$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft File: UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json) Hash identifier: ZNqzZikV2XJQwTAy4uZh7QjWbkd2SZYt++/HriH9upo= Subject key identifier: 63:7C:6A:0E:A9:81:86:CB:30:AF:B5:4B:61:BB:C6:F5:FA:32:3C:3E Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A Certificate issuer: /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Certificate serial: 185A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft Manifest number: 185A Signing time: Wed 24 Apr 2024 16:57:19 +0000 Manifest this update: Wed 24 Apr 2024 16:57:18 +0000 Manifest next update: Wed 01 May 2024 16:57:18 +0000 Files and hashes: 1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: tg6I8RZAGQwiSrvd4DhjHRxXFhMeXTbCtnN4tv4d1hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 15:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6234 (0x185a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Validity Not Before: Apr 24 16:57:18 2024 GMT Not After : May 1 16:57:18 2024 GMT Subject: CN=662939ee-5e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:66:be:14:b7:10:f6:86:c3:90:94:a3:04:06: 88:da:65:99:96:c6:db:c6:4b:69:a1:ce:60:47:07: b3:c3:5f:00:cf:88:8f:bb:0e:35:bc:5b:26:97:c8: 91:c0:53:fe:69:bb:c2:ab:03:52:67:74:7e:12:67: d3:06:f9:79:ec:bd:e5:ba:af:96:fc:7e:8f:1f:0a: 0e:ac:75:9e:55:7b:37:08:26:b1:e4:d7:36:83:64: b7:70:b5:2b:10:44:14:ad:3a:25:00:72:1a:fa:1b: 8d:c6:fc:35:df:58:ef:cd:ff:6d:bb:9f:9c:44:bd: 8f:51:d7:4d:64:35:8f:f9:ab:92:66:c2:e0:f4:bb: 90:b4:88:5c:6c:28:ac:b4:9c:b5:10:f5:85:cf:86: 9e:70:0e:9d:c5:a5:67:47:e3:63:b5:a3:3d:d0:b1: 92:80:97:36:2e:4d:cc:09:ba:46:d3:3a:bf:d0:80: 1c:73:a5:2c:d2:53:39:04:c6:48:e6:8a:8b:fc:9c: 31:a4:e0:9c:59:3e:4c:7b:7f:cd:9a:16:cf:60:a0: 53:63:ce:12:17:08:3f:a4:dc:f8:b2:6a:10:64:c1: a6:2c:83:2d:a2:3a:18:61:52:f4:47:f5:e6:92:32: e8:ee:a3:ea:0d:18:66:f0:87:42:74:b0:ff:c2:39: 40:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7C:6A:0E:A9:81:86:CB:30:AF:B5:4B:61:BB:C6:F5:FA:32:3C:3E X509v3 Authority Key Identifier: keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:2f:62:fd:b2:27:20:19:7b:84:22:e5:63:cb:65:82:50:1f: 16:22:37:eb:0c:a1:e1:f2:45:e1:78:1c:30:ef:d0:cf:a3:0e: 6f:fd:74:76:a2:aa:83:f4:26:e3:14:ec:fb:1c:14:11:2d:3b: 6d:1e:24:64:f1:5e:5e:99:66:5d:ad:10:fb:b2:a1:eb:da:b6: 00:80:cd:39:0b:de:53:da:9a:95:91:d5:ff:1e:3d:25:6f:8f: 80:00:cd:fc:f3:03:75:17:4c:9d:67:84:a8:64:5b:01:06:c2: 72:7e:5f:68:0b:b7:47:08:f4:dd:8f:ad:7f:06:3c:2b:b6:b3: db:fd:d1:9d:66:42:7f:d4:25:65:25:cb:22:8b:27:14:43:ec: e6:ca:72:d2:5b:9f:c7:33:a8:e5:e5:f0:89:ad:56:1c:51:a1: df:b5:32:48:e9:1c:3c:52:8e:3c:40:f3:0b:90:ed:48:f8:b7: 05:31:f3:50:ef:4c:20:1b:22:d6:44:35:63:da:00:14:db:58: 09:6a:d5:1d:f1:8e:5e:8c:61:7f:4d:f8:65:a3:94:a9:5c:5c: fa:4b:ff:11:82:eb:73:8d:73:90:01:79:00:53:10:1f:29:c9: 97:b6:df:a2:9c:6e:b4:e0:ca:af:f9:76:6c:5d:7f:ff:49:d7: 9c:c2:84:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDUwM0QyNzY1MTEzQ0I2RDEzQjk4NkZCQjRDQjc5RkYx OENBQjc3NUEwHhcNMjQwNDI0MTY1NzE4WhcNMjQwNTAxMTY1NzE4WjAYMRYwFAYD VQQDEw02NjI5MzllZS01ZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGa+FLcQ9obDkJSjBAaI2mWZlsbbxktpoc5gRwezw18Az4iPuw41vFsml8iR wFP+abvCqwNSZ3R+EmfTBvl57L3luq+W/H6PHwoOrHWeVXs3CCax5Nc2g2S3cLUr EEQUrTolAHIa+huNxvw131jvzf9tu5+cRL2PUddNZDWP+auSZsLg9LuQtIhcbCis tJy1EPWFz4aecA6dxaVnR+NjtaM90LGSgJc2Lk3MCbpG0zq/0IAcc6Us0lM5BMZI 5oqL/JwxpOCcWT5Me3/NmhbPYKBTY84SFwg/pNz4smoQZMGmLIMtojoYYVL0R/Xm kjLo7qPqDRhm8IdCdLD/wjlAjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGN8ag6p gYbLMK+1S2G7xvX6Mjw+MB8GA1UdIwQYMBaAFFA9J2URPLbRO5hvu0y3n/GMq3da MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GNzI3RkU5RTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0RTdtRy03VExlZjhZeXJk MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VEMG5aUkU4dHRFN21HLTdUTGVmOFl5cmQxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GNzI3RkU5RTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0 RTdtRy03VExlZjhZeXJkMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaL2L9sicgGXuEIuVjy2WCUB8WIjfrDKHh8kXheBww79DPow5v/XR2 oqqD9CbjFOz7HBQRLTttHiRk8V5emWZdrRD7sqHr2rYAgM05C95T2pqVkdX/Hj0l b4+AAM388wN1F0ydZ4SoZFsBBsJyfl9oC7dHCPTdj61/BjwrtrPb/dGdZkJ/1CVl JcsiiycUQ+zmynLSW5/HM6jl5fCJrVYcUaHftTJI6Rw8Uo48QPMLkO1I+LcFMfNQ 70wgGyLWRDVj2gAU21gJatUd8Y5ejGF/Tfhlo5SpXFz6S/8RgutzjXOQAXkAUxAf KcmXtt+inG604Mqv+XZsXX//SdecwoTl -----END CERTIFICATE-----Generated at Wed Apr 24 18:31:03 2024 by rpki-client on console-fra.rpki-client.org