$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft File: UzSpQuM2kLKBJhu645cTXb6kE5c.mft (raw, json) Hash identifier: 2ImUrCN/roj+k3haJJxyuv3FmYep0wA7xRZb/pINSP8= Subject key identifier: 43:04:4F:FB:97:82:AA:41:ED:67:48:66:F5:3D:44:D0:30:A6:18:87 Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 Certificate issuer: /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Certificate serial: 076B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft Manifest number: 0766 Signing time: Fri 26 Apr 2024 22:16:28 +0000 Manifest this update: Fri 26 Apr 2024 22:16:28 +0000 Manifest next update: Fri 03 May 2024 22:16:28 +0000 Files and hashes: 1: UzSpQuM2kLKBJhu645cTXb6kE5c.crl (hash: hKDraR76vtNMG0tZ75oi3r3gSK69xZ+JCEYsmfro2og=) 2: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (hash: a44q470Zn26jNPmmshLml4weGKBkDVuukU2z66KMlGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 22:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1899 (0x76b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Validity Not Before: Apr 26 22:16:28 2024 GMT Not After : May 3 22:16:28 2024 GMT Subject: CN=662c27bc-bfae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:02:85:5e:ef:5a:fd:2c:9b:4d:3d:bd:04:b1: ba:91:37:7e:8d:00:55:d6:44:cb:ac:76:88:69:0f: 50:ba:ee:3f:21:e1:40:81:f4:1d:b1:2e:70:54:0a: 4b:6d:33:d5:7f:98:59:0a:a8:0f:b1:c5:93:fe:ed: fd:4f:fd:4e:cd:dc:be:a9:bb:4d:0c:dd:d2:ef:43: aa:8e:95:45:44:29:27:70:c7:25:c6:8f:11:32:f4: c4:b7:a4:9e:ca:aa:86:ba:b9:10:6f:39:9d:2b:c7: 5f:cf:b7:b4:7a:98:4b:1b:b2:40:89:00:dc:ca:4c: ff:bb:6b:17:45:0a:89:95:9c:96:27:cb:84:92:1a: aa:c4:83:4e:35:c9:9b:29:51:2d:bd:97:34:f9:3e: d5:69:59:33:96:f6:93:df:df:cb:8f:d0:41:d9:56: 6b:82:77:8a:b0:43:10:df:ac:cc:d0:7c:a6:69:1b: 3b:a3:c8:d6:4a:e8:17:d2:c4:57:a2:21:7f:91:0e: 5f:da:6d:33:83:ac:25:d7:86:cd:11:70:22:c1:a7: a3:14:87:ea:97:b7:08:6a:81:91:19:a0:f8:65:9c: 23:82:de:e7:19:17:ad:4c:27:cf:87:33:f4:3d:c5: 5e:e6:e7:21:7a:a3:81:8b:9c:4a:eb:17:9b:a7:04: 46:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:04:4F:FB:97:82:AA:41:ED:67:48:66:F5:3D:44:D0:30:A6:18:87 X509v3 Authority Key Identifier: keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:4e:bc:4d:c5:ef:20:2a:d7:8d:53:b5:99:97:68:2a:cb:89: 10:d7:bf:84:64:f6:a2:cb:9a:b0:61:6b:d0:8a:a5:19:34:66: 97:13:e5:b6:2d:9c:d8:93:d3:e0:a0:f2:88:93:18:57:8f:16: f2:3f:93:3b:23:f9:45:e3:37:29:b9:01:dd:17:e0:7e:02:66: 28:e7:54:32:a1:f5:96:80:25:08:7f:d0:f4:86:88:40:9b:7a: f0:ba:53:ad:f5:c1:eb:e1:ce:0c:db:12:e1:be:9e:66:32:86: b7:9c:5b:0c:6c:82:52:6e:9e:cc:c8:dc:e1:04:0d:a4:f6:c5: 74:09:50:9d:15:94:7f:9e:72:59:21:1c:60:f0:e1:34:97:d7: df:61:88:25:20:fd:87:37:3f:38:16:bb:3b:25:c3:a5:49:3a: 81:2a:4a:17:c8:32:b0:de:cb:95:7d:dc:8d:8a:b9:14:d1:3f: 08:4a:fd:f7:bb:4a:43:f9:8e:a8:cb:4b:9c:42:e7:78:fb:d4: 2f:1b:6a:3a:d5:d5:01:0e:38:d6:2e:b8:cd:f3:6f:86:a7:a8: 11:94:62:e4:57:86:c6:a9:b7:ff:b2:ca:17:68:9f:bb:21:cb: e5:76:3a:e6:4f:46:43:b4:ff:59:fa:6d:ce:c4:e0:bf:6c:2a: 91:04:0b:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwMjIxMTAvBgNVBAUTKDUzMzRBOTQyRTMzNjkwQjI4MTI2MUJCQUUzOTcxMzVE QkVBNDEzOTcwHhcNMjQwNDI2MjIxNjI4WhcNMjQwNTAzMjIxNjI4WjAYMRYwFAYD VQQDEw02NjJjMjdiYy1iZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wKFXu9a/SybTT29BLG6kTd+jQBV1kTLrHaIaQ9Quu4/IeFAgfQdsS5wVApL bTPVf5hZCqgPscWT/u39T/1Ozdy+qbtNDN3S70OqjpVFRCkncMclxo8RMvTEt6Se yqqGurkQbzmdK8dfz7e0ephLG7JAiQDcykz/u2sXRQqJlZyWJ8uEkhqqxINONcmb KVEtvZc0+T7VaVkzlvaT39/Lj9BB2VZrgneKsEMQ36zM0HymaRs7o8jWSugX0sRX oiF/kQ5f2m0zg6wl14bNEXAiwaejFIfql7cIaoGRGaD4ZZwjgt7nGRetTCfPhzP0 PcVe5ucheqOBi5xK6xebpwRG9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMET/uX gqpB7WdIZvU9RNAwphiHMB8GA1UdIwQYMBaAFFM0qULjNpCygSYbuuOXE12+pBOX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMi85RDhEOTQ1OENG RUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtMS0JKaHU2NDVjVFhiNmtF NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6U3BRdU0ya0xLQkpodTY0NWNUWGI2a0U1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTAyMi85RDhEOTQ1OENGRUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtM S0JKaHU2NDVjVFhiNmtFNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPTrxNxe8gKteNU7WZl2gqy4kQ17+EZPaiy5qwYWvQiqUZNGaXE+W2 LZzYk9PgoPKIkxhXjxbyP5M7I/lF4zcpuQHdF+B+AmYo51QyofWWgCUIf9D0hohA m3rwulOt9cHr4c4M2xLhvp5mMoa3nFsMbIJSbp7MyNzhBA2k9sV0CVCdFZR/nnJZ IRxg8OE0l9ffYYglIP2HNz84Frs7JcOlSTqBKkoXyDKw3suVfdyNirkU0T8ISv33 u0pD+Y6oy0ucQud4+9QvG2o61dUBDjjWLrjN82+Gp6gRlGLkV4bGqbf/ssoXaJ+7 IcvldjrmT0ZDtP9Z+m3OxOC/bCqRBAut -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:39 2024 by rpki-client on console-ams.rpki-client.org