$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft File: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json) Hash identifier: buT0yY96wn2VgrfrNXyyYJurGqZ5KBNuigzPyOBOwyM= Subject key identifier: 05:0D:67:11:32:EF:5E:82:29:44:DB:AC:FE:0D:D3:BD:7D:02:9F:BA Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Certificate serial: 3463 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft Manifest number: 3422 Signing time: Sat 18 May 2024 14:24:45 +0000 Manifest this update: Sat 18 May 2024 14:24:44 +0000 Manifest next update: Sat 25 May 2024 14:24:44 +0000 Files and hashes: 1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: nZ7JofjRfaN/7CUUaisc3Fjx34cnVeWjVni/G2664LI=) 2: E3B4B85E05DA11EC9345D685C4F9AE02.roa (hash: T9BdktpcwepY9In6y3PeQ8iUl4hewDA2daZQjju0O/0=) 3: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: 111OPhlzIppCmmUPC8h75s/hcIvEG2YmBXDNwGyQ9pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13411 (0x3463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Validity Not Before: May 18 14:24:44 2024 GMT Not After : May 25 14:24:44 2024 GMT Subject: CN=6648ba2c-e4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5c:61:fe:0e:6a:65:61:39:58:85:d8:9c:14: fd:79:7f:c1:d7:88:96:e5:e1:a3:1c:a3:7d:de:02: 4e:cf:bc:55:9a:4c:a8:b0:81:0a:ad:5f:07:9c:1d: d9:ab:11:17:ed:ea:83:f3:a4:d2:40:88:14:cd:b2: 50:3a:2f:6f:65:33:25:34:d3:b2:90:28:10:b3:ba: 5d:a8:24:83:d5:86:67:a0:75:9d:e4:14:46:79:02: 75:18:32:9e:77:72:65:72:6c:2c:63:c8:9d:3b:e0: fe:07:0f:06:69:1b:66:34:fd:59:19:90:7c:89:9a: 2e:09:b0:0b:1f:f3:36:1e:58:63:49:65:4b:ff:32: 84:c0:0f:4d:5d:cf:2b:74:0a:0a:6a:4b:50:29:42: 04:3b:63:4c:bd:c3:95:77:9f:15:c3:dd:1a:15:72: 1b:d3:85:3d:13:44:f1:47:71:71:14:0e:f8:e0:5b: 7c:d1:b0:a4:8d:23:25:8d:fd:f8:02:7c:12:60:b8: 66:f7:19:36:f0:e2:ca:78:f6:12:ff:d6:a1:63:21: 8e:15:ad:74:60:8a:e6:7d:b0:7c:99:1f:ab:70:91: c6:92:c6:35:b3:16:3b:9c:59:79:93:ff:43:ef:e3: c8:bf:90:15:e2:d6:79:c2:94:62:86:8f:0d:ff:41: 0c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0D:67:11:32:EF:5E:82:29:44:DB:AC:FE:0D:D3:BD:7D:02:9F:BA X509v3 Authority Key Identifier: keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c3:4a:c0:42:9a:49:32:a2:fb:99:b8:8f:25:d5:bc:ab:ff: de:4b:33:24:c4:5e:f6:f2:87:c2:93:79:7b:39:38:73:a2:fc: 38:80:16:5c:5c:f7:b9:cd:79:82:e6:27:8e:68:ce:39:7e:2b: f7:d7:a7:72:4c:96:fc:bc:77:7a:4f:37:6c:63:63:6d:7e:e2: 5a:34:80:4e:87:22:a7:94:d3:5b:3c:26:61:b9:51:db:5b:98: df:c9:ad:40:06:5f:40:a2:c7:2f:58:90:0e:fa:43:87:93:01: ef:95:79:9b:e3:86:dd:c3:de:e3:38:13:44:e5:f9:7b:6d:d4: 16:92:06:96:0c:b5:03:24:8b:27:df:76:cf:db:3d:71:19:ca: 3e:2a:20:94:b3:98:38:2e:fc:59:e8:26:86:cc:e9:eb:3e:a4: 4a:f8:41:45:73:92:24:ab:91:46:cd:00:db:11:6f:f8:20:88: 73:e1:18:71:fd:92:97:4c:a6:fa:92:52:da:43:8e:e4:14:28: 7d:80:45:07:7e:dc:27:b7:a1:3b:86:4c:fc:99:44:4d:a6:fc: e3:61:a1:2c:42:06:1e:c2:2e:c7:e4:d2:2d:39:b5:b5:c5:b9: 99:eb:e8:35:d7:cc:c1:bb:3f:3e:a4:69:69:8d:0a:cd:ab:ff: 76:84:6e:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE Q0E0RkM3RDYwHhcNMjQwNTE4MTQyNDQ0WhcNMjQwNTI1MTQyNDQ0WjAYMRYwFAYD VQQDEw02NjQ4YmEyYy1lNGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulxh/g5qZWE5WIXYnBT9eX/B14iW5eGjHKN93gJOz7xVmkyosIEKrV8HnB3Z qxEX7eqD86TSQIgUzbJQOi9vZTMlNNOykCgQs7pdqCSD1YZnoHWd5BRGeQJ1GDKe d3JlcmwsY8idO+D+Bw8GaRtmNP1ZGZB8iZouCbALH/M2HlhjSWVL/zKEwA9NXc8r dAoKaktQKUIEO2NMvcOVd58Vw90aFXIb04U9E0TxR3FxFA744Ft80bCkjSMljf34 AnwSYLhm9xk28OLKePYS/9ahYyGOFa10YIrmfbB8mR+rcJHGksY1sxY7nFl5k/9D 7+PIv5AV4tZ5wpRiho8N/0EMUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUNZxEy 716CKUTbrP4N0719Ap+6MB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy9CQkM1NEJBNDFEODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNY Yk9CRm1sXzNDY1hjcFB4OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKw0rAQppJMqL7mbiPJdW8q//eSzMkxF728ofCk3l7OThzovw4gBZc XPe5zXmC5ieOaM45fiv316dyTJb8vHd6TzdsY2NtfuJaNIBOhyKnlNNbPCZhuVHb W5jfya1ABl9AoscvWJAO+kOHkwHvlXmb44bdw97jOBNE5fl7bdQWkgaWDLUDJIsn 33bP2z1xGco+KiCUs5g4LvxZ6CaGzOnrPqRK+EFFc5Ikq5FGzQDbEW/4IIhz4Rhx /ZKXTKb6klLaQ47kFCh9gEUHftwnt6E7hkz8mURNpvzjYaEsQgYewi7H5NItObW1 xbmZ6+g118zBuz8+pGlpjQrNq/92hG4f -----END CERTIFICATE-----Generated at Sat May 18 15:58:20 2024 by rpki-client on console-ams.rpki-client.org