$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft File: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft (raw, json) Hash identifier: XyzRculIkP5ie1v7KtLmuE4J1EMNZpvNohTuoySBy9Y= Subject key identifier: 5F:A5:6B:D4:07:C4:FF:03:9C:D9:13:8B:2F:23:9F:ED:55:17:37:F1 Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 24AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft Manifest number: 247F Signing time: Sat 18 May 2024 14:21:55 +0000 Manifest this update: Sat 18 May 2024 14:21:54 +0000 Manifest next update: Sat 25 May 2024 14:21:54 +0000 Files and hashes: 1: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl (hash: 9y3BbcxmfIzuUadSrgaRWB4xUt8VvqTn2P7dv/JQkSQ=) 2: 19FEDB562AB611EC93861F65C4F9AE02.roa (hash: NlVyh3MwFRVpTMK2w6/e2umQLjFvCbYkQLSSmkOcpQ8=) 3: 87B992CE90E211EDB4035D5EC4F9AE02.roa (hash: b9eD5YUOC0GkTQZ3rX1z2ni+yFk2yorAsctaJzuBHI0=) 4: E7D3D36A406911EC83A0470DC4F9AE02.roa (hash: MOocOznJHRa09G6um0STsE+pEcDoCo6GKvM8JWZpd4k=) 5: 3373DB98902C11EA898EFD7FC4F9AE02.roa (hash: GgHEneQW+UcNt9UHCZR2q5s6m1DGHJXeNPoPIeIFSMc=) 6: EA077BF660CD11EEB151723AC4F9AE02.roa (hash: LevTl0ZMSXtbYdtnP6/oDzGHpzVPGQGtnZzvnLO5TQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9386 (0x24aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: May 18 14:21:54 2024 GMT Not After : May 25 14:21:54 2024 GMT Subject: CN=6648b982-8aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:09:36:01:75:2a:3d:31:fb:53:bc:35:1e: 7f:ca:ce:8b:b9:9e:89:e6:74:50:fa:80:98:16:0b: 71:19:4d:d1:a3:43:d7:43:a1:12:c4:20:9a:c6:98: 16:1e:37:50:17:1f:63:29:39:d3:eb:e0:bc:f0:50: 1f:42:fd:c7:bc:90:3a:14:d5:2c:2f:2c:6a:89:55: 43:ae:b8:7a:26:32:42:f8:f1:5d:44:49:b7:01:d2: 33:a8:e4:a0:0c:86:90:08:1b:49:0b:cc:32:e2:17: 4f:ea:5f:2b:dc:0d:6d:f2:e6:a0:b7:06:a9:a2:fc: 4c:c2:f0:f4:70:d0:94:ca:f1:20:83:35:a0:71:47: cb:d7:a4:5e:6c:e6:c2:6f:7a:4a:d4:af:42:49:13: dd:e7:12:9f:c9:55:b1:4a:88:91:ec:5b:3f:e3:2c: fc:63:0e:7d:08:82:03:33:05:9c:bd:e7:4a:48:55: 0a:c2:34:f3:36:e3:c8:aa:ef:f3:8b:ac:5e:ef:cd: 9b:20:00:bc:bb:a5:e3:25:05:a9:7f:48:e6:cb:e0: 07:5b:f2:62:dd:98:31:ca:77:5f:bf:f0:de:9a:37: 1a:b6:f6:c4:2c:5a:67:6b:94:85:2f:15:90:4b:59: 85:70:84:2c:48:97:df:4c:7d:d7:1d:4c:27:08:fa: c4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A5:6B:D4:07:C4:FF:03:9C:D9:13:8B:2F:23:9F:ED:55:17:37:F1 X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:ab:5d:41:77:84:1b:de:ff:f9:01:95:03:1e:13:e0:59:e7: 88:23:5e:df:a8:30:a1:22:66:0c:a1:79:cf:36:ec:2f:ee:d7: 9c:20:86:c2:ed:df:07:e0:8f:c6:bf:f6:fd:0c:5a:7c:21:a6: b6:f2:08:1b:5a:5a:6a:7a:13:f6:f7:1a:70:7d:96:2e:59:64: 0f:38:d9:c0:d1:64:df:6a:99:58:a0:35:8f:07:8b:20:44:a7: fb:bf:e5:ac:03:31:f3:13:de:5a:00:85:f6:a0:6e:79:e0:fd: 6a:d7:8c:98:1e:0b:6c:c0:78:ea:e6:46:46:d1:6f:69:5a:06: fc:e5:9e:da:a9:6f:bc:ca:dd:b6:07:c6:ea:5e:42:35:17:09: 9c:6b:e2:98:01:6a:5c:63:dd:87:3f:09:76:11:08:40:ae:61: 3d:12:97:f2:87:72:07:78:a5:fc:a2:84:32:f0:29:ca:28:f2: d9:13:3e:c4:da:02:f9:81:11:a1:fa:9e:99:37:ea:3d:8c:27: 94:75:5d:f4:59:52:67:13:99:a0:a4:29:c1:b9:02:0f:03:bc: 52:55:33:a0:ec:47:79:ff:e2:bf:62:b3:f2:ae:67:81:40:63: 4f:ec:3e:10:cd:b2:b7:03:00:da:f1:59:a3:a5:7d:91:5e:f3: 7c:16:a0:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjQwNTE4MTQyMTU0WhcNMjQwNTI1MTQyMTU0WjAYMRYwFAYD VQQDEw02NjQ4Yjk4Mi04YWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsO8JNgF1Kj0x+1O8NR5/ys6LuZ6J5nRQ+oCYFgtxGU3Ro0PXQ6ESxCCaxpgW HjdQFx9jKTnT6+C88FAfQv3HvJA6FNUsLyxqiVVDrrh6JjJC+PFdREm3AdIzqOSg DIaQCBtJC8wy4hdP6l8r3A1t8uagtwapovxMwvD0cNCUyvEggzWgcUfL16RebObC b3pK1K9CSRPd5xKfyVWxSoiR7Fs/4yz8Yw59CIIDMwWcvedKSFUKwjTzNuPIqu/z i6xe782bIAC8u6XjJQWpf0jmy+AHW/Ji3Zgxyndfv/DemjcatvbELFpna5SFLxWQ S1mFcIQsSJffTH3XHUwnCPrE6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+la9QH xP8DnNkTiy8jn+1VFzfxMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS84RDk0NzFGNjI5MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZp b1c4N2VWYWc5QU5iY0o1VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoq11Bd4Qb3v/5AZUDHhPgWeeII17fqDChImYMoXnPNuwv7tecIIbC 7d8H4I/Gv/b9DFp8Iaa28ggbWlpqehP29xpwfZYuWWQPONnA0WTfaplYoDWPB4sg RKf7v+WsAzHzE95aAIX2oG554P1q14yYHgtswHjq5kZG0W9pWgb85Z7aqW+8yt22 B8bqXkI1Fwmca+KYAWpcY92HPwl2EQhArmE9Epfyh3IHeKX8ooQy8CnKKPLZEz7E 2gL5gRGh+p6ZN+o9jCeUdV30WVJnE5mgpCnBuQIPA7xSVTOg7Ed5/+K/YrPyrmeB QGNP7D4QzbK3AwDa8VmjpX2RXvN8FqDs -----END CERTIFICATE-----Generated at Sat May 18 15:58:20 2024 by rpki-client on console-ams.rpki-client.org