$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft File: M3tFD93J_HAiHaXKCXhYhbHRt8w.mft (raw, json) Hash identifier: ObZotFA0unbfoB5h3IKaDo6ZFQ0bB4f76NAHNGNtOZc= Subject key identifier: 23:68:C7:B2:60:A5:FB:28:25:8D:7B:01:7D:6E:7B:88:B1:B0:3D:3C Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC Certificate issuer: /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft Manifest number: 34 Signing time: Sun 19 May 2024 08:21:48 +0000 Manifest this update: Sun 19 May 2024 08:21:48 +0000 Manifest next update: Sun 26 May 2024 08:21:48 +0000 Files and hashes: 1: M3tFD93J_HAiHaXKCXhYhbHRt8w.crl (hash: xxxsu6gLFllg8ppTsExSugrRXuqHGEm3AdtQzG9r/+8=) 2: 35969588CA9211EE833EF985C4F9AE02.roa (hash: x9NOB70tmyEuiV9NvtDO7vxxdmV4Q+z2IFDG64Q1PR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC Validity Not Before: May 19 08:21:48 2024 GMT Not After : May 26 08:21:48 2024 GMT Subject: CN=6649b69c-9156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ee:88:5c:dc:b1:6c:a9:cb:6d:c0:a1:d2:68: 81:63:1d:0c:ad:44:d8:97:97:0b:e4:1b:fe:e3:c9: d6:af:1e:3a:a2:10:5f:92:63:38:5e:63:d1:f5:76: 3e:c8:84:fc:21:07:3a:f9:ed:4f:6f:26:39:56:9c: d8:9f:76:9e:2a:f8:a2:89:fc:12:46:db:ff:b9:70: 4b:7f:3c:6a:59:f8:f0:5a:09:ba:e9:4d:fd:ae:fd: fb:53:c8:54:01:8d:db:07:51:f6:d0:fa:ad:bf:47: f3:08:c4:6f:fc:5c:09:ef:f6:1e:ff:33:93:e8:cc: 3b:96:f2:28:36:8d:1e:ba:0c:6f:4d:26:d9:3d:10: 20:29:42:ba:21:6c:5e:db:b7:e6:b9:cc:e1:d6:71: 54:52:c6:97:b7:5e:47:fe:41:01:3f:ae:c6:4e:5a: 9a:e8:69:3e:3c:54:b4:5f:9a:4d:d8:bb:92:31:05: ee:98:ae:37:21:4e:bb:4f:8e:cc:20:47:09:b2:08: 19:c8:18:2b:99:99:dd:45:06:82:8f:f1:f9:2b:12: 64:36:24:0a:d0:87:a3:df:c9:20:6e:fd:72:13:d2: bb:c1:25:1c:7b:2e:ee:99:47:a4:5a:6f:9d:01:78: dc:72:bf:16:97:38:82:78:68:c9:e9:3d:47:f6:1f: af:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:68:C7:B2:60:A5:FB:28:25:8D:7B:01:7D:6E:7B:88:B1:B0:3D:3C X509v3 Authority Key Identifier: keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:13:73:73:84:9f:d7:3f:37:02:6b:1d:bc:e0:4d:e2:4f:0a: 23:c1:3c:2e:e2:fc:75:8f:64:35:97:ed:9c:01:7f:bd:30:d1: 5d:9a:9d:5e:bb:58:ae:fd:73:a6:af:2f:33:f7:1e:b4:54:0d: 3a:8f:83:e2:ed:24:ea:6c:12:66:14:42:ff:1b:dc:33:b7:63: 5f:33:6a:99:ba:6b:ef:9e:a6:e8:b4:fd:4c:f7:f0:ba:13:e5: 30:8f:93:28:0e:18:70:a7:0c:3e:d0:fe:99:23:44:1d:d1:cb: 94:67:9d:85:e9:c9:c0:f6:70:ec:5a:fb:36:ab:11:c0:e2:a7: f3:d7:80:99:f2:89:1d:8a:13:16:f4:47:70:01:a6:29:4c:ed: ec:86:a1:15:be:29:22:ce:e2:25:db:69:af:7a:9f:60:6e:13: ac:2e:ae:87:7e:52:55:37:e9:96:4b:44:14:d2:5e:61:b3:3e: ff:04:fa:53:86:b8:e6:9b:01:d9:9b:49:94:db:2c:30:da:b3: fb:5d:d0:64:65:a5:88:df:4a:97:a4:72:22:75:c6:41:bb:9e: 58:b3:6b:f6:b7:d1:20:25:51:ad:bd:43:14:00:82:12:e8:05: 62:70:77:a2:3b:8d:4c:5d:87:de:92:95:f0:1c:76:0f:bd:3d: f7:74:17:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTgxQjExMC8GA1UEBRMoMzM3QjQ1MEZEREM5RkM3MDIyMURBNUNBMDk3ODU4ODVC MUQxQjdDQzAeFw0yNDA1MTkwODIxNDhaFw0yNDA1MjYwODIxNDhaMBgxFjAUBgNV BAMTDTY2NDliNjljLTkxNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCV7ohc3LFsqcttwKHSaIFjHQytRNiXlwvkG/7jydavHjqiEF+SYzheY9H1dj7I hPwhBzr57U9vJjlWnNifdp4q+KKJ/BJG2/+5cEt/PGpZ+PBaCbrpTf2u/ftTyFQB jdsHUfbQ+q2/R/MIxG/8XAnv9h7/M5PozDuW8ig2jR66DG9NJtk9ECApQrohbF7b t+a5zOHWcVRSxpe3Xkf+QQE/rsZOWproaT48VLRfmk3Yu5IxBe6YrjchTrtPjswg RwmyCBnIGCuZmd1FBoKP8fkrEmQ2JArQh6PfySBu/XIT0rvBJRx7Lu6ZR6Rab50B eNxyvxaXOIJ4aMnpPUf2H691AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI2jHsmCl +ygljXsBfW57iLGwPTwwHwYDVR0jBBgwFoAUM3tFD93J/HAiHaXKCXhYhbHRt8ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5ODFCL0JDNUNFQUI2Q0E4 QTExRUVCMDU2RTYxRkM0RjlBRTAyL00zdEZEOTNKX0hBaUhhWEtDWGhZaGJIUnQ4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTTN0RkQ5M0pfSEFpSGFYS0NYaFloYkhSdDh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 ODFCL0JDNUNFQUI2Q0E4QTExRUVCMDU2RTYxRkM0RjlBRTAyL00zdEZEOTNKX0hB aUhhWEtDWGhZaGJIUnQ4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC0Tc3OEn9c/NwJrHbzgTeJPCiPBPC7i/HWPZDWX7ZwBf70w0V2anV67 WK79c6avLzP3HrRUDTqPg+LtJOpsEmYUQv8b3DO3Y18zapm6a++epui0/Uz38LoT 5TCPkygOGHCnDD7Q/pkjRB3Ry5RnnYXpycD2cOxa+zarEcDip/PXgJnyiR2KExb0 R3ABpilM7eyGoRW+KSLO4iXbaa96n2BuE6wurod+UlU36ZZLRBTSXmGzPv8E+lOG uOabAdmbSZTbLDDas/td0GRlpYjfSpekciJ1xkG7nliza/a30SAlUa29QxQAghLo BWJwd6I7jUxdh96SlfAcdg+9Pfd0F78= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org