$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft File: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft (raw, json) Hash identifier: v4m2b+La7AzfkufabvIx+lBN8+V44meqRcKE/2QebZY= Subject key identifier: 1F:D6:CB:65:0F:06:EB:67:EC:6D:9D:DB:17:6C:3C:4F:29:5F:BD:C7 Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18 Certificate issuer: /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18 Certificate serial: 0737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft Manifest number: 0726 Signing time: Sat 18 May 2024 22:33:02 +0000 Manifest this update: Sat 18 May 2024 22:33:01 +0000 Manifest next update: Sat 25 May 2024 22:33:01 +0000 Files and hashes: 1: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl (hash: a7FLETRz23ybT7e0BlqI45lMW8S2RjRAg3KuOh6G4Ak=) 2: 187415DE3E6F11EEA236AD17C4F9AE02.roa (hash: oHg/Fphy3D/qe//lvFNWRAEK+qDGhQO5AU2v1+w0Frg=) 3: 39DE80CE3E6F11EEA7233D2CC4F9AE02.roa (hash: aHfKfD7vtoJL6WyBf2UkZHzc3x5E868xrQmLYuroN+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18 Validity Not Before: May 18 22:33:01 2024 GMT Not After : May 25 22:33:01 2024 GMT Subject: CN=66492c9d-4044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:3f:ac:68:e7:32:a1:20:c4:a0:9d:4c:ff: cd:d7:4a:7e:74:fa:de:58:c5:c3:8d:14:35:6b:34: 86:ae:4d:e3:ec:ce:bf:9c:25:a7:8c:b1:f3:a6:64: da:6c:81:11:f7:89:00:a0:2d:55:e9:3f:b6:db:90: cc:90:d4:46:5b:20:0e:b8:d0:c1:31:23:56:0c:c7: 26:dc:3d:9e:00:bb:8d:2c:90:58:9d:f4:6c:51:4e: a6:26:fa:c9:45:88:fc:5e:89:a1:42:69:2f:7c:97: 2a:40:62:b0:0e:1a:eb:ef:e3:a1:c1:51:36:a1:4f: 71:68:5f:6f:f5:a1:0a:40:52:7c:45:77:68:0a:56: fe:1b:4c:d5:6e:9b:f5:ed:c6:6c:06:fe:f9:69:be: 9b:5e:cf:19:65:61:d9:3e:c9:3f:e6:f6:7d:6a:4d: a5:1b:77:84:ea:f4:7f:5f:c5:8d:20:c8:8f:19:a1: 1a:ba:eb:1b:37:b0:27:74:0d:41:03:de:04:eb:82: 34:23:f5:b8:e4:63:03:66:a7:9e:9e:a8:52:6d:fa: 62:23:ec:df:4e:fb:91:99:ff:be:fd:f6:3d:fd:4f: 75:67:e4:22:b7:d1:e6:26:c6:c6:78:d3:a9:96:0b: 39:56:4d:05:c1:f9:7b:66:93:37:ec:77:11:5f:ea: 8f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D6:CB:65:0F:06:EB:67:EC:6D:9D:DB:17:6C:3C:4F:29:5F:BD:C7 X509v3 Authority Key Identifier: keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:54:c4:1c:87:c6:b9:46:06:03:b7:90:41:e5:5b:0b:26:7a: 00:dc:8a:67:13:2e:f4:e7:2c:83:f6:aa:19:c9:a2:ec:cf:ae: 3b:90:06:0f:eb:c4:44:4f:8c:07:40:96:c9:a8:5e:3c:30:8d: 32:f9:02:dd:d8:7a:8d:aa:19:aa:72:76:e4:09:2c:60:67:71: 53:5e:38:fe:b1:42:db:87:38:05:91:de:ac:49:8e:d5:ee:fc: 35:83:d6:b4:15:e3:53:26:39:fc:86:13:6f:d7:73:6e:b9:28: 08:f1:44:44:76:9c:54:95:89:bf:3e:2f:09:82:20:03:af:ca: c8:af:11:ce:60:a6:c7:d8:22:4b:83:fc:b6:8f:f8:7d:94:64: 93:10:80:91:6e:3d:15:52:de:bc:03:db:28:f4:25:3a:0f:a7: 0b:92:98:ee:a1:8a:56:ce:e9:de:d2:49:56:82:d3:04:73:71: df:57:81:80:c8:24:59:c4:18:27:4b:63:6b:1a:74:60:0a:e4: 65:f1:54:aa:e5:5c:e6:ff:b7:68:7c:d4:91:bd:9f:87:16:dd: bf:86:73:92:6b:ea:7f:b4:5e:ce:d2:d4:36:97:fe:06:9b:f2: 90:67:7e:e4:64:d3:55:38:59:cd:7f:32:7f:9f:55:1f:cb:95: c8:af:9c:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkxOEIxMTAvBgNVBAUTKERENjFDMjJBOTVCMjhFRkRFMzc4MzEyQTc1OUZBQ0FG RUU0MDZDMTgwHhcNMjQwNTE4MjIzMzAxWhcNMjQwNTI1MjIzMzAxWjAYMRYwFAYD VQQDEw02NjQ5MmM5ZC00MDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSA/rGjnMqEgxKCdTP/N10p+dPreWMXDjRQ1azSGrk3j7M6/nCWnjLHzpmTa bIER94kAoC1V6T+225DMkNRGWyAOuNDBMSNWDMcm3D2eALuNLJBYnfRsUU6mJvrJ RYj8XomhQmkvfJcqQGKwDhrr7+OhwVE2oU9xaF9v9aEKQFJ8RXdoClb+G0zVbpv1 7cZsBv75ab6bXs8ZZWHZPsk/5vZ9ak2lG3eE6vR/X8WNIMiPGaEauusbN7AndA1B A94E64I0I/W45GMDZqeenqhSbfpiI+zfTvuRmf++/fY9/U91Z+Qit9HmJsbGeNOp lgs5Vk0Fwfl7ZpM37HcRX+qP9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/Wy2UP Butn7G2d2xdsPE8pX73HMB8GA1UdIwQYMBaAFN1hwiqVso7943gxKnWfrK/uQGwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTE4Qi83RTBDRUVGQUVF QjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2M2plREVxZFotc3ItNUFi QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNXSENLcFd5anYzamVERXFkWi1zci01QWJCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTE4Qi83RTBDRUVGQUVFQjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2 M2plREVxZFotc3ItNUFiQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9VMQch8a5RgYDt5BB5VsLJnoA3IpnEy705yyD9qoZyaLsz647kAYP 68RET4wHQJbJqF48MI0y+QLd2HqNqhmqcnbkCSxgZ3FTXjj+sULbhzgFkd6sSY7V 7vw1g9a0FeNTJjn8hhNv13NuuSgI8UREdpxUlYm/Pi8JgiADr8rIrxHOYKbH2CJL g/y2j/h9lGSTEICRbj0VUt68A9so9CU6D6cLkpjuoYpWzune0klWgtMEc3HfV4GA yCRZxBgnS2NrGnRgCuRl8VSq5Vzm/7dofNSRvZ+HFt2/hnOSa+p/tF7O0tQ2l/4G m/KQZ37kZNNVOFnNfzJ/n1Ufy5XIr5wE -----END CERTIFICATE-----Generated at Sun May 19 00:30:13 2024 by rpki-client on console-ams.rpki-client.org