$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft File: UxLzmab36w3c1RwDn4P3t6R6Xwk.mft (raw, json) Hash identifier: e0u/bzZ31oXpfHimj9K7FMe4NqVG8ce59HnQeqKC9ew= Subject key identifier: 57:2B:1B:2F:2C:FB:FE:3C:63:E2:61:7B:7D:0D:33:80:CB:D0:44:51 Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Certificate serial: 33EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft Manifest number: 3369 Signing time: Mon 06 May 2024 15:37:19 +0000 Manifest this update: Mon 06 May 2024 15:37:18 +0000 Manifest next update: Mon 13 May 2024 15:37:18 +0000 Files and hashes: 1: UxLzmab36w3c1RwDn4P3t6R6Xwk.crl (hash: 2hGGr7ffHsJhRG8azJjYRne59b7kbiUxWHg7i+3E17Q=) 2: E48E2E94017211EBA18CC269C4F9AE02.roa (hash: w4MH/ko5vS+JmhaJ2aG5qwufc0c0o1UhxJNFVXz21HI=) 3: 264D14B8015411EB8CBF186EC4F9AE02.roa (hash: Rt36P4l+RJ9cJDcx1ZUR7UFvmSiKt+xCsQytuqE+FuY=) 4: 95B5C59E2DCE11EEB652B16FC4F9AE02.roa (hash: QCrnvrIhopmMc/N16cpZxTCv1QNZeVWx1Qu/cG0grmY=) 5: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (hash: 0gjytxXMkRGpAfvhAn4DXXB7sM/E6Hqu+qPHX1nuJ0U=) 6: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (hash: df/e2otzGVTU41NEq7pypuLORhaRyrxt1Fs3RsSYs6k=) 7: 03C522BA8CF211ED8699F014C4F9AE02.roa (hash: 5x0Jjgm4/d/6c5vI/wEeHOfqHTmP7zqOpbfQ2/4+gm8=) 8: E367308E8D8811EDB3C13D6CC4F9AE02.roa (hash: Rw+xZrPE7JfKt33gxLSE4ynedqahF1i+l992xJrn3gE=) 9: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (hash: ndQXYZEDJrYkAW+jASzWJ8tE2xMBarAUb8KkLNaLzOo=) 10: E474AF108D8811EDB3C13D6CC4F9AE02.roa (hash: 4qd2K6kRKLYZ4c94ODZqT6KDm2RQXj8HYq3qQJIs5sM=) 11: 56C4FAF42D4511EAB70F247AC4F9AE02.roa (hash: 3TRCI1Mw7eWktx7seLXU6P5rn8tbh58u6dpjlnqhy5E=) 12: EF1D0466455311E98FA31F68C4F9AE02.roa (hash: W59zPFhzH6srOXFLWboQB5VagZgE+I8u1/bvZ3GwejM=) 13: C2F17AB22DCE11EEA2884670C4F9AE02.roa (hash: 6RV+8EFAwjvBrux8h7BdNlD+hbhZDD26pn+W86CfTqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13292 (0x33ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Validity Not Before: May 6 15:37:18 2024 GMT Not After : May 13 15:37:18 2024 GMT Subject: CN=6638f92f-d64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fa:a9:b0:e9:2b:30:df:99:ad:f4:70:a5:9e: 04:53:1f:ce:f7:4e:d5:57:18:88:76:81:82:c4:f9: de:86:96:2f:41:2f:d1:cf:80:60:a2:95:77:b9:c3: a9:14:9c:38:db:2d:73:ce:14:d8:f6:e0:6a:37:e9: 72:d5:84:5e:03:0f:7f:95:cd:43:b4:9b:d3:4f:4a: eb:53:64:f2:37:05:d2:4b:4b:bf:c5:d9:d3:45:42: 5c:97:6c:66:f7:c7:59:57:b5:f4:80:7e:19:d8:dc: cf:64:23:a3:63:fd:9b:85:8d:e5:48:ff:0a:db:f1: 97:e0:ba:fd:96:59:a8:15:3d:a5:62:ab:fb:46:0a: 81:34:19:12:31:c1:e0:5b:99:f9:03:27:fb:39:0a: a2:6d:8e:b0:77:ac:56:cc:b5:72:48:40:9c:43:6c: 9a:69:4b:31:0a:8d:ad:c0:06:d6:15:9d:70:39:da: 86:ed:ef:e6:d7:23:be:d4:dc:d9:24:1b:fd:20:e4: 77:fa:28:07:58:c7:82:7a:35:fd:57:7b:3f:5b:90: a5:21:18:37:1e:ea:e4:f1:1a:2c:d6:9a:5a:bd:cc: a2:05:b5:91:4b:79:35:85:2c:11:73:61:79:b1:c7: fd:1d:25:81:c0:c9:f8:b5:83:9e:98:bf:3b:7f:40: 86:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2B:1B:2F:2C:FB:FE:3C:63:E2:61:7B:7D:0D:33:80:CB:D0:44:51 X509v3 Authority Key Identifier: keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f3:66:c7:3e:39:2c:f8:20:6c:a9:04:4a:31:30:07:c8:d1: fa:7f:c0:8e:46:41:c0:62:25:a9:2c:d0:7f:c4:2a:69:97:a1: aa:b8:bd:ac:04:7d:df:16:ab:2d:e7:27:12:1c:47:64:d7:a5: a0:ec:05:ee:26:2f:a7:bd:cd:d8:3a:b2:25:0e:b9:fc:a2:a8: a8:60:46:c6:36:8d:80:78:58:d1:f5:e6:ac:08:99:c9:a3:49: c1:ca:ac:8b:e0:b5:1b:d7:6b:07:cb:8e:d6:5f:48:52:6c:82: c0:e1:69:1e:c8:73:cf:10:65:ed:fc:dd:53:08:17:e2:c2:62: 82:bd:e3:cf:67:91:a1:d4:4c:2e:7c:b7:9f:07:db:94:27:8b: 01:6c:19:c9:8f:d8:68:66:f3:fa:4b:3e:18:3d:cd:b4:af:f9: 51:b6:89:9e:59:5a:1a:e6:88:67:e1:42:99:5d:49:2c:0d:62: 8b:86:dd:75:d1:f8:b5:19:a3:b3:8c:04:9c:49:16:82:6a:7a: 97:e5:94:38:8e:c6:7f:db:aa:f2:93:9a:aa:92:5f:3b:9b:25: 12:6c:af:96:c9:a0:f9:52:db:de:c6:af:7d:78:d6:40:b2:7b: 8b:96:4a:f5:a2:43:da:ac:e2:67:be:e9:c2:26:b2:ae:a8:5e: 06:8e:6a:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3 QTQ3QTVGMDkwHhcNMjQwNTA2MTUzNzE4WhcNMjQwNTEzMTUzNzE4WjAYMRYwFAYD VQQDEw02NjM4ZjkyZi1kNjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovqpsOkrMN+ZrfRwpZ4EUx/O907VVxiIdoGCxPnehpYvQS/Rz4BgopV3ucOp FJw42y1zzhTY9uBqN+ly1YReAw9/lc1DtJvTT0rrU2TyNwXSS0u/xdnTRUJcl2xm 98dZV7X0gH4Z2NzPZCOjY/2bhY3lSP8K2/GX4Lr9llmoFT2lYqv7RgqBNBkSMcHg W5n5Ayf7OQqibY6wd6xWzLVySECcQ2yaaUsxCo2twAbWFZ1wOdqG7e/m1yO+1NzZ JBv9IOR3+igHWMeCejX9V3s/W5ClIRg3Hurk8Ros1ppavcyiBbWRS3k1hSwRc2F5 scf9HSWBwMn4tYOemL87f0CGUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcrGy8s +/48Y+Jhe30NM4DL0ERRMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1 MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkM3QS80QzUyOEY3ODQ1MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3 M2MxUndEbjRQM3Q2UjZYd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs82bHPjks+CBsqQRKMTAHyNH6f8CORkHAYiWpLNB/xCppl6GquL2s BH3fFqst5ycSHEdk16Wg7AXuJi+nvc3YOrIlDrn8oqioYEbGNo2AeFjR9easCJnJ o0nByqyL4LUb12sHy47WX0hSbILA4WkeyHPPEGXt/N1TCBfiwmKCvePPZ5Gh1Ewu fLefB9uUJ4sBbBnJj9hoZvP6Sz4YPc20r/lRtomeWVoa5ohn4UKZXUksDWKLht11 0fi1GaOzjAScSRaCanqX5ZQ4jsZ/26ryk5qqkl87myUSbK+WyaD5Utvexq99eNZA snuLlkr1okParOJnvunCJrKuqF4GjmoX -----END CERTIFICATE-----Generated at Mon May 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org