$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json) Hash identifier: Qf117kgxwn3aETdXNCs7I9HjMB3GuFOLyKZw9lV2wHA= Subject key identifier: A9:F6:2A:81:22:DD:30:09:1C:D7:4C:C5:60:1B:32:E4:D5:41:2F:4F Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Certificate serial: 2FAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft Manifest number: 2FA3 Signing time: Thu 02 May 2024 15:43:21 +0000 Manifest this update: Thu 02 May 2024 15:43:21 +0000 Manifest next update: Thu 09 May 2024 15:43:21 +0000 Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: ih3IHjC9zL0rsDcav8iQ9k7y1zd7vSbpopv1FYdwkpQ=) 2: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: UjU6es7AUpfjPsmTTHoLX6C2qhqoK5d5YNp38bRPGp4=) 3: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: iCoDLg93IlXnuyC4uYc5it5HRdDNUAmWw9kXta8nl5Y=) 4: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: /VxiuvW+nkVf+rh+CdLB5N+ZoeSz6BQaIPFa/Uj8y88=) 5: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: d87y0RU1JdMCx1tYhyDSj3d9fQ7O9wyqrkN2wHKJmw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 15:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12205 (0x2fad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Validity Not Before: May 2 15:43:21 2024 GMT Not After : May 9 15:43:21 2024 GMT Subject: CN=6633b499-58d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2d:3d:bc:02:32:03:73:c1:a5:36:e0:e4:ff: 50:6a:9e:2e:fb:69:6e:55:a5:31:a9:7c:dc:98:59: 15:64:e7:be:49:ec:31:bd:3c:83:5c:96:6c:d2:3b: 1c:b2:cd:08:aa:20:12:a5:2e:7c:32:d0:f1:95:68: 24:a8:06:d5:3b:b8:04:56:b4:71:5b:bc:b9:6c:eb: 65:46:7b:61:0c:ba:8e:f6:90:5c:6c:de:43:80:54: 8b:02:f4:6e:b7:47:fe:35:7b:ba:98:e5:25:97:b8: 14:cb:40:df:05:a9:43:22:b6:4e:7e:3d:18:4b:07: d4:db:39:c2:7c:40:27:80:19:92:1c:a3:47:32:a2: 66:7c:72:2a:2e:1a:da:52:63:da:98:66:63:f8:ba: 47:e4:56:11:6b:28:78:e2:09:63:09:bb:71:ee:ad: bc:84:ef:cb:7e:07:be:49:3a:a3:d7:ea:53:8d:12: 75:d0:38:f3:fd:83:bb:aa:22:6d:bc:eb:d8:38:bd: 29:ba:b5:66:82:30:37:e1:20:15:bb:72:f5:f1:a3: c3:8c:8b:9a:ff:bf:1d:a5:f3:cb:41:7e:47:15:ad: c3:21:0b:be:b9:a1:18:98:fb:a8:0b:60:e3:13:fd: 66:67:f5:f4:27:ca:e3:ba:5d:9f:08:4b:15:c3:09: b9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F6:2A:81:22:DD:30:09:1C:D7:4C:C5:60:1B:32:E4:D5:41:2F:4F X509v3 Authority Key Identifier: keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:31:9d:c2:86:50:57:3e:5f:77:94:61:0f:68:c3:b7:79:e2: 9d:ce:09:50:72:b0:e2:0a:9a:92:e9:1b:0c:e1:cd:de:b7:54: a1:88:2a:a1:fc:f6:be:57:5f:de:e2:d4:0d:39:b6:76:c6:de: 3b:6c:14:f5:fe:01:79:26:19:78:3f:0f:cf:33:86:f7:aa:f8: 4d:59:1e:ff:df:e3:82:1f:8f:d3:25:82:9d:ad:e3:d6:49:50: 91:e6:12:fd:73:29:84:cb:50:fb:e9:08:60:31:a4:af:78:9e: 29:8d:94:7a:4c:4b:88:41:86:2d:82:ec:b5:21:d6:af:62:77: d6:0a:09:a9:6a:42:b3:14:1c:b8:89:bc:80:bd:86:3c:f0:66: 79:dd:da:db:76:f5:1f:f7:46:e6:26:bf:57:5c:74:b9:f0:a7: 0d:d9:a8:37:1f:5d:c6:96:61:cf:54:5f:17:ad:90:67:ef:ea: 9c:64:42:a9:56:12:ec:fa:5b:b6:58:a0:0c:4f:e5:64:aa:76: 76:1d:8d:ac:9b:74:fc:e7:f8:3c:43:42:80:71:16:49:e2:62: 80:bf:2c:2a:ce:9e:96:8e:ab:10:44:a7:39:f4:12:9c:39:e6: ce:31:52:95:c4:00:8a:e7:d2:e0:83:f4:b4:21:b6:f4:b4:f4: 81:b2:ea:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1 QjMxMkMwNkYwHhcNMjQwNTAyMTU0MzIxWhcNMjQwNTA5MTU0MzIxWjAYMRYwFAYD VQQDEw02NjMzYjQ5OS01OGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8y09vAIyA3PBpTbg5P9Qap4u+2luVaUxqXzcmFkVZOe+SewxvTyDXJZs0jsc ss0IqiASpS58MtDxlWgkqAbVO7gEVrRxW7y5bOtlRnthDLqO9pBcbN5DgFSLAvRu t0f+NXu6mOUll7gUy0DfBalDIrZOfj0YSwfU2znCfEAngBmSHKNHMqJmfHIqLhra UmPamGZj+LpH5FYRayh44gljCbtx7q28hO/Lfge+STqj1+pTjRJ10Djz/YO7qiJt vOvYOL0purVmgjA34SAVu3L18aPDjIua/78dpfPLQX5HFa3DIQu+uaEYmPuoC2Dj E/1mZ/X0J8rjul2fCEsVwwm5fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKn2KoEi 3TAJHNdMxWAbMuTVQS9PMB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS8xNEI3NkJDOEVEMEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpF dG9vUndpMm44NlpiTVN3RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCMZ3ChlBXPl93lGEPaMO3eeKdzglQcrDiCpqS6RsM4c3et1ShiCqh /Pa+V1/e4tQNObZ2xt47bBT1/gF5Jhl4Pw/PM4b3qvhNWR7/3+OCH4/TJYKdrePW SVCR5hL9cymEy1D76QhgMaSveJ4pjZR6TEuIQYYtguy1IdavYnfWCgmpakKzFBy4 ibyAvYY88GZ53drbdvUf90bmJr9XXHS58KcN2ag3H13GlmHPVF8XrZBn7+qcZEKp VhLs+lu2WKAMT+VkqnZ2HY2sm3T85/g8Q0KAcRZJ4mKAvywqzp6WjqsQRKc59BKc OebOMVKVxACK59Lgg/S0Ibb0tPSBsuoo -----END CERTIFICATE-----Generated at Thu May 2 17:18:27 2024 by rpki-client on console-ams.rpki-client.org