$ rpki-client -vvf rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft File: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft (raw, json) Hash identifier: URAxBkekun+TkbW49l60v2ZPJAl4toIU2K0PnTOHyYw= Subject key identifier: F0:96:DF:59:0A:05:C9:53:C8:BD:A4:A4:1F:80:D6:DF:B0:74:39:90 Authority key identifier: DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 Certificate issuer: /CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Certificate serial: 0B2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft Manifest number: 0B24 Signing time: Sat 18 May 2024 19:48:53 +0000 Manifest this update: Sat 18 May 2024 19:48:52 +0000 Manifest next update: Sat 25 May 2024 19:48:52 +0000 Files and hashes: 1: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl (hash: sUh6OhzXFRZA7eX3wLk/g6FnySExl+u9721xp3HjI4I=) 2: F66D3E4C175911EA9D8EF44FC4F9AE02.roa (hash: za5V23dtsz617j9FvPb9K7kvDfW4t8T7zFEAYMjrnqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2859 (0xb2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Validity Not Before: May 18 19:48:52 2024 GMT Not After : May 25 19:48:52 2024 GMT Subject: CN=66490624-4cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:a6:bc:5c:8e:3c:4e:fb:02:e6:1a:bc:59: 63:6a:10:67:9d:c8:af:9d:07:2d:e0:62:9f:6d:c2: 2c:94:9e:03:c6:1e:9e:d3:ea:4d:26:ba:ce:36:77: 4c:1b:f9:5b:dc:12:b5:3e:f3:cf:bf:6f:71:f6:8c: 9e:99:71:6d:86:05:ed:14:d4:e8:f8:bc:8d:3e:bf: 0c:16:e6:63:08:71:c1:88:d8:c0:f7:0d:69:6a:18: 21:a9:c8:7b:e0:2e:50:36:45:4a:dd:6a:ee:86:6e: 1c:a8:f8:d0:fb:cb:16:6d:dc:60:1a:3d:fc:24:ee: 01:a8:c4:72:4c:8a:47:79:45:19:be:74:75:2d:dd: 3d:cf:be:fa:37:d9:e5:b3:73:56:44:2b:ab:94:68: 8f:5e:33:88:4a:de:c6:02:89:0c:e1:45:88:69:4a: 6e:a4:98:80:68:44:b0:d8:aa:00:54:65:53:39:fe: 8c:a9:e5:e8:85:c4:87:77:9e:9a:64:b8:03:50:19: ce:5b:cb:9f:0a:e3:6e:1a:30:c6:2e:b4:0b:08:2c: 7d:a1:7c:6e:a8:69:45:65:0e:dd:45:2b:ef:e0:0a: 58:a2:b8:cc:4c:b9:e5:fc:47:d0:c9:fd:8e:d3:dd: 2c:5c:04:13:ce:aa:a8:d8:53:f6:ab:35:d3:63:cc: 98:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:96:DF:59:0A:05:C9:53:C8:BD:A4:A4:1F:80:D6:DF:B0:74:39:90 X509v3 Authority Key Identifier: keyid:DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:4a:2f:bd:c5:d1:4f:68:44:41:d8:b7:72:84:d9:c2:7e:15: 43:23:2a:d8:1d:b5:20:54:a5:c9:43:c5:ba:84:56:67:75:29: 2f:1c:0d:af:c7:64:2b:d6:d2:7c:22:dc:be:99:e2:69:c3:b9: b3:b3:0a:03:b9:11:02:5f:4b:9d:69:93:8b:7b:b8:62:03:84: 4e:31:1f:77:48:1c:9f:d1:20:fa:d6:0f:3d:59:20:98:b7:81: 83:41:84:1d:4d:e5:3d:9c:6f:7a:b4:83:28:95:bf:d8:ca:47: 72:55:64:f1:d1:7f:29:63:03:86:f2:fc:f2:7a:d7:97:de:f0: ec:f0:77:52:64:a2:0c:fc:55:25:e3:ad:e3:43:b1:6a:51:5c: fc:ec:9f:29:e0:98:af:32:d0:17:e9:25:77:8e:36:f0:b1:c5: 6d:21:70:53:b6:97:2c:5d:c6:fe:3c:1d:cd:b0:39:67:c8:80: ad:86:2d:d4:89:7b:6c:fe:07:0b:c2:d2:56:6d:93:2b:31:c1: d4:7e:90:2e:71:62:6e:67:44:bd:ca:c3:4b:d9:a1:08:4c:1a: 85:b9:70:78:b4:49:89:50:3f:86:6f:0f:ab:84:c2:52:38:1f: de:15:47:f1:ca:ef:19:9a:f4:37:e5:3a:63:ac:5e:4b:8d:13: 84:c5:36:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4QjcxMTAvBgNVBAUTKERDMDMyQzVERDA0MkVEM0U4REUyQTcxMEZCMjY4MThB OTU3MzQyNjYwHhcNMjQwNTE4MTk0ODUyWhcNMjQwNTI1MTk0ODUyWjAYMRYwFAYD VQQDEw02NjQ5MDYyNC00Y2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRemvFyOPE77AuYavFljahBnncivnQct4GKfbcIslJ4Dxh6e0+pNJrrONndM G/lb3BK1PvPPv29x9oyemXFthgXtFNTo+LyNPr8MFuZjCHHBiNjA9w1pahghqch7 4C5QNkVK3Wruhm4cqPjQ+8sWbdxgGj38JO4BqMRyTIpHeUUZvnR1Ld09z776N9nl s3NWRCurlGiPXjOISt7GAokM4UWIaUpupJiAaESw2KoAVGVTOf6MqeXohcSHd56a ZLgDUBnOW8ufCuNuGjDGLrQLCCx9oXxuqGlFZQ7dRSvv4ApYorjMTLnl/EfQyf2O 090sXAQTzqqo2FP2qzXTY8yYbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCW31kK BclTyL2kpB+A1t+wdDmQMB8GA1UdIwQYMBaAFNwDLF3QQu0+jeKnEPsmgYqVc0Jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzhCNy82NjlCNDU1MjE3 NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdUNk40cWNRLXlhQmlwVnpR bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNBTXNYZEJDN1Q2TjRxY1EteWFCaXBWelFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzhCNy82NjlCNDU1MjE3NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdU Nk40cWNRLXlhQmlwVnpRbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgSi+9xdFPaERB2LdyhNnCfhVDIyrYHbUgVKXJQ8W6hFZndSkvHA2v x2Qr1tJ8Ity+meJpw7mzswoDuRECX0udaZOLe7hiA4ROMR93SByf0SD61g89WSCY t4GDQYQdTeU9nG96tIMolb/YykdyVWTx0X8pYwOG8vzyeteX3vDs8HdSZKIM/FUl 463jQ7FqUVz87J8p4JivMtAX6SV3jjbwscVtIXBTtpcsXcb+PB3NsDlnyICthi3U iXts/gcLwtJWbZMrMcHUfpAucWJuZ0S9ysNL2aEITBqFuXB4tEmJUD+Gbw+rhMJS OB/eFUfxyu8ZmvQ35TpjrF5LjROExTa+ -----END CERTIFICATE-----Generated at Sat May 18 20:48:17 2024 by rpki-client on console-fra.rpki-client.org