$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft File: UyaKJzal_1VLlAcD83T8NXkijDA.mft (raw, json) Hash identifier: aojhkNShiRuZe+7WQBcxspE5bTnHDNezm59c6pEsEUQ= Subject key identifier: 71:99:11:5A:20:54:20:94:86:0F:17:BC:FA:B3:61:79:24:57:BF:EA Authority key identifier: 53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 Certificate issuer: /CN=A91DCBAD/serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Certificate serial: 0960 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft Manifest number: 095A Signing time: Sat 04 May 2024 21:14:26 +0000 Manifest this update: Sat 04 May 2024 21:14:25 +0000 Manifest next update: Sat 11 May 2024 21:14:25 +0000 Files and hashes: 1: UyaKJzal_1VLlAcD83T8NXkijDA.crl (hash: 6EGbW4aPnLv05414qQsB6wNr3mKySjJSyg5FqqltYd4=) 2: CF072592709211EAB1D2FA0FC4F9AE02.roa (hash: ZUxDH7e3yZrKdxOW1WhteD8IH7JG8883mFKbtU7XxhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2400 (0x960) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCBAD/serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Validity Not Before: May 4 21:14:25 2024 GMT Not After : May 11 21:14:25 2024 GMT Subject: CN=6636a531-859e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:2f:05:b4:4f:15:a5:86:1a:1d:0b:c3:5a: e8:e1:f4:df:ab:55:70:cc:06:78:29:0c:02:dc:63: 1f:d3:52:ca:98:f9:bd:92:bc:59:85:3c:03:49:e8: 4e:f9:e9:b0:79:b0:51:62:34:aa:15:7f:d1:64:57: 72:2e:11:77:82:27:24:93:88:43:5c:02:c9:b7:fc: 16:e8:ab:e4:d4:2d:64:cd:b2:83:6c:0c:12:7b:ec: fb:f3:89:69:24:d6:b9:8e:72:4e:99:ed:64:bc:a4: 75:3c:61:be:8d:e2:f2:85:48:2c:2b:a2:37:bf:87: 20:be:8c:d9:b7:86:cd:56:ec:c8:41:a4:a1:be:26: 68:1a:f9:3a:f4:f5:15:23:80:1f:bb:65:23:ed:78: 1e:bf:1c:a8:97:50:a9:f2:b0:e9:f0:30:af:f9:ca: 18:dc:63:c6:dd:ea:2d:45:f6:78:3c:af:d1:f8:45: cb:d1:0e:e9:ab:bb:ee:09:9d:72:7a:ab:d4:aa:46: 88:ef:be:91:26:16:9f:d5:60:8c:88:7a:0a:25:50: 70:9f:9d:4f:58:07:64:5a:25:8c:4b:8b:3d:89:46: a8:f8:53:da:ec:e9:e6:15:a9:e4:ef:7f:d3:b5:b6: c9:c6:f5:67:85:08:29:76:e3:93:4c:9a:98:10:f9: 1b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:99:11:5A:20:54:20:94:86:0F:17:BC:FA:B3:61:79:24:57:BF:EA X509v3 Authority Key Identifier: keyid:53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:33:e6:0d:a1:81:2b:ca:c0:ac:ce:79:76:fb:81:a6:33:4e: b1:ca:55:c8:3e:76:f7:0f:5a:c2:b1:f0:1e:9f:44:1b:a1:5d: 48:41:a0:49:33:1e:f1:4d:d0:d1:1e:e3:7b:c5:af:1a:d8:bc: 9f:68:40:d6:68:b6:87:e9:72:6f:3d:96:32:00:99:12:01:82: 2b:2a:d7:d7:55:fa:48:ea:3a:0e:56:2d:7c:83:7e:fb:42:50: c7:2f:9f:ea:38:b1:b7:9f:9c:50:2e:62:ee:2a:77:9c:43:e8: 03:33:45:a7:c9:8c:b7:f9:69:0a:37:f1:63:02:b3:62:0b:92: 00:e7:88:ed:de:77:60:f9:b5:e0:18:a1:ac:a3:e2:8a:8d:53: f0:fd:4b:5c:84:f3:9f:e7:68:0e:c4:b2:79:f3:72:01:46:70: e8:7e:77:fc:6b:59:2b:28:d2:fd:a0:0b:34:11:62:8d:0e:b3: 71:0e:53:ae:9c:72:61:c3:35:f6:a3:e3:e3:72:f7:b0:df:18: c2:60:43:e2:cd:1b:7d:39:c1:99:6e:4c:e8:33:77:8e:bf:c9: aa:fe:94:50:94:05:f5:25:24:0c:16:5d:bd:0d:88:dd:5c:86: a3:6a:89:3d:4d:ef:49:45:25:59:32:b0:aa:3a:b5:f5:ad:31: 15:19:26:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCQUQxMTAvBgNVBAUTKDUzMjY4QTI3MzZBNUZGNTU0Qjk0MDcwM0YzNzRGQzM1 NzkyMjhDMzAwHhcNMjQwNTA0MjExNDI1WhcNMjQwNTExMjExNDI1WjAYMRYwFAYD VQQDEw02NjM2YTUzMS04NTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAup0vBbRPFaWGGh0Lw1ro4fTfq1VwzAZ4KQwC3GMf01LKmPm9krxZhTwDSehO +emwebBRYjSqFX/RZFdyLhF3gickk4hDXALJt/wW6Kvk1C1kzbKDbAwSe+z784lp JNa5jnJOme1kvKR1PGG+jeLyhUgsK6I3v4cgvozZt4bNVuzIQaShviZoGvk69PUV I4Afu2Uj7Xgevxyol1Cp8rDp8DCv+coY3GPG3eotRfZ4PK/R+EXL0Q7pq7vuCZ1y eqvUqkaI776RJhaf1WCMiHoKJVBwn51PWAdkWiWMS4s9iUao+FPa7OnmFank73/T tbbJxvVnhQgpduOTTJqYEPkbFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGZEVog VCCUhg8XvPqzYXkkV7/qMB8GA1UdIwQYMBaAFFMmiic2pf9VS5QHA/N0/DV5Ioww MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0JBRC8zNjU5RTdBRTcw OTExMUVBOEE5QjRFMERDNEY5QUUwMi9VeWFLSnphbF8xVkxsQWNEODNUOE5Ya2lq REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5YUtKemFsXzFWTGxBY0Q4M1Q4TlhraWpEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0JBRC8zNjU5RTdBRTcwOTExMUVBOEE5QjRFMERDNEY5QUUwMi9VeWFLSnphbF8x VkxsQWNEODNUOE5Ya2lqREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPM+YNoYErysCsznl2+4GmM06xylXIPnb3D1rCsfAen0QboV1IQaBJ Mx7xTdDRHuN7xa8a2LyfaEDWaLaH6XJvPZYyAJkSAYIrKtfXVfpI6joOVi18g377 QlDHL5/qOLG3n5xQLmLuKnecQ+gDM0WnyYy3+WkKN/FjArNiC5IA54jt3ndg+bXg GKGso+KKjVPw/UtchPOf52gOxLJ583IBRnDofnf8a1krKNL9oAs0EWKNDrNxDlOu nHJhwzX2o+Pjcvew3xjCYEPizRt9OcGZbkzoM3eOv8mq/pRQlAX1JSQMFl29DYjd XIajaok9Te9JRSVZMrCqOrX1rTEVGSYF -----END CERTIFICATE-----Generated at Sat May 4 22:06:54 2024 by rpki-client on console-ams.rpki-client.org