$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft File: uf67oJzxCyh-7SzlZyKzyaDvEv8.mft (raw, json) Hash identifier: RfWqd8bJZXuu3btul6NydHE6Un9fbqkKZfpC9amdX/c= Subject key identifier: 37:41:6A:FC:E8:66:1E:58:30:4E:FE:D7:B0:DB:A5:22:34:94:A6:E5 Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF Certificate issuer: /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Certificate serial: 08BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft Manifest number: 08B6 Signing time: Thu 02 May 2024 21:36:32 +0000 Manifest this update: Thu 02 May 2024 21:36:31 +0000 Manifest next update: Thu 09 May 2024 21:36:31 +0000 Files and hashes: 1: uf67oJzxCyh-7SzlZyKzyaDvEv8.crl (hash: dQt/TOVYQOZ5zwwvFSKal62y4lU2prEEEUx5Sx9CmNU=) 2: 27030ADA8EB211EA9D09090FC4F9AE02.roa (hash: gLuoJW8vJX9f9pGeIxuvpKdQoZyIHfDvjf5EmSyhTPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2235 (0x8bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Validity Not Before: May 2 21:36:31 2024 GMT Not After : May 9 21:36:31 2024 GMT Subject: CN=66340760-a1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:97:46:00:50:34:6f:e4:ea:ff:bb:62:7d: 50:e2:a0:76:fe:7c:06:22:b4:4f:d8:c6:94:f4:5a: 0e:4b:aa:1c:a2:8f:cb:02:24:58:51:35:09:c1:3d: da:2b:8c:fb:bc:6e:cd:c6:2c:97:68:07:5d:eb:91: 96:8b:d3:51:1d:4c:db:b6:0a:b1:d7:19:1f:a6:cb: 25:02:4b:d0:57:54:e7:b7:8c:e3:99:15:b9:b8:5a: 1f:e3:39:ce:5f:69:41:86:10:6d:9c:e6:19:bc:a2: f7:72:75:23:d7:9e:0a:2b:36:c5:ce:6e:7a:ed:1a: d6:f1:52:43:0f:ce:c8:7e:46:a9:0c:09:82:8f:1c: 94:73:72:a8:f9:48:87:2f:99:b3:96:00:22:f7:d0: 82:f1:3b:1b:25:68:9c:5c:87:18:4b:a8:d4:6f:9a: a7:59:9e:9f:0e:13:0d:32:af:27:ea:3a:7f:6a:96: 34:68:40:43:4a:b3:13:03:4f:38:c3:f0:21:66:32: 44:2c:3a:13:92:e0:9f:e6:8f:a2:6e:9b:5e:17:97: 88:53:e7:21:0f:2a:66:04:fc:a2:a2:8c:c3:80:6f: c8:6a:46:d0:6b:f3:c8:3a:54:dc:71:8b:69:1a:21: 0e:d5:0f:9b:fc:e7:79:f9:fa:52:c0:e2:5c:9c:48: b4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:41:6A:FC:E8:66:1E:58:30:4E:FE:D7:B0:DB:A5:22:34:94:A6:E5 X509v3 Authority Key Identifier: keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:d0:44:1b:74:3f:f2:28:df:22:75:cf:a7:98:f2:5a:6d:de: 89:a5:4e:a0:be:42:3f:11:5a:8b:cc:88:b0:96:05:3a:97:c2: 74:f3:66:ce:61:46:45:78:6c:a6:8a:d5:01:3b:b3:10:cd:52: 88:99:d6:bb:83:8a:5b:c5:36:53:8d:9f:73:4b:f8:81:f6:7c: 92:5f:4c:bd:d9:87:48:9c:2e:03:01:dd:77:aa:a1:12:b6:6f: 0e:71:70:df:12:a1:92:81:7a:93:d7:4e:cb:29:c0:7a:84:9e: bf:4a:1b:9e:c4:36:1c:64:6d:02:35:0e:1c:29:22:36:f7:75: 9b:6a:0f:96:91:f9:15:c3:ea:06:2a:40:fa:6a:d5:f8:45:f3: db:6d:16:fb:c1:c6:63:3e:b8:81:ae:d5:85:76:c4:f9:89:16: d4:00:56:0b:05:9e:a2:e4:57:31:e9:1e:7b:f7:88:96:24:39: 93:a7:d7:40:7e:4a:51:bc:a5:e4:ea:e0:35:ea:bc:30:80:de: 01:4b:ed:df:cf:da:c7:2a:6b:64:fb:a9:fb:47:20:93:11:73: de:dc:df:15:1f:96:25:ca:73:82:48:e9:70:25:db:33:4e:e8: 87:ed:ef:49:00:22:69:8e:46:82:08:17:e7:8a:16:e5:89:d6: de:09:1b:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCN0ExMTAvBgNVBAUTKEI5RkVCQkEwOUNGMTBCMjg3RUVEMkNFNTY3MjJCM0M5 QTBFRjEyRkYwHhcNMjQwNTAyMjEzNjMxWhcNMjQwNTA5MjEzNjMxWjAYMRYwFAYD VQQDEw02NjM0MDc2MC1hMWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6KXRgBQNG/k6v+7Yn1Q4qB2/nwGIrRP2MaU9FoOS6ocoo/LAiRYUTUJwT3a K4z7vG7NxiyXaAdd65GWi9NRHUzbtgqx1xkfpsslAkvQV1Tnt4zjmRW5uFof4znO X2lBhhBtnOYZvKL3cnUj154KKzbFzm567RrW8VJDD87IfkapDAmCjxyUc3Ko+UiH L5mzlgAi99CC8TsbJWicXIcYS6jUb5qnWZ6fDhMNMq8n6jp/apY0aEBDSrMTA084 w/AhZjJELDoTkuCf5o+ibpteF5eIU+chDypmBPyioozDgG/IakbQa/PIOlTccYtp GiEO1Q+b/Od5+fpSwOJcnEi0OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdBavzo Zh5YME7+17DbpSI0lKblMB8GA1UdIwQYMBaAFLn+u6Cc8Qsofu0s5Wcis8mg7xL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI3QS81RDIxMTg0QzhF QjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5aC03U3psWnlLenlhRHZF djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmNjdvSnp4Q3loLTdTemxaeUt6eWFEdkV2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI3QS81RDIxMTg0QzhFQjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5 aC03U3psWnlLenlhRHZFdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA00EQbdD/yKN8idc+nmPJabd6JpU6gvkI/EVqLzIiwlgU6l8J082bO YUZFeGymitUBO7MQzVKImda7g4pbxTZTjZ9zS/iB9nySX0y92YdInC4DAd13qqES tm8OcXDfEqGSgXqT107LKcB6hJ6/ShuexDYcZG0CNQ4cKSI293Wbag+WkfkVw+oG KkD6atX4RfPbbRb7wcZjPriBrtWFdsT5iRbUAFYLBZ6i5Fcx6R5794iWJDmTp9dA fkpRvKXk6uA16rwwgN4BS+3fz9rHKmtk+6n7RyCTEXPe3N8VH5YlynOCSOlwJdsz TuiH7e9JACJpjkaCCBfnihblidbeCRtB -----END CERTIFICATE-----Generated at Thu May 2 22:13:19 2024 by rpki-client on console-fra.rpki-client.org