$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft File: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft (raw, json) Hash identifier: bdvciFailcFyNGpVYmw0WhMER3o9pbdlazIypuNUlPk= Subject key identifier: A3:71:A0:23:89:DD:F5:6D:05:04:84:25:48:6C:A3:76:9C:59:C9:D2 Authority key identifier: B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD Certificate issuer: /CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Certificate serial: 037C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft Manifest number: 03EB Signing time: Fri 17 May 2024 02:59:05 +0000 Manifest this update: Fri 17 May 2024 02:59:05 +0000 Manifest next update: Fri 24 May 2024 02:59:05 +0000 Files and hashes: 1: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl (hash: VWo2xSD/nqxzj9DO36Rzzbny1AnZ/9E6zZ9lV16VmSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Validity Not Before: May 17 02:59:05 2024 GMT Not After : May 24 02:59:05 2024 GMT Subject: CN=6646c7f9-4003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:24:d9:a5:02:b0:3a:a1:83:ba:69:82:80: 06:65:0c:ef:d7:9f:4a:5f:54:65:58:e0:49:48:89: 42:f9:3c:e0:b5:c9:4f:7e:70:b8:9f:ff:ae:df:0c: c8:e3:a5:78:8e:fd:6e:c1:19:07:3d:75:19:c8:04: 62:3e:ef:da:d8:e2:cc:1c:f3:d5:8f:0e:78:b2:45: f7:f5:94:9d:3c:c3:62:24:e5:25:51:57:10:ef:51: 5c:2a:50:fb:ed:6e:06:3b:a7:5b:00:9a:29:94:d3: a4:82:b7:bb:ff:0d:79:28:9d:15:a4:64:0f:fc:f6: 02:9e:ed:67:aa:05:a1:1c:e4:1f:9d:d3:43:e5:55: 30:37:9c:12:ef:b2:0a:da:dd:09:47:6d:6f:6e:fb: d5:9b:09:29:19:81:58:15:b9:2a:f9:d8:4b:01:ef: 09:26:34:1e:50:1f:3d:80:f4:2a:ab:bb:42:57:70: 38:74:51:22:dc:04:ca:b1:57:d9:be:f5:f0:5f:f4: 25:4c:93:d0:aa:87:9e:3f:10:27:11:6e:97:40:19: 33:3b:76:a9:7e:c6:76:87:0b:63:75:ad:ee:21:67: 97:22:ef:bc:6a:3f:4c:5e:d8:0a:a5:ce:76:14:a6: 44:b8:e8:43:52:f4:7b:4a:0b:70:80:42:f4:49:b7: a3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:71:A0:23:89:DD:F5:6D:05:04:84:25:48:6C:A3:76:9C:59:C9:D2 X509v3 Authority Key Identifier: keyid:B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:29:d3:01:c8:5b:83:f5:38:b1:93:76:5f:9b:1f:6d:15:c5: 61:28:7f:1d:1c:85:4a:da:06:31:6f:b5:ef:d5:76:16:9d:8d: da:1b:85:72:25:12:4b:eb:96:b9:a9:df:5f:24:33:05:5a:22: 52:1a:06:d4:d7:cb:e1:5b:78:c6:da:03:0b:ea:fb:46:e6:ec: a0:84:61:5f:4b:46:bd:1f:0f:03:a1:a2:76:9b:ba:b3:62:05: d7:a5:19:bf:b8:3f:d3:f1:15:78:4e:f1:2e:a0:60:05:a2:e8: 3e:fd:b1:99:17:fe:50:2d:fb:93:c0:13:36:36:4e:69:64:91: bc:0a:77:1e:74:bf:aa:4f:bc:97:4c:8d:95:24:71:6b:ff:ac: 50:f9:7d:b8:1a:f2:51:ce:67:0a:e6:f4:2f:9b:c6:94:64:2b: d9:b4:22:91:b6:8f:77:ce:06:bb:69:68:63:81:92:da:2b:04: 0c:d7:ea:e5:e2:dc:c7:c5:45:24:13:84:d7:a3:6f:a6:d4:d1: 61:b5:50:ad:b7:eb:e1:34:07:4f:ef:c3:9b:ca:99:a3:7e:24: 6f:96:27:a9:b4:3b:d0:34:74:7f:18:c9:61:10:09:15:2c:84: f7:fd:f0:88:01:c5:dc:82:15:9f:04:7a:cc:9f:4d:8d:d3:6e: 45:cb:58:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEI4Rjg0NkI0MzUzQjY0MjlBQzQwNDNGMzJCQjc4OTRD RjgzODU1RkQwHhcNMjQwNTE3MDI1OTA1WhcNMjQwNTI0MDI1OTA1WjAYMRYwFAYD VQQDEw02NjQ2YzdmOS00MDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Tok2aUCsDqhg7ppgoAGZQzv159KX1RlWOBJSIlC+TzgtclPfnC4n/+u3wzI 46V4jv1uwRkHPXUZyARiPu/a2OLMHPPVjw54skX39ZSdPMNiJOUlUVcQ71FcKlD7 7W4GO6dbAJoplNOkgre7/w15KJ0VpGQP/PYCnu1nqgWhHOQfndND5VUwN5wS77IK 2t0JR21vbvvVmwkpGYFYFbkq+dhLAe8JJjQeUB89gPQqq7tCV3A4dFEi3ATKsVfZ vvXwX/QlTJPQqoeePxAnEW6XQBkzO3apfsZ2hwtjda3uIWeXIu+8aj9MXtgKpc52 FKZEuOhDUvR7SgtwgEL0SbejrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNxoCOJ 3fVtBQSEJUhso3acWcnSMB8GA1UdIwQYMBaAFLj4RrQ1O2QprEBD8yu3iUz4OFX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pDbXNRRVB6SzdlSlRQZzRW ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQaEd0RFU3WkNtc1FFUHpLN2VKVFBnNFZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pD bXNRRVB6SzdlSlRQZzRWZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzKdMByFuD9Tixk3Zfmx9tFcVhKH8dHIVK2gYxb7Xv1XYWnY3aG4Vy JRJL65a5qd9fJDMFWiJSGgbU18vhW3jG2gML6vtG5uyghGFfS0a9Hw8DoaJ2m7qz YgXXpRm/uD/T8RV4TvEuoGAFoug+/bGZF/5QLfuTwBM2Nk5pZJG8CncedL+qT7yX TI2VJHFr/6xQ+X24GvJRzmcK5vQvm8aUZCvZtCKRto93zga7aWhjgZLaKwQM1+rl 4tzHxUUkE4TXo2+m1NFhtVCtt+vhNAdP78ObypmjfiRvlieptDvQNHR/GMlhEAkV LIT3/fCIAcXcghWfBHrMn02N025Fy1gL -----END CERTIFICATE-----Generated at Fri May 17 03:52:21 2024 by rpki-client on console-ams.rpki-client.org