$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.mft File: udznqYvOfA4oMosTy-q1Qx0PZr0.mft (raw, json) Hash identifier: ZSZ8TepDOYkh7APugLNuJvyZm+QazYmMNmX4Mdd6Xi4= Subject key identifier: B0:49:4E:90:0E:88:73:AA:6C:69:77:78:BC:06:6F:E6:8C:4E:9B:99 Authority key identifier: B9:DC:E7:A9:8B:CE:7C:0E:28:32:8B:13:CB:EA:B5:43:1D:0F:66:BD Certificate issuer: /CN=A91C0C0C/serialNumber=B9DCE7A98BCE7C0E28328B13CBEAB5431D0F66BD Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/udznqYvOfA4oMosTy-q1Qx0PZr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.mft Manifest number: 02D1 Signing time: Fri 03 May 2024 03:29:48 +0000 Manifest this update: Fri 03 May 2024 03:29:48 +0000 Manifest next update: Fri 10 May 2024 03:29:48 +0000 Files and hashes: 1: udznqYvOfA4oMosTy-q1Qx0PZr0.crl (hash: U6BF7J0+9ohGIQ2V+QHaXJzAMNYhiFz6T4z1/MMaqbE=) 2: 5FD6BBF27CEB11EDA3D10364C4F9AE02.roa (hash: FeTKcL37y87AiZQuqO53nGkPmfENZeWjr7lrGLOMLWk=) 3: CA86B0DEFC4D11ECA947C41FC4F9AE02.roa (hash: j39oIouyNt6HwKg9AT6DRdXmatC+dHV5URxElCtlOp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.crl rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/udznqYvOfA4oMosTy-q1Qx0PZr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C0C/serialNumber=B9DCE7A98BCE7C0E28328B13CBEAB5431D0F66BD Validity Not Before: May 3 03:29:48 2024 GMT Not After : May 10 03:29:48 2024 GMT Subject: CN=66345a2c-1baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:51:67:31:80:7b:b1:bf:62:c7:4c:52:15:76: 9a:f3:a0:2d:ff:83:b0:c9:fd:9a:3e:6d:7e:9e:6e: 48:14:d2:9a:d0:60:f1:5d:95:c1:0f:ab:a8:d6:66: bd:c2:9c:32:a9:1c:30:f4:7a:70:97:1a:4c:8d:65: 0f:2d:da:56:bd:b4:d7:14:76:c7:d0:05:1a:84:56: 8f:00:02:8a:a6:1e:29:15:55:72:91:19:24:14:02: a9:b3:66:7e:e1:4a:98:fc:88:32:77:23:28:0b:87: 29:fb:2f:13:d3:ca:0f:3a:4c:43:77:db:2f:93:a7: a0:c7:8c:40:de:89:4b:75:3d:fd:89:00:5d:fe:11: dc:96:f5:65:1c:98:32:f8:09:06:df:4e:20:c0:19: bc:d5:b3:05:f3:1d:69:cd:5d:f2:a8:ef:61:de:5f: 55:de:ce:dd:3b:38:4d:87:08:67:a8:81:9e:70:a4: 8c:22:2d:bf:9e:79:06:1e:44:e3:29:ea:c8:bb:1c: 10:f4:c5:a3:19:5a:36:93:b1:0b:bf:86:12:12:34: 0b:fe:9e:84:97:e7:8d:07:58:da:5a:e7:f0:ac:95: 71:6e:44:66:79:4d:be:3e:3a:5c:e2:fd:94:cd:2a: 47:79:08:da:c0:e6:6f:78:34:81:82:6a:f0:06:63: a9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:49:4E:90:0E:88:73:AA:6C:69:77:78:BC:06:6F:E6:8C:4E:9B:99 X509v3 Authority Key Identifier: keyid:B9:DC:E7:A9:8B:CE:7C:0E:28:32:8B:13:CB:EA:B5:43:1D:0F:66:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/udznqYvOfA4oMosTy-q1Qx0PZr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4d:25:0d:1d:17:39:17:51:72:00:fd:27:89:31:07:e1:8b: 85:10:f4:ee:d2:d3:46:ae:c3:ef:37:28:2d:9b:78:c0:e9:e6: f1:14:6d:39:66:d3:bf:e6:48:b2:3b:4d:27:94:9b:b1:f5:e7: c4:c8:70:48:36:9a:17:05:57:f0:dd:89:61:c3:f2:05:ee:6d: 90:4c:28:5b:dc:7f:32:26:77:cc:11:3f:9e:e9:56:e1:9a:da: 1d:a9:da:47:86:cd:0e:cf:a2:c9:f3:2e:80:31:83:f6:56:ca: 22:2c:92:18:02:a9:4e:9e:c4:85:d4:c6:61:0f:dd:41:72:1c: f5:d7:d2:82:09:68:85:8f:6e:9b:47:f4:5c:f6:b1:48:29:1c: 8d:29:4e:9a:c4:2c:41:ff:84:8f:a1:8f:9d:c9:85:db:55:1c: 0a:db:c3:db:2f:4a:b9:bb:94:e1:49:fb:95:f6:06:be:22:ea: 88:c5:9c:75:72:d9:8a:c0:0e:8b:bf:64:e0:a0:56:b2:fb:ec: f6:63:33:75:38:3b:1f:e5:0c:62:1e:75:d2:05:ac:d7:64:3f: 3a:d4:e5:53:11:95:15:54:f2:d6:e1:7d:f2:cb:2e:03:f0:ee: b3:7e:70:72:14:d5:b1:03:e4:97:3e:23:a0:72:08:52:15:4e: 67:cc:6d:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDMEMxMTAvBgNVBAUTKEI5RENFN0E5OEJDRTdDMEUyODMyOEIxM0NCRUFCNTQz MUQwRjY2QkQwHhcNMjQwNTAzMDMyOTQ4WhcNMjQwNTEwMDMyOTQ4WjAYMRYwFAYD VQQDEw02NjM0NWEyYy0xYmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VFnMYB7sb9ix0xSFXaa86At/4Owyf2aPm1+nm5IFNKa0GDxXZXBD6uo1ma9 wpwyqRww9HpwlxpMjWUPLdpWvbTXFHbH0AUahFaPAAKKph4pFVVykRkkFAKps2Z+ 4UqY/IgydyMoC4cp+y8T08oPOkxDd9svk6egx4xA3olLdT39iQBd/hHclvVlHJgy +AkG304gwBm81bMF8x1pzV3yqO9h3l9V3s7dOzhNhwhnqIGecKSMIi2/nnkGHkTj KerIuxwQ9MWjGVo2k7ELv4YSEjQL/p6El+eNB1jaWufwrJVxbkRmeU2+Pjpc4v2U zSpHeQjawOZveDSBgmrwBmOpZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBJTpAO iHOqbGl3eLwGb+aMTpuZMB8GA1UdIwQYMBaAFLnc56mLznwOKDKLE8vqtUMdD2a9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEMwQy8zNTlCOEQzRTlE RkYxMUVDQTRBNTg4NDhDNEY5QUUwMi91ZHpucVl2T2ZBNG9Nb3NUeS1xMVF4MFBa cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vkem5xWXZPZkE0b01vc1R5LXExUXgwUFpyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEMwQy8zNTlCOEQzRTlERkYxMUVDQTRBNTg4NDhDNEY5QUUwMi91ZHpucVl2T2ZB NG9Nb3NUeS1xMVF4MFBacjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsTSUNHRc5F1FyAP0niTEH4YuFEPTu0tNGrsPvNygtm3jA6ebxFG05 ZtO/5kiyO00nlJux9efEyHBINpoXBVfw3Ylhw/IF7m2QTChb3H8yJnfMET+e6Vbh mtodqdpHhs0Oz6LJ8y6AMYP2VsoiLJIYAqlOnsSF1MZhD91Bchz119KCCWiFj26b R/Rc9rFIKRyNKU6axCxB/4SPoY+dyYXbVRwK28PbL0q5u5ThSfuV9ga+IuqIxZx1 ctmKwA6Lv2TgoFay++z2YzN1ODsf5QxiHnXSBazXZD861OVTEZUVVPLW4X3yyy4D 8O6zfnByFNWxA+SXPiOgcghSFU5nzG1q -----END CERTIFICATE-----Generated at Fri May 3 04:45:26 2024 by rpki-client on console-fra.rpki-client.org