$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC9B/503F8E24792C11EE81E69A16C4F9AE02/upj7l0sLFJ-1v3Ge_9938G2-STQ.mft File: upj7l0sLFJ-1v3Ge_9938G2-STQ.mft (raw, json) Hash identifier: i5iUgitGW8eOzoeu//UQasZeG3IpdAme58i2KJc5zMQ= Subject key identifier: B0:4A:77:65:C7:9E:8F:63:26:A0:95:DF:68:48:E3:24:D1:CC:F3:23 Authority key identifier: BA:98:FB:97:4B:0B:14:9F:B5:BF:71:9E:FF:DF:77:F0:6D:BE:49:34 Certificate issuer: /CN=A91EAC9B/serialNumber=BA98FB974B0B149FB5BF719EFFDF77F06DBE4934 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/upj7l0sLFJ-1v3Ge_9938G2-STQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC9B/503F8E24792C11EE81E69A16C4F9AE02/upj7l0sLFJ-1v3Ge_9938G2-STQ.mft Manifest number: 66 Signing time: Fri 17 May 2024 07:42:31 +0000 Manifest this update: Fri 17 May 2024 07:42:31 +0000 Manifest next update: Fri 24 May 2024 07:42:31 +0000 Files and hashes: 1: upj7l0sLFJ-1v3Ge_9938G2-STQ.crl (hash: k3PgidBRT2zmMiiG0ldsjJVmvK95pqsZ6QLzgnD8LKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAC9B/503F8E24792C11EE81E69A16C4F9AE02/upj7l0sLFJ-1v3Ge_9938G2-STQ.crl rsync://rpki.apnic.net/member_repository/A91EAC9B/503F8E24792C11EE81E69A16C4F9AE02/upj7l0sLFJ-1v3Ge_9938G2-STQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/upj7l0sLFJ-1v3Ge_9938G2-STQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAC9B/serialNumber=BA98FB974B0B149FB5BF719EFFDF77F06DBE4934 Validity Not Before: May 17 07:42:31 2024 GMT Not After : May 24 07:42:31 2024 GMT Subject: CN=66470a67-4a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4c:47:9c:b0:63:24:87:83:72:a4:68:9d:ac: 7b:c7:74:68:4b:b6:22:05:49:3b:3b:d7:8a:f4:ad: 88:45:42:9e:27:d7:aa:9b:a5:93:39:34:5e:93:a7: a4:38:bf:0c:19:37:59:6b:df:aa:29:87:61:d7:56: a1:c0:45:ec:c8:ca:14:a2:a9:87:e9:2f:87:67:ab: 3d:58:14:7d:96:7c:62:d0:4c:7f:dd:32:e7:ac:85: 50:2e:6b:39:db:30:6f:f2:a9:f2:df:f7:f9:23:9a: d1:45:f6:1c:7f:7b:b6:9b:8a:80:c0:c4:43:0f:fd: 1a:c7:f2:5a:d9:4c:7c:fb:bf:8e:68:5c:b0:50:8e: e1:e7:4c:5e:c7:0d:58:4d:9c:d4:9e:4c:57:3e:9d: b2:73:1e:6e:89:59:45:30:f0:5a:61:03:f7:63:0d: 7b:ca:f1:18:b2:79:39:4f:b5:60:46:01:73:82:25: f8:27:34:f7:c9:02:9f:d8:8a:7b:f4:f6:47:e7:8d: bb:74:b3:76:0e:6e:1d:25:d0:94:1c:d3:35:22:79: c3:b7:2e:c7:72:94:5c:f8:bb:73:25:5b:fe:7d:1f: ce:a2:09:41:fb:0f:c7:7f:07:70:70:19:bc:8d:fa: d7:1a:38:26:4e:9f:7b:93:ac:87:88:bc:dd:36:38: 39:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4A:77:65:C7:9E:8F:63:26:A0:95:DF:68:48:E3:24:D1:CC:F3:23 X509v3 Authority Key Identifier: keyid:BA:98:FB:97:4B:0B:14:9F:B5:BF:71:9E:FF:DF:77:F0:6D:BE:49:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAC9B/503F8E24792C11EE81E69A16C4F9AE02/upj7l0sLFJ-1v3Ge_9938G2-STQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/upj7l0sLFJ-1v3Ge_9938G2-STQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC9B/503F8E24792C11EE81E69A16C4F9AE02/upj7l0sLFJ-1v3Ge_9938G2-STQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:21:9f:07:8b:36:27:73:b9:48:7b:3f:19:a9:b6:5b:08:23: 53:da:a5:f9:e3:41:15:22:df:82:8d:16:27:79:f8:7a:3d:80: a9:ed:6d:8d:c0:a6:73:2a:b2:38:50:09:f0:e6:ac:19:33:bf: 9e:c7:9c:de:f0:6f:9f:43:1d:84:e3:92:a3:f1:ca:de:87:af: 3c:71:9a:24:9c:61:6a:d9:7f:fd:c9:b9:de:1b:77:11:a5:69: 26:d7:cf:f8:2f:66:e9:fa:ee:04:b1:e6:97:3e:48:8f:3a:84: fc:ee:fe:1c:ae:ab:6f:52:92:b4:79:35:1f:31:11:1d:5a:44: c0:e0:96:35:39:0d:f5:28:50:26:f7:bd:85:26:98:0b:11:ee: 94:32:df:6a:69:80:1b:8f:34:7c:d7:c4:c6:8e:a3:dc:74:b9: 24:75:16:49:6d:e0:5b:82:81:0a:ef:87:ca:fe:ab:e4:53:e5: 8b:47:c0:8a:b9:d8:b5:cc:85:3f:6b:75:ca:28:a3:31:5d:ce: 53:46:91:9f:43:5f:5e:67:a3:85:e1:9b:31:fa:38:21:70:07: f9:5f:ca:a2:f1:bd:3e:ac:f7:90:54:97:eb:24:3c:23:2f:ae: fb:0c:e5:dd:f4:7b:b9:0b:83:98:71:66:b0:08:d4:96:c6:40: 2d:94:59:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QUM5QjExMC8GA1UEBRMoQkE5OEZCOTc0QjBCMTQ5RkI1QkY3MTlFRkZERjc3RjA2 REJFNDkzNDAeFw0yNDA1MTcwNzQyMzFaFw0yNDA1MjQwNzQyMzFaMBgxFjAUBgNV BAMTDTY2NDcwYTY3LTRhNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdTEecsGMkh4NypGidrHvHdGhLtiIFSTs714r0rYhFQp4n16qbpZM5NF6Tp6Q4 vwwZN1lr36oph2HXVqHARezIyhSiqYfpL4dnqz1YFH2WfGLQTH/dMueshVAuaznb MG/yqfLf9/kjmtFF9hx/e7abioDAxEMP/RrH8lrZTHz7v45oXLBQjuHnTF7HDVhN nNSeTFc+nbJzHm6JWUUw8FphA/djDXvK8RiyeTlPtWBGAXOCJfgnNPfJAp/Yinv0 9kfnjbt0s3YObh0l0JQc0zUiecO3LsdylFz4u3MlW/59H86iCUH7D8d/B3BwGbyN +tcaOCZOn3uTrIeIvN02ODlzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsEp3Zcee j2MmoJXfaEjjJNHM8yMwHwYDVR0jBBgwFoAUupj7l0sLFJ+1v3Ge/9938G2+STQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBQzlCLzUwM0Y4RTI0Nzky QzExRUU4MUU2OUExNkM0RjlBRTAyL3VwajdsMHNMRkotMXYzR2VfOTkzOEcyLVNU US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdXBqN2wwc0xGSi0xdjNHZV85OTM4RzItU1RRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB QzlCLzUwM0Y4RTI0NzkyQzExRUU4MUU2OUExNkM0RjlBRTAyL3VwajdsMHNMRkot MXYzR2VfOTkzOEcyLVNUUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAEhnweLNidzuUh7PxmptlsII1PapfnjQRUi34KNFid5+Ho9gKntbY3A pnMqsjhQCfDmrBkzv57HnN7wb59DHYTjkqPxyt6HrzxxmiScYWrZf/3Jud4bdxGl aSbXz/gvZun67gSx5pc+SI86hPzu/hyuq29SkrR5NR8xER1aRMDgljU5DfUoUCb3 vYUmmAsR7pQy32ppgBuPNHzXxMaOo9x0uSR1Fklt4FuCgQrvh8r+q+RT5YtHwIq5 2LXMhT9rdcooozFdzlNGkZ9DX15no4XhmzH6OCFwB/lfyqLxvT6s95BUl+skPCMv rvsM5d30e7kLg5hxZrAI1JbGQC2UWd4= -----END CERTIFICATE-----Generated at Fri May 17 08:52:54 2024 by rpki-client on console-ams.rpki-client.org