$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft File: UNWU1Rjx1sCstQCbVwd49vEG1d4.mft (raw, json) Hash identifier: bzlwGMQUxxt52PR7XVyPQsb3fwVJeTC+OK8kX7+TNkM= Subject key identifier: F6:3B:E1:F3:4E:0F:65:71:86:5C:BD:96:11:3F:AA:0C:06:54:90:10 Authority key identifier: 50:D5:94:D5:18:F1:D6:C0:AC:B5:00:9B:57:07:78:F6:F1:06:D5:DE Certificate issuer: /CN=A918F0F7/serialNumber=50D594D518F1D6C0ACB5009B570778F6F106D5DE Certificate serial: 05B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNWU1Rjx1sCstQCbVwd49vEG1d4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft Manifest number: 05AA Signing time: Tue 07 May 2024 00:20:56 +0000 Manifest this update: Tue 07 May 2024 00:20:55 +0000 Manifest next update: Tue 14 May 2024 00:20:55 +0000 Files and hashes: 1: UNWU1Rjx1sCstQCbVwd49vEG1d4.crl (hash: iI1Cs8jQhvJOaFziRjEKwTbwXF5rdib8q0fEG9SUSZY=) 2: 365255DA7F1C11EB9D057A0EC4F9AE02.roa (hash: jBo3dS50uYqDBlTrTHHC+4gN8loyhHwYkoSkPTaw0cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.crl rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNWU1Rjx1sCstQCbVwd49vEG1d4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 00:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F0F7/serialNumber=50D594D518F1D6C0ACB5009B570778F6F106D5DE Validity Not Before: May 7 00:20:55 2024 GMT Not After : May 14 00:20:55 2024 GMT Subject: CN=663973e7-c205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:9a:7a:12:c2:2b:b9:d7:32:58:08:d2:42: 88:83:22:4b:61:80:de:bd:50:0f:65:4e:1f:d8:ff: b6:b5:33:54:ea:a9:37:40:75:e9:cb:b5:cd:93:b5: 17:b4:ad:6c:ef:d3:b5:94:32:b0:a0:8d:13:1c:b0: 39:89:12:d5:58:e1:3a:38:77:93:51:8b:d8:5d:b0: 8a:6a:75:6e:9e:88:8b:2f:1a:91:e7:72:14:67:4b: 4d:d6:0a:c9:ed:c2:b8:ff:24:a3:f1:e6:88:45:5a: a5:71:e5:b6:b2:5b:c7:6d:93:36:a7:69:91:8a:d7: a1:e4:36:4d:2d:b4:15:2b:cb:d9:d7:28:1b:fc:0e: af:6c:af:85:f2:84:a8:4c:d3:e2:c5:4c:c5:c5:4c: 92:7a:17:79:96:c3:04:4e:35:54:3d:79:2f:b6:7c: 14:6e:10:8c:00:69:45:54:40:35:ca:ec:ef:ca:af: 54:4b:46:34:71:af:e4:87:43:7b:ca:a6:96:ab:04: b9:87:6c:3a:1d:d1:09:fb:69:c4:d9:19:35:c6:6b: c7:56:ea:f5:9e:de:13:dc:26:b8:ff:8c:22:37:fe: 2f:c5:f7:0b:59:ef:35:2d:c8:18:7c:4d:a7:27:b1: 80:02:9f:e5:d3:25:8c:34:4c:2a:f4:07:42:75:c1: d6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3B:E1:F3:4E:0F:65:71:86:5C:BD:96:11:3F:AA:0C:06:54:90:10 X509v3 Authority Key Identifier: keyid:50:D5:94:D5:18:F1:D6:C0:AC:B5:00:9B:57:07:78:F6:F1:06:D5:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNWU1Rjx1sCstQCbVwd49vEG1d4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:74:69:c1:0b:14:86:64:b2:30:20:6d:66:df:da:b1:eb:e5: 6f:12:4a:61:62:bc:7d:73:26:58:99:94:81:ce:e9:e0:34:39: 19:8d:c6:d7:c7:ca:5c:21:08:5b:38:62:35:c0:91:1d:d5:76: 3c:09:90:72:bf:e8:b3:23:25:af:cf:ad:39:6f:b0:02:ef:1a: 5e:b5:8e:0f:93:ea:af:ae:ea:f3:de:6a:31:08:e9:b7:60:fd: 68:f1:f2:48:53:06:65:30:ed:e4:35:a4:93:05:17:23:f4:2a: e2:72:96:87:2c:5c:ad:2e:c5:70:ba:98:c8:c4:f9:89:3a:93: 01:7f:55:aa:2f:6a:dd:fd:4a:49:44:ec:43:4b:12:6f:44:33: 86:b7:9a:18:20:22:72:c1:a4:7d:15:76:aa:bf:d2:13:a6:a7: 7e:3b:01:b2:7f:11:ef:14:33:be:86:8d:8b:2a:e3:62:f3:34: 58:5c:c9:45:9c:32:0b:fd:ea:d0:ec:cb:12:f8:40:6b:e5:f9: 99:58:7c:86:bd:23:47:16:2c:6a:a1:93:d7:43:0b:0f:18:f2: b3:31:b8:da:28:8b:7c:8e:ae:bc:c4:b1:d2:49:97:57:5a:ec: 14:f0:66:a9:45:71:d3:05:2a:72:7a:0f:20:56:68:a6:be:0a: e5:30:ad:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYwRjcxMTAvBgNVBAUTKDUwRDU5NEQ1MThGMUQ2QzBBQ0I1MDA5QjU3MDc3OEY2 RjEwNkQ1REUwHhcNMjQwNTA3MDAyMDU1WhcNMjQwNTE0MDAyMDU1WjAYMRYwFAYD VQQDEw02NjM5NzNlNy1jMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc6aehLCK7nXMlgI0kKIgyJLYYDevVAPZU4f2P+2tTNU6qk3QHXpy7XNk7UX tK1s79O1lDKwoI0THLA5iRLVWOE6OHeTUYvYXbCKanVunoiLLxqR53IUZ0tN1grJ 7cK4/ySj8eaIRVqlceW2slvHbZM2p2mRiteh5DZNLbQVK8vZ1ygb/A6vbK+F8oSo TNPixUzFxUySehd5lsMETjVUPXkvtnwUbhCMAGlFVEA1yuzvyq9US0Y0ca/kh0N7 yqaWqwS5h2w6HdEJ+2nE2Rk1xmvHVur1nt4T3Ca4/4wiN/4vxfcLWe81LcgYfE2n J7GAAp/l0yWMNEwq9AdCdcHWTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPY74fNO D2Vxhly9lhE/qgwGVJAQMB8GA1UdIwQYMBaAFFDVlNUY8dbArLUAm1cHePbxBtXe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjBGNy9DQjc4QjdDODdG MUExMUVCOTJGRTk4MERDNEY5QUUwMi9VTldVMVJqeDFzQ3N0UUNiVndkNDl2RUcx ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VOV1UxUmp4MXNDc3RRQ2JWd2Q0OXZFRzFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjBGNy9DQjc4QjdDODdGMUExMUVCOTJGRTk4MERDNEY5QUUwMi9VTldVMVJqeDFz Q3N0UUNiVndkNDl2RUcxZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVdGnBCxSGZLIwIG1m39qx6+VvEkphYrx9cyZYmZSBzungNDkZjcbX x8pcIQhbOGI1wJEd1XY8CZByv+izIyWvz605b7AC7xpetY4Pk+qvrurz3moxCOm3 YP1o8fJIUwZlMO3kNaSTBRcj9CricpaHLFytLsVwupjIxPmJOpMBf1WqL2rd/UpJ ROxDSxJvRDOGt5oYICJywaR9FXaqv9ITpqd+OwGyfxHvFDO+ho2LKuNi8zRYXMlF nDIL/erQ7MsS+EBr5fmZWHyGvSNHFixqoZPXQwsPGPKzMbjaKIt8jq68xLHSSZdX WuwU8GapRXHTBSpyeg8gVmimvgrlMK22 -----END CERTIFICATE-----Generated at Tue May 7 01:58:24 2024 by rpki-client on console-fra.rpki-client.org