$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft File: -uIUFNET23jVT-q6G2BvhUokC9E.mft (raw, json) Hash identifier: pedOZwPTOQNW63ZvCRP9SFqzOT8qAcOQ4gdus8e7eK8= Subject key identifier: 72:47:63:F2:B4:F3:69:BE:50:5F:05:34:F2:86:AC:BC:64:31:B1:D2 Authority key identifier: FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 Certificate issuer: /CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft Manifest number: B8 Signing time: Sun 05 May 2024 06:31:39 +0000 Manifest this update: Sun 05 May 2024 06:31:38 +0000 Manifest next update: Sun 12 May 2024 06:31:38 +0000 Files and hashes: 1: -uIUFNET23jVT-q6G2BvhUokC9E.crl (hash: 2oPorV7q/ZD62faivlz118wLLnY6P8NSVOG1d8v3C/8=) 2: 05C6C85CF3C211ED8B9B1450C4F9AE02.roa (hash: keDaG46Zj8mvjRu28KTISnMDAXfWlsNKgwtpoicmVQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1 Validity Not Before: May 5 06:31:38 2024 GMT Not After : May 12 06:31:38 2024 GMT Subject: CN=663727cb-a1bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c3:aa:67:fd:a5:e6:29:2b:a6:3d:34:b4:61: 95:a9:0b:67:4f:79:16:de:3d:a3:38:fc:e2:ec:76: 66:c1:46:37:14:06:79:aa:97:d8:e6:6a:b7:0a:4a: 7a:19:4f:c7:66:d3:b5:ce:b4:7f:b3:21:c1:ec:b8: 12:0d:34:f6:7f:4e:9a:71:81:a7:0c:73:6c:a1:f6: 3d:a4:9c:0f:93:07:61:12:a4:71:18:0f:14:44:a1: 05:2f:5c:33:83:3f:0e:56:5b:07:48:a8:03:00:24: c0:d0:ff:cb:cc:a2:1a:30:12:5d:39:82:60:e7:98: 4f:9f:f6:bf:78:a1:37:d4:1f:ec:a5:09:e3:3d:7b: 42:1c:73:19:32:ca:a5:e6:df:82:b0:ce:ac:96:f3: f2:0b:f9:97:a4:8d:65:a0:a6:b4:2a:37:01:1a:18: e7:2b:63:8d:e6:a5:a9:84:cd:7c:bd:a3:a1:88:1a: 67:29:b1:1f:88:7c:b4:51:5c:61:2b:8a:f8:2c:42: d1:f4:41:5f:04:b8:a5:c4:b3:c4:bb:37:81:f8:b4: 0c:48:78:d5:be:f7:af:a6:74:10:c8:5b:0b:0d:09: 83:41:42:f3:d0:d2:b9:d8:bf:32:92:86:82:a0:c0: 51:7a:02:7a:d7:c7:d8:07:c6:c9:b9:a9:e9:98:7c: 8a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:47:63:F2:B4:F3:69:BE:50:5F:05:34:F2:86:AC:BC:64:31:B1:D2 X509v3 Authority Key Identifier: keyid:FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:6e:9c:d8:9d:44:91:32:51:a5:bc:44:a8:30:97:af:46:d9: 74:32:e2:d8:35:57:6a:69:20:3a:61:6f:1d:05:c6:60:2f:d0: c4:32:47:40:d4:6f:bc:76:85:16:65:36:4b:82:5a:32:85:e5: 42:e2:4a:d9:1c:6d:0d:1c:6e:ab:49:ff:45:21:06:b6:2f:e7: b9:e9:4e:4c:e2:39:13:1e:f7:c1:0e:bc:3f:47:59:0a:aa:b9: 17:3e:82:30:97:86:6d:33:83:ff:bf:6f:12:f9:79:9c:d9:89: 42:69:b3:01:f7:90:a1:9e:67:c6:10:e8:78:48:1d:77:7a:40: 65:82:b7:8f:8f:77:0e:03:b3:b1:40:15:46:ba:31:25:d7:d7: b8:f2:b0:20:51:ca:0a:ec:0a:bd:9b:44:b4:ad:77:56:0b:d1: 13:45:07:58:87:e7:77:ab:0d:f3:81:09:e1:f1:7a:2c:0b:00: 70:61:e7:c6:5b:c2:b6:03:64:ff:09:2b:a1:2a:1f:01:90:9b: b8:7b:de:95:fd:3d:7e:0b:b3:eb:94:28:ca:3c:03:21:48:e4: 2e:b3:94:1a:a2:1f:87:12:20:6d:33:2c:c1:53:84:67:da:5b: c5:da:82:9b:39:66:c9:21:9c:78:48:d3:96:b5:82:51:e4:c1: b7:cc:d3:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMkExMTAvBgNVBAUTKEZBRTIxNDE0RDExM0RCNzhENTRGRUFCQTFCNjA2Rjg1 NEEyNDBCRDEwHhcNMjQwNTA1MDYzMTM4WhcNMjQwNTEyMDYzMTM4WjAYMRYwFAYD VQQDEw02NjM3MjdjYi1hMWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsOqZ/2l5ikrpj00tGGVqQtnT3kW3j2jOPzi7HZmwUY3FAZ5qpfY5mq3Ckp6 GU/HZtO1zrR/syHB7LgSDTT2f06acYGnDHNsofY9pJwPkwdhEqRxGA8URKEFL1wz gz8OVlsHSKgDACTA0P/LzKIaMBJdOYJg55hPn/a/eKE31B/spQnjPXtCHHMZMsql 5t+CsM6slvPyC/mXpI1loKa0KjcBGhjnK2ON5qWphM18vaOhiBpnKbEfiHy0UVxh K4r4LELR9EFfBLilxLPEuzeB+LQMSHjVvvevpnQQyFsLDQmDQULz0NK52L8ykoaC oMBRegJ618fYB8bJuanpmHyKxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJHY/K0 82m+UF8FNPKGrLxkMbHSMB8GA1UdIwQYMBaAFPriFBTRE9t41U/quhtgb4VKJAvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEyQS8xNDc3MTFCMkYz QkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIzalZULXE2RzJCdmhVb2tD OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11SVVGTkVUMjNqVlQtcTZHMkJ2aFVva0M5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEyQS8xNDc3MTFCMkYzQkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIz alZULXE2RzJCdmhVb2tDOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3bpzYnUSRMlGlvESoMJevRtl0MuLYNVdqaSA6YW8dBcZgL9DEMkdA 1G+8doUWZTZLgloyheVC4krZHG0NHG6rSf9FIQa2L+e56U5M4jkTHvfBDrw/R1kK qrkXPoIwl4ZtM4P/v28S+Xmc2YlCabMB95ChnmfGEOh4SB13ekBlgrePj3cOA7Ox QBVGujEl19e48rAgUcoK7Aq9m0S0rXdWC9ETRQdYh+d3qw3zgQnh8XosCwBwYefG W8K2A2T/CSuhKh8BkJu4e96V/T1+C7PrlCjKPAMhSOQus5Qaoh+HEiBtMyzBU4Rn 2lvF2oKbOWbJIZx4SNOWtYJR5MG3zNNG -----END CERTIFICATE-----Generated at Sun May 5 08:21:10 2024 by rpki-client on console-ams.rpki-client.org