$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft File: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft (raw, json) Hash identifier: N9kvKtiqjWksWa1INdBmVTe3CM4+LL4REbzrfe0pNwY= Subject key identifier: 20:2C:46:8C:24:ED:15:ED:46:E3:83:02:FD:EE:08:FF:5B:71:D0:1A Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Certificate serial: 0D8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft Manifest number: 0D85 Signing time: Mon 06 May 2024 18:38:40 +0000 Manifest this update: Mon 06 May 2024 18:38:40 +0000 Manifest next update: Mon 13 May 2024 18:38:40 +0000 Files and hashes: 1: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl (hash: Ge/gu3Rw8aAKNCMoGFMmnRQEDC5duX0zCKB6zCPExGM=) 2: BD22841E9E4911E9A136D25AC4F9AE02.roa (hash: 8XzmEKf9PUqL4rihQQ3dJ1Mo82lmK+/E9P0LLedBuYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3469 (0xd8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Validity Not Before: May 6 18:38:40 2024 GMT Not After : May 13 18:38:40 2024 GMT Subject: CN=663923b0-457b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bb:e5:40:5d:16:a0:74:58:1f:c9:7f:1d:93: 30:82:af:23:74:50:4f:2c:06:6b:7d:72:d3:4f:b5: e1:f2:36:e1:3b:90:02:5b:03:05:6b:f8:c9:80:20: b3:19:09:c5:e5:82:43:08:14:78:7b:90:ec:e4:74: 48:63:3f:d3:40:a9:39:ec:4c:aa:37:7f:71:1e:44: e7:ca:7d:3d:1f:9a:3a:c0:dd:84:23:11:5c:fd:5b: 33:d1:8e:16:0c:0d:e5:3b:da:8c:09:65:64:ab:04: 14:21:17:fd:5d:8a:66:6c:e0:03:c0:eb:b6:a2:02: 71:19:4f:71:d1:94:7a:93:c3:55:08:04:03:b4:3f: c0:16:71:e1:ef:75:a0:2a:ac:4f:54:75:75:18:95: cf:8f:34:91:87:8b:30:35:89:40:2f:75:96:ee:53: b9:a3:7a:d2:5e:96:96:8e:14:03:fc:86:a6:f1:74: 12:fa:86:41:ee:66:0d:9c:9c:da:cc:41:50:61:22: 7c:3b:12:a7:ed:30:a7:63:61:92:bb:62:48:09:dc: 40:8c:d9:ca:5c:93:bd:b7:d3:44:69:3f:f5:78:e4: 5f:8b:22:83:d5:6c:7e:7e:10:eb:84:18:de:b9:ed: 3d:17:ab:13:e5:95:09:e4:c2:ce:4a:de:25:60:73: 60:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2C:46:8C:24:ED:15:ED:46:E3:83:02:FD:EE:08:FF:5B:71:D0:1A X509v3 Authority Key Identifier: keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:2e:b9:b2:cd:25:9f:4b:1f:52:36:ad:aa:a8:19:4c:ff:3b: 81:8b:b7:4e:e2:99:3f:38:86:ef:f5:21:1c:c8:bb:7d:de:f8: c9:64:3a:52:95:0b:8a:d8:2f:3d:6f:9e:9c:4f:25:fb:d3:a5: fe:33:36:ba:4f:04:15:5c:aa:fb:73:1e:70:1a:eb:da:bb:1d: 11:25:99:85:86:8a:e9:ad:8a:85:7d:e9:6d:9b:a1:ee:68:99: 1e:42:9c:64:c2:92:e8:2c:fd:2f:6d:59:69:72:00:ad:64:83: b3:7e:81:ca:85:f1:8c:7e:c1:bc:04:c4:f5:2b:6a:1e:e9:44: de:b0:3e:0f:9c:c7:91:fe:44:29:41:53:84:76:f3:f1:bf:32: 2b:1e:b3:86:6b:98:76:15:d1:dc:8d:df:55:94:5c:94:3e:c3: 16:f4:e6:59:59:dd:3f:20:f7:44:46:6f:c1:93:d6:77:0b:37: 13:fd:6e:bc:d5:13:72:a1:50:01:4b:23:cf:31:96:cc:49:68: 52:54:34:50:57:97:53:1e:c6:00:c6:d5:36:f0:12:41:ab:da: a4:79:c1:61:7e:8c:b8:e1:ba:aa:2b:d7:c5:ac:26:45:d6:90: cb:b9:b2:cd:6b:b6:5e:4c:cc:c5:ab:14:90:00:e9:0e:1e:5c: 4d:f5:73:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExNDkxMTAvBgNVBAUTKEI4MzQwMUNGQkM0MDVDRkI1MkZEQTBGRUJENEEwMkI3 QjFDRTI3NjIwHhcNMjQwNTA2MTgzODQwWhcNMjQwNTEzMTgzODQwWjAYMRYwFAYD VQQDEw02NjM5MjNiMC00NTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7vlQF0WoHRYH8l/HZMwgq8jdFBPLAZrfXLTT7Xh8jbhO5ACWwMFa/jJgCCz GQnF5YJDCBR4e5Ds5HRIYz/TQKk57EyqN39xHkTnyn09H5o6wN2EIxFc/Vsz0Y4W DA3lO9qMCWVkqwQUIRf9XYpmbOADwOu2ogJxGU9x0ZR6k8NVCAQDtD/AFnHh73Wg KqxPVHV1GJXPjzSRh4swNYlAL3WW7lO5o3rSXpaWjhQD/Iam8XQS+oZB7mYNnJza zEFQYSJ8OxKn7TCnY2GSu2JICdxAjNnKXJO9t9NEaT/1eORfiyKD1Wx+fhDrhBje ue09F6sT5ZUJ5MLOSt4lYHNgNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAsRowk 7RXtRuODAv3uCP9bcdAaMB8GA1UdIwQYMBaAFLg0Ac+8QFz7Uv2g/r1KArexzidi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTE0OS8yNEJCMjRDRTlF NDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQdFNfYUQtdlVvQ3Q3SE9K MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VEUUJ6N3hBWFB0U19hRC12VW9DdDdIT0oySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTE0OS8yNEJCMjRDRTlFNDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQ dFNfYUQtdlVvQ3Q3SE9KMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQLrmyzSWfSx9SNq2qqBlM/zuBi7dO4pk/OIbv9SEcyLt93vjJZDpS lQuK2C89b56cTyX706X+Mza6TwQVXKr7cx5wGuvaux0RJZmFhorprYqFfeltm6Hu aJkeQpxkwpLoLP0vbVlpcgCtZIOzfoHKhfGMfsG8BMT1K2oe6UTesD4PnMeR/kQp QVOEdvPxvzIrHrOGa5h2FdHcjd9VlFyUPsMW9OZZWd0/IPdERm/Bk9Z3CzcT/W68 1RNyoVABSyPPMZbMSWhSVDRQV5dTHsYAxtU28BJBq9qkecFhfoy44bqqK9fFrCZF 1pDLubLNa7ZeTMzFqxSQAOkOHlxN9XOB -----END CERTIFICATE-----Generated at Mon May 6 20:19:44 2024 by rpki-client on console-ams.rpki-client.org