$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft File: R_UMlYv5z1RcYBresE-KBeEB2aU.mft (raw, json) Hash identifier: bAWm8P1LylRrq2W68lOPUPFGwq0HOjagw/7PHQWeCZY= Subject key identifier: AB:7D:02:CA:DD:95:4E:A6:8F:CB:B8:58:D8:F8:E0:A4:D3:97:90:57 Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5 Certificate issuer: /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft Manifest number: 2F Signing time: Fri 17 May 2024 08:34:22 +0000 Manifest this update: Fri 17 May 2024 08:34:22 +0000 Manifest next update: Fri 24 May 2024 08:34:22 +0000 Files and hashes: 1: R_UMlYv5z1RcYBresE-KBeEB2aU.crl (hash: bwPCvS5dDdGVwMA8rqvV8jnZqlHmY0DMPGxyJlPdzKU=) 2: 0F778EDCEBB411EE9D86095BC4F9AE02.roa (hash: CylyyzwIG08L70kRCG76cWxCrDSIPb2MuuRknQBCs64=) 3: 0F0A0C72EBB411EE9D86095BC4F9AE02.roa (hash: SQ0tWzqj2x2vx8fy9K7AJ1cebETDa6gFcypKPROA2yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5 Validity Not Before: May 17 08:34:22 2024 GMT Not After : May 24 08:34:22 2024 GMT Subject: CN=6647168e-59f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:b1:12:40:4b:98:99:0a:cc:ac:3c:13:a8: 87:00:cf:bc:9d:e7:7c:b2:46:3e:72:fe:02:58:59: cb:6a:66:92:ee:a1:73:fc:2f:59:bd:46:82:cb:3e: ad:9d:95:d6:ce:30:39:a2:ef:52:ee:d9:be:36:f2: 3d:d2:91:f4:d6:4c:44:ec:e6:ef:d6:a3:ca:62:78: 93:12:c7:42:70:bf:f0:ce:22:ce:54:1f:74:ea:49: 65:51:77:d3:60:aa:e0:e4:3e:af:d7:86:be:68:c7: e6:2a:77:3d:38:1c:6a:9f:63:93:fb:2a:21:50:ec: 13:de:80:d1:fb:aa:23:3e:9e:0b:bd:ef:0b:06:2d: 2d:12:07:f2:ff:9e:a0:0a:37:71:c2:2f:f9:2a:ab: 58:c6:dd:b1:0c:df:c8:40:8a:15:fd:9b:8d:df:ac: c6:ba:66:56:b7:d0:60:27:c3:51:25:2f:ce:72:da: 8a:4f:3d:56:8b:ee:45:69:9e:6f:e1:ee:e2:79:93: 8a:49:f6:b0:98:f4:4e:c4:57:56:f0:18:0f:fc:77: 2f:64:ee:d7:22:df:a3:67:d5:8e:ab:4a:42:62:b8: 52:05:5a:92:ac:fa:6d:0c:e0:0c:f0:80:ca:26:f9: e0:13:fd:cd:1b:81:86:ee:09:b7:72:7c:7c:af:16: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7D:02:CA:DD:95:4E:A6:8F:CB:B8:58:D8:F8:E0:A4:D3:97:90:57 X509v3 Authority Key Identifier: keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:bd:be:3a:a7:a8:ec:32:b4:72:c6:1f:8f:6d:76:1a:4d:bc: 95:28:85:e0:77:42:b0:3c:58:08:81:c3:82:39:5a:6e:ba:6d: 41:3f:73:c8:8b:be:0f:c8:86:71:31:ef:1b:46:70:0f:48:9a: e6:f0:65:6d:89:20:1a:9f:0c:78:99:ac:17:dc:b5:f6:fc:1e: bb:f7:82:2f:14:db:df:06:37:65:b9:b8:ab:0b:42:55:f1:41: 10:0e:e2:65:83:69:82:99:df:6e:e1:c1:e2:5d:a4:d4:1f:81: e4:31:e2:a4:da:40:f4:58:43:72:66:7a:8e:9b:da:49:b2:36: d9:90:2d:02:df:7e:a4:85:62:d9:2a:84:1a:18:43:33:f0:70: 70:d6:76:e9:04:fa:6f:dc:a1:41:64:45:53:5b:f5:d3:01:f8: 36:27:7c:71:65:67:37:b0:ab:ac:a6:44:a6:ce:f7:e1:2f:f4: 31:a1:25:26:cc:be:60:9a:63:ea:d3:72:f5:0c:ab:5a:1b:28: bb:69:b7:4a:e7:ec:00:3a:9d:91:1e:54:02:e8:c7:ec:b6:36: f4:55:9f:83:fb:c9:bb:36:d5:d2:f8:75:87:4b:89:7d:6c:e3: 2e:41:cf:20:61:7c:83:23:d9:9f:7f:60:1b:1e:52:18:72:f4: c6:49:47:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzQ5MDExMC8GA1UEBRMoNDdGNTBDOTU4QkY5Q0Y1NDVDNjAxQURFQjA0RjhBMDVF MTAxRDlBNTAeFw0yNDA1MTcwODM0MjJaFw0yNDA1MjQwODM0MjJaMBgxFjAUBgNV BAMTDTY2NDcxNjhlLTU5ZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBsbESQEuYmQrMrDwTqIcAz7yd53yyRj5y/gJYWctqZpLuoXP8L1m9RoLLPq2d ldbOMDmi71Lu2b428j3SkfTWTETs5u/Wo8pieJMSx0Jwv/DOIs5UH3TqSWVRd9Ng quDkPq/Xhr5ox+Yqdz04HGqfY5P7KiFQ7BPegNH7qiM+ngu97wsGLS0SB/L/nqAK N3HCL/kqq1jG3bEM38hAihX9m43frMa6Zla30GAnw1ElL85y2opPPVaL7kVpnm/h 7uJ5k4pJ9rCY9E7EV1bwGA/8dy9k7tci36Nn1Y6rSkJiuFIFWpKs+m0M4AzwgMom +eAT/c0bgYbuCbdyfHyvFr3XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq30Cyt2V TqaPy7hY2PjgpNOXkFcwHwYDVR0jBBgwFoAUR/UMlYv5z1RcYBresE+KBeEB2aUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNDkwLzhGNTI0ODhFRDA1 NDExRUVBRjc5OUYxNkM0RjlBRTAyL1JfVU1sWXY1ejFSY1lCcmVzRS1LQmVFQjJh VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUl9VTWxZdjV6MVJjWUJyZXNFLUtCZUVCMmFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz NDkwLzhGNTI0ODhFRDA1NDExRUVBRjc5OUYxNkM0RjlBRTAyL1JfVU1sWXY1ejFS Y1lCcmVzRS1LQmVFQjJhVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADW9vjqnqOwytHLGH49tdhpNvJUoheB3QrA8WAiBw4I5Wm66bUE/c8iL vg/IhnEx7xtGcA9ImubwZW2JIBqfDHiZrBfctfb8Hrv3gi8U298GN2W5uKsLQlXx QRAO4mWDaYKZ327hweJdpNQfgeQx4qTaQPRYQ3Jmeo6b2kmyNtmQLQLffqSFYtkq hBoYQzPwcHDWdukE+m/coUFkRVNb9dMB+DYnfHFlZzewq6ymRKbO9+Ev9DGhJSbM vmCaY+rTcvUMq1obKLtpt0rn7AA6nZEeVALox+y2NvRVn4P7ybs21dL4dYdLiX1s 4y5BzyBhfIMj2Z9/YBseUhhy9MZJR8A= -----END CERTIFICATE-----Generated at Fri May 17 10:59:09 2024 by rpki-client on console-ams.rpki-client.org