$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft File: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json) Hash identifier: iXtuWvkwG59Q9AafRf0xzH2b1gJhUE4Tk9BiV6VoCjY= Subject key identifier: 94:F9:83:A6:B9:52:C9:DB:C7:5A:40:97:1C:65:F8:1D:1F:59:B0:00 Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 Certificate issuer: /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Certificate serial: 0785 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft Manifest number: 21CB Signing time: Sat 18 May 2024 16:48:37 +0000 Manifest this update: Sat 18 May 2024 16:48:36 +0000 Manifest next update: Sat 25 May 2024 16:48:36 +0000 Files and hashes: 1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: 6g4q6zs01gpZSmwcpILe1L3S5iQm9yor4BM5H9YIZuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1925 (0x785) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Validity Not Before: May 18 16:48:36 2024 GMT Not After : May 25 16:48:36 2024 GMT Subject: CN=6648dbe4-873e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:04:03:c8:20:6f:40:0d:69:16:a0:ad:61:9a: 25:00:16:bf:4a:86:69:2e:22:98:2d:64:07:b5:43: b6:d4:a4:bc:f8:27:6a:3b:bd:fe:38:cc:be:c9:54: bf:88:b0:74:d8:d6:21:00:77:fd:f5:7c:4c:bb:f6: 26:a6:f2:c1:3b:db:50:06:97:be:f5:4f:6d:69:2f: 69:24:f6:27:36:5b:de:b4:91:16:2f:53:8e:bf:4a: b1:41:12:4f:cf:fb:dc:14:86:32:a6:8d:15:a1:62: 17:31:14:96:29:da:e5:4b:6b:65:82:94:9e:6a:0b: 71:b1:aa:33:d2:0d:9b:f3:d3:aa:3c:d7:b2:9d:4e: a7:e9:6f:04:6a:ad:32:e0:a6:09:b7:bd:76:11:64: 32:85:14:3e:bf:49:b1:7c:ec:eb:64:1c:65:dd:64: b9:42:80:b4:05:dd:c9:1e:47:c8:b6:69:e5:87:5c: 4d:a3:b0:e3:52:82:96:20:2c:30:1b:87:db:57:a3: 32:a8:1c:eb:7d:91:f2:73:4a:07:b0:e4:a3:16:e0: d2:24:35:73:af:30:be:ff:11:8f:61:94:ad:b8:1e: d5:b4:a3:0e:2a:3d:5a:23:cb:fa:9b:89:ea:3b:48: 4c:a0:98:d3:86:2d:51:a8:b2:30:60:e0:6f:4e:ba: 6a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F9:83:A6:B9:52:C9:DB:C7:5A:40:97:1C:65:F8:1D:1F:59:B0:00 X509v3 Authority Key Identifier: keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:86:a1:80:c7:07:24:91:24:30:24:2b:35:0e:ad:8e:9b:d9: eb:91:b2:d3:23:11:78:79:f6:b2:77:2e:3c:80:66:36:c4:9e: 77:2d:cb:b2:5b:fb:70:a3:79:67:1b:c8:9f:ee:2a:80:b5:5f: f1:81:12:9d:70:e3:15:0d:af:cf:2d:db:f3:e9:0d:28:29:77: 80:f4:fe:94:3f:bc:db:b4:f4:57:a0:29:c2:85:11:06:0c:93: 5c:ce:25:2d:de:20:e1:a0:b2:f3:76:79:fe:e9:63:a7:0a:3b: a8:5b:65:35:91:3f:12:e2:54:c4:03:7e:52:be:8b:04:9a:4c: 51:f5:0b:75:17:2e:94:25:67:2d:2b:62:d6:0b:07:19:41:11: a1:42:69:3d:7a:76:1e:5c:5a:10:40:ed:15:f4:ef:52:a7:b4: 82:b7:b9:1a:3b:5a:41:7e:12:26:2b:61:b6:29:81:b4:7f:8d: 0c:40:de:c8:9f:4b:74:4b:a1:08:36:9b:3c:bd:1b:cc:c5:54: 56:3d:af:6d:53:87:7a:4c:be:04:59:73:92:66:8b:74:c2:c0: 6b:19:fb:81:47:88:31:f4:e5:53:a9:fc:87:06:ba:d1:0c:cb: e4:ea:bd:15:45:68:04:75:fe:f0:09:f6:53:c8:c5:da:24:3a: 81:9a:4b:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKERFNzhGN0JENTkyNEE4MDY3NDkwQkZCRDMyRTQ3RTdG RkFCNjc3MjAwHhcNMjQwNTE4MTY0ODM2WhcNMjQwNTI1MTY0ODM2WjAYMRYwFAYD VQQDEw02NjQ4ZGJlNC04NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAQDyCBvQA1pFqCtYZolABa/SoZpLiKYLWQHtUO21KS8+CdqO73+OMy+yVS/ iLB02NYhAHf99XxMu/YmpvLBO9tQBpe+9U9taS9pJPYnNlvetJEWL1OOv0qxQRJP z/vcFIYypo0VoWIXMRSWKdrlS2tlgpSeagtxsaoz0g2b89OqPNeynU6n6W8Eaq0y 4KYJt712EWQyhRQ+v0mxfOzrZBxl3WS5QoC0Bd3JHkfItmnlh1xNo7DjUoKWICww G4fbV6MyqBzrfZHyc0oHsOSjFuDSJDVzrzC+/xGPYZStuB7VtKMOKj1aI8v6m4nq O0hMoJjThi1RqLIwYOBvTrpqtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJT5g6a5 Usnbx1pAlxxl+B0fWbAAMB8GA1UdIwQYMBaAFN54971ZJKgGdJC/vTLkfn/6tncg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FBWjBrTC05TXVSLWZfcTJk eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajN2VmtrcUFaMGtMLTlNdVItZl9xMmR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FB WjBrTC05TXVSLWZfcTJkeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAthqGAxwckkSQwJCs1Dq2Om9nrkbLTIxF4efaydy48gGY2xJ53Lcuy W/two3lnG8if7iqAtV/xgRKdcOMVDa/PLdvz6Q0oKXeA9P6UP7zbtPRXoCnChREG DJNcziUt3iDhoLLzdnn+6WOnCjuoW2U1kT8S4lTEA35SvosEmkxR9Qt1Fy6UJWct K2LWCwcZQRGhQmk9enYeXFoQQO0V9O9Sp7SCt7kaO1pBfhImK2G2KYG0f40MQN7I n0t0S6EINps8vRvMxVRWPa9tU4d6TL4EWXOSZot0wsBrGfuBR4gx9OVTqfyHBrrR DMvk6r0VRWgEdf7wCfZTyMXaJDqBmksj -----END CERTIFICATE-----Generated at Sat May 18 18:21:35 2024 by rpki-client on console-ams.rpki-client.org