$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft File: uLRz022lJgglzQu_YvbsGQ00Ahg.mft (raw, json) Hash identifier: REJihqet5MzYX8sJkAykalv7GqnxWWILkUah4Ssda7s= Subject key identifier: A7:E4:3C:16:89:05:DF:62:5C:B8:FD:24:E5:B3:9F:A5:D6:68:46:63 Authority key identifier: B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 Certificate issuer: /CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Certificate serial: 33CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft Manifest number: 33C5 Signing time: Thu 02 May 2024 14:18:51 +0000 Manifest this update: Thu 02 May 2024 14:18:50 +0000 Manifest next update: Thu 09 May 2024 14:18:50 +0000 Files and hashes: 1: uLRz022lJgglzQu_YvbsGQ00Ahg.crl (hash: kbKDWTmw7MCOjO3DH2tklqD0G0ucgvFPaujywaZSldw=) 2: 75C18F96305811EB94E3192FC4F9AE02.roa (hash: UzsieRuJZfKKtvrR8Sja2Ma73F9hqR2aOcUuvBHYQ7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13258 (0x33ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Validity Not Before: May 2 14:18:50 2024 GMT Not After : May 9 14:18:50 2024 GMT Subject: CN=6633a0ca-edab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:d8:81:ea:55:d7:eb:36:8c:7a:da:83:21: 2d:02:dc:91:a6:76:8e:94:f7:92:ce:c9:48:9d:f3: c5:5e:43:3a:29:cb:5a:8a:95:06:89:c8:dc:fe:39: d9:46:19:65:55:34:6f:e1:ec:60:1a:79:65:1c:74: ec:21:ee:1d:96:b2:88:8c:74:da:75:8e:c1:cd:5a: e7:c9:44:d5:8a:f6:11:46:e0:b0:1d:d9:94:8d:99: 10:3c:6d:13:ae:c4:ee:62:41:00:5b:a1:41:b0:be: d1:57:1e:26:fa:80:09:6f:60:0a:22:1b:b0:fb:4e: 8a:79:f0:c7:ec:b5:ea:16:c1:a4:84:b9:bb:bc:89: c6:aa:67:9c:0a:61:05:92:af:a5:ce:8e:81:5b:4a: 97:21:3a:d1:b1:e7:de:d2:ed:39:b7:21:c2:d1:cc: ab:12:f8:36:29:63:ff:ed:9e:24:96:84:d5:91:3e: 25:ee:61:10:00:a6:9d:5e:70:9b:f8:e2:08:64:10: 56:bc:6b:f0:61:68:2c:d7:3e:78:25:bd:85:40:79: e5:a0:5e:22:bf:47:e5:ed:00:da:29:78:2c:49:19: 6a:f7:1f:bf:55:41:42:9a:bb:b0:eb:e1:92:fc:51: 4f:9d:58:1e:74:ba:47:2f:9b:55:fc:2b:b2:6b:2c: 6c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E4:3C:16:89:05:DF:62:5C:B8:FD:24:E5:B3:9F:A5:D6:68:46:63 X509v3 Authority Key Identifier: keyid:B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:29:84:ae:4a:f4:f6:ac:df:83:37:27:f8:42:7a:86:e2:3c: ba:ae:1a:61:a0:91:63:a1:e8:0b:8d:62:de:7a:06:05:cb:61: e8:51:65:3b:f9:62:d8:5a:b5:23:e9:1e:2e:37:d9:94:ca:e6: fc:2f:9a:19:38:75:e3:0c:3a:ae:dd:31:a8:08:e6:ae:92:53: 67:7c:2c:6c:0f:56:9a:ad:5c:b6:b8:43:b7:37:a9:af:c0:17: 7d:6c:fd:0f:ca:42:e1:ff:7e:f0:62:91:dd:09:7e:3e:6a:35: 46:9b:ca:5d:d5:1b:28:76:2d:e6:68:3c:ea:97:de:a6:83:2b: 6f:a2:0b:65:55:4b:ce:d7:bd:a4:0c:4c:08:bb:00:f3:b8:6d: 6e:09:08:b0:17:d2:c2:3b:ee:f3:a7:e3:7c:b9:66:54:dc:f9: bd:7b:45:34:11:ee:bc:d2:d7:89:7a:92:3a:4e:75:c3:34:d7: dc:3d:1c:15:b1:9f:7b:ae:89:79:e2:46:11:ab:08:9d:59:c7: af:2c:ce:76:ef:f4:31:47:33:00:a6:78:4d:d1:92:1e:51:2a: d7:85:74:49:79:73:3b:51:6d:54:1c:53:66:bf:da:1d:54:31: 6b:27:fa:d2:d2:47:52:f9:0b:00:19:aa:87:ed:03:d8:3b:d4: 6a:59:85:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEODExMTAvBgNVBAUTKEI4QjQ3M0QzNkRBNTI2MDgyNUNEMEJCRjYyRjZFQzE5 MEQzNDAyMTgwHhcNMjQwNTAyMTQxODUwWhcNMjQwNTA5MTQxODUwWjAYMRYwFAYD VQQDEw02NjMzYTBjYS1lZGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBvYgepV1+s2jHragyEtAtyRpnaOlPeSzslInfPFXkM6KctaipUGicjc/jnZ RhllVTRv4exgGnllHHTsIe4dlrKIjHTadY7BzVrnyUTVivYRRuCwHdmUjZkQPG0T rsTuYkEAW6FBsL7RVx4m+oAJb2AKIhuw+06KefDH7LXqFsGkhLm7vInGqmecCmEF kq+lzo6BW0qXITrRsefe0u05tyHC0cyrEvg2KWP/7Z4kloTVkT4l7mEQAKadXnCb +OIIZBBWvGvwYWgs1z54Jb2FQHnloF4iv0fl7QDaKXgsSRlq9x+/VUFCmruw6+GS /FFPnVgedLpHL5tV/CuyayxsHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfkPBaJ Bd9iXLj9JOWzn6XWaEZjMB8GA1UdIwQYMBaAFLi0c9NtpSYIJc0Lv2L27BkNNAIY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ4MS80NzA1OUREODFE NkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpnZ2x6UXVfWXZic0dRMDBB aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VMUnowMjJsSmdnbHpRdV9ZdmJzR1EwMEFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ4MS80NzA1OUREODFENkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpn Z2x6UXVfWXZic0dRMDBBaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZKYSuSvT2rN+DNyf4QnqG4jy6rhphoJFjoegLjWLeegYFy2HoUWU7 +WLYWrUj6R4uN9mUyub8L5oZOHXjDDqu3TGoCOauklNnfCxsD1aarVy2uEO3N6mv wBd9bP0PykLh/37wYpHdCX4+ajVGm8pd1Rsodi3maDzql96mgytvogtlVUvO172k DEwIuwDzuG1uCQiwF9LCO+7zp+N8uWZU3Pm9e0U0Ee680teJepI6TnXDNNfcPRwV sZ97rol54kYRqwidWcevLM527/QxRzMApnhN0ZIeUSrXhXRJeXM7UW1UHFNmv9od VDFrJ/rS0kdS+QsAGaqH7QPYO9RqWYXD -----END CERTIFICATE-----Generated at Thu May 2 17:18:56 2024 by rpki-client on console-ams.rpki-client.org