$ rpki-client -vvf rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft File: uIPha7zTcVtWFzExa6Gw70BTwS4.mft (raw, json) Hash identifier: YoI/TLo33JOEMW/D0ZsBReOIDQquGKtjiIq9ibwptc0= Subject key identifier: 42:E3:A6:3D:5A:03:00:BF:36:CD:71:9F:F3:4F:11:80:4D:11:45:A6 Authority key identifier: B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E Certificate issuer: /CN=A914B05F/serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E Certificate serial: 1783 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft Manifest number: 1779 Signing time: Mon 06 May 2024 17:06:30 +0000 Manifest this update: Mon 06 May 2024 17:06:29 +0000 Manifest next update: Mon 13 May 2024 17:06:29 +0000 Files and hashes: 1: uIPha7zTcVtWFzExa6Gw70BTwS4.crl (hash: IRdoWxcT9zkiBWOIQGqhnbLURcGc5Zaix+4ZwQcdW/s=) 2: 3482BB06AB3E11E7B15D1874C4F9AE02.roa (hash: aCgydAZWG9Qj0x5Snq/rgXTdby4f0THGkKZWUm6Om2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6019 (0x1783) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B05F/serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E Validity Not Before: May 6 17:06:29 2024 GMT Not After : May 13 17:06:29 2024 GMT Subject: CN=66390e15-ad48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:be:86:57:ac:a9:9e:af:07:fb:86:33:40: aa:39:e4:53:24:18:ca:42:33:25:a9:c9:02:32:23: 90:66:27:c9:06:31:d0:c6:5c:be:b8:69:b8:b4:b7: cc:a6:90:9d:b9:2f:15:d2:4d:45:84:a1:f8:a6:5e: bb:c1:75:ea:46:95:a7:13:74:b9:ab:ee:90:98:53: 9c:06:7e:44:28:91:47:64:8e:a9:a8:58:e8:fd:c7: 8a:a8:13:12:ae:b3:8a:a3:99:85:82:77:34:73:5c: a7:82:2a:c6:73:b4:f7:de:20:c3:f2:13:13:51:16: 7b:fa:1a:1d:9d:d4:5a:17:e3:a4:52:39:ef:9b:5b: ca:89:d8:5a:d3:14:35:36:18:14:e9:b7:3d:72:2c: 56:d0:f4:95:e8:84:2f:af:43:38:b6:fe:88:28:6a: 18:6a:2a:14:64:d2:8d:47:80:eb:39:de:52:4f:e1: ba:96:a9:b6:7c:f2:de:ae:49:a3:d7:cd:92:02:e4: 8b:18:a7:19:3d:b2:70:37:6f:48:33:fe:68:06:a0: e3:34:9c:e1:0b:c6:96:4e:d0:09:54:ad:a1:ee:63: ad:56:20:d5:99:49:da:f1:5c:c7:6f:6c:0b:20:59: 6b:fa:55:1a:00:fe:c8:f1:f5:20:5f:0f:04:70:00: d1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E3:A6:3D:5A:03:00:BF:36:CD:71:9F:F3:4F:11:80:4D:11:45:A6 X509v3 Authority Key Identifier: keyid:B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:e5:23:15:52:0b:30:cb:01:72:20:6f:cb:05:49:ee:4f:80: e8:34:5c:a9:47:21:c8:19:d7:65:26:b1:e5:54:a7:4b:8a:e7: 54:fd:f1:be:c5:6f:3a:44:5a:0e:49:6a:bf:fc:27:b1:93:f1: 10:4a:d6:52:f7:85:b1:39:11:c1:57:27:f0:49:79:ae:92:16: 86:62:4a:2e:fb:6d:6a:55:a2:34:9d:4f:88:87:7b:50:79:08: 1a:17:97:8d:e7:25:5c:25:08:96:23:93:cc:9e:dc:2e:26:be: 5e:d2:5a:0f:73:1f:a8:61:9d:0a:33:1b:84:5d:67:68:5b:80: 03:f3:b1:4a:c9:48:94:b4:a7:fd:4e:10:2c:57:b0:cc:43:11: 4a:ab:c3:55:5f:76:60:da:cd:3b:8e:c1:ee:ea:85:fd:e1:76: 8b:d0:53:50:e9:a2:da:4e:3c:9e:8b:1d:13:07:17:19:e1:bc: 0f:0c:b1:8b:a6:33:ea:16:df:f9:dd:c1:3c:54:8d:30:4e:66: 9f:6f:44:c1:0e:db:13:fa:34:79:ec:71:83:e6:dd:31:ad:8a: 93:3a:5e:46:df:e7:11:c4:cc:a5:79:2f:01:77:fb:5d:e8:d9: 9a:4e:e0:cb:15:ad:6b:2e:d3:bc:c8:85:94:99:92:2a:23:02: bc:b0:ee:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwNUYxMTAvBgNVBAUTKEI4ODNFMTZCQkNEMzcxNUI1NjE3MzEzMTZCQTFCMEVG NDA1M0MxMkUwHhcNMjQwNTA2MTcwNjI5WhcNMjQwNTEzMTcwNjI5WjAYMRYwFAYD VQQDEw02NjM5MGUxNS1hZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUS+hlesqZ6vB/uGM0CqOeRTJBjKQjMlqckCMiOQZifJBjHQxly+uGm4tLfM ppCduS8V0k1FhKH4pl67wXXqRpWnE3S5q+6QmFOcBn5EKJFHZI6pqFjo/ceKqBMS rrOKo5mFgnc0c1yngirGc7T33iDD8hMTURZ7+hodndRaF+OkUjnvm1vKidha0xQ1 NhgU6bc9cixW0PSV6IQvr0M4tv6IKGoYaioUZNKNR4DrOd5ST+G6lqm2fPLerkmj 182SAuSLGKcZPbJwN29IM/5oBqDjNJzhC8aWTtAJVK2h7mOtViDVmUna8VzHb2wL IFlr+lUaAP7I8fUgXw8EcADRrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELjpj1a AwC/Ns1xn/NPEYBNEUWmMB8GA1UdIwQYMBaAFLiD4Wu803FbVhcxMWuhsO9AU8Eu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA1Ri8zMzUxMjA0MEFC M0IxMUU3QkFBQjBENkJDNEY5QUUwMi91SVBoYTd6VGNWdFdGekV4YTZHdzcwQlR3 UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJUGhhN3pUY1Z0V0Z6RXhhNkd3NzBCVHdTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjA1Ri8zMzUxMjA0MEFCM0IxMUU3QkFBQjBENkJDNEY5QUUwMi91SVBoYTd6VGNW dFdGekV4YTZHdzcwQlR3UzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI5SMVUgswywFyIG/LBUnuT4DoNFypRyHIGddlJrHlVKdLiudU/fG+ xW86RFoOSWq//Cexk/EQStZS94WxORHBVyfwSXmukhaGYkou+21qVaI0nU+Ih3tQ eQgaF5eN5yVcJQiWI5PMntwuJr5e0loPcx+oYZ0KMxuEXWdoW4AD87FKyUiUtKf9 ThAsV7DMQxFKq8NVX3Zg2s07jsHu6oX94XaL0FNQ6aLaTjyeix0TBxcZ4bwPDLGL pjPqFt/53cE8VI0wTmafb0TBDtsT+jR57HGD5t0xrYqTOl5G3+cRxMyleS8Bd/td 6NmaTuDLFa1rLtO8yIWUmZIqIwK8sO7P -----END CERTIFICATE-----Generated at Mon May 6 20:19:10 2024 by rpki-client on console-fra.rpki-client.org