$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json) Hash identifier: WCtA2T6Gd+w7ccA2CJjb8Zv8PW1k4VHNOrqJqEbJzHo= Subject key identifier: 86:36:65:40:52:62:D2:5A:9A:81:9D:C2:C7:B9:38:DD:49:DE:E1:AD Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Certificate serial: 0293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft Manifest number: 0289 Signing time: Tue 07 May 2024 03:40:51 +0000 Manifest this update: Tue 07 May 2024 03:40:50 +0000 Manifest next update: Tue 14 May 2024 03:40:50 +0000 Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: zyos7LPk1uTj36NsQCTfiVhRTKIJk88L6rVBZ6xapsc=) 2: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: x3rm2lsdWCq5H1iFBJa/qGikKwjQx3i5zJC/7qUndDc=) 3: 2B78AC2C9AE511EDB13EDC68C4F9AE02.roa (hash: aAiCiJycfRboMmHRnSxAMWVPPI7cWWmGMF2dCjMB4Kk=) 4: 59EF0228BB1511EC8BD0C17EC4F9AE02.roa (hash: 2q5+bjn7nmk9SgO/vyuOr+AM+YekJjDk+NKFHyHuNtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 03:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Validity Not Before: May 7 03:40:50 2024 GMT Not After : May 14 03:40:50 2024 GMT Subject: CN=6639a2c2-3914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9d:3d:da:b7:21:ee:08:fe:ce:e4:1d:56:60: aa:19:8c:6c:1d:0b:ee:8c:65:c6:88:5b:97:17:57: ec:03:20:42:c3:c7:47:c9:ae:c2:94:45:1b:bd:d5: 56:c5:8d:d2:66:7f:e4:dc:9d:cf:0b:10:70:65:e0: 30:e6:b1:8e:1b:70:6b:d4:98:04:63:44:76:72:01: 9b:fb:80:c7:86:13:21:cc:4a:df:d7:5e:64:05:ef: c3:71:dc:95:5f:8e:25:18:d3:48:5d:e5:2d:65:86: 01:ab:4e:ca:b4:1a:c9:3c:98:5d:35:f3:80:91:c9: 63:80:9d:96:92:0c:7c:ab:4c:fd:3f:d2:e3:40:d4: 4a:b9:86:2b:1c:df:47:b1:d3:e3:4b:03:71:d5:e3: b3:cd:f3:20:8f:00:63:ec:95:f6:43:b4:e7:92:05: e6:5f:32:92:24:09:a9:c2:7d:2c:a0:2e:b0:a8:78: 79:1f:2b:46:e5:7c:30:61:5f:c3:a8:0f:a5:3b:d0: 2d:51:34:8e:6b:97:5d:a9:5c:a5:c3:a6:19:aa:69: db:5c:8b:de:25:94:e5:19:16:36:05:ce:88:e1:d2: 17:52:74:39:3c:66:b5:28:12:c6:0b:3e:91:a6:db: 0a:b8:a6:be:4e:be:92:8b:8e:66:92:b6:b8:9c:b0: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:36:65:40:52:62:D2:5A:9A:81:9D:C2:C7:B9:38:DD:49:DE:E1:AD X509v3 Authority Key Identifier: keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:96:8f:5a:28:97:48:84:dc:77:1c:f6:df:fa:51:92:55:4b: 92:c5:7f:e6:64:af:8c:30:36:97:f9:d5:af:eb:8d:e2:c9:77: 36:e7:df:f9:70:fc:ca:87:4a:ac:0d:00:eb:d7:58:bc:d0:96: 2d:ce:4d:42:fe:56:eb:16:65:0b:7e:18:90:95:7e:ad:29:ff: 32:58:0a:8d:b4:80:d6:c1:53:a1:1a:6f:e9:78:b2:c6:e2:3a: 74:e0:71:83:06:97:26:70:8f:ea:08:50:68:f9:7b:be:7a:76: d3:e7:dd:12:6d:3c:20:a2:35:02:7f:8c:43:50:16:fd:b0:da: 7b:24:fe:20:07:77:54:28:e0:33:48:c8:de:24:a0:16:ae:3c: b5:e2:08:bb:81:de:dc:52:6a:8b:30:f1:91:6a:8b:0a:79:27: 75:1d:dd:8a:64:c0:be:6b:54:eb:bf:d0:b7:37:c3:24:52:4f: cc:7f:4b:34:6d:72:e8:ec:c5:86:50:88:d8:9b:e6:1e:ea:eb: 54:a6:93:f9:74:07:50:61:9a:83:d8:1c:a0:43:a2:8f:42:8c: ab:4e:20:b3:fa:c7:5e:1a:90:f6:69:89:5d:a6:a0:d1:a0:45: 96:9c:3b:49:4b:c1:91:42:32:51:36:bc:8c:91:ea:95:12:67: ab:56:c5:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREQzcxMTAvBgNVBAUTKEI4ODkxMTE3ODA2OEQ1NzVERkRERjg0OTQwQ0FCRUFG NDUxQzhDMkIwHhcNMjQwNTA3MDM0MDUwWhcNMjQwNTE0MDM0MDUwWjAYMRYwFAYD VQQDEw02NjM5YTJjMi0zOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5092rch7gj+zuQdVmCqGYxsHQvujGXGiFuXF1fsAyBCw8dHya7ClEUbvdVW xY3SZn/k3J3PCxBwZeAw5rGOG3Br1JgEY0R2cgGb+4DHhhMhzErf115kBe/DcdyV X44lGNNIXeUtZYYBq07KtBrJPJhdNfOAkcljgJ2Wkgx8q0z9P9LjQNRKuYYrHN9H sdPjSwNx1eOzzfMgjwBj7JX2Q7TnkgXmXzKSJAmpwn0soC6wqHh5HytG5XwwYV/D qA+lO9AtUTSOa5ddqVylw6YZqmnbXIveJZTlGRY2Bc6I4dIXUnQ5PGa1KBLGCz6R ptsKuKa+Tr6Si45mkra4nLDHPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIY2ZUBS YtJamoGdwse5ON1J3uGtMB8GA1UdIwQYMBaAFLiJEReAaNV13934SUDKvq9FHIwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNERDNy9GM0YxMDIwRUJC MTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFYWGYzZmhKUU1xLXIwVWNq Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJa1JGNEJvMVhYZjNmaEpRTXEtcjBVY2pDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NERDNy9GM0YxMDIwRUJCMTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFY WGYzZmhKUU1xLXIwVWNqQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwlo9aKJdIhNx3HPbf+lGSVUuSxX/mZK+MMDaX+dWv643iyXc259/5 cPzKh0qsDQDr11i80JYtzk1C/lbrFmULfhiQlX6tKf8yWAqNtIDWwVOhGm/peLLG 4jp04HGDBpcmcI/qCFBo+Xu+enbT590SbTwgojUCf4xDUBb9sNp7JP4gB3dUKOAz SMjeJKAWrjy14gi7gd7cUmqLMPGRaosKeSd1Hd2KZMC+a1Trv9C3N8MkUk/Mf0s0 bXLo7MWGUIjYm+Ye6utUppP5dAdQYZqD2BygQ6KPQoyrTiCz+sdeGpD2aYldpqDR oEWWnDtJS8GRQjJRNryMkeqVEmerVsUZ -----END CERTIFICATE-----Generated at Tue May 7 04:35:41 2024 by rpki-client on console-ams.rpki-client.org