$ rpki-client -vvf rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft File: rUk9yaPSQDSDYoWHBR93lRWJFnk.mft (raw, json) Hash identifier: qCkKMCQbNoHD9Cp/hifq5H09+yPY6VseIMaXKFBGwB4= Subject key identifier: D3:A4:F0:A8:74:B7:8B:C0:5E:F8:05:B6:B1:4C:A0:7F:42:6F:98:2C Authority key identifier: AD:49:3D:C9:A3:D2:40:34:83:62:85:87:05:1F:77:95:15:89:16:79 Certificate issuer: /CN=A918B418/serialNumber=AD493DC9A3D2403483628587051F779515891679 Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft Manifest number: 0189 Signing time: Fri 03 May 2024 04:49:35 +0000 Manifest this update: Fri 03 May 2024 04:49:34 +0000 Manifest next update: Fri 10 May 2024 04:49:34 +0000 Files and hashes: 1: rUk9yaPSQDSDYoWHBR93lRWJFnk.crl (hash: PZ/S553FPbR+n8UZkUbPOaeEoRQC2aRMYNMaBlf5yF8=) 2: 8275E1721C5311EDA75CF137C4F9AE02.roa (hash: qAtsrDW3MjpZ+nPaCP9Zu04qg26yjosIHxl5jbJJoQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.crl rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B418/serialNumber=AD493DC9A3D2403483628587051F779515891679 Validity Not Before: May 3 04:49:34 2024 GMT Not After : May 10 04:49:34 2024 GMT Subject: CN=66346cde-436a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c9:77:78:e9:2c:59:e3:b2:a7:c6:0b:65:6a: 8b:5b:63:00:2e:cb:0d:68:eb:58:b3:61:83:f2:97: eb:22:2a:f4:f2:e9:55:7d:08:36:80:15:03:33:b2: 2e:35:29:92:4c:59:98:ff:77:62:c2:1e:e4:08:19: e8:da:f8:97:fc:8a:b7:40:07:6f:81:ae:64:d6:22: 7c:40:4b:8c:c8:08:df:39:2b:1d:a8:c0:49:e0:4d: 22:e6:e1:68:8b:5b:aa:25:4e:05:7d:f5:a3:5d:07: a3:20:7c:75:eb:1d:f1:c7:0b:d6:0e:6d:c7:d8:66: 3b:b3:85:e5:ab:62:3f:bf:d3:3b:74:e0:74:a8:c7: 7c:06:05:4a:b6:ab:32:82:30:a5:d3:d4:e3:84:40: 51:43:1a:9b:5b:d2:b4:52:fd:1d:51:a0:ac:7e:14: d2:d3:ad:0b:55:10:db:54:8c:36:bc:64:d5:74:61: 23:a5:5b:cc:47:03:17:60:82:df:68:92:ef:34:05: fd:5a:44:2d:e0:6b:27:64:26:b9:fd:5d:a8:a5:b4: 5c:f5:4c:46:73:b3:26:9d:3a:5d:e8:e9:27:ab:2c: 87:ea:16:cc:bf:80:81:a8:f8:00:aa:16:5c:ab:a9: aa:34:91:bd:17:70:a2:61:ad:a3:6b:0a:7b:e0:f5: 36:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A4:F0:A8:74:B7:8B:C0:5E:F8:05:B6:B1:4C:A0:7F:42:6F:98:2C X509v3 Authority Key Identifier: keyid:AD:49:3D:C9:A3:D2:40:34:83:62:85:87:05:1F:77:95:15:89:16:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:08:9b:83:91:a7:45:cd:89:7b:34:68:b3:97:19:82:6c:d3: 8d:74:2d:61:cf:5f:dd:89:77:3f:03:8d:fa:65:5c:58:96:0c: 6f:a1:7d:8a:1a:57:8a:95:50:07:34:65:9b:2b:8e:19:b9:76: 36:27:99:0e:ca:5b:78:fe:44:4f:82:d2:6b:57:48:60:b3:42: f1:3e:f7:86:11:15:b6:a8:1a:08:9e:96:91:dc:63:44:e0:78: 97:ff:94:35:0a:e4:bf:4c:d0:b0:b3:2d:1a:b3:18:d6:94:d2: 15:e8:62:f2:aa:df:cb:b2:a5:4d:13:c5:40:2f:bc:04:54:9b: 20:f9:b5:7f:d4:61:57:b5:c0:4b:4b:2d:0a:68:51:81:5c:2d: 01:ef:f5:ce:1e:60:33:7a:36:c5:c2:b7:fe:74:03:bd:85:37: e7:67:7a:32:c0:5a:aa:f3:90:56:5e:9b:c4:8e:bc:3f:6d:d5: 19:0a:52:30:82:b8:2a:f3:ae:03:39:9b:eb:2b:65:b6:66:c3: 80:19:a4:db:1c:6e:f6:6a:be:cf:8f:26:9e:5a:36:6c:fa:e0: 77:bc:fe:4c:5a:99:9b:db:9d:f1:6f:bd:d3:eb:62:06:b0:93: 46:55:95:d5:d2:50:d2:db:e1:e2:06:dd:34:4d:57:d7:da:35: b8:18:01:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI0MTgxMTAvBgNVBAUTKEFENDkzREM5QTNEMjQwMzQ4MzYyODU4NzA1MUY3Nzk1 MTU4OTE2NzkwHhcNMjQwNTAzMDQ0OTM0WhcNMjQwNTEwMDQ0OTM0WjAYMRYwFAYD VQQDEw02NjM0NmNkZS00MzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Ml3eOksWeOyp8YLZWqLW2MALssNaOtYs2GD8pfrIir08ulVfQg2gBUDM7Iu NSmSTFmY/3diwh7kCBno2viX/Iq3QAdvga5k1iJ8QEuMyAjfOSsdqMBJ4E0i5uFo i1uqJU4FffWjXQejIHx16x3xxwvWDm3H2GY7s4Xlq2I/v9M7dOB0qMd8BgVKtqsy gjCl09TjhEBRQxqbW9K0Uv0dUaCsfhTS060LVRDbVIw2vGTVdGEjpVvMRwMXYILf aJLvNAX9WkQt4GsnZCa5/V2opbRc9UxGc7MmnTpd6OknqyyH6hbMv4CBqPgAqhZc q6mqNJG9F3CiYa2jawp74PU2PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOk8Kh0 t4vAXvgFtrFMoH9Cb5gsMB8GA1UdIwQYMBaAFK1JPcmj0kA0g2KFhwUfd5UViRZ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjQxOC9BRDBEQzQ4MDFD NEYxMUVEQUFEMzEzODZDNEY5QUUwMi9yVWs5eWFQU1FEU0RZb1dIQlI5M2xSV0pG bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVazl5YVBTUURTRFlvV0hCUjkzbFJXSkZuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjQxOC9BRDBEQzQ4MDFDNEYxMUVEQUFEMzEzODZDNEY5QUUwMi9yVWs5eWFQU1FE U0RZb1dIQlI5M2xSV0pGbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1CJuDkadFzYl7NGizlxmCbNONdC1hz1/diXc/A436ZVxYlgxvoX2K GleKlVAHNGWbK44ZuXY2J5kOylt4/kRPgtJrV0hgs0LxPveGERW2qBoInpaR3GNE 4HiX/5Q1CuS/TNCwsy0asxjWlNIV6GLyqt/LsqVNE8VAL7wEVJsg+bV/1GFXtcBL Sy0KaFGBXC0B7/XOHmAzejbFwrf+dAO9hTfnZ3oywFqq85BWXpvEjrw/bdUZClIw grgq864DOZvrK2W2ZsOAGaTbHG72ar7PjyaeWjZs+uB3vP5MWpmb253xb73T62IG sJNGVZXV0lDS2+HiBt00TVfX2jW4GAGz -----END CERTIFICATE-----Generated at Fri May 3 06:28:43 2024 by rpki-client on console-fra.rpki-client.org