$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json) Hash identifier: 091HjH8kFThK4ob/336k29oQGAh+nScYZmLCZm963Wk= Subject key identifier: 1C:50:76:C3:70:EC:E0:A8:84:BD:6A:CE:B0:61:55:2C:88:74:0A:14 Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Certificate serial: 0403 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft Manifest number: 0400 Signing time: Sun 19 May 2024 02:09:46 +0000 Manifest this update: Sun 19 May 2024 02:09:45 +0000 Manifest next update: Sun 26 May 2024 02:09:45 +0000 Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: mVWiwnk2JvvSXtFSIDojFg47I6kJWa+Q9IDRm8XlAXY=) 2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: NznoTmi8l5BXvAh4os7Np/yLM2FpVcgBbcjtp7uh7SM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1027 (0x403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Validity Not Before: May 19 02:09:45 2024 GMT Not After : May 26 02:09:45 2024 GMT Subject: CN=66495f6a-cd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:3f:8f:23:7c:3c:18:51:f4:87:8d:b8:6e: 80:0f:46:d2:9e:78:b9:61:34:81:99:02:9f:54:58: cb:8b:0b:2a:23:23:bb:10:ab:42:28:62:fb:f5:10: 4b:6d:83:9c:96:c4:a4:bb:f7:b0:22:ad:9b:9e:b0: 50:cd:42:a0:b7:69:0b:a8:c6:92:15:13:2f:8c:78: c1:a2:1e:fd:8e:fb:c9:20:83:fc:1a:8d:bd:a7:bf: d9:43:e4:50:ab:d7:d3:21:c2:cb:bf:33:13:11:6f: 34:b9:be:f2:55:a7:b1:72:80:7f:ef:96:b2:99:fe: 0b:5d:ea:b6:05:a8:a4:29:0d:64:1f:9d:dc:b4:a9: 2b:3c:3a:ad:71:9a:33:bf:fe:b3:36:65:19:cc:bd: b0:dd:9a:e1:40:c9:9a:e2:ee:4e:73:3c:80:7e:e2: 94:2c:d8:87:ca:7d:0f:3e:bf:88:72:98:b1:f8:a7: 05:27:d5:e9:c3:47:c9:7b:5d:cf:b1:d9:6b:df:71: b4:02:df:f9:36:7a:cc:57:e3:d4:a8:8d:03:45:e5: f3:02:a7:e9:01:39:c8:05:f3:f6:6c:53:66:df:f7: 3f:1f:0e:31:30:a6:7a:a5:97:b8:58:37:fa:1e:f0: 76:4d:05:5c:ed:5e:29:16:e7:2f:63:04:93:5c:19: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:50:76:C3:70:EC:E0:A8:84:BD:6A:CE:B0:61:55:2C:88:74:0A:14 X509v3 Authority Key Identifier: keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:dc:fa:74:c4:f7:31:d6:95:9c:92:4f:ff:f0:be:f3:d0:3a: a6:a8:ac:d6:e6:85:94:0d:cf:d1:40:6a:2d:28:7a:ff:fe:8c: 8f:c3:53:f5:6f:ad:28:8d:bc:d1:48:87:dd:0b:d9:f1:09:8d: 59:df:73:5c:de:14:8f:dc:4a:a5:e0:47:fb:42:d3:fc:1c:ee: 92:10:39:6a:34:e4:1f:63:95:8e:7f:c2:92:85:92:36:3d:b8: 20:e6:5a:a4:a4:fd:59:d8:48:a9:75:4d:d6:36:20:04:3f:3e: 8c:7d:cb:6a:8a:bf:3b:c5:a3:a6:2b:00:06:f8:0f:06:98:47: b8:c5:a6:3d:47:ec:f1:33:cf:76:f8:f6:4a:d1:84:4f:d4:86: e3:22:0c:44:7d:aa:83:9e:69:9d:f7:88:2b:5a:0d:2c:b9:81: 8c:0e:fa:68:d9:e3:50:0b:81:13:01:ce:09:db:74:8e:f0:58: 34:b3:e1:32:3e:4f:ad:2d:05:2b:1b:d2:e3:48:5f:5e:df:b6: ba:44:54:80:1f:7e:a4:0b:a9:57:91:57:00:74:0e:1a:6d:e2: 5c:85:82:ab:30:a3:de:35:12:88:42:fb:07:af:c0:07:3f:f3: 6d:cb:91:1d:a4:69:bd:28:c0:9b:ce:c4:79:42:a5:65:02:5f: 7b:49:c0:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKERFNzhGNDNENTdDMEJFNzIyMjQ3NDMyRDZCQUFGN0Ey N0MxQTVCOUEwHhcNMjQwNTE5MDIwOTQ1WhcNMjQwNTI2MDIwOTQ1WjAYMRYwFAYD VQQDEw02NjQ5NWY2YS1jZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdU/jyN8PBhR9IeNuG6AD0bSnni5YTSBmQKfVFjLiwsqIyO7EKtCKGL79RBL bYOclsSku/ewIq2bnrBQzUKgt2kLqMaSFRMvjHjBoh79jvvJIIP8Go29p7/ZQ+RQ q9fTIcLLvzMTEW80ub7yVaexcoB/75aymf4LXeq2BaikKQ1kH53ctKkrPDqtcZoz v/6zNmUZzL2w3ZrhQMma4u5OczyAfuKULNiHyn0PPr+Icpix+KcFJ9Xpw0fJe13P sdlr33G0At/5NnrMV+PUqI0DReXzAqfpATnIBfP2bFNm3/c/Hw4xMKZ6pZe4WDf6 HvB2TQVc7V4pFucvYwSTXBnIzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxQdsNw 7OCohL1qzrBhVSyIdAoUMB8GA1UdIwQYMBaAFN549D1XwL5yIkdDLWuq96J8Glua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS8yRTQzQzNFQzI4 NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZuSWlSME10YTZyM29ud2FX NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajBQVmZBdm5JaVIwTXRhNnIzb253YVc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS8yRTQzQzNFQzI4NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZu SWlSME10YTZyM29ud2FXNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu3Pp0xPcx1pWckk//8L7z0DqmqKzW5oWUDc/RQGotKHr//oyPw1P1 b60ojbzRSIfdC9nxCY1Z33Nc3hSP3Eql4Ef7QtP8HO6SEDlqNOQfY5WOf8KShZI2 Pbgg5lqkpP1Z2EipdU3WNiAEPz6Mfctqir87xaOmKwAG+A8GmEe4xaY9R+zxM892 +PZK0YRP1IbjIgxEfaqDnmmd94grWg0suYGMDvpo2eNQC4ETAc4J23SO8Fg0s+Ey Pk+tLQUrG9LjSF9e37a6RFSAH36kC6lXkVcAdA4abeJchYKrMKPeNRKIQvsHr8AH P/Nty5EdpGm9KMCbzsR5QqVlAl97ScCG -----END CERTIFICATE-----Generated at Sun May 19 02:39:35 2024 by rpki-client on console-fra.rpki-client.org