$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft File: UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft (raw, json) Hash identifier: 4DeFrGPOStWR0ScnelL7zWmn9fKleQhL0gRD/6I1MT8= Subject key identifier: B6:9A:40:1A:FE:35:8B:40:0E:21:77:22:AC:10:9A:32:F2:D5:5F:5C Authority key identifier: 50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5 Certificate issuer: /CN=A91F65FA/serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft Manifest number: 01C4 Signing time: Sun 05 May 2024 04:32:59 +0000 Manifest this update: Sun 05 May 2024 04:32:58 +0000 Manifest next update: Sun 12 May 2024 04:32:58 +0000 Files and hashes: 1: UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl (hash: t9kutHqKaO2CaXF0ruiQ2BMEvVbIrpFic4YvsthVwTM=) 2: 84365644062E11EDA95B3143C4F9AE02.roa (hash: Ce8LxCwa+14WBiZH4xO77gyajQG4GNjYlXvOSa5B0Fc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65FA/serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5 Validity Not Before: May 5 04:32:58 2024 GMT Not After : May 12 04:32:58 2024 GMT Subject: CN=66370bfb-552d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:26:f4:93:d0:7b:0f:2e:d1:42:da:23:8a:54: a0:69:1e:bc:8f:22:f2:ed:0d:f8:3c:9d:86:66:45: a6:8b:f3:b2:28:20:aa:e2:76:ed:56:e3:af:2e:a0: 2b:04:60:76:9b:08:b7:aa:89:aa:b2:2d:2c:00:a5: c1:4e:0b:0c:28:d6:74:9b:c9:68:33:c4:7f:e3:34: de:f2:58:fe:cd:65:9b:c6:6f:05:61:53:7b:17:32: c4:af:59:ba:50:83:3e:20:aa:8c:4f:d5:d7:11:0a: 13:32:7c:16:48:2a:52:7a:1d:c6:bc:6e:8a:90:39: 59:57:89:1c:b2:ce:51:16:4b:ad:2b:50:41:06:d1: 04:53:bb:19:6c:3f:43:ee:39:23:7f:ef:19:94:ee: a3:02:94:fa:1e:c3:8c:a1:e5:1c:14:19:ca:0f:c8: ff:45:96:3a:f7:58:44:ef:b3:f1:25:21:52:c6:4f: 32:6c:cc:3d:f0:d1:ff:42:4e:64:57:19:f9:60:68: d2:26:d5:89:86:31:77:57:29:ff:3d:32:1d:59:e4: 1a:1b:2c:46:fb:0d:8e:cd:a7:f2:d1:ef:aa:e9:e8: f9:43:b4:67:7c:2a:3b:77:48:90:a0:24:43:88:fc: a8:63:17:55:8b:51:07:98:b9:96:5e:da:e1:ad:38: 46:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9A:40:1A:FE:35:8B:40:0E:21:77:22:AC:10:9A:32:F2:D5:5F:5C X509v3 Authority Key Identifier: keyid:50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:6d:b3:6b:f1:b7:dd:6f:f0:6b:c8:96:f0:ab:a2:55:e1:0a: 53:81:04:6b:f3:c2:c2:f9:fb:e0:79:23:61:b5:58:de:fd:9d: e2:bc:26:57:53:7e:b8:7e:59:9f:2b:03:e3:23:21:31:81:9f: 44:a5:57:e9:dc:d0:28:cc:67:04:b4:bc:c9:4f:f3:56:b1:3d: 90:e7:d2:94:66:15:79:a1:73:57:3c:83:df:5a:b9:46:a8:d9: 0c:88:02:4e:bd:28:20:81:8c:51:51:97:4f:5f:f7:cb:57:0b: 41:f1:b6:35:23:e1:5f:b3:07:fa:ce:e2:0e:4d:b8:46:47:82: 3a:55:44:8a:a3:17:38:c5:67:b7:ca:4b:9f:b0:52:ce:5d:13: 06:6e:29:51:fa:93:e1:06:d2:a4:f7:a9:55:35:0b:b5:c1:cd: d1:a2:71:65:99:dd:67:cf:72:49:91:fd:0a:04:d6:39:41:91: 9c:3f:96:dd:58:7c:03:57:7b:68:6d:77:bb:99:56:65:b1:fa: 45:81:70:13:ad:24:2c:04:c5:ec:0d:b6:f6:1c:b0:56:97:39: 7b:65:10:fd:ce:d9:b7:91:19:27:65:8a:07:e9:0a:46:33:ff: 63:fc:e2:88:9a:81:f4:72:7d:0a:a6:79:f0:7f:0c:70:bb:6b: 6f:4e:a3:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1RkExMTAvBgNVBAUTKDUwM0I5MjQxNDY0REY5N0QyQTAwOTk5NjNFNjMzRTEw ODdFRkREQzUwHhcNMjQwNTA1MDQzMjU4WhcNMjQwNTEyMDQzMjU4WjAYMRYwFAYD VQQDEw02NjM3MGJmYi01NTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Sb0k9B7Dy7RQtojilSgaR68jyLy7Q34PJ2GZkWmi/OyKCCq4nbtVuOvLqAr BGB2mwi3qomqsi0sAKXBTgsMKNZ0m8loM8R/4zTe8lj+zWWbxm8FYVN7FzLEr1m6 UIM+IKqMT9XXEQoTMnwWSCpSeh3GvG6KkDlZV4kcss5RFkutK1BBBtEEU7sZbD9D 7jkjf+8ZlO6jApT6HsOMoeUcFBnKD8j/RZY691hE77PxJSFSxk8ybMw98NH/Qk5k Vxn5YGjSJtWJhjF3Vyn/PTIdWeQaGyxG+w2Ozafy0e+q6ej5Q7RnfCo7d0iQoCRD iPyoYxdVi1EHmLmWXtrhrThGkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaaQBr+ NYtADiF3IqwQmjLy1V9cMB8GA1UdIwQYMBaAFFA7kkFGTfl9KgCZlj5jPhCH793F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVGQS85QTcwMjYyMjA2 MkIxMUVEQUExRUVDM0RDNEY5QUUwMi9VRHVTUVVaTi1YMHFBSm1XUG1NLUVJZnYz Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VEdVNRVVpOLVgwcUFKbVdQbU0tRUlmdjNjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVGQS85QTcwMjYyMjA2MkIxMUVEQUExRUVDM0RDNEY5QUUwMi9VRHVTUVVaTi1Y MHFBSm1XUG1NLUVJZnYzY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAbbNr8bfdb/BryJbwq6JV4QpTgQRr88LC+fvgeSNhtVje/Z3ivCZX U364flmfKwPjIyExgZ9EpVfp3NAozGcEtLzJT/NWsT2Q59KUZhV5oXNXPIPfWrlG qNkMiAJOvSgggYxRUZdPX/fLVwtB8bY1I+Ffswf6zuIOTbhGR4I6VUSKoxc4xWe3 ykufsFLOXRMGbilR+pPhBtKk96lVNQu1wc3RonFlmd1nz3JJkf0KBNY5QZGcP5bd WHwDV3tobXe7mVZlsfpFgXATrSQsBMXsDbb2HLBWlzl7ZRD9ztm3kRknZYoH6QpG M/9j/OKImoH0cn0Kpnnwfwxwu2tvTqOF -----END CERTIFICATE-----Generated at Sun May 5 05:22:00 2024 by rpki-client on console-fra.rpki-client.org