$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.mft File: uvgLngYKGXeZFoErAACdd3OoSwA.mft (raw, json) Hash identifier: lz2GFvkJ+CIG/ne9Mg8sqRkdxmkWYD1Iwpso7OzAPHo= Subject key identifier: 12:A2:58:6B:7F:92:AA:83:60:D4:B6:CC:C7:9E:84:67:71:EB:2B:39 Authority key identifier: BA:F8:0B:9E:06:0A:19:77:99:16:81:2B:00:00:9D:77:73:A8:4B:00 Certificate issuer: /CN=A91D73BB/serialNumber=BAF80B9E060A19779916812B00009D7773A84B00 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvgLngYKGXeZFoErAACdd3OoSwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.mft Manifest number: 1D Signing time: Wed 15 May 2024 08:44:34 +0000 Manifest this update: Wed 15 May 2024 08:44:34 +0000 Manifest next update: Wed 22 May 2024 08:44:34 +0000 Files and hashes: 1: uvgLngYKGXeZFoErAACdd3OoSwA.crl (hash: pCywClMok8uD2dhr5i862Lhz3x1STXVzlfGUROTasAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.crl rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvgLngYKGXeZFoErAACdd3OoSwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73BB/serialNumber=BAF80B9E060A19779916812B00009D7773A84B00 Validity Not Before: May 15 08:44:34 2024 GMT Not After : May 22 08:44:34 2024 GMT Subject: CN=664475f2-119d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:fb:ae:31:3c:95:75:7e:da:b6:a6:fe:38: b9:41:0e:cf:bd:e0:af:71:ba:2a:96:e4:ad:69:4a: e5:98:de:2c:4b:26:30:bb:64:3e:fd:dd:0a:ac:70: 5a:0b:62:fa:7e:57:87:4a:a8:21:0a:82:68:93:5f: 80:8b:af:03:81:f7:8c:92:f3:71:aa:a4:bc:de:e5: 43:fc:10:7a:ef:05:e5:0f:c1:7f:7b:b2:8d:f1:bf: 21:95:4a:8e:3d:11:c7:87:e4:0e:79:e2:74:9d:87: c8:ac:fd:e9:96:1b:13:5e:da:4a:0d:6e:93:7b:42: ae:bb:2a:90:78:6f:a2:c4:84:b9:8f:af:55:ef:67: f1:5c:72:69:cf:59:df:cd:fc:05:52:50:ec:75:9d: bd:5e:74:32:70:31:45:7b:59:c3:8b:28:7c:26:c1: 36:fb:23:06:c9:85:a1:f2:c4:12:e0:82:72:11:b4: fd:cd:4b:00:f0:ab:f3:7a:61:c5:76:84:94:a9:37: 15:fb:70:70:aa:53:cd:71:ce:69:b5:d3:a8:fc:74: e0:10:90:fe:8d:fe:be:d9:e6:39:41:ee:dd:38:f6: 39:13:6f:2f:e7:74:b1:3f:c5:00:28:d5:9f:2a:04: 46:80:9c:8c:01:b5:f1:51:c4:3f:32:d3:b9:bf:25: 42:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A2:58:6B:7F:92:AA:83:60:D4:B6:CC:C7:9E:84:67:71:EB:2B:39 X509v3 Authority Key Identifier: keyid:BA:F8:0B:9E:06:0A:19:77:99:16:81:2B:00:00:9D:77:73:A8:4B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvgLngYKGXeZFoErAACdd3OoSwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:77:60:53:dd:c4:85:46:55:0d:34:5a:de:ff:da:43:4b:a1: 60:c8:ed:f8:8f:20:bb:e9:99:c7:ee:f4:84:58:a7:be:00:c0: 81:89:46:1c:5e:1e:25:13:a5:b5:4e:6c:c4:62:58:f4:71:1a: a7:91:2b:cb:a0:ed:b4:cf:d3:d0:55:0d:7d:4f:40:fe:53:f0: 47:17:52:7a:24:df:e1:e4:58:96:cc:33:9c:bd:bb:cd:2e:ac: 45:53:d8:c7:d0:63:d4:f2:2b:1b:5e:1a:28:78:f0:ee:ad:e9: f4:dd:2d:ab:be:69:5d:2c:55:a9:8e:95:ba:90:39:be:c0:a1: d1:2a:f5:4f:ea:7c:23:ae:8c:a2:3b:4a:75:fa:23:ff:9d:12: 29:de:59:0d:71:b7:71:5e:38:f5:12:a4:79:f6:50:63:c7:30: 39:55:c8:83:a9:0a:f2:09:cd:8e:ed:8c:94:77:20:51:e5:51: 42:72:67:0e:98:fc:53:44:92:bf:20:4a:1d:45:05:ba:94:6a: 87:46:ca:ae:65:90:dc:27:31:9b:db:e5:04:0c:be:a2:81:34: 3a:6d:3c:16:23:28:c9:26:79:fd:cf:7a:cf:ee:99:82:4b:34: f1:a1:ca:43:55:f8:bd:30:86:2d:8f:70:aa:6e:6b:70:73:a9: 88:6c:fa:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NzNCQjExMC8GA1UEBRMoQkFGODBCOUUwNjBBMTk3Nzk5MTY4MTJCMDAwMDlENzc3 M0E4NEIwMDAeFw0yNDA1MTUwODQ0MzRaFw0yNDA1MjIwODQ0MzRaMBgxFjAUBgNV BAMTDTY2NDQ3NWYyLTExOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC41vuuMTyVdX7atqb+OLlBDs+94K9xuiqW5K1pSuWY3ixLJjC7ZD793QqscFoL Yvp+V4dKqCEKgmiTX4CLrwOB94yS83GqpLze5UP8EHrvBeUPwX97so3xvyGVSo49 EceH5A554nSdh8is/emWGxNe2koNbpN7Qq67KpB4b6LEhLmPr1XvZ/FccmnPWd/N /AVSUOx1nb1edDJwMUV7WcOLKHwmwTb7IwbJhaHyxBLggnIRtP3NSwDwq/N6YcV2 hJSpNxX7cHCqU81xzmm106j8dOAQkP6N/r7Z5jlB7t049jkTby/ndLE/xQAo1Z8q BEaAnIwBtfFRxD8y07m/JUKZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEqJYa3+S qoNg1LbMx56EZ3HrKzkwHwYDVR0jBBgwFoAUuvgLngYKGXeZFoErAACdd3OoSwAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3M0JCLzk3Q0YwOTY2RTY1 MjExRUVCRUU5QTc4N0M0RjlBRTAyL3V2Z0xuZ1lLR1hlWkZvRXJBQUNkZDNPb1N3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdXZnTG5nWUtHWGVaRm9FckFBQ2RkM09vU3dBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3 M0JCLzk3Q0YwOTY2RTY1MjExRUVCRUU5QTc4N0M0RjlBRTAyL3V2Z0xuZ1lLR1hl WkZvRXJBQUNkZDNPb1N3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADt3YFPdxIVGVQ00Wt7/2kNLoWDI7fiPILvpmcfu9IRYp74AwIGJRhxe HiUTpbVObMRiWPRxGqeRK8ug7bTP09BVDX1PQP5T8EcXUnok3+HkWJbMM5y9u80u rEVT2MfQY9TyKxteGih48O6t6fTdLau+aV0sVamOlbqQOb7AodEq9U/qfCOujKI7 SnX6I/+dEineWQ1xt3FeOPUSpHn2UGPHMDlVyIOpCvIJzY7tjJR3IFHlUUJyZw6Y /FNEkr8gSh1FBbqUaodGyq5lkNwnMZvb5QQMvqKBNDptPBYjKMkmef3Pes/umYJL NPGhykNV+L0whi2PcKpua3BzqYhs+sg= -----END CERTIFICATE-----Generated at Wed May 15 11:17:44 2024 by rpki-client on console-ams.rpki-client.org