$ rpki-client -vvf rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft File: UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft (raw, json) Hash identifier: cuYCM3fYi/0n08pcZWHMhNG4iI6eHgoarouqUNFDKgk= Subject key identifier: AF:EC:09:82:B2:9B:11:D9:AB:F6:75:D3:30:17:55:57:CF:F2:72:93 Authority key identifier: 50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79 Certificate issuer: /CN=A9157031/serialNumber=50E50EDAF64A2C25B731239673D9070F61830279 Certificate serial: 031E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft Manifest number: 031C Signing time: Fri 03 May 2024 03:10:02 +0000 Manifest this update: Fri 03 May 2024 03:10:01 +0000 Manifest next update: Fri 10 May 2024 03:10:01 +0000 Files and hashes: 1: UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl (hash: X1RG/L9eIfi3ftf7wB1pAkwpZhG9VRD9xttgg0iUhyY=) 2: 32D8FF34C99E11ED98E9BE5BC4F9AE02.roa (hash: VMUCqPEo6s3IyQmGwdfYbeuxJD+3gM2MVq6Pur4XNUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 798 (0x31e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157031/serialNumber=50E50EDAF64A2C25B731239673D9070F61830279 Validity Not Before: May 3 03:10:01 2024 GMT Not After : May 10 03:10:01 2024 GMT Subject: CN=66345589-e735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fb:2f:98:5d:cd:e8:6c:25:da:62:ee:00:a2: e1:06:66:58:0e:73:a4:d8:d9:98:e2:6d:c3:76:13: 25:be:57:83:45:b5:35:53:d9:cc:48:6f:3b:96:6a: fb:ef:40:bd:b9:a5:4e:59:6e:ce:fd:38:fd:b5:2c: 3c:ea:e8:ae:14:f6:fb:cb:0b:09:68:e4:42:32:34: c4:27:c5:94:fd:65:1c:41:03:60:80:a7:c5:b6:d0: 97:94:c2:db:bb:19:bf:15:b4:65:41:59:52:41:4d: ef:f1:48:4d:de:79:0d:76:67:86:29:73:9c:91:65: f8:dc:cd:dc:70:a2:c9:03:4c:68:62:09:3f:cc:28: e0:88:d0:0d:47:15:e1:12:6a:61:a0:7e:4f:3c:c0: 44:09:0c:b1:0e:12:18:fd:fb:e7:ba:29:87:f6:e3: e6:3f:9d:70:b7:90:42:ab:a5:c0:88:90:c7:57:48: d1:c4:8c:bf:94:3a:7a:64:0c:f8:24:7a:a6:20:37: c4:e2:49:0b:a5:21:31:1a:94:e3:7e:2e:0f:9d:8d: d8:7b:06:03:39:3d:0f:2a:04:35:9e:58:e6:c9:6d: a6:4d:3f:a0:53:32:a2:9c:92:63:6c:b2:c1:83:4a: e8:39:c8:01:f2:f9:45:76:41:a0:4d:c1:db:f1:cc: 76:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EC:09:82:B2:9B:11:D9:AB:F6:75:D3:30:17:55:57:CF:F2:72:93 X509v3 Authority Key Identifier: keyid:50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:ea:12:ff:fc:30:56:7e:1f:56:2a:6a:6f:aa:38:3b:bd:1e: 68:61:4a:e8:ec:4c:30:5a:13:fb:5d:29:74:61:04:f0:d4:db: 4b:36:fe:5c:99:d5:0a:15:b5:25:aa:01:b4:0c:7c:38:a3:e8: d0:db:1d:e0:24:97:bd:6a:26:1f:df:8d:73:8b:6b:9e:a3:c4: d1:01:77:c8:cc:97:c0:58:e5:fd:e2:d3:56:70:73:79:86:d8: 62:30:48:93:7c:89:8f:c1:8c:4d:9e:fa:7e:82:15:b3:a6:63: 09:7f:01:46:01:99:15:7d:9e:b6:26:58:da:27:75:1a:04:83: 66:96:49:fc:5d:83:b5:3e:25:e5:72:9d:f4:ab:7d:c1:21:23: 3d:b0:4f:c7:e1:de:dc:cd:e1:31:c6:d0:ea:c4:79:c1:b7:06: d0:77:3b:bc:1a:78:9f:1d:06:86:82:b0:22:86:3f:76:d0:ee: 56:cf:dc:a0:bb:2d:3e:e0:81:71:1a:af:f9:5c:78:d9:b3:64: 4d:7c:3b:0d:07:f9:88:24:c7:a3:cc:f1:a7:23:49:0b:36:9a: 19:68:62:00:25:71:da:a6:80:90:6c:34:85:a7:be:8c:c7:74: 71:c1:5f:ad:e4:90:fc:05:fb:f1:b3:53:6d:57:41:97:de:10: ad:1f:72:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTcwMzExMTAvBgNVBAUTKDUwRTUwRURBRjY0QTJDMjVCNzMxMjM5NjczRDkwNzBG NjE4MzAyNzkwHhcNMjQwNTAzMDMxMDAxWhcNMjQwNTEwMDMxMDAxWjAYMRYwFAYD VQQDEw02NjM0NTU4OS1lNzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fsvmF3N6Gwl2mLuAKLhBmZYDnOk2NmY4m3DdhMlvleDRbU1U9nMSG87lmr7 70C9uaVOWW7O/Tj9tSw86uiuFPb7ywsJaORCMjTEJ8WU/WUcQQNggKfFttCXlMLb uxm/FbRlQVlSQU3v8UhN3nkNdmeGKXOckWX43M3ccKLJA0xoYgk/zCjgiNANRxXh EmphoH5PPMBECQyxDhIY/fvnuimH9uPmP51wt5BCq6XAiJDHV0jRxIy/lDp6ZAz4 JHqmIDfE4kkLpSExGpTjfi4PnY3YewYDOT0PKgQ1nljmyW2mTT+gUzKinJJjbLLB g0roOcgB8vlFdkGgTcHb8cx2aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/sCYKy mxHZq/Z10zAXVVfP8nKTMB8GA1UdIwQYMBaAFFDlDtr2SiwltzEjlnPZBw9hgwJ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzAzMS83QTAwNEY3ODdF QzkxMUVDODRFQzQ0MThDNEY5QUUwMi9VT1VPMnZaS0xDVzNNU09XYzlrSEQyR0RB bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPVU8ydlpLTENXM01TT1djOWtIRDJHREFuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzAzMS83QTAwNEY3ODdFQzkxMUVDODRFQzQ0MThDNEY5QUUwMi9VT1VPMnZaS0xD VzNNU09XYzlrSEQyR0RBbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB06hL//DBWfh9WKmpvqjg7vR5oYUro7EwwWhP7XSl0YQTw1NtLNv5c mdUKFbUlqgG0DHw4o+jQ2x3gJJe9aiYf341zi2ueo8TRAXfIzJfAWOX94tNWcHN5 hthiMEiTfImPwYxNnvp+ghWzpmMJfwFGAZkVfZ62JljaJ3UaBINmlkn8XYO1PiXl cp30q33BISM9sE/H4d7czeExxtDqxHnBtwbQdzu8GnifHQaGgrAihj920O5Wz9yg uy0+4IFxGq/5XHjZs2RNfDsNB/mIJMejzPGnI0kLNpoZaGIAJXHapoCQbDSFp76M x3RxwV+t5JD8Bfvxs1NtV0GX3hCtH3JH -----END CERTIFICATE-----Generated at Fri May 3 04:36:47 2024 by rpki-client on console-ams.rpki-client.org