$ rpki-client -vvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft File: _UXMVAPGTPsjCqfe7RC8aCKNdHM.mft (raw, json) Hash identifier: Vmt2DBGsLCMXvUvwS1kZKKjgkmsALuMtBn8TELqU10s= Subject key identifier: C6:E6:E0:51:82:E4:D1:BF:90:A2:3A:40:E6:00:CB:72:FA:5B:0F:2B Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 Certificate issuer: /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft Manifest number: 85 Signing time: Wed 15 May 2024 07:13:53 +0000 Manifest this update: Wed 15 May 2024 07:13:53 +0000 Manifest next update: Wed 22 May 2024 07:13:53 +0000 Files and hashes: 1: _UXMVAPGTPsjCqfe7RC8aCKNdHM.crl (hash: 9/YF3QIHFlN4KxBRNKhCOUvXuNZCrqDDnaDk9UxxQLA=) 2: 6B62D92248D511EEBE05CC7FC4F9AE02.roa (hash: xcyXmRo63jwFZIE2FuEzx/fEPPWZDFFK+9ecvt7qZsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473 Validity Not Before: May 15 07:13:53 2024 GMT Not After : May 22 07:13:53 2024 GMT Subject: CN=664460b1-bf88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:90:39:19:9f:97:b2:3d:21:d8:56:7d:a7:9f: dc:7b:2d:37:43:2b:3a:99:f1:b9:79:29:7f:50:6f: 99:1a:fc:ca:48:68:80:4d:61:c4:ec:65:81:23:08: dc:62:a3:72:83:ac:5a:71:78:41:09:49:98:b6:4e: 6d:2a:35:ff:d3:57:33:93:13:54:92:b8:de:9f:cc: 62:9e:74:25:4d:ec:d4:2a:90:6e:80:4d:31:fc:be: cd:77:24:00:0b:bd:92:af:55:c2:c6:b9:6d:81:7a: d1:56:06:dc:94:89:65:17:71:bf:00:f2:da:08:92: 03:62:95:4d:67:57:60:75:8b:bd:2f:8d:f8:0b:2e: ae:3d:c6:bd:ad:81:50:dc:1f:41:72:9e:5a:77:12: 31:0e:9e:ac:8a:ef:61:5c:5e:db:91:37:8f:96:04: ad:4b:1d:d3:62:f4:de:55:a4:6f:b7:7b:95:d7:b4: 57:f5:19:14:c1:40:75:08:4d:c7:8c:1c:74:65:3f: 74:10:43:d9:d3:01:bd:5d:c8:f3:4b:d6:4b:00:6b: 3f:9a:9d:30:56:8f:9b:c8:42:0e:76:c5:23:67:43: 83:c3:62:a7:6a:bb:c3:94:2d:5b:f2:8f:03:d7:68: ee:c6:b1:fa:09:9f:92:60:fb:d1:13:2e:7d:4f:54: 7c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E6:E0:51:82:E4:D1:BF:90:A2:3A:40:E6:00:CB:72:FA:5B:0F:2B X509v3 Authority Key Identifier: keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:67:8e:ab:ff:05:94:e2:28:55:30:2f:44:7f:0b:1e:25:0b: 20:31:76:b0:a3:0d:52:a8:0a:09:92:e3:2d:39:03:6b:be:b7: a3:12:d4:00:d3:ed:2d:ad:e7:fc:30:3b:44:06:9d:a4:c7:e4: ab:09:5c:d6:e3:5c:fe:e9:42:d2:93:88:d6:3b:d8:3d:6c:d4: 76:5c:76:65:49:3c:3b:f3:d7:f7:61:33:46:27:46:6b:f8:c3: 99:44:20:79:0e:58:95:c2:52:af:24:ee:e9:12:54:b8:2a:44: 3d:78:07:03:f0:7e:09:ab:94:4d:2e:c5:8c:32:ea:cb:46:84: 3e:a0:b6:ce:4a:35:af:76:05:2f:75:e0:55:23:ab:e0:d4:79: d9:5f:98:52:02:f7:dd:c1:b4:c2:1d:10:ef:a6:81:f9:ac:2e: 62:68:92:0c:ea:0b:f0:04:15:63:11:2a:0c:c4:b0:38:c6:1c: 22:df:fa:d8:c9:58:97:0f:99:d3:0d:4e:0c:b4:e4:57:42:a1: df:25:c5:59:d1:05:21:a8:ae:0e:84:9c:f6:33:18:8e:36:3a: 02:2f:a4:77:7d:b2:3e:64:37:eb:2e:b3:28:66:4b:9a:d6:44: ba:05:df:35:f5:c8:3f:ac:dd:9d:81:4a:62:58:90:47:02:39: 0d:20:c2:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCQ0MxMTAvBgNVBAUTKEZENDVDQzU0MDNDNjRDRkIyMzBBQTdERUVEMTBCQzY4 MjI4RDc0NzMwHhcNMjQwNTE1MDcxMzUzWhcNMjQwNTIyMDcxMzUzWjAYMRYwFAYD VQQDEw02NjQ0NjBiMS1iZjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pA5GZ+Xsj0h2FZ9p5/cey03Qys6mfG5eSl/UG+ZGvzKSGiATWHE7GWBIwjc YqNyg6xacXhBCUmYtk5tKjX/01czkxNUkrjen8xinnQlTezUKpBugE0x/L7NdyQA C72Sr1XCxrltgXrRVgbclIllF3G/APLaCJIDYpVNZ1dgdYu9L434Cy6uPca9rYFQ 3B9Bcp5adxIxDp6siu9hXF7bkTePlgStSx3TYvTeVaRvt3uV17RX9RkUwUB1CE3H jBx0ZT90EEPZ0wG9XcjzS9ZLAGs/mp0wVo+byEIOdsUjZ0ODw2KnarvDlC1b8o8D 12juxrH6CZ+SYPvREy59T1R8rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbm4FGC 5NG/kKI6QOYAy3L6Ww8rMB8GA1UdIwQYMBaAFP1FzFQDxkz7Iwqn3u0QvGgijXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkJDQy85MDRFNTBGMDQ4 RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQc2pDcWZlN1JDOGFDS05k SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VWE1WQVBHVFBzakNxZmU3UkM4YUNLTmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkJDQy85MDRFNTBGMDQ4RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQ c2pDcWZlN1JDOGFDS05kSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFZ46r/wWU4ihVMC9EfwseJQsgMXawow1SqAoJkuMtOQNrvrejEtQA 0+0tref8MDtEBp2kx+SrCVzW41z+6ULSk4jWO9g9bNR2XHZlSTw789f3YTNGJ0Zr +MOZRCB5DliVwlKvJO7pElS4KkQ9eAcD8H4Jq5RNLsWMMurLRoQ+oLbOSjWvdgUv deBVI6vg1HnZX5hSAvfdwbTCHRDvpoH5rC5iaJIM6gvwBBVjESoMxLA4xhwi3/rY yViXD5nTDU4MtORXQqHfJcVZ0QUhqK4OhJz2MxiONjoCL6R3fbI+ZDfrLrMoZkua 1kS6Bd819cg/rN2dgUpiWJBHAjkNIMIc -----END CERTIFICATE-----Generated at Wed May 15 09:27:35 2024 by rpki-client on console-fra.rpki-client.org