$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft File: UudzDz1hVWPrWMn6dZKhvYBbWjU.mft (raw, json) Hash identifier: pUj1B+992ZZN3n4m6JWw43T/RkBdMUEzw0Ca46gmJ0c= Subject key identifier: AB:6C:0E:51:D5:2E:B5:43:61:AB:BE:FE:51:54:81:E2:9A:28:10:1A Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 Certificate issuer: /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft Manifest number: 0110 Signing time: Sun 05 May 2024 05:26:41 +0000 Manifest this update: Sun 05 May 2024 05:26:40 +0000 Manifest next update: Sun 12 May 2024 05:26:40 +0000 Files and hashes: 1: UudzDz1hVWPrWMn6dZKhvYBbWjU.crl (hash: /nmyfhh76QQWLsYyl+unCpnwDUAxWl7Ts+RE8KBU6UU=) 2: AE148B2A6BB911ED97343873C4F9AE02.roa (hash: u6SVoGQGrtu5LIBqra8PV8OpxktuEo3Qc4ssotlBn0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35 Validity Not Before: May 5 05:26:40 2024 GMT Not After : May 12 05:26:40 2024 GMT Subject: CN=66371890-27f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:41:b8:c3:c5:ce:6b:30:7c:39:6d:3d:a6: 72:70:92:bd:0d:a6:e1:3a:f5:bf:d5:c9:c3:18:3b: 73:bd:52:ac:8d:38:8d:28:c6:06:0a:13:2c:f3:cc: 52:8e:c9:ce:a9:a8:44:c0:33:75:3d:d7:32:2d:7f: f3:24:9b:dc:19:cb:42:05:7d:10:2e:6f:32:0c:07: 3c:2a:02:e5:df:47:bc:e0:45:6b:49:5d:f5:4f:89: 7c:82:99:41:94:a3:3e:4d:7d:95:ec:b3:c5:74:08: 54:98:1c:4c:a3:b0:1c:74:2a:e4:2b:f1:6d:4e:32: f2:22:1f:b8:9e:03:8e:6e:6c:c5:38:08:d3:71:05: 6a:5a:cd:35:6b:77:54:17:ac:19:06:3a:a3:42:d2: e1:84:bb:37:90:23:42:b9:45:84:77:d0:85:6e:af: 47:0e:97:27:53:2b:cc:f9:10:3b:22:f1:d3:66:3a: ce:d2:b1:95:6c:18:dd:d0:41:39:7b:f0:b5:89:c6: a6:35:5a:3d:c4:07:9b:40:18:67:95:13:b3:d6:94: 21:75:b4:35:bf:5d:c9:78:88:c6:1a:49:63:0b:fd: cf:40:91:b0:94:e9:6b:fa:5e:70:c0:c1:c9:a3:4d: 11:fd:98:28:f8:15:ff:d7:8f:75:15:1b:f7:7a:e7: 70:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6C:0E:51:D5:2E:B5:43:61:AB:BE:FE:51:54:81:E2:9A:28:10:1A X509v3 Authority Key Identifier: keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d5:3d:6d:ce:34:fe:77:62:aa:60:6b:75:13:67:1a:50:59: d1:e3:b3:20:45:5a:b2:44:4a:da:86:c3:5e:1f:a2:d7:e2:99: cf:86:45:ac:fa:51:26:0f:21:74:f2:f6:b5:2a:e6:88:e1:7b: 76:be:9e:44:bf:8d:68:5b:05:65:ee:4f:ef:b9:8d:a9:59:1e: 96:25:48:3e:62:44:b2:3d:a6:70:01:cb:c2:da:2a:be:70:64: 7d:36:6a:a8:1a:18:17:0f:8d:e8:af:92:e5:d7:b2:a3:b8:e8: 54:f6:14:0d:0b:7a:df:b9:80:49:14:3f:86:06:40:5e:8a:d5: 8b:1b:e1:52:62:e9:73:15:9a:af:c9:70:67:77:1f:be:be:57: 59:4d:14:ff:ca:fb:13:04:a7:5f:87:cd:d3:ed:57:ad:e5:0f: 8e:0b:6d:ff:96:bd:4f:20:bc:bc:d1:3d:ed:cc:93:dd:d7:e2: 3e:72:23:a5:c1:f4:bc:89:ef:59:7b:97:8d:0b:fa:74:ff:bf: fa:c1:48:67:75:61:95:8d:06:49:1d:76:cf:9d:70:ad:91:51: d4:8d:13:c0:2e:9c:ec:da:f0:be:72:cc:49:18:fc:e9:24:0d: 28:7e:0f:bd:59:f5:62:f6:c5:b3:08:ee:cb:7e:bc:db:f7:e0: 94:a5:90:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ5QkUxMTAvBgNVBAUTKDUyRTc3MzBGM0Q2MTU1NjNFQjU4QzlGQTc1OTJBMUJE ODA1QjVBMzUwHhcNMjQwNTA1MDUyNjQwWhcNMjQwNTEyMDUyNjQwWjAYMRYwFAYD VQQDEw02NjM3MTg5MC0yN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhJBuMPFzmswfDltPaZycJK9DabhOvW/1cnDGDtzvVKsjTiNKMYGChMs88xS jsnOqahEwDN1PdcyLX/zJJvcGctCBX0QLm8yDAc8KgLl30e84EVrSV31T4l8gplB lKM+TX2V7LPFdAhUmBxMo7AcdCrkK/FtTjLyIh+4ngOObmzFOAjTcQVqWs01a3dU F6wZBjqjQtLhhLs3kCNCuUWEd9CFbq9HDpcnUyvM+RA7IvHTZjrO0rGVbBjd0EE5 e/C1icamNVo9xAebQBhnlROz1pQhdbQ1v13JeIjGGkljC/3PQJGwlOlr+l5wwMHJ o00R/Zgo+BX/1491FRv3eudwewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtsDlHV LrVDYau+/lFUgeKaKBAaMB8GA1UdIwQYMBaAFFLncw89YVVj61jJ+nWSob2AW1o1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDlCRS82RkNGQjg2NjZC QjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZXUHJXTW42ZFpLaHZZQmJX alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1ZHpEejFoVldQcldNbjZkWktodllCYldqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDlCRS82RkNGQjg2NjZCQjUxMUVEQUIwODUzNkZDNEY5QUUwMi9VdWR6RHoxaFZX UHJXTW42ZFpLaHZZQmJXalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj1T1tzjT+d2KqYGt1E2caUFnR47MgRVqyRErahsNeH6LX4pnPhkWs +lEmDyF08va1KuaI4Xt2vp5Ev41oWwVl7k/vuY2pWR6WJUg+YkSyPaZwAcvC2iq+ cGR9NmqoGhgXD43or5Ll17KjuOhU9hQNC3rfuYBJFD+GBkBeitWLG+FSYulzFZqv yXBndx++vldZTRT/yvsTBKdfh83T7Vet5Q+OC23/lr1PILy80T3tzJPd1+I+ciOl wfS8ie9Ze5eNC/p0/7/6wUhndWGVjQZJHXbPnXCtkVHUjRPALpzs2vC+csxJGPzp JA0ofg+9WfVi9sWzCO7Lfrzb9+CUpZBc -----END CERTIFICATE-----Generated at Sun May 5 06:01:18 2024 by rpki-client on console-fra.rpki-client.org