$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft File: UyhhbneUVH65zpK0qPBF5LLMwPw.mft (raw, json) Hash identifier: a+clabvbIflIRfvfvyDop6vQuh4tzdxlLp0KA7Z/TdQ= Subject key identifier: EB:80:27:5D:0F:5C:52:53:43:6F:81:07:E8:97:5A:F8:E8:E9:1C:24 Authority key identifier: 53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC Certificate issuer: /CN=A91847A0/serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC Certificate serial: 1C45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft Manifest number: 1C3A Signing time: Sat 04 May 2024 16:39:16 +0000 Manifest this update: Sat 04 May 2024 16:39:16 +0000 Manifest next update: Sat 11 May 2024 16:39:16 +0000 Files and hashes: 1: UyhhbneUVH65zpK0qPBF5LLMwPw.crl (hash: /p0qxJ+SSPPSDZriHeMbngwNjWC4DhjQM3SJE/1GSeg=) 2: 82E0D450BC5011E6B01A8D4CC4F9AE02.roa (hash: 18jgn9eS21V9N6PIP2GJ3tFJL2JVjrmJ1thvjCSCi1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7237 (0x1c45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A0/serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC Validity Not Before: May 4 16:39:16 2024 GMT Not After : May 11 16:39:16 2024 GMT Subject: CN=663664b4-e684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5a:42:6c:c7:d4:67:ac:bc:85:5c:b7:4d:15: b0:06:21:1d:42:fa:f3:c1:64:16:93:78:bd:b4:28: a9:5e:f8:2c:73:ab:b5:bc:8c:47:8a:03:0a:36:db: 39:ea:8d:6a:b2:ee:d2:e4:36:84:6f:ad:b3:50:92: 74:21:6e:22:8b:33:8b:69:ed:b9:49:ed:d0:bb:3b: ae:cf:47:10:e9:be:db:4e:d7:ec:6a:4e:91:8a:79: f5:0d:f0:05:5e:26:60:2e:7a:a7:84:e5:d9:62:5f: e3:af:5f:f6:9b:9c:0c:e2:46:a5:26:5f:9f:d7:6f: fc:00:42:16:63:13:7e:e8:89:0d:86:5f:7c:4c:8a: 2d:e2:0b:5d:b7:ec:7a:0b:7b:83:f7:ce:96:a2:81: 49:54:a6:c8:3f:30:e7:1e:42:ad:40:00:6c:21:ab: fe:3f:20:c2:97:1b:af:51:ad:48:73:55:e1:c8:c7: a4:b7:c9:cd:b8:fb:f8:da:9a:f2:1f:50:f4:25:02: 68:aa:83:02:61:75:dc:87:4f:c0:f1:68:2f:75:9d: 85:d9:b5:da:e5:85:87:f9:83:67:c1:37:19:a4:15: 4d:da:6f:53:a2:5d:ef:e1:8e:81:67:0a:18:b8:be: 10:d7:20:f7:fb:7c:4c:61:4b:2d:3f:76:6e:1a:f1: c3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:80:27:5D:0F:5C:52:53:43:6F:81:07:E8:97:5A:F8:E8:E9:1C:24 X509v3 Authority Key Identifier: keyid:53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:f9:7d:83:cd:8a:97:2f:02:43:57:99:cf:71:52:1d:be:6f: 89:64:6a:28:54:11:95:fe:5a:6b:2e:4e:e3:c6:d1:7c:be:d4: dd:fe:e8:74:c6:58:fd:24:9a:e8:93:6e:79:38:b8:b1:c3:8d: 1a:be:18:bf:20:30:6f:67:dd:ec:fd:d8:b5:66:49:1b:71:c0: d5:5a:d0:7e:5f:ce:a4:67:1c:fc:c9:e6:88:1f:87:95:17:44: ec:88:e3:d0:9e:54:9c:46:56:5b:bf:5f:8c:35:3f:98:84:db: 5d:d1:73:44:0f:5b:8b:27:3a:12:d1:56:05:13:fb:2f:4f:33: 15:a4:12:8f:ff:7f:a0:52:8e:f1:d3:46:c0:07:1b:bd:f7:6e: 42:f9:17:57:60:d4:de:6c:9b:76:16:79:d5:6f:68:c8:09:8a: 3f:81:73:8a:10:28:88:23:a0:4e:fa:5c:08:4f:3c:19:1f:f9: f0:b3:23:bd:3c:c0:0a:55:dc:da:e9:7e:65:26:1a:20:6a:f0: 20:dd:f9:c6:0c:4c:e8:1a:35:a5:04:1e:19:35:10:2e:e3:73: f1:f4:ad:28:ca:75:46:d1:ff:f9:6b:41:be:17:e3:48:83:ae: ab:ae:46:44:07:d6:cd:e5:f9:ea:cc:de:97:0d:78:09:80:fc: ab:88:ee:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTAxMTAvBgNVBAUTKDUzMjg2MTZFNzc5NDU0N0VCOUNFOTJCNEE4RjA0NUU0 QjJDQ0MwRkMwHhcNMjQwNTA0MTYzOTE2WhcNMjQwNTExMTYzOTE2WjAYMRYwFAYD VQQDEw02NjM2NjRiNC1lNjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5VpCbMfUZ6y8hVy3TRWwBiEdQvrzwWQWk3i9tCipXvgsc6u1vIxHigMKNts5 6o1qsu7S5DaEb62zUJJ0IW4iizOLae25Se3Quzuuz0cQ6b7bTtfsak6Rinn1DfAF XiZgLnqnhOXZYl/jr1/2m5wM4kalJl+f12/8AEIWYxN+6IkNhl98TIot4gtdt+x6 C3uD986WooFJVKbIPzDnHkKtQABsIav+PyDClxuvUa1Ic1XhyMekt8nNuPv42pry H1D0JQJoqoMCYXXch0/A8WgvdZ2F2bXa5YWH+YNnwTcZpBVN2m9Tol3v4Y6BZwoY uL4Q1yD3+3xMYUstP3ZuGvHDlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuAJ10P XFJTQ2+BB+iXWvjo6RwkMB8GA1UdIwQYMBaAFFMoYW53lFR+uc6StKjwReSyzMD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMC8wRTRBRDEyOEJD NEYxMUU2QkFGMUMyNEFDNEY5QUUwMi9VeWhoYm5lVVZINjV6cEswcVBCRjVMTE13 UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5aGhibmVVVkg2NXpwSzBxUEJGNUxMTXdQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMC8wRTRBRDEyOEJDNEYxMUU2QkFGMUMyNEFDNEY5QUUwMi9VeWhoYm5lVVZI NjV6cEswcVBCRjVMTE13UHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA+X2DzYqXLwJDV5nPcVIdvm+JZGooVBGV/lprLk7jxtF8vtTd/uh0 xlj9JJrok255OLixw40avhi/IDBvZ93s/di1ZkkbccDVWtB+X86kZxz8yeaIH4eV F0TsiOPQnlScRlZbv1+MNT+YhNtd0XNED1uLJzoS0VYFE/svTzMVpBKP/3+gUo7x 00bABxu9925C+RdXYNTebJt2FnnVb2jICYo/gXOKECiII6BO+lwITzwZH/nwsyO9 PMAKVdza6X5lJhogavAg3fnGDEzoGjWlBB4ZNRAu43Px9K0oynVG0f/5a0G+F+NI g66rrkZEB9bN5fnqzN6XDXgJgPyriO7D -----END CERTIFICATE-----Generated at Sat May 4 17:44:40 2024 by rpki-client on console-ams.rpki-client.org