$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json) Hash identifier: SeRyny81vEEPVXMLSWrdz62zqdstxYpXqZmaoYjAGac= Subject key identifier: 79:AB:54:E7:70:6F:47:6E:2F:B0:14:F5:94:71:A0:64:7F:0B:2C:C2 Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Certificate serial: 0529 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft Manifest number: 0515 Signing time: Fri 03 May 2024 01:43:48 +0000 Manifest this update: Fri 03 May 2024 01:43:47 +0000 Manifest next update: Fri 10 May 2024 01:43:47 +0000 Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: G7uOvOzz8b8iQzHJSejLMInXJtj7Jp3MHqLCQQvu9Zw=) 2: 2DA0EDF6D08211EE80549C7AC4F9AE02.roa (hash: 73co3C0iTnetW8JGAPxK20O1CS3CEBA8PjgSk19an5E=) 3: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: AWVqUvaQKvhhdFl5DbWgiaCZR2uWcOJNrG+aDzp0leA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1321 (0x529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Validity Not Before: May 3 01:43:47 2024 GMT Not After : May 10 01:43:47 2024 GMT Subject: CN=66344154-deb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d3:f0:88:a7:83:04:b0:09:f2:29:e4:2e:b4: 86:fe:65:bb:00:4a:e4:cf:78:f0:02:81:d2:ac:4e: 24:e3:aa:a6:17:80:d6:9e:aa:37:31:39:e9:56:9f: 46:d7:b2:d4:f1:69:c8:d2:14:27:f5:55:b7:6b:8f: b1:2a:3c:f0:c9:93:30:82:0e:74:6e:dd:af:84:46: 52:b7:b0:82:21:8e:f0:e5:c2:96:1a:f5:83:48:9e: 73:3a:33:bd:eb:3a:fa:25:7a:5e:68:e6:04:12:74: 58:7b:b7:34:4d:c1:5c:7a:98:cd:dd:4e:ca:94:1c: 44:17:2f:59:c4:80:d0:89:e9:91:90:4e:f2:b6:f5: 99:e6:5f:ee:af:90:ab:43:a8:0d:1b:df:85:a3:28: d7:57:51:0b:4e:a1:a3:84:51:61:f2:34:86:49:e0: 86:c2:5e:48:ba:38:d8:d9:85:61:d3:d7:4b:46:ff: d1:76:67:4a:9a:2c:d9:a0:37:75:e3:c2:5d:49:90: be:f4:93:c7:9a:a8:9b:36:58:db:06:3f:a1:b2:21: 9d:52:2d:29:80:36:53:48:58:1f:ae:55:ce:81:a1: 82:ff:9b:04:1c:a3:8a:86:92:8c:2c:10:27:e3:14: e1:26:ef:26:74:3e:6c:94:34:76:d2:84:76:74:e4: 8f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AB:54:E7:70:6F:47:6E:2F:B0:14:F5:94:71:A0:64:7F:0B:2C:C2 X509v3 Authority Key Identifier: keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f4:4a:d9:9c:38:2b:84:6f:71:9a:c7:97:1e:b6:03:3c:9d: 97:3e:c7:a4:c2:4f:44:83:5a:ba:66:37:02:bd:34:7c:5c:77: 4c:23:17:39:aa:53:51:18:37:45:19:4b:de:8f:7f:a9:48:88: 0a:c8:d9:be:c3:c9:c2:31:3f:68:5b:bc:d3:16:75:4c:75:13: b0:ab:1e:98:77:4a:35:74:e7:8f:6d:f4:07:a3:7e:1c:ab:4f: 52:10:b2:46:e5:4c:7c:31:cb:10:3f:ca:d9:47:c4:bf:21:d7: e5:61:cd:c8:de:e0:7d:d6:76:8f:ab:2d:70:26:50:fb:84:80: a9:18:f7:a0:d6:30:d5:da:c6:35:d3:ad:54:82:18:25:46:b6: ee:65:ba:e6:54:78:11:d1:8a:ca:aa:ca:17:c9:65:97:c4:71: 36:dd:3f:32:e3:8b:2a:2c:15:32:a9:18:17:28:59:fe:b1:ca: db:dd:4f:8a:db:93:f3:6e:34:92:35:72:fe:00:61:45:d7:94: 02:e6:21:32:45:fa:9d:12:67:07:3f:b1:5e:d6:66:8e:78:39: 6e:5e:8d:9b:2f:7d:fa:19:35:f8:37:d2:ff:22:57:00:49:23: bd:f1:12:54:03:17:bf:2d:a1:4f:a9:d4:a4:f1:6d:c6:cd:a9: 68:1f:6a:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG MDVCQUYyMTEwHhcNMjQwNTAzMDE0MzQ3WhcNMjQwNTEwMDE0MzQ3WjAYMRYwFAYD VQQDEw02NjM0NDE1NC1kZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNPwiKeDBLAJ8inkLrSG/mW7AErkz3jwAoHSrE4k46qmF4DWnqo3MTnpVp9G 17LU8WnI0hQn9VW3a4+xKjzwyZMwgg50bt2vhEZSt7CCIY7w5cKWGvWDSJ5zOjO9 6zr6JXpeaOYEEnRYe7c0TcFcepjN3U7KlBxEFy9ZxIDQiemRkE7ytvWZ5l/ur5Cr Q6gNG9+FoyjXV1ELTqGjhFFh8jSGSeCGwl5IujjY2YVh09dLRv/RdmdKmizZoDd1 48JdSZC+9JPHmqibNljbBj+hsiGdUi0pgDZTSFgfrlXOgaGC/5sEHKOKhpKMLBAn 4xThJu8mdD5slDR20oR2dOSPkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmrVOdw b0duL7AU9ZRxoGR/CyzCMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4 bFZGSjlYWWhHUVR3VzY4aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM9ErZnDgrhG9xmseXHrYDPJ2XPsekwk9Eg1q6ZjcCvTR8XHdMIxc5 qlNRGDdFGUvej3+pSIgKyNm+w8nCMT9oW7zTFnVMdROwqx6Yd0o1dOePbfQHo34c q09SELJG5Ux8McsQP8rZR8S/IdflYc3I3uB91naPqy1wJlD7hICpGPeg1jDV2sY1 061UghglRrbuZbrmVHgR0YrKqsoXyWWXxHE23T8y44sqLBUyqRgXKFn+scrb3U+K 25PzbjSSNXL+AGFF15QC5iEyRfqdEmcHP7Fe1maOeDluXo2bL336GTX4N9L/IlcA SSO98RJUAxe/LaFPqdSk8W3GzaloH2pl -----END CERTIFICATE-----Generated at Fri May 3 03:10:54 2024 by rpki-client on console-ams.rpki-client.org