f:99:a7:2e:c0:10:7b:d7:28: f6:92:39:ca:e7:ff:f8:a3:fe:53:d9:bc:68:7c:dc:84:60:78: 4a:bd:81:77:4e:7f:67:b1:d1:d9:1e:53:0c:66:4d:2e:7e:fc: 84:9a:5d:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OUE5MDExMC8GA1UEBRMoNTE4OTJCRTVCMEI0QUJDNjAyNTQ0NUY0MDM5RkM3OTVE OEJBNThFMjAeFw0yNDA5MTkwNTU3MTZaFw0yNDA5MjYwNTU3MTZaMBgxFjAUBgNV BAMTDTY2ZWJiZDNjLWNhYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrVuB0JUVP+FShe+LMm6KjJKIw+ncXaye6jppxH5bKdx9Qc0azm36ZgyjZdFD8 2rOVh8K3G74cKcyyQ+lOLoDXHBm/hNs3lqV73wPnsx2vxsViabwEV/Yh4GRqFmvE 2bCQV7XXfxzaW9Ih7hcN/iU8tXSbMPUOTEhg3hS2WkhR9cdudpAv88iX1USHLZf1 L/NxUbJFtUMoEoRrnFs4x7Tgz/aSWAdZiI3MJVAPkCZwr1oXrLviPRghijQCrDc3 r4KkFI5CBvDk+OrhI+A61+UM9LHwW3/qHeH3BuqrurvmjEXMvlyZ8NU72GuVjcPQ dhxvc1NlyRpR55MBFtYbhxT9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEZZu0Geu BogR2S9tw7bShdMe+HUwHwYDVR0jBBgwFoAUUYkr5bC0q8YCVEX0A5/Hldi6WOIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5QTkwLzFGRTg0RUQyMzM3 NjExRUY5OTNFNDY3M0M0RjlBRTAyL1VZa3I1YkMwcThZQ1ZFWDBBNV9IbGRpNldP SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVVlrcjViQzBxOFlDVkVYMEE1X0hsZGk2V09JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 QTkwLzFGRTg0RUQyMzM3NjExRUY5OTNFNDY3M0M0RjlBRTAyL1VZa3I1YkMwcThZ Q1ZFWDBBNV9IbGRpNldPSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIuUNPEQ/P5mK5oWlOZvvZCaG0HGKOzDX3PLzFuRX7PS7GrckvU1u/5x 5shgHOj8zPCAJjtnte91+mxrdjoPFcx9AQXCEURoB+jQIuUbzxvkS+sVAzY+Q26E BlvIa4sgdJ2irI+0ibfxnTLXCUfRh3xkQBneJu/9wKSjoIHECSDtPeakd8b6XM7V Mzo2tTD+GBbFeBSTGFuB/QkgrhOS3dx+NWxJfB1CzMAYgmTw959eGJH1nmwyMD8s qdcBgpqPdigbFxmxq+2osRCXzWI/Ig+Zpy7AEHvXKPaSOcrn//ij/lPZvGh83IRg eEq9gXdOf2ex0dkeUwxmTS5+/ISaXYw= -----END CERTIFICATE-----Generated at Thu Sep 19 07:13:46 2024 by rpki-client on console-fra.rpki-client.org