$ rpki-client -vvf rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft File: uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft (raw, json) Hash identifier: JKjnG2JTZMgfV3kc0L4UzIR70AleoLShoDP8I0lmlL4= Subject key identifier: 53:15:CE:B3:DE:79:7C:5F:97:C6:17:40:5E:88:2E:B3:FC:9A:C2:D2 Authority key identifier: B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 Certificate issuer: /CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Certificate serial: 056B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft Manifest number: 0566 Signing time: Wed 01 May 2024 01:03:33 +0000 Manifest this update: Wed 01 May 2024 01:03:33 +0000 Manifest next update: Wed 08 May 2024 01:03:33 +0000 Files and hashes: 1: uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl (hash: bW9SZ+ZQfFU0aL2m2gnfB07PuLbBJoaMgjuWKn6tERU=) 2: 00C79724968F11EB9A79630BC4F9AE02.roa (hash: CbFvyeP64z7lPjcb6/hOHGkSsa1q6j/tQwjni6wEqq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1387 (0x56b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6 Validity Not Before: May 1 01:03:33 2024 GMT Not After : May 8 01:03:33 2024 GMT Subject: CN=663194e5-e3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:91:bb:14:94:21:77:b9:08:a7:4e:34:a9:e1: 38:43:e0:84:d3:96:74:86:67:3f:63:9d:22:5f:3c: b4:86:ad:1e:4c:40:ca:00:69:25:f6:38:89:db:2f: ae:90:8b:48:23:4e:17:39:34:c8:d3:30:9d:9b:aa: ac:95:da:13:09:30:27:47:b2:fb:50:0c:fc:6b:bc: 92:d4:07:0f:cc:c0:9f:3d:2e:5e:39:d8:a2:c2:8e: f9:36:37:47:a3:00:09:51:cc:6b:c3:80:91:49:68: ee:0f:21:1d:63:ab:e1:b7:0b:a5:d6:65:64:d0:8e: c9:2f:40:c3:3d:b3:37:9d:49:45:46:0a:ae:cd:90: 33:d0:96:70:64:ea:51:16:4a:89:4b:e6:7b:07:60: da:2c:ae:80:b9:f0:e7:13:f9:c0:08:23:04:28:2e: 4e:a4:0e:e5:e5:76:41:68:32:c0:47:f4:3b:f5:1c: 6b:40:fb:21:19:3c:ef:06:8e:27:88:8c:8e:76:0d: 5a:7e:f3:d5:ed:d3:d0:10:c3:f8:2a:34:23:69:1c: 4f:40:dc:57:41:31:21:bf:36:91:2f:2c:5d:83:4e: a3:1b:79:12:62:fd:ea:18:2b:4b:db:85:e0:52:68: 98:77:fa:17:cb:0f:55:1f:94:54:ac:74:c0:8b:d5: 5b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:15:CE:B3:DE:79:7C:5F:97:C6:17:40:5E:88:2E:B3:FC:9A:C2:D2 X509v3 Authority Key Identifier: keyid:B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d1:24:ba:7b:79:ab:e5:3e:ba:15:49:05:c1:33:8b:e1:98: 16:66:dc:3a:24:43:fa:1e:58:33:27:54:ae:9e:9c:d9:32:bc: 2f:c3:d3:79:d4:b9:70:a8:fc:10:11:8c:79:ed:71:be:77:57: f6:78:d4:c0:35:30:1d:0d:3f:04:6a:2c:d7:0f:5e:5d:31:30: 06:3e:0c:6a:2e:a5:4c:76:a5:39:81:41:2d:f9:82:de:1d:f8: 97:fc:70:2b:72:c6:4e:13:bc:9e:31:2b:2c:68:cc:2a:c6:5e: 3c:97:c1:50:da:6a:08:70:5b:47:6f:9e:39:74:44:e1:32:59: 0d:74:a9:95:f4:2d:2e:7c:c6:50:d4:19:42:b5:68:ab:d4:e7: 20:10:3b:43:98:6e:41:44:88:c2:7f:ae:de:0d:cf:6b:0e:57: 46:bf:a3:5b:2f:55:e7:02:be:e5:3a:8b:d3:06:e6:cb:35:cb: 15:f3:f0:3b:96:a3:ee:2d:0a:76:03:09:71:fa:13:22:f8:fc: 49:0b:c9:97:99:d3:00:57:ff:35:0e:bf:1a:bb:5d:36:98:af: e0:d9:56:8b:fa:4d:dc:7e:68:d6:f7:c6:94:c9:8f:00:94:22: 68:6b:91:f9:5c:e6:42:9d:b9:61:f0:7a:dc:d7:95:df:11:44: df:75:49:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3MkQxMTAvBgNVBAUTKEI4RjYxQ0FCQjkxMTlENkMzNzY4NUYwQUJFMzRBRUUy NkEwMjE3RTYwHhcNMjQwNTAxMDEwMzMzWhcNMjQwNTA4MDEwMzMzWjAYMRYwFAYD VQQDEw02NjMxOTRlNS1lM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5G7FJQhd7kIp040qeE4Q+CE05Z0hmc/Y50iXzy0hq0eTEDKAGkl9jiJ2y+u kItII04XOTTI0zCdm6qsldoTCTAnR7L7UAz8a7yS1AcPzMCfPS5eOdiiwo75NjdH owAJUcxrw4CRSWjuDyEdY6vhtwul1mVk0I7JL0DDPbM3nUlFRgquzZAz0JZwZOpR FkqJS+Z7B2DaLK6AufDnE/nACCMEKC5OpA7l5XZBaDLAR/Q79RxrQPshGTzvBo4n iIyOdg1afvPV7dPQEMP4KjQjaRxPQNxXQTEhvzaRLyxdg06jG3kSYv3qGCtL24Xg UmiYd/oXyw9VH5RUrHTAi9VbkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMVzrPe eXxfl8YXQF6ILrP8msLSMB8GA1UdIwQYMBaAFLj2HKu5EZ1sN2hfCr40ruJqAhfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDcyRC85OEJBNDZCNDk2 OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5XdzNhRjhLdmpTdTRtb0NG LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQWWNxN2tSbld3M2FGOEt2alN1NG1vQ0YtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDcyRC85OEJBNDZCNDk2OEQxMUVCOTNGQTM1MEFDNEY5QUUwMi91UFljcTdrUm5X dzNhRjhLdmpTdTRtb0NGLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd0SS6e3mr5T66FUkFwTOL4ZgWZtw6JEP6HlgzJ1SunpzZMrwvw9N5 1LlwqPwQEYx57XG+d1f2eNTANTAdDT8EaizXD15dMTAGPgxqLqVMdqU5gUEt+YLe HfiX/HArcsZOE7yeMSssaMwqxl48l8FQ2moIcFtHb545dEThMlkNdKmV9C0ufMZQ 1BlCtWir1OcgEDtDmG5BRIjCf67eDc9rDldGv6NbL1XnAr7lOovTBubLNcsV8/A7 lqPuLQp2Awlx+hMi+PxJC8mXmdMAV/81Dr8au102mK/g2VaL+k3cfmjW98aUyY8A lCJoa5H5XOZCnblh8Hrc15XfEUTfdUnj -----END CERTIFICATE-----Generated at Wed May 1 01:38:30 2024 by rpki-client on console-ams.rpki-client.org