$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft File: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft (raw, json) Hash identifier: RDAdgCTzKmJuaCn6ADBltBTypeSy01+P47DOJCxd6GE= Subject key identifier: DB:A6:21:48:B2:74:B5:AA:0C:51:A3:2D:D0:9A:59:7F:B2:2F:A7:DC Authority key identifier: 50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3 Certificate issuer: /CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3 Certificate serial: 06AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft Manifest number: 06A8 Signing time: Sat 04 May 2024 23:23:30 +0000 Manifest this update: Sat 04 May 2024 23:23:30 +0000 Manifest next update: Sat 11 May 2024 23:23:30 +0000 Files and hashes: 1: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl (hash: R+DLdz1Ds/dgBIkC3znuJk7DLZAvJf2lLE42kVZs4Js=) 2: 3E78F3541E2D11EB95754317C4F9AE02.roa (hash: JivzgJ+k2/iUOpvsy3y8FaHjbJGiz8TL55U0x2CsjIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3 Validity Not Before: May 4 23:23:30 2024 GMT Not After : May 11 23:23:30 2024 GMT Subject: CN=6636c372-dbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7a:1e:0d:78:60:5f:1a:27:87:e7:75:b6:fe: 94:78:40:12:0e:44:97:be:fa:75:4d:22:de:c3:fb: 26:b1:af:85:1e:d1:d4:40:7e:69:ee:c3:46:14:36: d6:98:19:53:ca:39:46:d4:c2:12:5a:5c:ec:3d:46: e4:f3:7b:22:2e:14:1a:76:3a:21:be:0e:c1:70:c8: 36:ad:20:ca:52:02:bb:fc:07:b1:75:6d:09:31:51: 0e:28:57:42:97:44:33:89:02:c2:3e:91:8e:20:0a: 92:9f:c9:a4:73:2b:9d:eb:35:cb:a6:c9:ee:01:29: ef:a6:33:fd:9a:eb:ce:cf:04:e5:85:c5:4d:f4:73: 03:a1:2b:57:f3:d7:1b:70:b4:d6:f2:06:da:ee:05: ba:2b:ec:97:f6:b4:e2:db:9c:a6:fe:03:bc:6a:74: de:fc:25:6c:ad:62:bd:bd:cc:86:28:7a:6c:98:c7: 92:9e:68:ee:7b:ba:c9:a0:fc:43:a3:65:a8:65:61: 77:ed:9e:96:18:95:9b:b6:6c:6b:ff:7b:ae:3c:53: d7:36:44:f2:25:fa:40:c7:b4:29:f6:05:c4:62:a6: 5b:6f:88:d6:68:a6:ef:fb:9f:17:57:6d:3e:08:6c: 21:5a:df:0a:63:06:c6:e6:96:86:f1:c9:e4:55:4b: 07:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A6:21:48:B2:74:B5:AA:0C:51:A3:2D:D0:9A:59:7F:B2:2F:A7:DC X509v3 Authority Key Identifier: keyid:50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ad:9a:f1:49:eb:d6:f5:b9:b0:09:d4:48:a1:a2:df:03:65: b8:d2:61:89:86:da:b6:27:e8:19:e7:05:38:c7:f6:54:a1:af: 9c:38:63:0a:e9:48:89:bd:69:d2:c9:38:ac:ac:54:3e:c1:91: 8e:fb:b9:2f:15:37:0a:56:8e:de:4e:ac:9e:f5:a4:1e:bf:91: 98:2a:f5:d8:ac:90:55:97:03:cd:cb:9b:7b:fd:c8:94:b4:b3: e1:e4:0d:36:cf:f2:2e:40:61:10:1b:53:54:81:e5:d4:ca:8c: 27:81:86:8f:66:f4:87:30:12:76:39:1b:df:87:3c:cc:83:01: d5:93:36:f9:37:9b:ba:46:ee:96:15:7f:fe:0c:b3:65:ce:c6: 74:75:3b:b8:d0:2e:2a:4d:25:94:5c:8f:d1:e9:94:7b:67:cf: da:7b:5b:41:89:73:48:26:75:c2:4c:b8:84:c5:01:0c:48:67: 23:96:cd:e7:69:fc:72:14:b8:e6:59:fc:58:8a:f2:2e:fd:92: 0d:89:fb:83:3f:91:7e:0b:50:e4:2f:e7:b7:9a:97:97:95:40: 45:e1:c2:ad:be:be:cb:21:d4:f6:5a:4a:7f:9e:ce:94:d2:1d: 59:8d:91:9c:a0:d5:cd:d2:a5:6d:7d:84:49:68:22:4f:3c:89: 15:88:43:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxOTExMTAvBgNVBAUTKDUwQTcxMTZCQjlGMzY5N0JDNUUzRTIyMkVGMDM1Rjcw MzQyQ0REQTMwHhcNMjQwNTA0MjMyMzMwWhcNMjQwNTExMjMyMzMwWjAYMRYwFAYD VQQDEw02NjM2YzM3Mi1kYmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHoeDXhgXxonh+d1tv6UeEASDkSXvvp1TSLew/smsa+FHtHUQH5p7sNGFDbW mBlTyjlG1MISWlzsPUbk83siLhQadjohvg7BcMg2rSDKUgK7/AexdW0JMVEOKFdC l0QziQLCPpGOIAqSn8mkcyud6zXLpsnuASnvpjP9muvOzwTlhcVN9HMDoStX89cb cLTW8gba7gW6K+yX9rTi25ym/gO8anTe/CVsrWK9vcyGKHpsmMeSnmjue7rJoPxD o2WoZWF37Z6WGJWbtmxr/3uuPFPXNkTyJfpAx7Qp9gXEYqZbb4jWaKbv+58XV20+ CGwhWt8KYwbG5paG8cnkVUsHPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNumIUiy dLWqDFGjLdCaWX+yL6fcMB8GA1UdIwQYMBaAFFCnEWu582l7xePiIu8DX3A0LN2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTE5MS80OEFBMDcwNjE5 NzIxMUVCODA1RTZCN0ZDNEY5QUUwMi9VS2NSYTduemFYdkY0LUlpN3dOZmNEUXMz YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLY1JhN256YVh2RjQtSWk3d05mY0RRczNhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTE5MS80OEFBMDcwNjE5NzIxMUVCODA1RTZCN0ZDNEY5QUUwMi9VS2NSYTduemFY dkY0LUlpN3dOZmNEUXMzYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyrZrxSevW9bmwCdRIoaLfA2W40mGJhtq2J+gZ5wU4x/ZUoa+cOGMK 6UiJvWnSyTisrFQ+wZGO+7kvFTcKVo7eTqye9aQev5GYKvXYrJBVlwPNy5t7/ciU tLPh5A02z/IuQGEQG1NUgeXUyowngYaPZvSHMBJ2ORvfhzzMgwHVkzb5N5u6Ru6W FX/+DLNlzsZ0dTu40C4qTSWUXI/R6ZR7Z8/ae1tBiXNIJnXCTLiExQEMSGcjls3n afxyFLjmWfxYivIu/ZINifuDP5F+C1DkL+e3mpeXlUBF4cKtvr7LIdT2Wkp/ns6U 0h1ZjZGcoNXN0qVtfYRJaCJPPIkViEOI -----END CERTIFICATE-----Generated at Sun May 5 00:14:47 2024 by rpki-client on console-ams.rpki-client.org