$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft File: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft (raw, json) Hash identifier: Q/dsJa2HjvMx83GtHqMey2Y2H+kg/6gmR21tiX3R5g4= Subject key identifier: 5B:C3:73:C2:32:D0:54:5B:27:25:B8:D1:47:6E:B7:63:4D:E0:1F:3A Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E Certificate issuer: /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E Certificate serial: 0A5A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft Manifest number: 0A53 Signing time: Fri 26 Apr 2024 20:20:07 +0000 Manifest this update: Fri 26 Apr 2024 20:20:07 +0000 Manifest next update: Fri 03 May 2024 20:20:07 +0000 Files and hashes: 1: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl (hash: LgyYaPRg3hKBsnSzC/1l+aBrr6xjxLqjrtaly/VbJl8=) 2: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (hash: lRbBYfJxVayFL3RVUpLG4a+ltohVMNEx8kUndmDOO18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 20:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2650 (0xa5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E Validity Not Before: Apr 26 20:20:07 2024 GMT Not After : May 3 20:20:07 2024 GMT Subject: CN=662c0c77-d8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4c:35:7a:45:41:c4:e8:1d:8f:70:ce:19:b2: 9d:e4:e9:24:a0:bb:d9:3c:d1:db:55:84:36:5d:ed: a4:0c:ea:93:f1:c3:6a:5f:12:9f:32:2f:5f:65:ef: c3:51:31:c9:fa:8d:b5:36:81:26:21:55:38:20:b0: 43:23:82:95:18:8d:2a:e8:4c:2e:5f:9e:c9:de:6f: 98:6b:81:fe:b7:d5:f0:7a:33:8b:15:bb:da:f4:40: c7:9b:ec:82:7e:4e:8a:30:6d:ae:55:b3:f9:a3:2c: 1d:ed:93:67:a1:79:6d:f3:72:ec:d4:0c:31:b2:ee: 66:af:4b:a1:a6:41:eb:72:04:59:19:61:e7:03:03: 8e:28:9c:67:13:37:a3:79:cb:c6:47:4c:81:11:cb: a3:48:e3:cc:22:73:a0:aa:85:92:68:d5:da:74:47: 6b:ae:cb:b5:b4:46:51:74:d7:a7:e1:67:e9:eb:43: 6b:a8:8a:a0:77:af:d8:a5:7d:fc:3a:c6:e7:b9:ae: 27:7c:d1:70:e8:af:26:ff:71:b6:6e:eb:74:b2:cd: d1:3b:76:2e:b9:c8:a4:fd:83:49:98:e5:57:98:f5: fa:b0:c0:4a:82:98:06:08:8f:ca:b6:e2:fa:9d:4e: fe:93:10:19:2c:4b:f8:61:54:9f:e3:59:da:f1:45: d4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C3:73:C2:32:D0:54:5B:27:25:B8:D1:47:6E:B7:63:4D:E0:1F:3A X509v3 Authority Key Identifier: keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0b:3d:5c:98:1d:4b:48:cd:33:b6:31:7c:58:d4:ac:30:80: 91:56:f0:47:f8:6b:7a:02:fc:18:7c:84:3d:cc:9a:bb:e8:ef: df:64:61:91:9a:f5:2b:cf:6d:95:cb:26:09:20:7a:62:ce:e3: f9:31:dd:43:cb:50:9c:f2:7f:08:d4:3f:a7:16:69:d4:d4:db: be:25:0d:2f:55:df:ef:fa:d8:1c:7a:9d:59:ea:62:b5:74:66: b3:d2:9e:0b:50:b1:ef:f0:11:2b:ad:e9:6b:d3:03:c1:ef:46: 40:50:1c:58:8c:97:8f:f4:1c:63:9c:8d:dc:8e:0e:db:77:34: 2f:f8:49:79:a5:dc:8a:77:a4:c8:63:b9:c3:7e:56:d5:34:6f: 8a:9b:3f:6c:e6:30:b6:31:20:4a:c7:ad:aa:de:e2:bf:02:93: e8:44:86:69:f0:b7:e6:01:7a:04:34:7c:b0:42:c0:18:4c:ba: 96:4d:8c:18:87:37:47:89:67:fd:16:e4:4d:06:22:05:ff:6e: 53:08:13:45:f0:af:2e:47:8f:18:67:08:f9:b4:27:d9:7e:64: 30:0f:90:e5:79:2f:5a:8e:47:4e:ed:83:1d:c6:c9:2e:c9:ba: 1b:ad:44:04:a8:2c:d5:f5:e9:b3:79:ff:cd:dd:8b:d8:dc:0c: 5d:56:b3:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNTExMTAvBgNVBAUTKDUyRDY4MEUwNDVEQ0U5OTA3ODlFMEQ3NzcyNjE3QzYw QzM2RUQxOEUwHhcNMjQwNDI2MjAyMDA3WhcNMjQwNTAzMjAyMDA3WjAYMRYwFAYD VQQDEw02NjJjMGM3Ny1kOGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEw1ekVBxOgdj3DOGbKd5OkkoLvZPNHbVYQ2Xe2kDOqT8cNqXxKfMi9fZe/D UTHJ+o21NoEmIVU4ILBDI4KVGI0q6EwuX57J3m+Ya4H+t9XwejOLFbva9EDHm+yC fk6KMG2uVbP5oywd7ZNnoXlt83Ls1Awxsu5mr0uhpkHrcgRZGWHnAwOOKJxnEzej ecvGR0yBEcujSOPMInOgqoWSaNXadEdrrsu1tEZRdNen4Wfp60NrqIqgd6/YpX38 Osbnua4nfNFw6K8m/3G2but0ss3RO3Yuucik/YNJmOVXmPX6sMBKgpgGCI/KtuL6 nU7+kxAZLEv4YVSf41na8UXUNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvDc8Iy 0FRbJyW40Udut2NN4B86MB8GA1UdIwQYMBaAFFLWgOBF3OmQeJ4Nd3JhfGDDbtGO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9CQTNDRDRBNjNE ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZaQjRuZzEzY21GOFlNTnUw WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1V0YUE0RVhjNlpCNG5nMTNjbUY4WU1OdTBZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY1MS9CQTNDRDRBNjNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZa QjRuZzEzY21GOFlNTnUwWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPCz1cmB1LSM0ztjF8WNSsMICRVvBH+Gt6AvwYfIQ9zJq76O/fZGGR mvUrz22VyyYJIHpizuP5Md1Dy1Cc8n8I1D+nFmnU1Nu+JQ0vVd/v+tgcep1Z6mK1 dGaz0p4LULHv8BErrelr0wPB70ZAUBxYjJeP9BxjnI3cjg7bdzQv+El5pdyKd6TI Y7nDflbVNG+Kmz9s5jC2MSBKx62q3uK/ApPoRIZp8LfmAXoENHywQsAYTLqWTYwY hzdHiWf9FuRNBiIF/25TCBNF8K8uR48YZwj5tCfZfmQwD5DleS9ajkdO7YMdxsku ybobrUQEqCzV9emzef/N3YvY3AxdVrMk -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:59 2024 by rpki-client on console-ams.rpki-client.org