$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: 5lJ5MunuSwusj/bf9VfImpJuNezPmJSieR+imBqWWac= Subject key identifier: CA:1E:FB:DF:E5:F3:7F:E4:3F:E6:8D:11:AC:2C:BF:DE:1F:16:E5:51 Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0917 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 08FD Signing time: Sat 18 May 2024 21:20:10 +0000 Manifest this update: Sat 18 May 2024 21:20:09 +0000 Manifest next update: Sat 25 May 2024 21:20:09 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: 90Bnr9SiKrHHZ9cZUC1C66MqNVYKMYFUBQuQAsNmCpU=) 2: 0F38BBFCB9E011EBAD14BB7DC4F9AE02.roa (hash: GJqL66srOvN0hcIg7XUn9+XsENSZfJgtxJ+CLpIWsXE=) 3: 10524044B9E011EBAD14BB7DC4F9AE02.roa (hash: UJKvvwxV5ic3Wxt+KlMOd06vuTuXvglDd9ubG3hZpSA=) 4: 0E119FAAB9E011EBAD14BB7DC4F9AE02.roa (hash: Sivi2Kbc64FMEijL1Z+xUJUHkkAiAfVx9MklISjB/ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2327 (0x917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: May 18 21:20:09 2024 GMT Not After : May 25 21:20:09 2024 GMT Subject: CN=66491b8a-eaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3a:61:9a:7d:88:41:b5:1e:96:07:8b:9a:48: 85:b7:e1:ee:5d:b5:50:f5:46:dd:e4:1f:ad:08:00: 08:57:56:d2:14:0b:42:fa:d1:df:0f:f6:32:f9:5c: a0:4b:1c:80:af:17:bf:fa:e8:9d:83:62:bb:46:9b: 81:6e:6a:7b:1a:3e:07:7c:e9:3f:50:27:33:81:47: cc:f0:cc:a3:57:28:da:72:82:06:de:70:9d:8e:8b: 78:46:8e:da:1b:49:7d:94:82:ab:9b:e8:d5:07:b9: 28:e4:dd:34:a0:45:48:70:7a:ce:51:30:b9:15:42: 0a:0f:bd:21:b2:2d:44:82:6f:16:ec:69:64:cd:a5: 66:84:ce:a9:6f:38:c6:17:38:04:06:8f:86:bb:65: fe:f5:a5:bf:40:09:37:56:22:a4:74:da:2b:f9:e4: 30:c6:5e:41:36:48:02:0d:5c:46:80:8a:34:36:55: e5:0c:90:d3:74:9d:09:9b:ed:5c:17:77:e9:cf:a2: bc:20:9e:44:79:db:76:25:a3:54:b9:c2:c1:7f:7b: e5:a4:de:03:b6:2b:91:49:c0:4f:70:e1:4f:f5:f2: 84:1d:a3:d5:1f:5b:23:03:b5:61:f9:7f:b4:cb:7e: f3:ed:fb:f3:27:15:8b:90:d8:af:29:84:a8:3e:84: 09:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1E:FB:DF:E5:F3:7F:E4:3F:E6:8D:11:AC:2C:BF:DE:1F:16:E5:51 X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:77:a7:dd:81:c4:43:b5:e1:f3:59:e1:17:0f:7d:d7:c9:3e: a9:d2:99:ed:cc:84:44:98:f4:7b:a3:0e:e3:fa:6a:82:f5:27: de:a4:c2:4a:c4:e5:a8:d2:ad:22:cf:0b:3e:80:5f:51:8e:f3: 34:c4:ca:34:31:94:82:ed:ea:71:9c:d1:93:ba:22:f4:ac:6e: 2a:6c:c2:4d:39:37:c6:07:fb:81:78:8b:94:2d:6e:9c:8a:7c: 47:ab:87:15:4a:ff:d3:19:c2:96:03:d2:18:c3:08:b5:b3:3d: 69:d6:61:c3:c7:e8:d0:b2:62:0b:a1:18:79:b3:8e:41:31:8c: 4c:ff:e1:f4:04:98:ee:49:10:11:54:84:95:35:ff:92:2b:4f: 7d:ec:23:85:3b:e9:07:5d:3c:93:29:70:68:74:c5:f0:54:79: 31:0d:1d:3c:43:83:6d:88:e1:7a:37:91:fe:9c:a5:0d:29:e8: c0:10:51:6f:d4:f5:8d:67:06:90:51:e5:76:5b:23:60:23:91: 47:ac:dd:21:f7:25:84:97:f6:c6:18:b1:07:20:40:80:b5:3b: 1a:f9:2b:1c:6f:8a:25:75:79:a4:89:12:98:19:11:b9:ec:35: aa:c9:ac:a8:8f:c0:33:70:32:77:d4:b5:f4:84:d2:61:78:5d: 50:01:ec:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjQwNTE4MjEyMDA5WhcNMjQwNTI1MjEyMDA5WjAYMRYwFAYD VQQDEw02NjQ5MWI4YS1lYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Dphmn2IQbUelgeLmkiFt+HuXbVQ9Ubd5B+tCAAIV1bSFAtC+tHfD/Yy+Vyg SxyArxe/+uidg2K7RpuBbmp7Gj4HfOk/UCczgUfM8MyjVyjacoIG3nCdjot4Ro7a G0l9lIKrm+jVB7ko5N00oEVIcHrOUTC5FUIKD70hsi1Egm8W7GlkzaVmhM6pbzjG FzgEBo+Gu2X+9aW/QAk3ViKkdNor+eQwxl5BNkgCDVxGgIo0NlXlDJDTdJ0Jm+1c F3fpz6K8IJ5Eedt2JaNUucLBf3vlpN4DtiuRScBPcOFP9fKEHaPVH1sjA7Vh+X+0 y37z7fvzJxWLkNivKYSoPoQJdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoe+9/l 83/kP+aNEawsv94fFuVRMB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZd6fdgcRDteHzWeEXD33XyT6p0pntzIREmPR7ow7j+mqC9SfepMJK xOWo0q0izws+gF9RjvM0xMo0MZSC7epxnNGTuiL0rG4qbMJNOTfGB/uBeIuULW6c inxHq4cVSv/TGcKWA9IYwwi1sz1p1mHDx+jQsmILoRh5s45BMYxM/+H0BJjuSRAR VISVNf+SK0997COFO+kHXTyTKXBodMXwVHkxDR08Q4NtiOF6N5H+nKUNKejAEFFv 1PWNZwaQUeV2WyNgI5FHrN0h9yWEl/bGGLEHIECAtTsa+Sscb4oldXmkiRKYGRG5 7DWqyayoj8AzcDJ31LX0hNJheF1QAex9 -----END CERTIFICATE-----Generated at Sat May 18 22:14:02 2024 by rpki-client on console-fra.rpki-client.org