$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft File: uSVP8yozKY2dXGFc_aRTFeFcfLU.mft (raw, json) Hash identifier: 2dwoApZ9baSRbT6F6PD7KpCSb+JsbEOjRl6WUiKg4iI= Subject key identifier: DB:67:F7:62:7D:86:AC:1C:BC:2B:63:80:0F:C8:A8:25:9B:6E:26:55 Authority key identifier: B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 Certificate issuer: /CN=A91F3043/serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Certificate serial: 057A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft Manifest number: 0573 Signing time: Sat 27 Apr 2024 00:39:17 +0000 Manifest this update: Sat 27 Apr 2024 00:39:16 +0000 Manifest next update: Sat 04 May 2024 00:39:16 +0000 Files and hashes: 1: uSVP8yozKY2dXGFc_aRTFeFcfLU.crl (hash: hVJB+S0+FTOWMjnSeyIW2H7jUaCg1j+kCqVh7KlpWzM=) 2: BDFE68F491FD11EB84408D16C4F9AE02.roa (hash: upHJM3OU3AjTyMDlkbAZZQMntOq+98ARLD9pNjN3d3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 00:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1402 (0x57a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3043/serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Validity Not Before: Apr 27 00:39:16 2024 GMT Not After : May 4 00:39:16 2024 GMT Subject: CN=662c4935-9313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c5:47:57:d9:a3:d9:af:13:a9:d3:90:69:94: d6:4d:fb:a8:8c:89:e5:44:4c:f7:76:12:39:9a:07: 2d:e1:09:73:9f:11:80:f7:fc:55:dc:1e:a6:3f:02: eb:f4:c3:a9:86:78:45:17:d6:56:d2:d6:34:21:58: 58:83:f9:15:2a:66:f0:e9:69:fb:f4:d0:9f:e5:b8: 87:bf:86:3d:8f:6f:3e:1b:08:e6:d7:37:e2:50:60: 4b:bd:ca:fb:2c:b3:1c:f7:e3:ef:74:e7:eb:a0:c0: e3:bc:8b:56:39:d0:bc:62:de:4e:5e:ed:9e:d8:6d: d0:dd:d6:15:f9:54:ec:c9:65:c1:23:cc:b0:a3:ef: 0a:a9:b2:15:9d:30:84:62:4e:6a:51:a5:95:ba:dd: e3:90:3f:19:ca:c6:25:82:6d:4e:7f:c7:4f:6b:c1: 42:0d:fa:27:cd:16:b3:d2:64:ed:53:68:14:11:de: 5f:47:70:0d:3c:38:56:c2:17:07:9a:03:b6:28:4e: a1:16:c1:6c:d1:70:3e:84:87:0e:d2:9a:00:a0:8b: d3:e2:43:ed:8c:5d:88:b4:ec:bb:e1:58:1e:3c:52: 2e:02:84:27:c0:88:2e:29:c4:66:ff:bf:06:a1:b0: cc:e1:ed:58:d0:dc:db:7d:d9:2f:ae:4c:a8:31:c3: 75:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:67:F7:62:7D:86:AC:1C:BC:2B:63:80:0F:C8:A8:25:9B:6E:26:55 X509v3 Authority Key Identifier: keyid:B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ca:49:b3:5a:de:af:1a:b7:0f:d5:eb:5c:99:78:c4:d2:b0: ba:41:09:36:5a:1a:86:e1:23:79:70:7f:7a:57:05:46:ec:4f: ff:13:a0:1d:24:10:26:cd:5e:98:8d:23:67:f3:2f:50:1a:52: 53:46:c0:33:68:3e:55:fa:5c:6d:c9:ce:f5:44:da:81:00:ef: 3b:18:f8:83:40:34:b6:f8:be:b8:44:2f:0c:b1:cb:32:12:df: 7d:3c:e3:82:d6:52:ae:1e:6b:d3:50:05:9f:84:f5:bc:12:41: d5:3e:c4:5e:5c:25:bf:4c:f5:ac:f8:a6:c2:31:5e:d6:3f:e4: 64:b2:22:47:8e:4a:a4:c0:a6:af:86:4a:1a:c9:75:9d:f5:5b: 0e:7a:0d:64:43:6a:7f:0d:31:03:6e:fe:74:64:50:f3:fb:9d: 6e:9f:cb:62:84:ff:48:74:26:40:1c:25:68:c8:7f:d8:e5:a6: 3d:8c:63:d2:0d:f4:38:38:85:10:aa:0c:5b:67:38:5f:65:b0: 09:16:05:ca:62:4d:c3:14:4f:85:b3:dd:62:88:95:db:0c:1c: 57:1b:20:0d:b4:6d:25:b9:a2:51:fe:70:db:7d:3d:24:e0:c5: 68:2c:89:4f:d5:8e:09:22:e9:00:53:ea:56:d5:3b:fc:de:db: 3a:5f:2c:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwNDMxMTAvBgNVBAUTKEI5MjU0RkYzMkEzMzI5OEQ5RDVDNjE1Q0ZEQTQ1MzE1 RTE1QzdDQjUwHhcNMjQwNDI3MDAzOTE2WhcNMjQwNTA0MDAzOTE2WjAYMRYwFAYD VQQDEw02NjJjNDkzNS05MzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsVHV9mj2a8TqdOQaZTWTfuojInlREz3dhI5mgct4QlznxGA9/xV3B6mPwLr 9MOphnhFF9ZW0tY0IVhYg/kVKmbw6Wn79NCf5biHv4Y9j28+Gwjm1zfiUGBLvcr7 LLMc9+PvdOfroMDjvItWOdC8Yt5OXu2e2G3Q3dYV+VTsyWXBI8ywo+8KqbIVnTCE Yk5qUaWVut3jkD8ZysYlgm1Of8dPa8FCDfonzRaz0mTtU2gUEd5fR3ANPDhWwhcH mgO2KE6hFsFs0XA+hIcO0poAoIvT4kPtjF2ItOy74VgePFIuAoQnwIguKcRm/78G obDM4e1Y0NzbfdkvrkyoMcN1AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtn92J9 hqwcvCtjgA/IqCWbbiZVMB8GA1UdIwQYMBaAFLklT/MqMymNnVxhXP2kUxXhXHy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA0My8zOTZDNUQ0MDkx RkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZMmRYR0ZjX2FSVEZlRmNm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTVlA4eW96S1kyZFhHRmNfYVJURmVGY2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzA0My8zOTZDNUQ0MDkxRkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZ MmRYR0ZjX2FSVEZlRmNmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdykmzWt6vGrcP1etcmXjE0rC6QQk2WhqG4SN5cH96VwVG7E//E6Ad JBAmzV6YjSNn8y9QGlJTRsAzaD5V+lxtyc71RNqBAO87GPiDQDS2+L64RC8Mscsy Et99POOC1lKuHmvTUAWfhPW8EkHVPsReXCW/TPWs+KbCMV7WP+RksiJHjkqkwKav hkoayXWd9VsOeg1kQ2p/DTEDbv50ZFDz+51un8tihP9IdCZAHCVoyH/Y5aY9jGPS DfQ4OIUQqgxbZzhfZbAJFgXKYk3DFE+Fs91iiJXbDBxXGyANtG0luaJR/nDbfT0k 4MVoLIlP1Y4JIukAU+pW1Tv83ts6Xywn -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:57 2024 by rpki-client on console-ams.rpki-client.org