$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft File: rUR6Z_B-gc0JwyLs0QrZQWvESys.mft (raw, json) Hash identifier: JDAWhK/FgvQSHEq5seTEk3WevB4CrMxBXZJUQlIBoRU= Subject key identifier: 5F:28:74:0F:6C:22:E8:42:CD:ED:E8:0A:BE:13:59:20:56:2F:61:00 Authority key identifier: AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B Certificate issuer: /CN=A9188EB6/serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft Manifest number: 0340 Signing time: Sat 25 May 2024 02:34:02 +0000 Manifest this update: Sat 25 May 2024 02:34:01 +0000 Manifest next update: Sat 01 Jun 2024 02:34:01 +0000 Files and hashes: 1: rUR6Z_B-gc0JwyLs0QrZQWvESys.crl (hash: j1YysEN7Uxafyc9z8FYoS93vXeOZJWGB4bEPVl84EIg=) 2: 09B2D8EC704C11ED97935E7DC4F9AE02.roa (hash: 20RJb8XxEbpVV3YaUsYGPL/u9/U+YzjgEdTcF40ivzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188EB6/serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B Validity Not Before: May 25 02:34:01 2024 GMT Not After : Jun 1 02:34:01 2024 GMT Subject: CN=66514e1a-9ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ab:14:d1:5e:43:18:7e:2f:88:87:23:e4:57: 97:ab:c9:ee:28:db:9f:9d:48:20:c8:2e:ef:30:81: 6a:5f:22:2b:e6:50:d0:be:97:c3:68:8f:b1:21:d6: 83:65:75:0f:78:9c:6b:da:0b:50:24:b9:05:ae:06: df:0d:f4:3e:5a:0e:73:c9:0e:f0:42:95:f3:fe:93: fc:c0:24:ca:8b:22:43:02:a9:8e:36:1f:e5:47:a3: 86:4f:3a:29:7a:95:ea:0c:45:27:ba:10:02:3c:51: 7c:59:18:6b:7c:14:bc:c5:0a:f5:40:8b:29:d3:cf: 64:25:ee:96:38:fc:41:ed:13:cb:57:62:1e:ca:44: e5:76:05:dd:33:a8:ff:48:ff:ed:21:a4:cb:dc:68: 0b:dd:55:1e:62:03:db:33:16:d2:d4:9b:1c:fb:fa: 1b:62:4b:f0:80:81:69:11:97:36:90:e0:99:15:dc: 72:e5:2a:88:c3:f6:0f:69:c4:45:86:7c:2a:92:b2: ba:34:6d:68:64:4c:30:95:1e:73:da:f2:d3:12:c1: 50:2e:0b:d9:8d:b6:54:b6:7d:2b:f4:7f:f6:0b:4b: ad:42:b0:ac:71:72:1b:7c:fb:86:09:9f:9e:66:3b: c0:20:52:20:0c:1b:f2:d1:a8:62:c4:1b:0c:54:30: 42:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:28:74:0F:6C:22:E8:42:CD:ED:E8:0A:BE:13:59:20:56:2F:61:00 X509v3 Authority Key Identifier: keyid:AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ed:1b:25:f1:bc:44:6e:9f:1a:5d:53:bc:f6:cf:c8:72:05: 83:c7:13:58:53:af:8d:37:59:f0:83:92:78:ea:72:23:0c:32: fe:98:fc:50:a2:19:8b:42:87:55:28:fd:f1:80:7e:67:2a:28: 90:57:86:cb:eb:16:a4:a9:86:86:d0:0e:4a:1d:9f:a6:8e:f7: ed:48:32:bd:4f:a1:97:97:8d:c8:35:a0:51:9c:a0:f8:03:21: 3d:2f:f3:a7:4f:54:73:4d:e7:71:83:aa:09:8e:60:aa:c1:29: 79:0f:ac:d3:0c:b9:26:31:cb:9d:ca:cb:a0:f4:e9:28:07:bb: cf:94:60:f9:64:eb:62:1a:bb:03:76:3d:ec:26:9e:2d:14:d1: be:fb:8d:01:36:2e:2d:99:cc:fe:d4:7b:ca:d5:2f:bb:e8:e6: 98:99:b2:7b:e4:26:ee:be:4e:b6:d4:76:39:88:38:1d:c1:de: 90:3f:c3:63:4e:9f:0a:ef:5a:d8:9d:cf:4f:c9:be:58:7d:1a: bb:90:f1:4b:10:8b:a2:63:c6:b7:8b:0d:25:da:73:06:96:6c: c6:26:61:b2:47:7f:d1:be:0b:b2:3f:8a:7c:a6:d4:c4:41:17: 48:76:7e:72:92:94:94:29:6b:b1:21:a2:5e:aa:a4:a4:38:f1: 26:ff:49:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhFQjYxMTAvBgNVBAUTKEFENDQ3QTY3RjA3RTgxQ0QwOUMzMjJFQ0QxMEFEOTQx NkJDNDRCMkIwHhcNMjQwNTI1MDIzNDAxWhcNMjQwNjAxMDIzNDAxWjAYMRYwFAYD VQQDEw02NjUxNGUxYS05ZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6sU0V5DGH4viIcj5FeXq8nuKNufnUggyC7vMIFqXyIr5lDQvpfDaI+xIdaD ZXUPeJxr2gtQJLkFrgbfDfQ+Wg5zyQ7wQpXz/pP8wCTKiyJDAqmONh/lR6OGTzop epXqDEUnuhACPFF8WRhrfBS8xQr1QIsp089kJe6WOPxB7RPLV2IeykTldgXdM6j/ SP/tIaTL3GgL3VUeYgPbMxbS1Jsc+/obYkvwgIFpEZc2kOCZFdxy5SqIw/YPacRF hnwqkrK6NG1oZEwwlR5z2vLTEsFQLgvZjbZUtn0r9H/2C0utQrCscXIbfPuGCZ+e ZjvAIFIgDBvy0ahixBsMVDBCgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8odA9s IuhCze3oCr4TWSBWL2EAMB8GA1UdIwQYMBaAFK1EemfwfoHNCcMi7NEK2UFrxEsr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEVCNi85QzBFRjgzQTc0 RUMxMUVDOTNGODFBMzNDNEY5QUUwMi9yVVI2Wl9CLWdjMEp3eUxzMFFyWlFXdkVT eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JVUjZaX0ItZ2MwSnd5THMwUXJaUVd2RVN5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEVCNi85QzBFRjgzQTc0RUMxMUVDOTNGODFBMzNDNEY5QUUwMi9yVVI2Wl9CLWdj MEp3eUxzMFFyWlFXdkVTeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA67Rsl8bxEbp8aXVO89s/IcgWDxxNYU6+NN1nwg5J46nIjDDL+mPxQ ohmLQodVKP3xgH5nKiiQV4bL6xakqYaG0A5KHZ+mjvftSDK9T6GXl43INaBRnKD4 AyE9L/OnT1RzTedxg6oJjmCqwSl5D6zTDLkmMcudysug9OkoB7vPlGD5ZOtiGrsD dj3sJp4tFNG++40BNi4tmcz+1HvK1S+76OaYmbJ75Cbuvk621HY5iDgdwd6QP8Nj Tp8K71rYnc9Pyb5YfRq7kPFLEIuiY8a3iw0l2nMGlmzGJmGyR3/RvguyP4p8ptTE QRdIdn5ykpSUKWuxIaJeqqSkOPEm/0nn -----END CERTIFICATE-----Generated at Sat May 25 04:35:20 2024 by rpki-client on console-ams.rpki-client.org