$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft File: uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft (raw, json) Hash identifier: p/uqV+CtI4U1Gm2zGWNk9svQF9zC9shhac9KH/8M/5c= Subject key identifier: D7:A9:E7:AE:E3:A3:BC:4D:74:18:42:B8:15:9A:4C:64:F7:DE:09:BA Authority key identifier: BB:2A:0F:49:32:1E:08:0B:22:70:BD:0C:8D:9B:8D:4B:79:3B:10:44 Certificate issuer: /CN=A9154388/serialNumber=BB2A0F49321E080B2270BD0C8D9B8D4B793B1044 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft Manifest number: 05 Signing time: Wed 23 Oct 2024 06:52:31 +0000 Manifest this update: Wed 23 Oct 2024 06:52:31 +0000 Manifest next update: Wed 30 Oct 2024 06:52:31 +0000 Files and hashes: 1: uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl (hash: hbKFXOX3ujK28Zscf46IojPCWFSlz4Ssgqh1Y1wFeaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154388/serialNumber=BB2A0F49321E080B2270BD0C8D9B8D4B793B1044 Validity Not Before: Oct 23 06:52:31 2024 GMT Not After : Oct 30 06:52:31 2024 GMT Subject: CN=67189d2f-c271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a8:95:4e:0f:d8:ef:e3:0f:dd:f1:95:8d:e7: 21:5f:f6:fe:6b:9f:8c:21:33:48:8f:47:0b:89:4a: 22:f9:27:1c:e8:96:57:78:63:cf:f1:f3:88:0c:16: 47:54:69:f0:21:fc:9c:56:b7:29:3a:34:7d:0d:2f: 97:65:2f:6c:97:6a:47:41:a6:8f:8c:77:ad:12:de: 0d:d7:83:0a:c9:27:f4:1b:6c:ee:15:d0:9a:4f:ca: 84:9b:4d:db:f0:af:3e:49:70:98:a3:b0:10:5c:6c: c7:f0:b4:53:88:06:07:ec:f2:c0:66:b5:5e:e8:ca: a8:dd:1b:a7:86:1d:49:96:dd:59:85:cd:49:6f:32: aa:30:e0:25:2f:92:c5:3a:f6:29:64:46:dd:db:9a: b9:57:a9:74:da:f5:97:b6:b4:45:3b:50:41:97:00: 31:f4:20:ce:27:e8:85:e6:f0:56:ad:e3:dd:17:33: 2a:44:1e:fb:19:07:01:da:7a:2f:0f:83:56:e1:b6: e1:2c:d4:53:f7:2a:7b:f0:72:86:e8:03:d2:c4:c5: d6:5e:2e:27:d2:19:ad:02:44:a5:2d:fc:50:a4:f4: d7:a5:24:8a:50:82:ec:f1:b0:e6:8e:33:05:e0:b1: 8a:60:9e:67:e6:95:84:ff:1e:fc:d5:a3:b5:ef:d2: 5e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A9:E7:AE:E3:A3:BC:4D:74:18:42:B8:15:9A:4C:64:F7:DE:09:BA X509v3 Authority Key Identifier: keyid:BB:2A:0F:49:32:1E:08:0B:22:70:BD:0C:8D:9B:8D:4B:79:3B:10:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:28:33:7d:17:f6:36:a6:c8:4e:e4:59:71:14:7a:d5:3c:18: 0e:3a:e5:b5:ec:93:24:9e:e5:af:d8:d2:26:08:4c:ab:32:c6: 59:a3:b9:0a:0e:3d:5c:a5:75:8a:80:d8:7f:35:3e:eb:4e:1a: cd:71:b9:d1:97:a8:36:44:25:0c:c0:b4:5f:ca:cf:0b:22:25: 83:d2:f7:52:1d:4e:3c:6a:19:12:a9:d5:f7:e0:5e:65:14:8a: d2:65:a3:c9:89:3d:69:aa:3c:20:08:71:d6:c4:ca:b3:6e:7f: db:28:55:6a:01:94:ac:5d:61:70:fc:45:af:91:94:a0:5b:90: 84:46:d2:7f:dd:46:bf:60:71:7a:cc:96:9e:26:4f:7d:ad:ca: 35:cc:c6:7b:3d:76:9b:d6:28:eb:7b:a0:25:9f:11:41:15:08: 48:a3:6c:53:7c:ba:02:39:b3:11:21:cf:1f:90:a8:4a:83:db: ff:e7:38:3a:0d:56:47:4a:37:86:99:76:16:09:ff:57:dc:7d: be:a0:c5:23:d4:ae:69:15:db:e4:9a:67:9b:d5:64:af:71:70: 52:10:7c:51:15:bf:16:c3:00:75:87:9c:5c:d4:5d:53:e1:77: 46:c8:88:97:22:28:4c:db:92:bf:b9:82:d0:0b:39:95:51:33: 39:d7:7b:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDM4ODExMC8GA1UEBRMoQkIyQTBGNDkzMjFFMDgwQjIyNzBCRDBDOEQ5QjhENEI3 OTNCMTA0NDAeFw0yNDEwMjMwNjUyMzFaFw0yNDEwMzAwNjUyMzFaMBgxFjAUBgNV BAMTDTY3MTg5ZDJmLWMyNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkqJVOD9jv4w/d8ZWN5yFf9v5rn4whM0iPRwuJSiL5Jxzolld4Y8/x84gMFkdU afAh/JxWtyk6NH0NL5dlL2yXakdBpo+Md60S3g3XgwrJJ/QbbO4V0JpPyoSbTdvw rz5JcJijsBBcbMfwtFOIBgfs8sBmtV7oyqjdG6eGHUmW3VmFzUlvMqow4CUvksU6 9ilkRt3bmrlXqXTa9Ze2tEU7UEGXADH0IM4n6IXm8Fat490XMypEHvsZBwHaei8P g1bhtuEs1FP3KnvwcoboA9LExdZeLifSGa0CRKUt/FCk9NelJIpQguzxsOaOMwXg sYpgnmfmlYT/HvzVo7Xv0l4TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU16nnruOj vE10GEK4FZpMZPfeCbowHwYDVR0jBBgwFoAUuyoPSTIeCAsicL0MjZuNS3k7EEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0Mzg4LzM4NDU3Q0Y2OEMz NzExRUY4MDkwMUMyRUM0RjlBRTAyL3V5b1BTVEllQ0FzaWNMME1qWnVOUzNrN0VF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdXlvUFNUSWVDQXNpY0wwTWpadU5TM2s3RUVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 Mzg4LzM4NDU3Q0Y2OEMzNzExRUY4MDkwMUMyRUM0RjlBRTAyL3V5b1BTVEllQ0Fz aWNMME1qWnVOUzNrN0VFUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAUoM30X9jamyE7kWXEUetU8GA465bXskySe5a/Y0iYITKsyxlmjuQoO PVyldYqA2H81PutOGs1xudGXqDZEJQzAtF/KzwsiJYPS91IdTjxqGRKp1ffgXmUU itJlo8mJPWmqPCAIcdbEyrNuf9soVWoBlKxdYXD8Ra+RlKBbkIRG0n/dRr9gcXrM lp4mT32tyjXMxns9dpvWKOt7oCWfEUEVCEijbFN8ugI5sxEhzx+QqEqD2//nODoN VkdKN4aZdhYJ/1fcfb6gxSPUrmkV2+SaZ5vVZK9xcFIQfFEVvxbDAHWHnFzUXVPh d0bIiJciKEzbkr+5gtALOZVRMznXe3Y= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:53 2024 by rpki-client on console-ams.rpki-client.org