$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json) Hash identifier: sgBqh4MU/zAyFqtyTZWVduqn+lq/WOu+RVoVpvad6wQ= Subject key identifier: 4E:9A:2A:D5:A3:82:6E:80:1C:7E:9F:BE:DC:13:AF:F1:1F:2D:03:A9 Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft Manifest number: 0101 Signing time: Wed 01 May 2024 05:52:56 +0000 Manifest this update: Wed 01 May 2024 05:52:55 +0000 Manifest next update: Wed 08 May 2024 05:52:55 +0000 Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: YuRQDKahQ6A4quKv/+FzRUrLEvf3PHyBX3kwrtp9pQ0=) 2: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: 4fKNHp/QkRQY4MFhFm0KIsrk9aahf17O6vMc/ck3zIk=) 3: F69540BA810811ED9EA03683C4F9AE02.roa (hash: VwFP+j9Y86bpDslZHzR4okm58s+k/5RYkJDz4DI10MY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 05:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Validity Not Before: May 1 05:52:55 2024 GMT Not After : May 8 05:52:55 2024 GMT Subject: CN=6631d8b7-c35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8f:97:3d:91:67:89:21:59:28:00:70:56:61: d1:ad:a7:d4:d9:f5:c3:20:3f:04:26:85:25:6b:b9: 4a:17:c3:41:d7:31:d6:4d:1d:dd:e1:0b:2b:a0:c3: c4:9a:fe:d4:73:77:d3:bd:00:93:51:3c:9c:a2:22: be:a0:1a:02:4a:eb:21:44:49:e1:06:42:57:c1:9f: 03:54:7d:b9:d2:2f:bd:b3:2c:7a:4b:64:0d:1a:8d: 5f:41:18:68:fb:b2:f6:a4:71:9b:19:38:61:64:e4: 9e:b6:1a:fe:23:1d:37:55:60:92:5b:76:02:a2:ff: 78:b0:38:6a:7d:c7:1b:4e:c4:0b:db:42:7d:d4:5b: 45:21:28:b6:07:a0:34:f7:a7:08:d2:d8:5d:e4:cd: 75:76:d3:46:4e:8b:e0:71:78:aa:88:5a:4d:bd:94: 75:92:ac:bb:86:16:e9:91:e8:75:4c:c6:0e:9d:ee: e8:89:13:30:39:a4:da:ae:a7:6f:44:3e:6c:f6:5b: 81:0e:ad:ef:32:55:78:90:1e:2c:62:5b:2a:be:ef: 17:cf:cb:80:f1:c1:a8:c3:21:c6:85:10:8c:75:bb: 76:35:8a:eb:fd:ca:05:09:c2:75:b8:02:7c:d3:3e: bc:a9:65:9b:28:5a:a8:77:d4:10:b7:c9:c1:6a:9f: a1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9A:2A:D5:A3:82:6E:80:1C:7E:9F:BE:DC:13:AF:F1:1F:2D:03:A9 X509v3 Authority Key Identifier: keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0b:d3:37:89:6b:24:6b:c7:c4:c5:af:a0:96:8b:8e:c2:66: 9c:e9:1a:ff:07:bf:0e:00:aa:5f:b6:bf:b7:09:e8:bb:f4:c1: d0:97:2e:16:a7:e4:1f:8d:c4:07:a7:11:0b:b6:a2:f1:23:0e: a4:dd:69:f7:4b:b7:57:93:54:82:7e:95:b4:3d:03:25:91:53: d7:bd:8a:4d:7b:b8:98:80:7c:64:ba:95:93:b0:b3:8e:ef:09: d8:d3:b7:5b:22:df:2f:cb:11:46:08:b6:dc:9f:90:2e:3c:a7: db:21:f9:b1:6a:dd:91:48:e1:23:6d:59:ac:e6:d4:18:15:ae: 63:e6:d0:f8:63:55:6c:be:3d:6b:28:56:e2:53:d5:bf:2c:de: 85:3c:ee:83:84:10:6c:a8:58:1e:02:06:e8:8f:b7:fe:48:66: 9a:bc:e3:ba:05:6f:c2:92:57:01:0a:77:d0:8c:51:92:d6:ca: c2:90:00:2c:47:06:45:8f:d6:0a:53:79:f1:fd:89:b5:d1:4a: ad:d8:b7:58:d8:35:d7:37:53:03:ab:61:33:9a:c6:44:96:73: 66:e3:da:70:39:cf:64:db:17:01:8e:12:1e:42:e7:3c:44:fc: 9e:a1:80:75:2d:47:f5:be:c7:64:3c:ba:5f:c4:88:0e:cd:b2: f7:95:97:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgxQzAxMTAvBgNVBAUTKDUyREU2NzhGQUYzNEYxRjI3QkZENzJDRTc1MkY1Q0Q1 N0U4QzEzQ0UwHhcNMjQwNTAxMDU1MjU1WhcNMjQwNTA4MDU1MjU1WjAYMRYwFAYD VQQDEw02NjMxZDhiNy1jMzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlo+XPZFniSFZKABwVmHRrafU2fXDID8EJoUla7lKF8NB1zHWTR3d4QsroMPE mv7Uc3fTvQCTUTycoiK+oBoCSushREnhBkJXwZ8DVH250i+9syx6S2QNGo1fQRho +7L2pHGbGThhZOSethr+Ix03VWCSW3YCov94sDhqfccbTsQL20J91FtFISi2B6A0 96cI0thd5M11dtNGTovgcXiqiFpNvZR1kqy7hhbpkeh1TMYOne7oiRMwOaTarqdv RD5s9luBDq3vMlV4kB4sYlsqvu8Xz8uA8cGowyHGhRCMdbt2NYrr/coFCcJ1uAJ8 0z68qWWbKFqod9QQt8nBap+h7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6aKtWj gm6AHH6fvtwTr/EfLQOpMB8GA1UdIwQYMBaAFFLeZ4+vNPHye/1yznUvXNV+jBPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODFDMC8yRjI4OUVENjgx MDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhmSjdfWExPZFM5YzFYNk1F ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0NW5qNjgwOGZKN19YTE9kUzljMVg2TUU4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODFDMC8yRjI4OUVENjgxMDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhm SjdfWExPZFM5YzFYNk1FODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6C9M3iWska8fExa+glouOwmac6Rr/B78OAKpftr+3Cei79MHQly4W p+QfjcQHpxELtqLxIw6k3Wn3S7dXk1SCfpW0PQMlkVPXvYpNe7iYgHxkupWTsLOO 7wnY07dbIt8vyxFGCLbcn5AuPKfbIfmxat2RSOEjbVms5tQYFa5j5tD4Y1Vsvj1r KFbiU9W/LN6FPO6DhBBsqFgeAgboj7f+SGaavOO6BW/CklcBCnfQjFGS1srCkAAs RwZFj9YKU3nx/Ym10Uqt2LdY2DXXN1MDq2EzmsZElnNm49pwOc9k2xcBjhIeQuc8 RPyeoYB1LUf1vsdkPLpfxIgOzbL3lZcW -----END CERTIFICATE-----Generated at Wed May 1 07:06:29 2024 by rpki-client on console-fra.rpki-client.org