$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json) Hash identifier: 2HyNqCEz6/tsA6NNW9SQ7fg7ruelz72SVGfxO3Murq0= Subject key identifier: CA:A3:E5:05:72:DB:11:30:23:4D:3E:01:9D:B8:6A:88:B5:99:07:6F Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Certificate serial: 0987 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft Manifest number: 0982 Signing time: Mon 06 May 2024 21:04:01 +0000 Manifest this update: Mon 06 May 2024 21:04:00 +0000 Manifest next update: Mon 13 May 2024 21:04:00 +0000 Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: RkaEFEBc2zQpj9bvO6TL4QYTzcVY99CL82EXTB7EehQ=) 2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: jKGVgYJukPiK6ySsx84NYDRYeDXnDYGdPyvlYaZsN/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 21:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2439 (0x987) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Validity Not Before: May 6 21:04:00 2024 GMT Not After : May 13 21:04:00 2024 GMT Subject: CN=663945c0-0401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:72:c2:ab:d1:82:94:b9:1e:1e:be:25:04:aa: 4a:e9:4b:21:53:e4:b4:c1:61:49:0a:27:84:15:c5: 18:e7:b0:25:3f:97:fe:91:2e:86:3d:6b:7e:8e:7b: a9:95:46:14:bc:3a:3c:46:61:e9:60:61:86:a9:4f: 89:31:fa:0c:f0:95:9b:fd:35:90:c5:c0:ce:2d:7f: 6c:e2:b9:25:75:24:93:1e:c7:ac:f4:09:7a:44:b4: 2c:26:d5:52:fe:f6:64:a1:86:6a:78:2f:87:1b:04: 64:dd:c1:0e:f4:5f:ac:8d:a6:6a:20:67:b1:55:f9: a2:f2:05:e8:91:33:da:82:84:ef:80:ba:cf:04:2c: 93:a8:90:e1:2e:cb:8b:30:43:8b:9a:89:cd:0b:11: 36:fc:d1:9b:02:d9:aa:c7:1e:c0:9c:48:ed:a5:d3: 81:42:e9:c0:d0:9d:9e:a6:0b:51:14:bc:d7:32:80: 59:e9:eb:28:48:34:a7:3e:1d:bd:48:3b:92:b5:16: f7:43:2a:1b:8e:33:cc:31:01:25:d1:a6:60:16:e7: 9b:d8:55:45:5d:9e:1f:b1:4b:f8:1e:67:33:e4:8e: 6b:6d:f8:df:cd:77:3c:0a:e6:56:45:6b:4a:6a:29: a6:b4:99:11:80:6e:82:9d:7d:09:ec:19:0e:f2:e8: 78:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A3:E5:05:72:DB:11:30:23:4D:3E:01:9D:B8:6A:88:B5:99:07:6F X509v3 Authority Key Identifier: keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:93:fe:92:97:8a:85:4e:51:d4:57:3b:43:6c:00:d9:f0:0b: 67:32:77:45:f1:9d:55:64:fd:f8:c2:60:ec:ac:5c:0d:b4:be: 0c:a3:51:54:0f:2b:9e:ac:bd:75:97:f6:13:72:05:f6:ab:2e: b6:99:3a:d2:55:5d:57:dc:bd:f8:94:cc:01:39:d8:39:b2:0a: 3b:86:fa:90:79:5f:73:ed:fe:87:3b:1d:68:a3:11:fc:cb:30: 3b:e7:47:c2:fa:fd:b4:c9:62:a5:46:67:c7:ae:af:3d:14:da: 99:fd:a0:d0:33:8c:b9:00:9a:5f:15:9a:eb:d6:8d:ec:a4:ec: 95:e1:54:78:b9:10:cf:ea:0b:15:ae:81:a0:fd:83:5a:49:32: 81:8c:93:a8:d1:73:69:85:fa:8d:70:cd:b1:b5:e7:48:ed:10: a0:37:17:fc:80:75:28:74:6c:68:a4:52:61:a9:d7:92:72:ee: 98:b4:94:6e:8e:8f:da:ad:53:89:e6:1f:eb:e2:dc:0c:bd:8d: f3:f0:ee:65:e6:7c:80:a5:2f:84:16:3a:85:d4:ce:1c:b6:60: 1d:0d:10:11:89:b9:ff:83:d3:70:99:d1:22:15:01:07:06:23: 48:ae:25:4a:93:89:74:43:49:81:0a:e2:06:60:47:e6:c1:2c: 49:7a:84:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF QUUzRUYzQzAwHhcNMjQwNTA2MjEwNDAwWhcNMjQwNTEzMjEwNDAwWjAYMRYwFAYD VQQDEw02NjM5NDVjMC0wNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXLCq9GClLkeHr4lBKpK6UshU+S0wWFJCieEFcUY57AlP5f+kS6GPWt+jnup lUYUvDo8RmHpYGGGqU+JMfoM8JWb/TWQxcDOLX9s4rkldSSTHses9Al6RLQsJtVS /vZkoYZqeC+HGwRk3cEO9F+sjaZqIGexVfmi8gXokTPagoTvgLrPBCyTqJDhLsuL MEOLmonNCxE2/NGbAtmqxx7AnEjtpdOBQunA0J2epgtRFLzXMoBZ6esoSDSnPh29 SDuStRb3QyobjjPMMQEl0aZgFueb2FVFXZ4fsUv4Hmcz5I5rbfjfzXc8CuZWRWtK aimmtJkRgG6CnX0J7BkO8uh4XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqj5QVy 2xEwI00+AZ24aoi1mQdvMB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3 OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OURGMi85OTk4RjFDNDY3OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0 TTJIYlZadGJhNFBxNC04OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+k/6Sl4qFTlHUVztDbADZ8AtnMndF8Z1VZP34wmDsrFwNtL4Mo1FU DyuerL11l/YTcgX2qy62mTrSVV1X3L34lMwBOdg5sgo7hvqQeV9z7f6HOx1ooxH8 yzA750fC+v20yWKlRmfHrq89FNqZ/aDQM4y5AJpfFZrr1o3spOyV4VR4uRDP6gsV roGg/YNaSTKBjJOo0XNphfqNcM2xtedI7RCgNxf8gHUodGxopFJhqdeScu6YtJRu jo/arVOJ5h/r4twMvY3z8O5l5nyApS+EFjqF1M4ctmAdDRARibn/g9NwmdEiFQEH BiNIriVKk4l0Q0mBCuIGYEfmwSxJeoQc -----END CERTIFICATE-----Generated at Mon May 6 23:05:38 2024 by rpki-client on console-fra.rpki-client.org