$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft File: uo1v5dgowFOZs-GqZY_AWIYf3OA.mft (raw, json) Hash identifier: iiQHP9SvYC4TjOpmiBJb2PwQWiOCUuJArIlEslgIeUw= Subject key identifier: 1F:BE:31:EC:7A:19:E2:88:0F:05:A9:E8:59:1F:D2:F3:7F:C7:12:9C Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 Certificate issuer: /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Certificate serial: 0E65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft Manifest number: 0E5B Signing time: Thu 02 May 2024 18:28:55 +0000 Manifest this update: Thu 02 May 2024 18:28:54 +0000 Manifest next update: Thu 09 May 2024 18:28:54 +0000 Files and hashes: 1: uo1v5dgowFOZs-GqZY_AWIYf3OA.crl (hash: jVQenat5Dacnsvh/gRXPqISTw5fbaTuUYjEge9vvGAw=) 2: 7EA856A6C3F511EEB2610F2FC4F9AE02.roa (hash: 3yC7OemuZRPNNEdNgmdDR23BQyMkj5NMRORnrcAntP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3685 (0xe65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Validity Not Before: May 2 18:28:54 2024 GMT Not After : May 9 18:28:54 2024 GMT Subject: CN=6633db67-ec14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f2:80:bd:34:8d:ed:f8:b6:e0:95:a0:04:13: ae:52:11:a8:87:e8:fa:2f:65:4d:24:8c:be:ce:7c: 46:1d:96:bb:74:a7:04:7c:31:b3:fd:f4:21:07:bd: 94:ca:dc:5a:55:0f:f6:3b:67:e3:79:27:1d:e8:ef: 51:61:7d:26:a1:8a:e6:e4:a6:0f:37:bc:f1:37:f1: c9:35:c7:69:ca:9d:2b:52:05:56:37:6d:5f:10:f6: c3:95:2f:00:0b:bf:7b:56:56:24:d8:20:46:99:17: da:ab:c4:01:c8:0e:3b:3f:1b:ce:c0:6b:b7:0b:c0: 6e:5b:98:c5:ea:09:b7:e2:d4:16:2c:bf:4f:43:5e: 05:1a:2a:22:6e:e3:94:24:e3:9b:df:b0:3b:a7:b1: 98:30:90:e9:1c:4b:f7:96:80:bc:63:fd:e3:cd:30: c8:cf:f4:e7:2d:66:06:9f:4b:e2:d2:17:66:b2:28: f5:b0:dc:09:0d:4b:3f:85:30:0e:3c:6a:2b:2f:94: 51:27:c8:b1:ea:40:0c:f6:56:ad:77:6a:b5:c3:de: fe:d6:9a:71:7b:c7:25:29:c8:96:5b:8e:4f:b3:c6: d5:e4:30:02:d8:9f:02:4b:5e:37:3b:10:43:89:28: ca:0c:88:83:d2:b3:af:e8:5e:11:cd:41:4a:7c:08: 37:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BE:31:EC:7A:19:E2:88:0F:05:A9:E8:59:1F:D2:F3:7F:C7:12:9C X509v3 Authority Key Identifier: keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:a9:91:75:90:b8:81:9b:7d:c1:1f:b3:f3:f5:76:ab:77:bc: bc:16:ab:83:4b:d7:28:85:c8:81:e1:7c:76:0a:76:83:0d:df: a8:7c:33:ce:a1:ed:6e:bf:3b:e0:d8:9c:7d:7f:72:a7:74:64: 0b:5d:51:1a:cf:89:2b:6d:48:3b:a4:31:f2:b8:1b:70:67:72: 2d:d8:e2:74:84:d4:3c:d0:c0:de:f2:57:97:19:51:05:22:d4: ac:4a:7d:ec:23:6d:55:51:8a:f0:39:13:6d:e6:32:af:1e:bc: 90:df:8c:ed:29:05:d0:24:72:cf:d1:24:33:37:f4:21:cd:0d: 5d:08:b5:2b:cc:59:0c:06:f3:f5:d6:60:d8:eb:42:76:2e:37: c5:e4:23:f7:22:f5:df:8f:7f:96:a6:65:c2:18:df:e7:ec:e4: 28:76:2c:46:f7:5b:90:20:b6:1d:19:56:22:9b:a0:01:5f:1f: a6:28:2b:cc:07:46:93:5f:78:4c:cd:7c:67:fe:73:8f:49:44: 61:a8:63:52:00:4b:3f:c0:32:29:f7:17:b2:c9:89:8c:69:0f: 1a:01:f4:a2:8a:a8:1e:41:4b:0c:aa:2d:8c:a9:8b:04:ec:6d: 83:1f:ff:be:12:75:46:ea:be:d5:a1:5c:04:e7:f9:74:c6:3e: e6:18:4d:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKEJBOEQ2RkU1RDgyOEMwNTM5OUIzRTFBQTY1OEZDMDU4 ODYxRkRDRTAwHhcNMjQwNTAyMTgyODU0WhcNMjQwNTA5MTgyODU0WjAYMRYwFAYD VQQDEw02NjMzZGI2Ny1lYzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/KAvTSN7fi24JWgBBOuUhGoh+j6L2VNJIy+znxGHZa7dKcEfDGz/fQhB72U ytxaVQ/2O2fjeScd6O9RYX0moYrm5KYPN7zxN/HJNcdpyp0rUgVWN21fEPbDlS8A C797VlYk2CBGmRfaq8QByA47PxvOwGu3C8BuW5jF6gm34tQWLL9PQ14FGioibuOU JOOb37A7p7GYMJDpHEv3loC8Y/3jzTDIz/TnLWYGn0vi0hdmsij1sNwJDUs/hTAO PGorL5RRJ8ix6kAM9latd2q1w97+1ppxe8clKciWW45Ps8bV5DAC2J8CS143OxBD iSjKDIiD0rOv6F4RzUFKfAg33wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB++Mex6 GeKIDwWp6Fkf0vN/xxKcMB8GA1UdIwQYMBaAFLqNb+XYKMBTmbPhqmWPwFiGH9zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi9FQUNENDg3Njc2 NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dGT1pzLUdxWllfQVdJWWYz T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VvMXY1ZGdvd0ZPWnMtR3FaWV9BV0lZZjNPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi9FQUNENDg3Njc2NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dG T1pzLUdxWllfQVdJWWYzT0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZqZF1kLiBm33BH7Pz9Xard7y8FquDS9cohciB4Xx2CnaDDd+ofDPO oe1uvzvg2Jx9f3KndGQLXVEaz4krbUg7pDHyuBtwZ3It2OJ0hNQ80MDe8leXGVEF ItSsSn3sI21VUYrwORNt5jKvHryQ34ztKQXQJHLP0SQzN/QhzQ1dCLUrzFkMBvP1 1mDY60J2LjfF5CP3IvXfj3+WpmXCGN/n7OQodixG91uQILYdGVYim6ABXx+mKCvM B0aTX3hMzXxn/nOPSURhqGNSAEs/wDIp9xeyyYmMaQ8aAfSiiqgeQUsMqi2MqYsE 7G2DH/++EnVG6r7VoVwE5/l0xj7mGE0Y -----END CERTIFICATE-----Generated at Thu May 2 20:04:52 2024 by rpki-client on console-ams.rpki-client.org