$ rpki-client -vvf rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft File: uAcN_Ffq4OvoruS7XJHQar0cpxo.mft (raw, json) Hash identifier: pswOAOyTnmazlQBSeE9Y0dvhN73sa7ug7GYJCN2Wvms= Subject key identifier: 19:3B:0D:F6:8A:47:73:CE:10:40:08:4E:B4:CC:DB:EE:9E:33:C6:DB Authority key identifier: B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A Certificate issuer: /CN=A9196977/serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A Certificate serial: 052C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft Manifest number: 0525 Signing time: Wed 01 May 2024 01:21:56 +0000 Manifest this update: Wed 01 May 2024 01:21:56 +0000 Manifest next update: Wed 08 May 2024 01:21:56 +0000 Files and hashes: 1: uAcN_Ffq4OvoruS7XJHQar0cpxo.crl (hash: OQATIGC7w2WqLPVqxxuVeHrlqbJ83qzr4xEZEuOhhFA=) 2: BAC6FF88707811ED8BBDE80AC4F9AE02.roa (hash: iewlmQHKmtL9g9iAwygdncFQbz6yYvgxh4ytXfZu5xM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1324 (0x52c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196977/serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A Validity Not Before: May 1 01:21:56 2024 GMT Not After : May 8 01:21:56 2024 GMT Subject: CN=66319934-d8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8a:5d:ed:5b:01:32:8c:f5:ef:ae:ec:da:2c: 6c:ea:c3:7a:e0:2e:f3:9d:12:62:fd:3c:bc:00:42: 1d:9f:1c:72:29:f6:90:ed:3a:4d:40:2b:66:04:be: a0:e0:03:98:a5:bd:87:96:89:74:0a:51:9f:33:37: f5:f8:3b:7b:8c:0f:df:7a:c3:f1:0e:1a:c7:04:94: 7d:24:1f:17:a3:9e:c6:8a:fe:a7:a9:95:4c:62:38: b7:94:63:be:d9:77:3d:e0:5e:13:8c:a5:4c:30:77: 03:77:a8:d2:c3:eb:2f:ba:7e:d4:e9:be:db:8c:a6: 16:13:32:88:a7:03:af:d4:b1:b9:21:96:27:2f:b3: fb:83:8c:ae:71:b3:d7:7e:d5:ee:f5:f5:35:1f:56: de:ee:f3:0f:43:23:56:9a:fc:4a:41:34:aa:3f:73: 99:06:f8:7c:63:a7:64:15:ba:33:26:54:a7:15:9b: 66:64:37:c5:40:89:1b:2b:1e:2d:a6:34:26:24:d9: 64:12:7d:52:8c:96:12:72:f0:6f:37:01:21:01:fc: 7e:ad:58:2a:d6:a9:96:81:cc:f8:c7:d5:a8:5d:fa: 21:b9:94:9b:81:68:d4:78:4b:90:4a:b4:b4:ba:31: 9c:85:0f:52:d6:a4:ee:41:37:09:2e:52:db:3b:65: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3B:0D:F6:8A:47:73:CE:10:40:08:4E:B4:CC:DB:EE:9E:33:C6:DB X509v3 Authority Key Identifier: keyid:B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:80:58:1f:50:f2:c9:99:c7:90:0f:55:26:3a:ac:58:6a:db: b1:aa:dd:0c:f6:d2:f6:f7:0f:b5:dc:e6:96:9a:9a:63:8a:57: ad:2e:1c:7e:a7:c0:8a:28:b6:0e:b0:5e:6b:76:dd:31:3f:06: 54:da:c0:71:8d:cc:83:59:94:63:e9:f6:44:ca:8e:c5:8c:26: 63:02:fe:52:b8:63:29:9a:82:71:c6:10:30:d4:27:d1:e0:04: a3:95:7f:a6:74:fc:2e:95:a0:14:35:65:38:cb:9f:8e:5f:27: e6:58:70:a6:7e:d2:5c:fc:c3:c9:e0:e7:09:50:2b:ab:3e:63: e5:7c:77:78:e6:3b:fd:1f:7e:f5:f9:7b:2f:93:a1:0d:6c:41: 09:5c:2f:1e:4d:4b:27:e4:0e:91:07:8b:97:9c:ae:d5:c6:b2: 34:c8:a8:82:74:94:75:5b:08:63:ad:dc:aa:08:c8:66:ee:e2: 9b:5b:c8:ba:93:a3:fc:46:74:c9:b3:6c:da:dd:4e:c5:97:fe: 0d:d1:45:6a:64:a9:15:93:cd:c6:ca:46:7a:9d:5a:6d:24:4b: 4c:81:29:39:43:fc:41:bb:46:05:25:05:50:cd:db:20:9d:3c: 9b:c7:2f:8d:0e:70:19:c1:15:c4:47:e7:45:d9:77:b1:bb:51: cf:b6:71:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY5NzcxMTAvBgNVBAUTKEI4MDcwREZDNTdFQUUwRUJFOEFFRTRCQjVDOTFEMDZB QkQxQ0E3MUEwHhcNMjQwNTAxMDEyMTU2WhcNMjQwNTA4MDEyMTU2WjAYMRYwFAYD VQQDEw02NjMxOTkzNC1kOGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkopd7VsBMoz1767s2ixs6sN64C7znRJi/Ty8AEIdnxxyKfaQ7TpNQCtmBL6g 4AOYpb2Hlol0ClGfMzf1+Dt7jA/fesPxDhrHBJR9JB8Xo57Giv6nqZVMYji3lGO+ 2Xc94F4TjKVMMHcDd6jSw+svun7U6b7bjKYWEzKIpwOv1LG5IZYnL7P7g4yucbPX ftXu9fU1H1be7vMPQyNWmvxKQTSqP3OZBvh8Y6dkFbozJlSnFZtmZDfFQIkbKx4t pjQmJNlkEn1SjJYScvBvNwEhAfx+rVgq1qmWgcz4x9WoXfohuZSbgWjUeEuQSrS0 ujGchQ9S1qTuQTcJLlLbO2XbWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBk7DfaK R3POEEAITrTM2+6eM8bbMB8GA1UdIwQYMBaAFLgHDfxX6uDr6K7ku1yR0Gq9HKca MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njk3Ny9COTRCOEM5OEIy MDQxMUVCOUNDN0Y0NDlDNEY5QUUwMi91QWNOX0ZmcTRPdm9ydVM3WEpIUWFyMGNw eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VBY05fRmZxNE92b3J1UzdYSkhRYXIwY3B4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Njk3Ny9COTRCOEM5OEIyMDQxMUVCOUNDN0Y0NDlDNEY5QUUwMi91QWNOX0ZmcTRP dm9ydVM3WEpIUWFyMGNweG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVgFgfUPLJmceQD1UmOqxYatuxqt0M9tL29w+13OaWmppjiletLhx+ p8CKKLYOsF5rdt0xPwZU2sBxjcyDWZRj6fZEyo7FjCZjAv5SuGMpmoJxxhAw1CfR 4ASjlX+mdPwulaAUNWU4y5+OXyfmWHCmftJc/MPJ4OcJUCurPmPlfHd45jv9H371 +Xsvk6ENbEEJXC8eTUsn5A6RB4uXnK7VxrI0yKiCdJR1WwhjrdyqCMhm7uKbW8i6 k6P8RnTJs2za3U7Fl/4N0UVqZKkVk83GykZ6nVptJEtMgSk5Q/xBu0YFJQVQzdsg nTybxy+NDnAZwRXER+dF2Xexu1HPtnGG -----END CERTIFICATE-----Generated at Wed May 1 02:08:05 2024 by rpki-client on console-fra.rpki-client.org