$ rpki-client -vvf rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft File: rUZnzujj-e3_kuf7uzf_xmwAc6I.mft (raw, json) Hash identifier: J2+zsW1spIU01ACZ9FO6C0tjsACtSfxJjZBqfk6i/RA= Subject key identifier: 0C:39:C1:76:4B:E3:E6:25:2B:1A:66:53:C3:6D:01:FF:F6:99:AB:05 Authority key identifier: AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2 Certificate issuer: /CN=A919C0F6/serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft Manifest number: BC Signing time: Fri 03 May 2024 06:50:12 +0000 Manifest this update: Fri 03 May 2024 06:50:11 +0000 Manifest next update: Fri 10 May 2024 06:50:11 +0000 Files and hashes: 1: rUZnzujj-e3_kuf7uzf_xmwAc6I.crl (hash: SFz00vLJ9fejUD0ViKTprxNW+eND8F2qzEybdK4Am60=) 2: D016C916EF5A11EDA6863E67C4F9AE02.roa (hash: 9Lo3d3eS9DODsA0QbUdso+ksBYI/XtOkg6gbRTT4iCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C0F6/serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2 Validity Not Before: May 3 06:50:11 2024 GMT Not After : May 10 06:50:11 2024 GMT Subject: CN=66348924-0149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2c:e9:b9:dc:df:7c:c5:14:e6:4e:c9:85:76: a7:9a:a5:38:e5:16:a3:df:46:5f:9e:f5:d1:b0:f7: 50:32:ae:24:d4:f3:bf:2d:d4:1b:f9:a7:0a:60:8b: 50:86:9f:b4:c8:35:e9:28:85:e8:46:3a:f7:ce:72: f5:a2:aa:13:cd:73:07:43:d3:d4:bc:5b:5b:8b:64: 3d:93:58:f1:6e:48:fa:8d:4a:55:33:c9:78:c9:45: e4:5e:af:21:2a:f2:06:97:f5:39:c5:cc:16:87:57: 9c:e3:c4:99:f6:41:4f:3f:7f:6c:0c:bb:f2:d0:99: 2e:18:cc:cd:24:f9:fe:94:06:bb:ee:4c:a0:f5:00: a4:6e:b0:08:b1:11:24:ed:ea:a0:6e:6f:96:46:99: eb:9f:ba:0b:4c:ef:3b:4e:f9:78:92:64:5f:6a:62: 0f:83:db:b0:6d:f6:80:0d:a7:28:8d:b3:91:47:ea: 2f:7a:ba:27:3e:c6:53:ec:96:eb:d3:e6:8b:a0:84: 3b:b4:a7:14:41:e3:9c:67:fc:9d:c1:4e:59:d4:8c: 8b:25:d2:78:26:77:2f:05:e0:b7:3a:7b:53:6f:02: 0d:7d:79:82:05:59:08:59:1a:90:62:78:4d:75:7a: da:83:12:d2:63:04:1e:f9:25:83:0c:d9:41:8d:6b: 20:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:39:C1:76:4B:E3:E6:25:2B:1A:66:53:C3:6D:01:FF:F6:99:AB:05 X509v3 Authority Key Identifier: keyid:AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:41:8c:08:fe:e0:99:6f:4c:5b:82:e0:57:9d:ef:bb:1d:c2: 32:2e:2d:bf:21:26:17:22:97:4d:9c:27:dd:ec:74:20:c2:2f: 8b:32:fb:11:11:58:9f:ad:11:78:2a:ac:d5:d9:8e:0e:cd:50: 80:43:ce:e0:62:25:40:35:af:90:01:c5:61:fa:71:48:e9:3b: ae:a0:0a:36:82:61:3d:69:a3:47:06:36:f3:cc:25:cd:13:91: 7f:38:a0:43:f2:6b:54:bb:58:99:0e:bf:69:26:db:11:ca:ab: 8b:94:1a:a8:c5:a1:2c:c4:f9:54:18:90:a2:e6:4b:4d:f8:16: ea:bb:35:81:19:21:e5:32:43:e8:58:a4:f6:77:07:e7:37:f8: f2:76:70:82:28:67:36:9c:e7:ca:43:68:4d:8b:bd:b3:39:dd: aa:7b:c4:32:44:b6:a9:76:c0:ee:8a:2e:3f:51:ca:81:9d:4b: 44:dd:79:cb:2e:67:05:ae:c0:7d:42:2b:15:72:aa:d2:1f:03: 7f:da:de:3c:79:19:23:31:9c:0e:9b:58:68:ab:1e:af:63:a3: 51:6f:f0:86:23:1b:72:18:a7:2b:e2:9d:e7:39:6e:90:bc:d3: e3:69:bd:94:59:cb:ca:02:43:16:30:a1:21:ed:c1:a7:55:f1: 70:d5:25:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMwRjYxMTAvBgNVBAUTKEFENDY2N0NFRThFM0Y5RURGRjkyRTdGQkJCMzdGRkM2 NkMwMDczQTIwHhcNMjQwNTAzMDY1MDExWhcNMjQwNTEwMDY1MDExWjAYMRYwFAYD VQQDEw02NjM0ODkyNC0wMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzizpudzffMUU5k7JhXanmqU45Raj30ZfnvXRsPdQMq4k1PO/LdQb+acKYItQ hp+0yDXpKIXoRjr3znL1oqoTzXMHQ9PUvFtbi2Q9k1jxbkj6jUpVM8l4yUXkXq8h KvIGl/U5xcwWh1ec48SZ9kFPP39sDLvy0JkuGMzNJPn+lAa77kyg9QCkbrAIsREk 7eqgbm+WRpnrn7oLTO87Tvl4kmRfamIPg9uwbfaADacojbORR+overonPsZT7Jbr 0+aLoIQ7tKcUQeOcZ/ydwU5Z1IyLJdJ4JncvBeC3OntTbwINfXmCBVkIWRqQYnhN dXragxLSYwQe+SWDDNlBjWsg8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAw5wXZL 4+YlKxpmU8NtAf/2masFMB8GA1UdIwQYMBaAFK1GZ87o4/nt/5Ln+7s3/8ZsAHOi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzBGNi9EMkJCNzU1QUVG NEYxMUVEQjVENzFGNDZDNEY5QUUwMi9yVVpuenVqai1lM19rdWY3dXpmX3htd0Fj NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVWm56dWpqLWUzX2t1Zjd1emZfeG13QWM2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzBGNi9EMkJCNzU1QUVGNEYxMUVEQjVENzFGNDZDNEY5QUUwMi9yVVpuenVqai1l M19rdWY3dXpmX3htd0FjNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeQYwI/uCZb0xbguBXne+7HcIyLi2/ISYXIpdNnCfd7HQgwi+LMvsR EVifrRF4KqzV2Y4OzVCAQ87gYiVANa+QAcVh+nFI6TuuoAo2gmE9aaNHBjbzzCXN E5F/OKBD8mtUu1iZDr9pJtsRyquLlBqoxaEsxPlUGJCi5ktN+BbquzWBGSHlMkPo WKT2dwfnN/jydnCCKGc2nOfKQ2hNi72zOd2qe8QyRLapdsDuii4/UcqBnUtE3XnL LmcFrsB9QisVcqrSHwN/2t48eRkjMZwOm1hoqx6vY6NRb/CGIxtyGKcr4p3nOW6Q vNPjab2UWcvKAkMWMKEh7cGnVfFw1SVe -----END CERTIFICATE-----Generated at Fri May 3 09:09:30 2024 by rpki-client on console-fra.rpki-client.org