$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft File: UkWN1qz9QNreWs3IL01ZLaUp58c.mft (raw, json) Hash identifier: fqnXma7TNYe/l+NbO2x8AZumayRINM0PFUTQL5uLv7I= Subject key identifier: 48:85:A2:51:5B:29:FB:F6:A3:C6:67:7C:0C:0B:63:87:57:9A:84:8B Authority key identifier: 52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 Certificate issuer: /CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Certificate serial: 0843 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft Manifest number: 0843 Signing time: Sat 04 May 2024 21:51:49 +0000 Manifest this update: Sat 04 May 2024 21:51:48 +0000 Manifest next update: Sat 11 May 2024 21:51:48 +0000 Files and hashes: 1: UkWN1qz9QNreWs3IL01ZLaUp58c.crl (hash: 03ALf3wnetxxbR/yGO5SkyqSuACSi9ZWLWkp1fhWHg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2115 (0x843) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Validity Not Before: May 4 21:51:48 2024 GMT Not After : May 11 21:51:48 2024 GMT Subject: CN=6636adf4-7035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:51:ef:4c:1b:c3:55:76:0b:96:59:03:87: 35:fd:c1:b1:bf:fd:7f:25:72:52:8d:ab:06:76:08: 59:c7:d9:63:46:20:0d:a8:ea:a2:53:14:13:97:c3: 54:76:98:a1:37:e6:62:26:a8:b0:ff:4d:bd:54:5a: 0a:b3:9e:73:dd:78:bd:e8:3e:fe:cb:6a:ad:35:af: ca:e9:d9:ff:2d:38:71:de:ca:cf:28:53:82:3d:ba: 23:97:07:37:6e:63:08:52:8e:cd:05:c7:15:62:a8: a5:0d:6c:73:59:54:14:fe:98:49:53:2f:9f:fd:61: 47:f9:02:84:95:94:08:2d:57:96:30:56:e1:04:e4: dc:6e:36:fa:24:80:a6:4c:19:5c:5e:b8:08:20:2d: 87:2a:a6:28:90:af:c8:1e:03:02:59:19:72:e1:c7: 5a:ff:86:0a:99:37:e3:c0:78:8a:7c:b2:5d:71:a1: c9:e2:37:d9:82:64:3f:1e:03:92:4f:f7:71:23:52: 3d:3d:63:17:23:23:f4:e5:4c:86:8b:90:b4:a6:90: 0b:fa:b5:a3:dd:22:77:76:87:93:a9:07:28:96:a2: b3:b2:26:11:46:00:53:cf:53:f3:0b:9e:6a:24:8f: bc:dc:70:47:be:9e:1e:e1:fa:e7:84:01:33:9f:cc: 7a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:85:A2:51:5B:29:FB:F6:A3:C6:67:7C:0C:0B:63:87:57:9A:84:8B X509v3 Authority Key Identifier: keyid:52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:56:38:72:2a:21:60:0e:77:33:86:ed:89:c5:3a:50:77:05: 0c:ea:e9:6f:ac:18:67:58:d6:f6:f9:9f:93:90:c7:65:4b:b9: 33:35:c2:9d:c0:de:f3:b8:c5:9a:2a:67:fc:33:09:51:cb:be: 5d:b2:70:01:7b:79:9c:bc:73:50:d1:28:82:5f:7e:5e:36:64: 5f:95:39:1d:5b:1d:bd:b1:39:46:ee:d4:c7:74:22:15:50:52: 0f:8c:da:24:63:05:c0:6a:6d:0b:77:9b:8a:4d:fc:8b:80:ec: ed:4c:be:dc:c7:82:20:be:6f:c8:0c:cc:7f:33:78:b5:4b:46: 1c:ed:21:a6:43:a1:ae:c8:ee:ae:3b:cf:0c:e6:a0:f3:b2:46: 49:39:d5:66:a4:f6:0f:f7:1b:e0:52:8f:53:1e:64:39:ce:d4: cf:0a:b2:46:00:74:8a:a5:bb:52:ae:ba:9a:87:4e:55:b1:16: 31:3c:20:8f:26:a6:db:09:6b:d6:7f:dc:2d:a8:9b:6f:fb:c9: 53:26:b6:61:ea:70:6e:fa:c9:fb:4e:2f:33:60:23:e8:c3:89: 23:de:e1:b7:b5:06:09:4b:f0:9d:aa:bb:e3:39:2d:d5:f4:39: f1:6e:6a:6b:9d:e5:e2:3d:28:22:60:10:92:f6:c1:c6:ff:7e: 38:43:82:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDUyNDU4REQ2QUNGRDQwREFERTVBQ0RDODJGNEQ1OTJE QTUyOUU3QzcwHhcNMjQwNTA0MjE1MTQ4WhcNMjQwNTExMjE1MTQ4WjAYMRYwFAYD VQQDEw02NjM2YWRmNC03MDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw99R70wbw1V2C5ZZA4c1/cGxv/1/JXJSjasGdghZx9ljRiANqOqiUxQTl8NU dpihN+ZiJqiw/029VFoKs55z3Xi96D7+y2qtNa/K6dn/LThx3srPKFOCPbojlwc3 bmMIUo7NBccVYqilDWxzWVQU/phJUy+f/WFH+QKElZQILVeWMFbhBOTcbjb6JICm TBlcXrgIIC2HKqYokK/IHgMCWRly4cda/4YKmTfjwHiKfLJdcaHJ4jfZgmQ/HgOS T/dxI1I9PWMXIyP05UyGi5C0ppAL+rWj3SJ3doeTqQcolqKzsiYRRgBTz1PzC55q JI+83HBHvp4e4frnhAEzn8x6KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiFolFb Kfv2o8ZnfAwLY4dXmoSLMB8GA1UdIwQYMBaAFFJFjdas/UDa3lrNyC9NWS2lKefH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8xQ0JGRTY0NEE1 MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFOcmVXczNJTDAxWkxhVXA1 OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VrV04xcXo5UU5yZVdzM0lMMDFaTGFVcDU4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8xQ0JGRTY0NEE1MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFO cmVXczNJTDAxWkxhVXA1OGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSVjhyKiFgDnczhu2JxTpQdwUM6ulvrBhnWNb2+Z+TkMdlS7kzNcKd wN7zuMWaKmf8MwlRy75dsnABe3mcvHNQ0SiCX35eNmRflTkdWx29sTlG7tTHdCIV UFIPjNokYwXAam0Ld5uKTfyLgOztTL7cx4Igvm/IDMx/M3i1S0Yc7SGmQ6GuyO6u O88M5qDzskZJOdVmpPYP9xvgUo9THmQ5ztTPCrJGAHSKpbtSrrqah05VsRYxPCCP JqbbCWvWf9wtqJtv+8lTJrZh6nBu+sn7Ti8zYCPow4kj3uG3tQYJS/CdqrvjOS3V 9DnxbmprneXiPSgiYBCS9sHG/344Q4KX -----END CERTIFICATE-----Generated at Sun May 5 00:14:46 2024 by rpki-client on console-ams.rpki-client.org