$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft File: uvWtoyyg00zzzPU6vfht5vjtkAU.mft (raw, json) Hash identifier: pc7/nlkAhfQSeoa3pJgLTjxRTVG8BEk6X3Vc8jm9ssA= Subject key identifier: A5:4C:9A:B9:8E:00:49:38:FB:6E:E5:84:67:22:AF:1A:60:17:43:88 Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Certificate serial: 18F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft Manifest number: 187F Signing time: Sat 04 May 2024 17:02:01 +0000 Manifest this update: Sat 04 May 2024 17:02:00 +0000 Manifest next update: Sat 11 May 2024 17:02:00 +0000 Files and hashes: 1: uvWtoyyg00zzzPU6vfht5vjtkAU.crl (hash: sa0j0D6hQ5QZ9pvSKCvAHTmDEc3D248QLvt5Mbuqei4=) 2: 6B09C1DAB16811ECBB0AD94EC4F9AE02.roa (hash: fU0FLeR6k1+7dB89t0jZ2g0Mngsqvx3dfTOlsZTCmI4=) 3: 5047D510C02411EC93BB8865C4F9AE02.roa (hash: nxhiArwD+wjK8+aCpy2/rTtM80uTqyYVGL+ZuGqMYA8=) 4: 680B87D6F0F411EC8B1EB281C4F9AE02.roa (hash: 7T+JN1iZe4Lz5oAejuz/8rUBWB+Vgk8XulzoF8S2huw=) 5: EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa (hash: wV/epslpK6acc01cm78cdLd238pk5SvfLgHpYlL/1Qw=) 6: 4F9AA82CC02411EC93BB8865C4F9AE02.roa (hash: rJYcg1vTXwRMjCiGpQzO/gX0DS9qnQHqCQr7P55CC3M=) 7: 4532BD9C14EF11ECA529523DC4F9AE02.roa (hash: hmPQSPHCwP1KPa5FqUcKSjEydEJPb1WIEMSljKsK3wg=) 8: 4EE22C48C02411EC93BB8865C4F9AE02.roa (hash: gF5Jo0WXtgLJ/DdlnhNbthSiNhclIj3x9pJxYxEkJgs=) 9: 1321A11C9DF311E99A8DE961C4F9AE02.roa (hash: lB3lWfWPHa8zPmZdsznTENRxdNNowD0dG898lc8uQxM=) 10: FEC2E50C6EBB11EE80F0173EC4F9AE02.roa (hash: m5pEc2YeExljAJ7UDWON9+hznmip9PV9HzygfeZuz2M=) 11: E125DC2E94D611EAAC882A28C4F9AE02.roa (hash: IYB0jEdgjYusx8aWm7rjuvuG8sVgHBnPVB6KvkKjmNQ=) 12: 6A90213E3FAD11EEA252F62FC4F9AE02.roa (hash: tsmkuPE+GNQaJuqQwcX0KyqLulyDFRbKEXAx2bqfGzQ=) 13: 669662644C4B11EE9AC4B26BC4F9AE02.roa (hash: 2EzIl9X5qjrjikxMw7lqyVwwY+WCrTWs3+brTmJaJ/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6386 (0x18f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Validity Not Before: May 4 17:02:00 2024 GMT Not After : May 11 17:02:00 2024 GMT Subject: CN=66366a09-d228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9e:0f:02:d2:c1:46:57:65:49:9d:b2:a0:44: e1:8c:43:ca:d1:93:af:c4:f1:35:f2:97:a4:14:a0: 58:f1:7f:0c:21:98:46:ad:14:db:04:cf:5f:37:fd: 55:08:01:12:96:60:e5:39:be:27:0b:3f:aa:58:cd: 69:a4:32:d2:15:9b:92:d3:d0:94:d7:cf:62:5d:3e: 53:26:fb:58:4d:a2:2a:15:5d:33:bf:a1:f5:26:a3: 5b:1d:a9:c2:b1:63:de:9b:8e:c0:72:33:66:d3:e8: d3:c0:2d:8c:3d:03:06:b4:fa:52:48:46:8d:a8:93: ed:4f:b3:a9:33:2d:ac:ed:c8:09:0b:d9:dc:b0:1e: e6:10:77:9e:3e:65:ab:fa:db:f6:69:e6:21:08:72: 96:17:f5:c1:09:30:30:40:63:32:0f:27:ad:bb:e5: 73:a5:d6:37:96:a3:ff:47:84:b7:68:7c:0b:3c:af: 24:5b:4e:8a:67:22:00:0b:fa:14:75:0e:35:93:60: 65:ac:e7:2c:da:8b:d6:98:a6:82:6b:dc:fd:12:94: 3a:80:5a:5f:09:48:84:75:6a:9d:13:d0:fb:c1:95: a5:34:54:ae:d8:ca:1a:8c:9b:27:67:1d:27:ae:2d: 7e:98:ef:11:df:60:d9:5b:18:3c:b3:b6:4f:9c:44: d0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4C:9A:B9:8E:00:49:38:FB:6E:E5:84:67:22:AF:1A:60:17:43:88 X509v3 Authority Key Identifier: keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:1d:38:5d:c2:af:1e:93:44:77:6a:2a:85:a6:33:cd:e6:2c: 83:21:ee:19:f7:00:53:91:b8:16:0d:e4:1b:40:64:8a:42:44: 9b:28:c6:73:4b:ac:a5:0f:ad:d4:75:2a:41:56:25:61:53:68: f4:d0:a2:62:20:59:ed:38:92:40:86:db:e5:57:b7:25:8b:3a: 3f:35:d6:00:46:d8:96:e4:81:28:b1:20:ce:21:e4:b4:56:cd: ca:54:6b:08:23:ee:ca:5d:79:2c:5f:63:33:70:7e:05:0e:41: a8:a5:e6:cd:86:31:af:f7:12:ba:b5:b6:12:bb:ce:59:d2:b7: b3:0e:4e:52:10:0d:07:d9:7a:55:6e:2a:fc:bf:43:31:0e:93: 17:35:cf:5e:61:36:13:bd:cc:56:8c:ad:d3:19:fc:dd:12:2d: d5:be:83:6d:6b:09:4a:bd:e7:bb:24:b0:db:10:0f:42:5d:81: af:cf:50:ec:c3:66:43:fc:f3:48:ca:e1:90:e0:5d:05:7b:c4: 30:bd:d1:42:69:36:f6:42:2f:ba:96:2b:cb:fc:a7:d4:89:59: f3:bd:30:5b:07:1a:0e:6c:3a:38:bb:ba:91:18:18:d3:53:f8: b0:5d:a3:8d:2b:a8:6d:7c:bb:87:2d:af:67:89:82:fa:da:dd: 9e:fa:15:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBRDcxMTAvBgNVBAUTKEJBRjVBREEzMkNBMEQzNENGM0NDRjUzQUJERjg2REU2 RjhFRDkwMDUwHhcNMjQwNTA0MTcwMjAwWhcNMjQwNTExMTcwMjAwWjAYMRYwFAYD VQQDEw02NjM2NmEwOS1kMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZ4PAtLBRldlSZ2yoEThjEPK0ZOvxPE18pekFKBY8X8MIZhGrRTbBM9fN/1V CAESlmDlOb4nCz+qWM1ppDLSFZuS09CU189iXT5TJvtYTaIqFV0zv6H1JqNbHanC sWPem47AcjNm0+jTwC2MPQMGtPpSSEaNqJPtT7OpMy2s7cgJC9ncsB7mEHeePmWr +tv2aeYhCHKWF/XBCTAwQGMyDyetu+VzpdY3lqP/R4S3aHwLPK8kW06KZyIAC/oU dQ41k2BlrOcs2ovWmKaCa9z9EpQ6gFpfCUiEdWqdE9D7wZWlNFSu2MoajJsnZx0n ri1+mO8R32DZWxg8s7ZPnETQzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVMmrmO AEk4+27lhGcirxpgF0OIMB8GA1UdIwQYMBaAFLr1raMsoNNM88z1Or34beb47ZAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFENy9GOEJBQkFDQThC ODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAwenp6UFU2dmZodDV2anRr QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V2V3RveXlnMDB6enpQVTZ2Zmh0NXZqdGtBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkFENy9GOEJBQkFDQThCODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAw enp6UFU2dmZodDV2anRrQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHHThdwq8ek0R3aiqFpjPN5iyDIe4Z9wBTkbgWDeQbQGSKQkSbKMZz S6ylD63UdSpBViVhU2j00KJiIFntOJJAhtvlV7clizo/NdYARtiW5IEosSDOIeS0 Vs3KVGsII+7KXXksX2MzcH4FDkGopebNhjGv9xK6tbYSu85Z0rezDk5SEA0H2XpV bir8v0MxDpMXNc9eYTYTvcxWjK3TGfzdEi3VvoNtawlKvee7JLDbEA9CXYGvz1Ds w2ZD/PNIyuGQ4F0Fe8QwvdFCaTb2Qi+6livL/KfUiVnzvTBbBxoObDo4u7qRGBjT U/iwXaONK6htfLuHLa9niYL62t2e+hU6 -----END CERTIFICATE-----Generated at Sat May 4 17:44:38 2024 by rpki-client on console-ams.rpki-client.org