$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json) Hash identifier: u4d2o/2XjtWU3znjQ64qhnvHzkfaJ8hhF2GX3YKVzzE= Subject key identifier: 8E:FA:B0:8A:10:78:42:CC:C8:8F:C6:10:C7:70:D2:2C:2D:EB:24:30 Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft Manifest number: A6 Signing time: Sat 01 Jun 2024 08:04:49 +0000 Manifest this update: Sat 01 Jun 2024 08:04:49 +0000 Manifest next update: Sat 08 Jun 2024 08:04:49 +0000 Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: vIDX3XtmMip5ssyMbgXbKmIhvDCPlGuN+6PlO1D3vnw=) 2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: Uo8GZp0BhERmojcXwoqNsV/jrudPVaZUuleVx+XXWPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Validity Not Before: Jun 1 08:04:49 2024 GMT Not After : Jun 8 08:04:49 2024 GMT Subject: CN=665ad621-8cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9d:71:aa:29:f8:48:5f:50:be:a3:7c:2b:48: f7:c4:06:ea:9a:48:77:5a:69:d7:70:dd:3f:18:f8: 0f:89:d9:a6:62:15:13:12:de:04:42:ba:fc:e3:35: 52:a7:1d:01:ce:fc:31:ca:a1:ca:dd:3f:f9:b3:8d: cc:11:c3:e4:09:99:2d:36:7b:7f:86:f0:71:76:32: f9:48:b6:71:91:0a:62:11:a8:c3:38:89:c7:f0:3a: b4:44:06:7c:20:47:21:9d:50:03:9a:73:77:7f:42: 7a:a4:49:23:0c:82:49:cd:ec:ab:55:15:27:e9:d2: 47:6b:29:0e:7c:1c:81:9c:7c:d0:06:13:c2:b7:16: f7:b9:4e:66:41:a9:ff:f1:60:d0:b5:42:f4:b7:b1: 71:3d:44:44:de:04:00:87:6a:41:05:cb:47:20:b6: e2:65:f0:f9:78:96:a5:48:34:7f:cb:9f:7b:b0:58: 69:ed:29:9e:07:d0:b7:f6:04:03:84:62:a9:30:bd: 27:77:8d:c6:4c:09:e1:d1:78:5b:fc:6b:ac:05:43: 42:f1:90:78:90:6b:8b:22:34:7a:22:41:bd:8e:90: 38:bc:ef:82:3a:fb:3c:41:b3:3f:18:5d:60:29:8b: 83:f0:1a:1a:3b:85:d3:5d:76:43:47:74:05:0e:72: 5f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FA:B0:8A:10:78:42:CC:C8:8F:C6:10:C7:70:D2:2C:2D:EB:24:30 X509v3 Authority Key Identifier: keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ea:5e:e7:ed:1f:d4:d1:eb:12:9e:6e:40:00:7e:40:21:09: 02:9a:eb:5f:b8:a9:d6:4d:ea:f9:d5:76:4b:5a:b5:b8:29:94: d7:5f:1d:9f:4c:c0:7d:ed:aa:2b:23:45:2a:bb:4c:d6:ae:6b: ab:68:ea:c6:f9:ae:7f:2b:4a:b0:cb:5f:27:1d:9d:26:4f:0e: 83:49:70:6f:3a:31:af:7f:e5:25:cf:be:1b:09:2e:b7:ee:d8: e6:c1:94:ed:5c:6d:e3:bd:6a:11:50:7f:4b:22:13:f9:9a:0b: d0:af:23:65:16:38:36:44:dd:38:b4:ad:52:00:e2:ed:56:f6: d6:c7:44:ce:24:c5:bf:8c:4c:cd:2d:50:43:15:cf:d8:5a:9d: e0:6f:46:28:14:ce:16:d7:0b:f1:45:95:40:21:b2:cf:01:54: 4f:a6:1b:af:09:26:3a:ed:54:b3:f9:f0:cc:0f:6e:8f:62:78: ce:93:82:31:d8:30:c4:8e:98:a6:24:79:64:c9:4c:aa:45:be: 65:f8:cf:7d:c9:6e:45:df:8b:71:3c:4d:7b:57:60:c9:0b:0c: 71:e3:d1:53:db:87:28:b5:f3:99:96:92:c2:d4:3e:a3:73:83: 9d:4a:d5:e1:5c:98:48:d8:d7:22:e2:23:a8:a7:34:b1:9f:d9: 70:cb:d3:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC M0FFREM5MEUwHhcNMjQwNjAxMDgwNDQ5WhcNMjQwNjA4MDgwNDQ5WjAYMRYwFAYD VQQDEw02NjVhZDYyMS04Y2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZ1xqin4SF9QvqN8K0j3xAbqmkh3WmnXcN0/GPgPidmmYhUTEt4EQrr84zVS px0BzvwxyqHK3T/5s43MEcPkCZktNnt/hvBxdjL5SLZxkQpiEajDOInH8Dq0RAZ8 IEchnVADmnN3f0J6pEkjDIJJzeyrVRUn6dJHaykOfByBnHzQBhPCtxb3uU5mQan/ 8WDQtUL0t7FxPURE3gQAh2pBBctHILbiZfD5eJalSDR/y597sFhp7SmeB9C39gQD hGKpML0nd43GTAnh0Xhb/GusBUNC8ZB4kGuLIjR6IkG9jpA4vO+COvs8QbM/GF1g KYuD8BoaO4XTXXZDR3QFDnJffwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI76sIoQ eELMyI/GEMdw0iwt6yQwMB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1 MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1 Q0hqNnlueW9FN1N6cnR5UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX6l7n7R/U0esSnm5AAH5AIQkCmutfuKnWTer51XZLWrW4KZTXXx2f TMB97aorI0Uqu0zWrmuraOrG+a5/K0qwy18nHZ0mTw6DSXBvOjGvf+Ulz74bCS63 7tjmwZTtXG3jvWoRUH9LIhP5mgvQryNlFjg2RN04tK1SAOLtVvbWx0TOJMW/jEzN LVBDFc/YWp3gb0YoFM4W1wvxRZVAIbLPAVRPphuvCSY67VSz+fDMD26PYnjOk4Ix 2DDEjpimJHlkyUyqRb5l+M99yW5F34txPE17V2DJCwxx49FT24cotfOZlpLC1D6j c4OdStXhXJhI2Nci4iOopzSxn9lwy9N5 -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:28 2024 by rpki-client on console-fra.rpki-client.org