$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft File: UVabSMA4kUVORphTpn25Cb7CytY.mft (raw, json) Hash identifier: 9XLjzy/wHysgX7bbcnr/bRy9OcYPeFtix9JctmK5waI= Subject key identifier: 58:A1:52:8E:D8:7E:70:F1:D1:EF:60:14:AE:61:48:B8:91:A7:6A:CE Authority key identifier: 51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6 Certificate issuer: /CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6 Certificate serial: 1B46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft Manifest number: 1B2B Signing time: Thu 02 May 2024 16:43:52 +0000 Manifest this update: Thu 02 May 2024 16:43:51 +0000 Manifest next update: Thu 09 May 2024 16:43:51 +0000 Files and hashes: 1: UVabSMA4kUVORphTpn25Cb7CytY.crl (hash: Gx3KfdAB1M3Li9FViCVVesaC3EGK20Gta5SJYMe9syQ=) 2: 0A93D802C98211EE90C9B71DC4F9AE02.roa (hash: vReq03Gn7h1BCKP22IwkaPi8aNfwelZqYb8YX29b0Fo=) 3: 2ADC134C973F11EEA24DBE15C4F9AE02.roa (hash: KbAWgwBBoHx2CRpDzOmGlIIM8xmr+9u457k+7yk+pvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6982 (0x1b46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6 Validity Not Before: May 2 16:43:51 2024 GMT Not After : May 9 16:43:51 2024 GMT Subject: CN=6633c2c8-049f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ea:5f:b2:0d:ef:e2:6a:95:5d:36:9b:7f:36: 49:88:ca:7f:6d:86:c0:e2:fc:5c:8b:a5:08:fb:16: dc:34:17:36:e1:96:76:99:08:93:f8:80:12:8c:31: d3:5f:75:d2:82:78:74:78:d4:7f:46:e3:6e:d5:bf: eb:8b:27:83:66:18:e5:0b:9e:36:48:3f:e5:bc:1a: 55:bf:9c:9e:05:bf:a9:c4:68:ff:26:d8:ce:6a:2b: cd:e8:34:75:5c:28:4f:e6:28:cd:56:54:d3:3d:cc: a3:14:e3:40:79:60:23:fc:f7:b8:7f:bc:6c:33:f1: a7:e7:36:89:00:50:7a:12:c4:6d:6d:67:d1:ed:c3: 80:8f:87:d0:49:4b:5d:e9:5d:53:81:9e:d0:27:8b: ef:2f:0d:54:9d:a8:76:e8:a3:41:a5:fb:95:5f:2c: 20:bb:1c:ed:f3:ab:82:5b:2e:62:97:42:9a:df:e7: 14:01:8c:d7:a2:e7:73:50:9d:b2:1b:1a:0b:22:17: 6a:25:e1:66:a1:ae:c3:fb:2d:17:87:e6:a3:a3:0e: 51:18:91:6e:a2:a7:5f:ea:55:e7:f7:2d:d8:fa:8a: b4:fa:10:b2:0d:b7:fe:30:95:17:4e:e8:a8:c1:db: b2:3a:eb:b6:43:5d:9a:b4:0f:4b:55:40:d6:45:26: f2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A1:52:8E:D8:7E:70:F1:D1:EF:60:14:AE:61:48:B8:91:A7:6A:CE X509v3 Authority Key Identifier: keyid:51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2a:7a:b3:22:00:68:89:01:0a:16:95:f7:9a:52:d1:51:ba: 04:77:3d:b2:0e:cc:06:13:bf:1f:0e:d1:49:09:dd:7a:be:a7: 96:a7:50:a7:5d:b2:a9:f5:48:2d:e2:14:c8:b5:84:61:ae:e9: c4:e1:95:06:99:e3:22:60:4d:20:0e:39:1a:dc:89:e8:b9:64: 0a:fb:d4:5b:93:37:55:8e:02:1d:46:d1:55:3a:99:e7:4c:db: 45:97:7a:3e:3c:e0:fb:02:a3:de:21:10:f5:92:58:c8:48:fb: e1:8f:74:b6:6d:c1:30:10:e4:3e:1d:62:5e:93:93:42:0b:bc: d0:9e:cf:f2:41:a0:0b:0c:29:81:14:ec:d2:50:51:46:f6:83: 52:33:74:89:89:f4:31:80:cc:91:e6:fb:5c:1f:9d:f1:3c:35: fe:8b:02:eb:67:1e:59:da:bf:34:c0:02:42:75:7a:0d:69:4e: 5a:5b:12:1d:97:84:85:97:72:5a:48:01:d9:37:fa:60:0c:6a: 5d:05:42:8e:5a:d8:8b:91:79:d0:5f:27:f8:5b:36:81:85:2a: fc:d6:98:95:c7:6e:5d:36:d7:64:68:35:73:76:7e:71:6d:ff: 28:f6:5e:af:84:7e:e8:f5:b0:e0:2e:12:54:ce:c2:cd:4a:23: eb:dc:bf:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc2NzIxMTAvBgNVBAUTKDUxNTY5QjQ4QzAzODkxNDU0RTQ2OTg1M0E2N0RCOTA5 QkVDMkNBRDYwHhcNMjQwNTAyMTY0MzUxWhcNMjQwNTA5MTY0MzUxWjAYMRYwFAYD VQQDEw02NjMzYzJjOC0wNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvepfsg3v4mqVXTabfzZJiMp/bYbA4vxci6UI+xbcNBc24ZZ2mQiT+IASjDHT X3XSgnh0eNR/RuNu1b/riyeDZhjlC542SD/lvBpVv5yeBb+pxGj/JtjOaivN6DR1 XChP5ijNVlTTPcyjFONAeWAj/Pe4f7xsM/Gn5zaJAFB6EsRtbWfR7cOAj4fQSUtd 6V1TgZ7QJ4vvLw1Unah26KNBpfuVXywguxzt86uCWy5il0Ka3+cUAYzXoudzUJ2y GxoLIhdqJeFmoa7D+y0Xh+ajow5RGJFuoqdf6lXn9y3Y+oq0+hCyDbf+MJUXTuio wduyOuu2Q12atA9LVUDWRSbyMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFihUo7Y fnDx0e9gFK5hSLiRp2rOMB8GA1UdIwQYMBaAFFFWm0jAOJFFTkaYU6Z9uQm+wsrW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY3Mi80Mzc2NEJFQ0Y3 MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9VVmFiU01BNGtVVk9ScGhUcG4yNUNiN0N5 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VWYWJTTUE0a1VWT1JwaFRwbjI1Q2I3Q3l0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzY3Mi80Mzc2NEJFQ0Y3MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9VVmFiU01BNGtV Vk9ScGhUcG4yNUNiN0N5dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7KnqzIgBoiQEKFpX3mlLRUboEdz2yDswGE78fDtFJCd16vqeWp1Cn XbKp9Ugt4hTItYRhrunE4ZUGmeMiYE0gDjka3InouWQK+9RbkzdVjgIdRtFVOpnn TNtFl3o+POD7AqPeIRD1kljISPvhj3S2bcEwEOQ+HWJek5NCC7zQns/yQaALDCmB FOzSUFFG9oNSM3SJifQxgMyR5vtcH53xPDX+iwLrZx5Z2r80wAJCdXoNaU5aWxId l4SFl3JaSAHZN/pgDGpdBUKOWtiLkXnQXyf4WzaBhSr81piVx25dNtdkaDVzdn5x bf8o9l6vhH7o9bDgLhJUzsLNSiPr3L9R -----END CERTIFICATE-----Generated at Thu May 2 20:04:59 2024 by rpki-client on console-ams.rpki-client.org