$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json) Hash identifier: cTXaAdNBE3ShPlUBn1C5uBeBUX22Hr8SizK1aqy0JPo= Subject key identifier: 58:22:6A:38:8C:18:5D:54:77:65:37:B4:E3:8C:50:36:72:80:7A:BC Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft Manifest number: 4A Signing time: Sun 15 Sep 2024 09:42:49 +0000 Manifest this update: Sun 15 Sep 2024 09:42:48 +0000 Manifest next update: Sun 22 Sep 2024 09:42:48 +0000 Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: k4BLFEdRzUGjGkxm8QNxH35IYBDiJFsM17JZATyWsRw=) 2: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: 182eUUJuaALloc84A+J3D6Vh35fJGaKCB5vaP7hNlQ8=) 3: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: uIjAF+/dfGNLo9aioNmk6DqLMsLqzamlKuhlvMcc2h8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Validity Not Before: Sep 15 09:42:48 2024 GMT Not After : Sep 22 09:42:48 2024 GMT Subject: CN=66e6ac19-d5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:8b:40:27:be:09:c7:06:d2:05:61:c9:75:91: 31:6c:0d:5b:5d:a1:94:12:06:f9:3a:ea:3f:de:0a: f3:28:d6:a5:5f:85:be:ea:9d:02:ed:50:19:02:46: 45:43:28:a6:e1:36:c2:e0:e0:78:fd:b9:ec:12:38: bd:01:77:9a:f3:c5:9d:9b:2e:a2:ee:f4:75:7b:6a: ba:dc:dc:6d:42:0e:5b:07:82:5a:00:e9:24:10:66: af:5b:24:18:4b:f2:3e:63:39:94:c5:2d:e0:b7:df: d0:1f:78:02:0c:5c:0d:10:b2:14:e2:45:1b:9a:fc: 48:be:fb:b9:f2:fe:44:d6:67:7c:86:16:95:2c:3d: a8:2a:ed:f0:c2:2b:0b:ee:a8:7a:1a:42:6f:09:95: d6:1d:6a:f5:18:02:de:4e:1b:96:6a:07:86:91:33: a3:ea:52:7b:91:cf:1a:b7:77:60:45:85:fd:f0:8c: 70:d5:c1:98:68:7c:d5:15:fa:7a:fe:1d:fe:08:c4: 86:56:2d:3c:3c:ea:44:a3:1a:d7:bc:60:03:23:b0: 13:51:e8:66:f6:14:64:1d:db:10:bc:d5:e0:a1:33: cc:25:4c:5b:d4:53:8a:76:4a:2e:54:6d:6b:37:72: 4b:e2:f4:78:60:d3:1d:e0:7a:b4:a8:e9:70:f5:ff: e3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:22:6A:38:8C:18:5D:54:77:65:37:B4:E3:8C:50:36:72:80:7A:BC X509v3 Authority Key Identifier: keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:98:d9:e2:a7:55:53:6b:de:fc:f2:ee:81:31:c7:14:2b:85: 6c:07:ac:28:7d:e4:f0:57:27:99:f0:35:a0:a3:cf:ad:b5:1b: c4:ba:c2:7a:fb:58:a2:4e:25:18:c0:e7:68:45:b1:3e:65:9a: 3a:80:0b:a3:e8:73:88:38:b4:af:15:99:15:b9:2c:1d:3f:64: b3:21:42:fe:06:b4:a1:33:0c:fe:28:f0:01:8b:1c:1c:54:f8: 52:50:66:f8:1f:80:9d:57:59:f0:b5:88:4c:30:4f:b6:1d:97: b0:06:09:b1:0d:9c:be:f2:2e:3b:1b:50:d8:0f:a2:54:f9:98: d4:59:d1:a7:d5:63:3c:2d:74:31:73:fb:81:f5:6b:ea:44:bf: ce:c0:e7:0a:b3:43:47:90:69:9e:4e:03:56:11:9f:3a:4f:34: 5b:05:bf:72:66:fb:e7:3f:71:41:3d:31:ef:2f:1b:4c:a6:cc: 84:7c:db:84:72:ca:a6:a7:33:03:cd:64:23:ba:18:ec:1a:5b: 6d:4c:46:20:ea:20:58:2a:92:54:38:f7:50:d6:3b:aa:ac:a2: 9c:bc:29:c8:78:75:4c:f5:24:d1:2e:5b:5b:91:c4:f4:07:78: 17:ca:73:b3:d0:b5:ae:21:d5:a6:68:f7:cd:b7:71:08:a4:65: 08:e8:8f:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NTIxMzExMC8GA1UEBRMoQkE1RkI4NTkxQkZDMEM0NTBBNEU0NEQ2RkMzRTNCQzdC RTg2NTQxNjAeFw0yNDA5MTUwOTQyNDhaFw0yNDA5MjIwOTQyNDhaMBgxFjAUBgNV BAMTDTY2ZTZhYzE5LWQ1ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD9i0AnvgnHBtIFYcl1kTFsDVtdoZQSBvk66j/eCvMo1qVfhb7qnQLtUBkCRkVD KKbhNsLg4Hj9uewSOL0Bd5rzxZ2bLqLu9HV7arrc3G1CDlsHgloA6SQQZq9bJBhL 8j5jOZTFLeC339AfeAIMXA0QshTiRRua/Ei++7ny/kTWZ3yGFpUsPagq7fDCKwvu qHoaQm8JldYdavUYAt5OG5ZqB4aRM6PqUnuRzxq3d2BFhf3wjHDVwZhofNUV+nr+ Hf4IxIZWLTw86kSjGte8YAMjsBNR6Gb2FGQd2xC81eChM8wlTFvUU4p2Si5UbWs3 ckvi9Hhg0x3gerSo6XD1/+O/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWCJqOIwY XVR3ZTe044xQNnKAerwwHwYDVR0jBBgwFoAUul+4WRv8DEUKTkTW/D47x76GVBYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1MjEzLzU1NDNCQ0M0MDVF NTExRUZBQjQ2MUMwOUM0RjlBRTAyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZC WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWwtNFdSdjhERVVLVGtUV19ENDd4NzZHVkJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 MjEzLzU1NDNCQ0M0MDVFNTExRUZBQjQ2MUMwOUM0RjlBRTAyL3VsLTRXUnY4REVV S1RrVFdfRDQ3eDc2R1ZCWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMGY2eKnVVNr3vzy7oExxxQrhWwHrCh95PBXJ5nwNaCjz621G8S6wnr7 WKJOJRjA52hFsT5lmjqAC6Poc4g4tK8VmRW5LB0/ZLMhQv4GtKEzDP4o8AGLHBxU +FJQZvgfgJ1XWfC1iEwwT7Ydl7AGCbENnL7yLjsbUNgPolT5mNRZ0afVYzwtdDFz +4H1a+pEv87A5wqzQ0eQaZ5OA1YRnzpPNFsFv3Jm++c/cUE9Me8vG0ymzIR824Ry yqanMwPNZCO6GOwaW21MRiDqIFgqklQ491DWO6qsopy8Kch4dUz1JNEuW1uRxPQH eBfKc7PQta4h1aZo9823cQikZQjoj88= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:23 2024 by rpki-client on console-ams.rpki-client.org