$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft File: UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json) Hash identifier: xgqhKNJl/bBNHHmUfbpNIYuhxW1MHyvOJCbJ71g3Xc0= Subject key identifier: 29:50:B4:BA:7A:77:D4:3D:A9:8C:BC:24:ED:F5:34:8D:35:1A:61:5A Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 076C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft Manifest number: 1DF7 Signing time: Sat 04 May 2024 17:11:32 +0000 Manifest this update: Sat 04 May 2024 17:11:32 +0000 Manifest next update: Sat 11 May 2024 17:11:32 +0000 Files and hashes: 1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: IedS1xZPmbacwdw+9KlQOK9WJ6uvKV/WHx673JTfaQ4=) 2: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: e4nlW3b1Gd+pOc4exYAE1ueBKcTmyXONvmF9PSvaz18=) 3: B797228EC64E11EE939CA20CC4F9AE02.roa (hash: 2QNk5YMjeCeR7yxQGBF4Zfizmee2atH27xvZ/mJABZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1900 (0x76c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: May 4 17:11:32 2024 GMT Not After : May 11 17:11:32 2024 GMT Subject: CN=66366c44-8ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:29:15:2c:36:c4:99:d0:8c:fd:31:72:53:2f: 82:64:7e:b5:42:bd:89:ac:e3:21:42:4a:be:d0:e6: ad:ce:4a:a9:78:04:43:82:68:b7:4a:7c:7b:5a:fe: f8:d9:9f:13:aa:54:37:dc:b7:41:a4:42:46:1e:aa: 47:3d:8d:a3:ec:32:0f:a9:97:01:f5:ad:c7:fd:7c: 3d:21:4a:3c:51:36:89:c9:ae:ca:24:18:bb:d5:71: 51:e4:da:24:fe:0a:9c:7c:32:95:d7:68:2c:b7:87: d8:40:36:4a:ab:8d:03:ff:bf:16:30:7d:72:48:b8: 31:70:53:be:13:0f:20:a9:a7:65:4f:35:9d:cc:a7: d4:ea:af:22:a0:0e:67:4c:d1:9b:77:51:3a:f1:92: bf:95:0b:2f:37:c3:dd:9a:34:f8:09:be:15:29:09: b5:f0:96:fb:d7:eb:f7:c3:67:05:15:2c:be:b9:3c: 09:72:33:e8:16:07:ea:99:dd:d5:91:01:1e:5e:8e: 3b:1d:c6:28:08:38:d8:e8:ad:64:ad:1d:a4:4f:f1: c6:b9:7d:02:20:3f:cd:33:98:51:3b:b8:8e:17:6b: 23:40:73:43:85:a5:da:4d:2b:a3:ce:97:c8:ec:16: ad:da:78:04:e3:78:a2:36:f2:d9:73:e4:76:5e:3e: a7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:50:B4:BA:7A:77:D4:3D:A9:8C:BC:24:ED:F5:34:8D:35:1A:61:5A X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f3:da:5e:32:a7:1c:30:5e:60:3c:cf:f3:55:5a:42:32:10: d3:6b:66:ee:96:14:3e:43:f9:a4:32:30:b9:0a:de:af:3e:0a: 6d:22:8a:a0:35:12:d9:0c:bf:04:c0:30:a0:da:9b:3c:de:96: b1:8d:8a:07:4e:e5:4d:ef:bf:aa:ea:52:6b:a2:05:02:16:48: 7e:04:e5:ef:09:13:78:45:ac:49:f2:c1:36:f1:20:89:08:d4: 89:e4:78:da:93:45:7e:87:ff:d3:06:2c:2a:02:0b:66:0f:21: 5d:ce:46:ca:4b:d1:ca:93:a0:a4:a9:98:89:54:f2:8f:6c:f2: 18:88:23:21:dc:84:b3:ed:69:7e:61:7f:6c:b9:ab:40:c8:b6: 6d:2c:b2:6c:41:ad:3f:1a:9e:cf:f1:5d:13:0b:4e:ba:0c:dd: df:6c:96:9a:04:b3:b8:76:0b:d7:b8:c6:29:a8:fd:a0:2f:84: e1:2d:40:c8:05:d4:7a:3a:80:c2:21:c0:f5:7e:ed:97:b8:90: 6a:16:c2:96:11:80:4c:82:19:4f:8e:cb:91:e5:3a:c4:bf:8f: 31:d6:2c:3b:cf:82:ff:67:b3:74:48:e0:9b:a7:7f:d5:04:07: 8c:e7:55:6a:5b:e0:85:58:d5:2c:ba:6d:42:38:2c:8d:e7:92: e6:a8:ae:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjQwNTA0MTcxMTMyWhcNMjQwNTExMTcxMTMyWjAYMRYwFAYD VQQDEw02NjM2NmM0NC04YWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqikVLDbEmdCM/TFyUy+CZH61Qr2JrOMhQkq+0OatzkqpeARDgmi3Snx7Wv74 2Z8TqlQ33LdBpEJGHqpHPY2j7DIPqZcB9a3H/Xw9IUo8UTaJya7KJBi71XFR5Nok /gqcfDKV12gst4fYQDZKq40D/78WMH1ySLgxcFO+Ew8gqadlTzWdzKfU6q8ioA5n TNGbd1E68ZK/lQsvN8PdmjT4Cb4VKQm18Jb71+v3w2cFFSy+uTwJcjPoFgfqmd3V kQEeXo47HcYoCDjY6K1krR2kT/HGuX0CID/NM5hRO7iOF2sjQHNDhaXaTSujzpfI 7Bat2ngE43iiNvLZc+R2Xj6ngQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClQtLp6 d9Q9qYy8JO31NI01GmFaMB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAx ZVpLUnU2Ukg2aFFsR2sxZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR89peMqccMF5gPM/zVVpCMhDTa2bulhQ+Q/mkMjC5Ct6vPgptIoqg NRLZDL8EwDCg2ps83paxjYoHTuVN77+q6lJrogUCFkh+BOXvCRN4RaxJ8sE28SCJ CNSJ5Hjak0V+h//TBiwqAgtmDyFdzkbKS9HKk6CkqZiJVPKPbPIYiCMh3ISz7Wl+ YX9suatAyLZtLLJsQa0/Gp7P8V0TC066DN3fbJaaBLO4dgvXuMYpqP2gL4ThLUDI BdR6OoDCIcD1fu2XuJBqFsKWEYBMghlPjsuR5TrEv48x1iw7z4L/Z7N0SOCbp3/V BAeM51VqW+CFWNUsum1COCyN55LmqK4e -----END CERTIFICATE-----Generated at Sat May 4 17:44:39 2024 by rpki-client on console-ams.rpki-client.org