$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft File: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft (raw, json) Hash identifier: Uof155GmJzs1V+EzPRn6JjtSiLMpArY5IjoW1rkthTQ= Subject key identifier: B3:F8:68:05:DF:23:9F:09:0E:34:EC:9B:81:13:66:22:B2:34:5F:BC Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68 Certificate issuer: /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft Manifest number: 3E Signing time: Wed 15 May 2024 08:21:35 +0000 Manifest this update: Wed 15 May 2024 08:21:34 +0000 Manifest next update: Wed 22 May 2024 08:21:34 +0000 Files and hashes: 1: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl (hash: CNRrXeiLk60rSmoFs4XNAbCtH1DHaASoUNdO8HrrA3I=) 2: 8FD49B16BAE411EE9198A471C4F9AE02.roa (hash: u+JMYeb8gD5HU0OlGXo0Chq6M3KLkPgFbtazxXNmZmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968 Validity Not Before: May 15 08:21:34 2024 GMT Not After : May 22 08:21:34 2024 GMT Subject: CN=6644708e-ecc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:c1:4a:b3:94:31:55:b1:81:8a:76:27:0d: fb:47:d3:eb:36:31:09:97:ed:bc:b9:8a:b7:a2:dd: 14:1e:15:1b:45:14:aa:9b:57:84:30:9c:35:ea:dc: a3:67:ad:0b:05:d0:73:85:81:ef:ea:74:77:ad:4c: ee:56:4c:b2:71:14:3d:a4:e6:cb:4a:36:11:da:b3: 36:48:33:d3:46:52:c8:d2:08:37:cd:6e:9e:b7:8c: a5:97:7c:e6:c2:38:2c:b4:d5:e3:1c:99:ca:88:ab: 05:b9:39:29:0b:c1:2f:ca:13:80:d0:df:96:e9:d2: 70:d1:ae:91:73:d0:56:b6:0c:62:de:89:43:51:fc: 35:fb:71:5c:d3:4c:4c:ed:cc:bf:db:c9:bb:86:e7: 1c:c2:ce:af:85:fb:f7:4f:2e:5e:b8:af:32:3d:c2: f4:8f:f9:da:b1:11:66:4c:ff:89:06:13:03:de:d4: b8:21:98:84:1a:bb:ae:8c:27:a7:51:b6:62:df:20: d4:de:05:8b:61:7d:1a:04:82:6a:91:ab:81:e5:3b: 5a:b1:8e:7d:99:14:3c:db:b1:4c:12:15:d1:07:d3: 55:7c:b6:f8:e7:95:36:9f:9d:1f:ae:a7:f9:af:93: 99:9a:b5:60:c4:bc:37:7b:ad:3c:1e:7b:1a:27:09: 69:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F8:68:05:DF:23:9F:09:0E:34:EC:9B:81:13:66:22:B2:34:5F:BC X509v3 Authority Key Identifier: keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:b1:cd:38:b1:a8:55:79:e8:6f:be:d8:5b:4d:e9:b7:d5:64: ed:47:d4:09:af:d8:ec:d0:be:89:f9:78:a5:8a:25:b9:e0:22: 9b:c0:ef:7f:04:65:bd:98:e7:32:96:ec:a8:22:c9:3b:e6:f3: 04:61:58:f4:9f:a4:6e:4c:3d:30:ab:f7:8a:81:5e:a8:5b:4c: 45:36:5e:b0:1b:6e:9a:79:18:53:c2:6b:e1:8b:f2:f3:e1:da: c9:bd:e1:08:e2:ca:da:12:16:84:df:8c:59:c7:19:64:e7:3e: dd:d8:53:4e:83:80:df:c1:30:a9:03:b1:92:41:34:d9:cf:4d: ab:18:f5:6b:7d:e4:6a:c5:be:44:58:21:88:d9:94:27:3b:be: c5:3d:11:36:ad:af:a8:ba:57:6a:c2:8b:db:81:a5:dd:ed:0f: 23:74:eb:26:ba:a8:57:35:af:2e:9b:fe:fa:b9:88:ca:b0:f4: 77:e9:85:ff:88:64:d8:5a:ee:89:3f:98:82:b2:77:58:3a:f0: ec:c4:53:04:1a:a7:c6:fa:1d:35:c4:0f:86:fb:97:1b:fb:7f: 75:b2:ea:f7:b5:54:e9:7c:52:4c:6e:2b:04:d3:5a:26:3e:2d: 19:bc:17:d8:e7:11:17:ec:f9:15:2a:63:8f:fb:7a:44:bf:8d: 24:ba:9e:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QTg1MTExMC8GA1UEBRMoQjkyNTBGREUzRkFCRDU5RkE1NjA4MjMwRkVBN0EyM0M0 QjRDODk2ODAeFw0yNDA1MTUwODIxMzRaFw0yNDA1MjIwODIxMzRaMBgxFjAUBgNV BAMTDTY2NDQ3MDhlLWVjYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoLcFKs5QxVbGBinYnDftH0+s2MQmX7by5irei3RQeFRtFFKqbV4QwnDXq3KNn rQsF0HOFge/qdHetTO5WTLJxFD2k5stKNhHaszZIM9NGUsjSCDfNbp63jKWXfObC OCy01eMcmcqIqwW5OSkLwS/KE4DQ35bp0nDRrpFz0Fa2DGLeiUNR/DX7cVzTTEzt zL/bybuG5xzCzq+F+/dPLl64rzI9wvSP+dqxEWZM/4kGEwPe1LghmIQau66MJ6dR tmLfINTeBYthfRoEgmqRq4HlO1qxjn2ZFDzbsUwSFdEH01V8tvjnlTafnR+up/mv k5matWDEvDd7rTweexonCWl1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs/hoBd8j nwkONOybgRNmIrI0X7wwHwYDVR0jBBgwFoAUuSUP3j+r1Z+lYIIw/qeiPEtMiWgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBODUxLzk1QTYxMTlDQjlE RjExRUU5NEI0MjQyQUM0RjlBRTAyL3VTVVAzai1yMVotbFlJSXdfcWVpUEV0TWlX Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdVNVUDNqLXIxWi1sWUlJd19xZWlQRXRNaVdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB ODUxLzk1QTYxMTlDQjlERjExRUU5NEI0MjQyQUM0RjlBRTAyL3VTVVAzai1yMVot bFlJSXdfcWVpUEV0TWlXZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGmxzTixqFV56G++2FtN6bfVZO1H1Amv2OzQvon5eKWKJbngIpvA738E Zb2Y5zKW7KgiyTvm8wRhWPSfpG5MPTCr94qBXqhbTEU2XrAbbpp5GFPCa+GL8vPh 2sm94QjiytoSFoTfjFnHGWTnPt3YU06DgN/BMKkDsZJBNNnPTasY9Wt95GrFvkRY IYjZlCc7vsU9ETatr6i6V2rCi9uBpd3tDyN06ya6qFc1ry6b/vq5iMqw9Hfphf+I ZNha7ok/mIKyd1g68OzEUwQap8b6HTXED4b7lxv7f3Wy6ve1VOl8UkxuKwTTWiY+ LRm8F9jnERfs+RUqY4/7ekS/jSS6nt0= -----END CERTIFICATE-----Generated at Wed May 15 09:28:19 2024 by rpki-client on console-fra.rpki-client.org