$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft File: uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json) Hash identifier: OxXrH84AjQE2hV4MIbJim/YNak3RLYttCJ0AC9zv0GY= Subject key identifier: A8:E5:2D:8E:EA:72:27:8F:22:20:BF:91:D1:E5:D2:40:16:8C:E7:25 Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 Certificate issuer: /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Certificate serial: 0B50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft Manifest number: 0B49 Signing time: Sat 04 May 2024 19:52:33 +0000 Manifest this update: Sat 04 May 2024 19:52:33 +0000 Manifest next update: Sat 11 May 2024 19:52:32 +0000 Files and hashes: 1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: nwdDPizT/6U8d9YBCxkjJB62NHpq5WocmxwzoWYADUY=) 2: C4391160305611EABE7DF272C4F9AE02.roa (hash: xJYsfjH6hKhEWU7c/MfdCXrJFrYjckMHy79FHubR0zM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2 Validity Not Before: May 4 19:52:33 2024 GMT Not After : May 11 19:52:32 2024 GMT Subject: CN=66369201-2bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:5c:e5:f2:48:b6:a0:68:2f:97:3c:e0:a6: 62:22:70:c9:66:75:3d:a3:22:90:5f:2e:d4:6e:e4: 0f:45:14:05:d1:c0:a4:84:f6:df:35:20:07:a4:a9: b6:dd:34:2b:45:33:81:c9:a7:52:96:e0:48:e2:6c: a0:f8:ef:55:53:0a:48:bd:53:33:4f:53:59:52:b4: 3f:85:e7:a4:15:0a:68:3f:cb:b3:dd:a7:03:d1:fc: 60:b4:e1:f9:81:60:e5:3c:ad:9b:62:db:79:0f:ed: d2:df:ee:fe:fa:11:b2:91:46:4c:87:f3:b2:18:cf: d1:7a:df:74:4b:dd:db:2d:5c:d3:b6:73:fa:5b:84: 86:14:aa:10:fd:b4:b7:92:a9:90:76:57:39:8e:25: 2a:3e:17:b1:1b:bd:f0:bb:5e:a6:66:16:ef:43:92: c9:ac:be:da:b2:7a:20:17:cd:18:2d:39:0e:27:67: 40:ad:12:ef:23:8c:48:00:b6:60:a9:83:e7:ef:3c: fd:5a:72:3a:a5:bd:2e:ac:7a:d9:f3:c1:63:ff:6a: a3:4a:3a:62:49:61:08:e4:36:da:d3:ce:d0:bf:4a: e7:e5:d2:f3:56:ac:ca:74:95:03:2e:cd:3c:75:f5: a3:b7:6b:b6:14:17:c1:ac:ad:87:60:ee:e5:aa:f7: 11:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E5:2D:8E:EA:72:27:8F:22:20:BF:91:D1:E5:D2:40:16:8C:E7:25 X509v3 Authority Key Identifier: keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:58:a9:f8:cb:3e:b1:00:5b:d2:e1:38:5f:3b:05:70:e1:32: 7b:72:5c:a9:e1:23:ee:85:a3:ef:bf:04:0c:72:61:68:8c:a0: eb:8e:d3:86:b0:0e:1a:0f:ca:99:b5:b1:d7:d5:8d:7e:d4:21: cd:7b:5d:bc:8f:c9:fa:45:b3:15:a3:91:f0:49:c3:33:19:73: fc:18:60:08:80:64:cb:df:72:35:65:89:11:94:b8:ee:5b:20: 4a:91:34:e8:59:a0:a7:5f:05:64:50:3e:b1:90:b6:93:f2:fe: 50:71:82:e5:ff:68:35:00:44:94:84:0e:4f:0e:ca:d8:09:d8: f5:00:1b:ab:30:cc:a1:40:aa:66:95:c1:82:94:2d:82:2c:e1: 47:7b:12:d1:8e:5d:fa:ae:77:c9:b5:bb:e8:ab:da:f4:d7:27: 22:b2:50:ce:84:4f:1d:ac:4b:21:e2:f9:c2:71:7b:b0:d8:13: 68:3b:3b:da:89:60:e5:18:cd:94:af:00:71:5c:96:21:cb:18: 94:77:2a:2f:1a:d5:32:1b:5d:fd:a0:da:3d:b1:d3:d1:8f:93: 1d:c3:9d:67:98:c6:6e:ae:c7:cb:7e:bc:13:c3:7e:6c:f9:63: 95:e0:26:7d:f5:fb:1e:71:7e:da:7d:d7:fa:bb:3f:cb:5b:4e: c3:8a:25:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE2NDkxMTAvBgNVBAUTKEI5RUIxNTQ4NjY3NzczN0RCMjczOUZENjU0NjJBRUU3 OTA2MTY4QzIwHhcNMjQwNTA0MTk1MjMzWhcNMjQwNTExMTk1MjMyWjAYMRYwFAYD VQQDEw02NjM2OTIwMS0yYmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJdc5fJItqBoL5c84KZiInDJZnU9oyKQXy7UbuQPRRQF0cCkhPbfNSAHpKm2 3TQrRTOByadSluBI4myg+O9VUwpIvVMzT1NZUrQ/heekFQpoP8uz3acD0fxgtOH5 gWDlPK2bYtt5D+3S3+7++hGykUZMh/OyGM/Ret90S93bLVzTtnP6W4SGFKoQ/bS3 kqmQdlc5jiUqPhexG73wu16mZhbvQ5LJrL7asnogF80YLTkOJ2dArRLvI4xIALZg qYPn7zz9WnI6pb0urHrZ88Fj/2qjSjpiSWEI5Dba087Qv0rn5dLzVqzKdJUDLs08 dfWjt2u2FBfBrK2HYO7lqvcRTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjlLY7q ciePIiC/kdHl0kAWjOclMB8GA1UdIwQYMBaAFLnrFUhmd3N9snOf1lRirueQYWjC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTY0OS81RDk3Nzc0QzBG NTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2MzMnljNV9XVkdLdTU1Qmhh TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vlc1ZTR1ozYzMyeWM1X1dWR0t1NTVCaGFNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTY0OS81RDk3Nzc0QzBGNTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2Mz MnljNV9XVkdLdTU1QmhhTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDWKn4yz6xAFvS4ThfOwVw4TJ7clyp4SPuhaPvvwQMcmFojKDrjtOG sA4aD8qZtbHX1Y1+1CHNe128j8n6RbMVo5HwScMzGXP8GGAIgGTL33I1ZYkRlLju WyBKkTToWaCnXwVkUD6xkLaT8v5QcYLl/2g1AESUhA5PDsrYCdj1ABurMMyhQKpm lcGClC2CLOFHexLRjl36rnfJtbvoq9r01ycislDOhE8drEsh4vnCcXuw2BNoOzva iWDlGM2UrwBxXJYhyxiUdyovGtUyG139oNo9sdPRj5Mdw51nmMZursfLfrwTw35s +WOV4CZ99fsecX7afdf6uz/LW07DiiXt -----END CERTIFICATE-----Generated at Sat May 4 20:37:18 2024 by rpki-client on console-fra.rpki-client.org