$ rpki-client -vvf rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft File: UHF-n6DMN8QGf4M-kPt-chDzxZM.mft (raw, json) Hash identifier: Yl50u326JwapgjGEIJCL4jeQ8XVWyHfwdxh4NHCzTJU= Subject key identifier: 0E:5C:04:B1:77:B1:91:8B:F2:07:42:34:35:53:DE:EF:8A:9B:86:79 Authority key identifier: 50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93 Certificate issuer: /CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593 Certificate serial: 069F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft Manifest number: 069A Signing time: Mon 06 May 2024 23:22:38 +0000 Manifest this update: Mon 06 May 2024 23:22:37 +0000 Manifest next update: Mon 13 May 2024 23:22:37 +0000 Files and hashes: 1: UHF-n6DMN8QGf4M-kPt-chDzxZM.crl (hash: rTvAUKfOutuWT+P8UDZyPOOH7k6DveXqmfujAzKWEaE=) 2: BDAC3ACA1E7111EB93874336C4F9AE02.roa (hash: 94ZEhCloSNNdL8tuIKR2FHNPzGO7lqHRz+YRirwFlKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1695 (0x69f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593 Validity Not Before: May 6 23:22:37 2024 GMT Not After : May 13 23:22:37 2024 GMT Subject: CN=6639663d-6a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2c:fb:dc:e3:b5:43:02:98:8e:c4:6e:30:b3: d0:a2:f3:a2:c0:0c:7b:8f:a3:19:3c:30:d0:49:02: 25:49:7f:15:ed:29:b1:5e:6e:30:42:4e:a0:1f:26: c5:da:3e:12:df:e7:7b:43:18:da:a1:2c:8a:78:4d: 98:34:e8:01:fc:2e:5b:82:22:b7:b8:73:2d:f2:2d: d1:3a:45:b4:b3:e4:eb:d6:74:f6:83:cc:fd:b6:75: 78:a2:29:fe:8e:2e:64:ac:6b:30:be:87:22:fc:20: e3:47:2d:d8:bc:a9:af:54:b0:4a:43:cd:77:a5:17: d5:d2:36:0e:ec:d9:c1:00:d2:1e:be:0a:78:5f:19: 77:9d:41:83:29:e2:3f:40:c0:89:e5:d0:65:1d:e1: 9e:3f:d8:f1:29:18:6b:a2:ef:bf:ce:d5:14:96:80: c9:86:cf:bc:0d:22:1c:6d:f8:7b:1d:7a:07:d4:89: 30:fd:43:9f:81:95:cb:15:c0:f6:8a:61:ab:04:9c: 75:1e:7e:b9:05:f6:d8:70:0a:53:8d:6f:ee:46:55: 21:dd:ea:99:75:5b:9d:7d:8d:8d:62:18:35:d6:8a: f3:76:19:b3:04:48:b3:1a:5c:26:c7:46:9f:d1:bf: 3e:41:26:a8:73:a8:9d:27:3e:98:c7:20:a9:aa:67: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5C:04:B1:77:B1:91:8B:F2:07:42:34:35:53:DE:EF:8A:9B:86:79 X509v3 Authority Key Identifier: keyid:50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:87:d1:bf:12:34:0d:a3:08:47:88:fb:7c:16:75:35:41:33: 03:61:d5:c8:a9:aa:10:7f:49:a7:bd:48:5b:2b:3f:6d:dc:b1: 7a:32:0c:1b:72:b5:19:6c:d2:5e:37:0a:8a:72:a3:3b:5b:83: 66:f2:bc:57:25:99:d8:4a:7f:00:9d:29:b6:0c:4c:47:81:3d: b2:7c:36:86:43:74:aa:76:40:63:cf:a3:e6:86:c1:c0:46:07: 96:b1:d9:b6:40:4c:45:c8:73:d6:ae:b3:61:48:9a:85:d7:8f: 7f:43:c9:e7:49:b3:8f:09:a3:f7:4b:f2:2a:4e:ae:9b:48:e4: 48:87:24:a4:a7:02:2a:ee:b0:f8:37:f6:14:25:9f:2d:4b:c1: d3:7a:fe:f1:ee:00:1b:60:d3:38:f6:2f:07:47:04:5b:24:51: 97:13:81:91:92:9e:db:83:32:2b:68:48:40:3b:27:f3:26:b8: f5:23:c1:26:99:84:37:86:e5:08:b7:b4:39:1c:fa:9a:ca:32: 4b:06:97:aa:e9:0d:87:5a:15:72:d4:67:fa:55:65:77:ba:12: a4:ea:9d:e2:fc:6b:7a:14:0e:e4:81:83:c9:80:68:5a:63:62: ea:c3:f5:76:93:4e:a8:7d:79:41:28:ad:4a:38:32:5a:7b:c0: de:8b:4f:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MkIxMTAvBgNVBAUTKDUwNzE3RTlGQTBDQzM3QzQwNjdGODMzRTkwRkI3RTcy MTBGM0M1OTMwHhcNMjQwNTA2MjMyMjM3WhcNMjQwNTEzMjMyMjM3WjAYMRYwFAYD VQQDEw02NjM5NjYzZC02YTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSz73OO1QwKYjsRuMLPQovOiwAx7j6MZPDDQSQIlSX8V7SmxXm4wQk6gHybF 2j4S3+d7QxjaoSyKeE2YNOgB/C5bgiK3uHMt8i3ROkW0s+Tr1nT2g8z9tnV4oin+ ji5krGswvoci/CDjRy3YvKmvVLBKQ813pRfV0jYO7NnBANIevgp4Xxl3nUGDKeI/ QMCJ5dBlHeGeP9jxKRhrou+/ztUUloDJhs+8DSIcbfh7HXoH1Ikw/UOfgZXLFcD2 imGrBJx1Hn65BfbYcApTjW/uRlUh3eqZdVudfY2NYhg11orzdhmzBEizGlwmx0af 0b8+QSaoc6idJz6YxyCpqmfjcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5cBLF3 sZGL8gdCNDVT3u+Km4Z5MB8GA1UdIwQYMBaAFFBxfp+gzDfEBn+DPpD7fnIQ88WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyQi9EODNENjI5NDFF NkYxMUVCQUExMzlFMzNDNEY5QUUwMi9VSEYtbjZETU44UUdmNE0ta1B0LWNoRHp4 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIRi1uNkRNTjhRR2Y0TS1rUHQtY2hEenhaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTUyQi9EODNENjI5NDFFNkYxMUVCQUExMzlFMzNDNEY5QUUwMi9VSEYtbjZETU44 UUdmNE0ta1B0LWNoRHp4Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvh9G/EjQNowhHiPt8FnU1QTMDYdXIqaoQf0mnvUhbKz9t3LF6Mgwb crUZbNJeNwqKcqM7W4Nm8rxXJZnYSn8AnSm2DExHgT2yfDaGQ3SqdkBjz6PmhsHA RgeWsdm2QExFyHPWrrNhSJqF149/Q8nnSbOPCaP3S/IqTq6bSORIhySkpwIq7rD4 N/YUJZ8tS8HTev7x7gAbYNM49i8HRwRbJFGXE4GRkp7bgzIraEhAOyfzJrj1I8Em mYQ3huUIt7Q5HPqayjJLBpeq6Q2HWhVy1Gf6VWV3uhKk6p3i/Gt6FA7kgYPJgGha Y2Lqw/V2k06ofXlBKK1KODJae8Dei08U -----END CERTIFICATE-----Generated at Tue May 7 00:53:19 2024 by rpki-client on console-ams.rpki-client.org