$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft File: RUCi-buGGfZIYtCWyEyTjoivPGw.mft (raw, json) Hash identifier: 5m/RQpCCTFxwiQCWK8jCoczjJZ/eVICYp3YwGenw0qk= Subject key identifier: 7C:35:A9:69:14:8E:31:89:58:E8:5F:69:BE:23:8A:1E:A2:EB:E5:32 Authority key identifier: 45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C Certificate issuer: /CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft Manifest number: A6 Signing time: Wed 15 May 2024 06:46:07 +0000 Manifest this update: Wed 15 May 2024 06:46:07 +0000 Manifest next update: Wed 22 May 2024 06:46:07 +0000 Files and hashes: 1: RUCi-buGGfZIYtCWyEyTjoivPGw.crl (hash: VOLl3ZWu9Qx161+pZWxIpo8h1oWVKwVQZxt9pK+aEOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C Validity Not Before: May 15 06:46:07 2024 GMT Not After : May 22 06:46:07 2024 GMT Subject: CN=66445a2f-6088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a9:75:5d:d1:a3:ac:d1:ec:ac:a0:24:4f:d9: f7:ac:d6:7c:16:64:6b:0f:7a:3c:e9:e1:ba:e5:b9: d9:92:eb:80:73:cf:88:32:80:7a:ae:64:1c:fc:bd: ad:24:fd:e4:d1:af:19:e3:06:44:1e:bd:a3:2f:a9: 71:48:cb:48:71:f0:84:d3:2a:af:0f:6b:01:94:85: eb:9f:d9:78:90:7b:fb:a4:e9:d7:cb:fb:ff:a1:a6: 6e:6e:01:67:dd:c0:15:96:a4:c6:08:70:6d:25:5d: 0d:4f:10:c1:f1:7e:c2:1b:b2:7e:bc:af:f3:33:b7: 35:57:5e:56:90:f4:40:00:59:36:10:2b:8f:4b:65: d9:ca:6c:c2:6d:ce:19:19:9e:d3:90:76:51:9b:88: 80:91:a2:36:06:30:16:61:c9:57:fa:14:c4:56:b2: a3:05:c7:86:a7:34:10:6b:7c:22:2f:a1:35:bf:0b: 63:04:83:d5:56:eb:b5:fd:2b:b2:6a:4c:65:4c:99: 6e:ff:e4:d0:d6:f9:7d:d1:99:e3:9f:a7:15:75:f2: c2:61:08:be:78:73:f7:0f:34:ec:6d:36:de:9e:0b: 38:46:5c:15:90:bc:09:49:47:6e:16:b6:b7:7b:21: 27:2a:fa:1d:1d:76:14:6e:a7:61:3e:dd:fd:b1:da: ad:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:35:A9:69:14:8E:31:89:58:E8:5F:69:BE:23:8A:1E:A2:EB:E5:32 X509v3 Authority Key Identifier: keyid:45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:7a:4d:60:88:9f:c0:ec:62:57:aa:42:84:0a:e4:6a:3e:0b: a1:8e:fc:6a:72:e2:e3:c8:a4:a1:c7:f6:54:4f:75:5e:f6:da: 11:45:cf:7e:d9:5b:40:32:26:3f:27:06:2c:1d:43:f8:70:71: b3:30:77:4c:86:53:bf:a7:a3:a9:28:13:02:b2:a1:4a:82:f6: 04:cc:c2:34:cc:f1:f4:dd:52:c9:f0:64:db:1b:a4:89:16:e8: ea:13:81:e4:f1:ee:ab:c4:ed:7b:c1:a4:50:ca:c8:61:e2:c4: 07:fe:03:b7:b7:36:ce:97:b7:29:97:83:3c:41:01:39:30:8c: 98:b8:02:ef:06:ab:55:34:2f:32:7d:2a:55:3a:8d:98:fa:05: 5c:2a:0d:1c:52:3c:a0:db:b9:75:7c:b9:be:5c:4c:60:5d:bd: 7a:9a:41:88:15:be:48:cf:39:7d:49:3f:04:de:e1:44:8f:8e: 53:48:f5:47:77:1b:dc:f3:9d:1e:01:d4:32:8f:eb:b3:68:35: b4:2c:05:70:4d:b9:33:7c:1e:c5:7c:49:61:0f:ca:32:a7:0e: 0e:38:a1:fa:eb:d1:56:c7:48:ea:2c:e3:b4:40:75:a8:32:10: 5e:40:0c:9a:a7:e2:bb:b7:e0:0a:dd:a9:51:22:4b:d7:be:a4: 09:6a:c1:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENGM0QxMTAvBgNVBAUTKDQ1NDBBMkY5QkI4NjE5RjY0ODYyRDA5NkM4NEM5MzhF ODhBRjNDNkMwHhcNMjQwNTE1MDY0NjA3WhcNMjQwNTIyMDY0NjA3WjAYMRYwFAYD VQQDEw02NjQ0NWEyZi02MDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ql1XdGjrNHsrKAkT9n3rNZ8FmRrD3o86eG65bnZkuuAc8+IMoB6rmQc/L2t JP3k0a8Z4wZEHr2jL6lxSMtIcfCE0yqvD2sBlIXrn9l4kHv7pOnXy/v/oaZubgFn 3cAVlqTGCHBtJV0NTxDB8X7CG7J+vK/zM7c1V15WkPRAAFk2ECuPS2XZymzCbc4Z GZ7TkHZRm4iAkaI2BjAWYclX+hTEVrKjBceGpzQQa3wiL6E1vwtjBIPVVuu1/Suy akxlTJlu/+TQ1vl90Znjn6cVdfLCYQi+eHP3DzTsbTbengs4RlwVkLwJSUduFra3 eyEnKvodHXYUbqdhPt39sdqtlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHw1qWkU jjGJWOhfab4jih6i6+UyMB8GA1UdIwQYMBaAFEVAovm7hhn2SGLQlshMk46Irzxs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0YzRC9ERTI5RDUwQzEz RjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dmWklZdENXeUV5VGpvaXZQ R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JVQ2ktYnVHR2ZaSVl0Q1d5RXlUam9pdlBHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0YzRC9ERTI5RDUwQzEzRjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dm WklZdENXeUV5VGpvaXZQR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvek1giJ/A7GJXqkKECuRqPguhjvxqcuLjyKShx/ZUT3Ve9toRRc9+ 2VtAMiY/JwYsHUP4cHGzMHdMhlO/p6OpKBMCsqFKgvYEzMI0zPH03VLJ8GTbG6SJ FujqE4Hk8e6rxO17waRQyshh4sQH/gO3tzbOl7cpl4M8QQE5MIyYuALvBqtVNC8y fSpVOo2Y+gVcKg0cUjyg27l1fLm+XExgXb16mkGIFb5Izzl9ST8E3uFEj45TSPVH dxvc850eAdQyj+uzaDW0LAVwTbkzfB7FfElhD8oypw4OOKH669FWx0jqLOO0QHWo MhBeQAyap+K7t+AK3alRIkvXvqQJasHT -----END CERTIFICATE-----Generated at Wed May 15 09:28:17 2024 by rpki-client on console-fra.rpki-client.org