$ rpki-client -vvf rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft File: uttpn6AqlXLm70n0-Rof4Kc8LI0.mft (raw, json) Hash identifier: EsSPgjudA1WaA1wRg8JFJxWfWind121k2skLiprSLz0= Subject key identifier: 35:D2:39:F7:DC:2A:09:83:4F:57:27:8D:16:5A:13:21:01:75:D0:60 Authority key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D Certificate issuer: /CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Certificate serial: 0743 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft Manifest number: 072F Signing time: Mon 06 May 2024 22:38:53 +0000 Manifest this update: Mon 06 May 2024 22:38:52 +0000 Manifest next update: Mon 13 May 2024 22:38:52 +0000 Files and hashes: 1: uttpn6AqlXLm70n0-Rof4Kc8LI0.crl (hash: o5V3iLd8kOWYBY0fCvfntMIuAmXx/NYMv/l+lS4Jp60=) 2: C8BD376C3ADF11EC85EB255FC4F9AE02.roa (hash: rGiBXfLgXAx0W9IcsclAmSuytxX7gc86SS7UaNtwkCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1859 (0x743) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Validity Not Before: May 6 22:38:52 2024 GMT Not After : May 13 22:38:52 2024 GMT Subject: CN=66395bfc-91c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:34:06:4a:9c:ab:9e:e6:22:99:75:34:2b:b2: 6a:24:7f:07:4a:99:93:cd:24:8c:2d:4a:35:7d:8f: 56:f4:14:58:bf:9d:73:9e:28:b7:ad:c5:a1:80:85: 9e:04:40:3f:66:f5:dd:ed:94:42:d5:4f:a2:d1:80: f9:9e:04:35:7d:02:3b:13:fd:f2:73:d7:ca:42:17: 27:a4:04:b6:8d:55:8f:20:4a:e5:4d:0f:46:79:36: bd:b5:75:5b:45:2a:86:89:e4:8a:ba:d1:ca:21:3f: 8f:7c:c3:0f:c7:83:a9:a9:0a:96:80:50:6e:66:ca: 28:7d:75:55:df:da:0d:ac:71:5e:ad:4e:89:ed:1d: f3:a0:c2:5a:1b:31:9f:b9:c0:a3:7c:c2:4c:bd:07: 80:78:d5:28:ba:aa:45:db:ff:73:3a:d3:a9:8f:57: 84:ca:96:7c:47:c3:d0:61:df:39:12:76:47:19:6f: e8:f8:0a:8a:a7:fb:75:f4:ef:d0:d4:ba:c0:78:93: 90:fc:29:3e:c6:24:f3:a5:16:9b:e8:b6:94:b3:8c: eb:c7:bd:8d:ca:bf:a7:54:fc:48:3e:84:66:a8:ee: 55:e4:29:ff:60:0b:db:12:42:30:e0:b5:a2:c0:8e: 3e:2a:69:cb:ff:ba:a5:9b:76:18:32:36:4d:13:f1: f8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D2:39:F7:DC:2A:09:83:4F:57:27:8D:16:5A:13:21:01:75:D0:60 X509v3 Authority Key Identifier: keyid:BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1c:00:b1:fb:45:7f:1d:2c:20:52:30:75:23:7e:ec:0f:1f: 84:8f:95:f2:0f:2a:b8:4a:c1:db:63:b4:76:86:98:9b:0f:bf: 5a:bc:99:9a:50:9e:54:48:34:b6:0f:53:65:e0:1b:5e:3f:27: d7:d7:a3:46:05:d0:74:cc:af:22:59:fd:1a:f9:4a:50:1a:c7: d9:bc:11:1c:b5:54:b8:91:9b:95:c3:1e:12:f2:c3:e4:67:27: f1:80:b0:0d:29:2e:ac:d1:60:24:35:19:a5:f3:69:e6:85:b5: e0:c3:6f:0b:2b:06:aa:0f:15:d3:1c:ff:2b:cf:e5:b8:0b:60: f2:f1:20:bb:9e:d6:ea:03:26:57:92:4a:6e:c8:62:35:55:d2: ab:33:4e:71:63:3e:fa:f5:c2:f5:7c:02:00:a0:9c:3a:2d:75: 65:e7:96:31:18:e8:85:c9:f2:1e:57:ab:98:b9:cd:95:91:3a: 80:e3:e2:00:ba:b2:46:8b:ad:97:44:f6:56:65:32:b8:94:62: c9:01:42:2c:89:b0:31:d8:ab:f3:c9:f6:7e:31:96:b5:f2:8d: dc:d0:3f:ea:e5:9e:73:e6:d9:a1:d4:07:6d:78:02:9d:31:3c: e1:e5:d1:e7:24:23:e0:6c:00:9e:d0:11:2b:e2:4d:6c:0d:79: f0:2e:0a:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3QjkxMTAvBgNVBAUTKEJBREI2OTlGQTAyQTk1NzJFNkVGNDlGNEY5MUExRkUw QTczQzJDOEQwHhcNMjQwNTA2MjIzODUyWhcNMjQwNTEzMjIzODUyWjAYMRYwFAYD VQQDEw02NjM5NWJmYy05MWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8zQGSpyrnuYimXU0K7JqJH8HSpmTzSSMLUo1fY9W9BRYv51znii3rcWhgIWe BEA/ZvXd7ZRC1U+i0YD5ngQ1fQI7E/3yc9fKQhcnpAS2jVWPIErlTQ9GeTa9tXVb RSqGieSKutHKIT+PfMMPx4OpqQqWgFBuZsoofXVV39oNrHFerU6J7R3zoMJaGzGf ucCjfMJMvQeAeNUouqpF2/9zOtOpj1eEypZ8R8PQYd85EnZHGW/o+AqKp/t19O/Q 1LrAeJOQ/Ck+xiTzpRab6LaUs4zrx72Nyr+nVPxIPoRmqO5V5Cn/YAvbEkIw4LWi wI4+KmnL/7qlm3YYMjZNE/H4RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXSOffc KgmDT1cnjRZaEyEBddBgMB8GA1UdIwQYMBaAFLrbaZ+gKpVy5u9J9PkaH+CnPCyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjdCOS84NEJBNzQ4MkYw Q0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxYTG03MG4wLVJvZjRLYzhM STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V0dHBuNkFxbFhMbTcwbjAtUm9mNEtjOExJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjdCOS84NEJBNzQ4MkYwQ0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxY TG03MG4wLVJvZjRLYzhMSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeHACx+0V/HSwgUjB1I37sDx+Ej5XyDyq4SsHbY7R2hpibD79avJma UJ5USDS2D1Nl4BtePyfX16NGBdB0zK8iWf0a+UpQGsfZvBEctVS4kZuVwx4S8sPk ZyfxgLANKS6s0WAkNRml82nmhbXgw28LKwaqDxXTHP8rz+W4C2Dy8SC7ntbqAyZX kkpuyGI1VdKrM05xYz769cL1fAIAoJw6LXVl55YxGOiFyfIeV6uYuc2VkTqA4+IA urJGi62XRPZWZTK4lGLJAUIsibAx2KvzyfZ+MZa18o3c0D/q5Z5z5tmh1AdteAKd MTzh5dHnJCPgbACe0BEr4k1sDXnwLgo4 -----END CERTIFICATE-----Generated at Tue May 7 01:58:30 2024 by rpki-client on console-fra.rpki-client.org