$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft File: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft (raw, json) Hash identifier: mH6bHq1OYo62E0RFnsWp2FT+yWOmHLQbukWxy+uTJfI= Subject key identifier: E2:9E:15:38:7E:C7:C1:A8:21:49:61:80:31:53:F2:4F:5A:02:09:F8 Authority key identifier: DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76 Certificate issuer: /CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576 Certificate serial: 0B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft Manifest number: 0B25 Signing time: Sat 18 May 2024 19:50:01 +0000 Manifest this update: Sat 18 May 2024 19:50:01 +0000 Manifest next update: Sat 25 May 2024 19:50:01 +0000 Files and hashes: 1: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl (hash: /FfK/XmAJcvAETzDJCTGCdwmIyfNCfJREdHoxXM7Avo=) 2: 22B947600CA911ED83641426C4F9AE02.roa (hash: TBhNokfiijNK8Rg6s94Igg1fdSDus42hiQezGTpkcIA=) 3: 8F1265301E4D11ED8E43BE2DC4F9AE02.roa (hash: 3sllv5Z5zDzT+OMmDjcbG3aF9voQdTZoJVoCNd4bXHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576 Validity Not Before: May 18 19:50:01 2024 GMT Not After : May 25 19:50:01 2024 GMT Subject: CN=66490669-b2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:25:23:2b:2a:b6:fc:3c:d5:6c:5b:f1:b8:03: 6f:a7:1f:da:4f:0c:0d:7c:d2:e7:1b:5e:0b:b5:4b: e8:d8:9c:7e:68:15:15:2c:94:c4:d1:2d:3d:5f:66: fb:f7:96:6a:40:f2:6a:45:7a:d9:cd:89:be:3c:01: c4:80:a5:95:79:6b:ad:7b:47:11:01:c6:90:bc:32: 0c:73:95:bf:11:23:a9:bb:0d:06:1e:e2:f6:8d:56: 60:b0:4d:8c:21:a7:49:cf:7f:34:87:2b:f6:75:6a: 0d:dc:2b:b4:a8:5f:25:61:99:d8:d0:1b:68:04:ed: 8a:dd:49:f7:b8:e8:95:0a:87:c3:fb:79:f1:94:60: 60:30:1a:8a:c1:55:be:90:20:b4:42:12:ef:fd:37: da:2a:5a:79:2c:32:84:9a:02:6a:2b:65:8d:90:bc: 7d:42:1d:85:a7:1e:e7:26:9f:62:aa:c9:34:f3:2b: 07:d8:c0:d9:0f:97:30:ac:42:1c:8f:f8:55:e0:fd: bd:fc:60:b7:15:9b:60:15:d1:4a:2a:d2:af:b6:6c: cd:36:ba:80:91:e7:98:61:94:9b:81:4e:a1:c4:b7: 20:a7:34:3a:52:0a:70:cf:b9:72:f0:3d:5e:8c:b7: 8e:01:dc:0b:4a:20:5c:a2:f9:df:38:f7:ae:3e:e4: 57:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9E:15:38:7E:C7:C1:A8:21:49:61:80:31:53:F2:4F:5A:02:09:F8 X509v3 Authority Key Identifier: keyid:DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c2:64:f1:38:be:f2:37:73:0c:62:4a:26:ec:43:54:a3:06: aa:84:1f:51:72:00:70:6c:b7:14:bd:fa:98:2d:33:21:bb:0d: 53:78:bf:10:68:38:d9:f5:fb:76:84:06:1b:e5:c8:9b:fc:df: b6:ed:56:36:30:5c:8f:8f:1f:48:d7:85:5c:af:df:6a:47:e1: b0:07:88:3c:49:75:72:df:d9:42:d3:e9:ff:cd:c0:ae:96:f7: c1:75:33:c9:a9:9e:4b:1d:cb:9b:e0:b6:72:a4:bb:1c:13:e4: de:ad:6f:42:d6:08:2a:db:92:08:58:76:df:60:d0:87:5f:4a: d0:3d:b9:73:32:aa:ef:30:15:69:fd:99:c0:62:63:a7:31:48: 18:85:d9:7d:1d:7b:40:c8:cd:f2:46:e4:e1:3f:66:29:f6:1e: 63:d0:26:b6:d1:19:df:46:aa:45:54:c5:4c:67:6d:50:d8:c3: 22:c6:9d:61:a0:30:40:c3:52:33:23:61:c6:f0:0f:5a:76:86: 98:c3:96:e6:0f:8c:84:21:1a:98:7b:1d:d6:ee:07:bf:f1:2d: 43:ba:80:a7:d5:01:ad:a1:63:a9:d4:d8:eb:9b:ac:ba:83:e0: fb:f0:5c:d6:52:17:b4:e7:f1:a4:cd:4f:83:bf:99:dd:74:ec: 6a:9b:01:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBQUQxMTAvBgNVBAUTKERERjg4NDkxMUFEM0YyOENDOUQ5NkE4QzI0QTkzOUE2 NUY4QjI1NzYwHhcNMjQwNTE4MTk1MDAxWhcNMjQwNTI1MTk1MDAxWjAYMRYwFAYD VQQDEw02NjQ5MDY2OS1iMmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iUjKyq2/DzVbFvxuANvpx/aTwwNfNLnG14LtUvo2Jx+aBUVLJTE0S09X2b7 95ZqQPJqRXrZzYm+PAHEgKWVeWute0cRAcaQvDIMc5W/ESOpuw0GHuL2jVZgsE2M IadJz380hyv2dWoN3Cu0qF8lYZnY0BtoBO2K3Un3uOiVCofD+3nxlGBgMBqKwVW+ kCC0QhLv/TfaKlp5LDKEmgJqK2WNkLx9Qh2Fpx7nJp9iqsk08ysH2MDZD5cwrEIc j/hV4P29/GC3FZtgFdFKKtKvtmzNNrqAkeeYYZSbgU6hxLcgpzQ6Ugpwz7ly8D1e jLeOAdwLSiBcovnfOPeuPuRXiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKeFTh+ x8GoIUlhgDFT8k9aAgn4MB8GA1UdIwQYMBaAFN34hJEa0/KMydlqjCSpOaZfiyV2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBRC81MjFBRERDODE4 NDgxMUVBOTA3ODU2MkJDNEY5QUUwMi8zZmlFa1JyVDhvekoyV3FNSktrNXBsLUxK WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNmaUVrUnJUOG96SjJXcU1KS2s1cGwtTEpYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkFBRC81MjFBRERDODE4NDgxMUVBOTA3ODU2MkJDNEY5QUUwMi8zZmlFa1JyVDhv ekoyV3FNSktrNXBsLUxKWFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6wmTxOL7yN3MMYkom7ENUowaqhB9RcgBwbLcUvfqYLTMhuw1TeL8Q aDjZ9ft2hAYb5cib/N+27VY2MFyPjx9I14Vcr99qR+GwB4g8SXVy39lC0+n/zcCu lvfBdTPJqZ5LHcub4LZypLscE+TerW9C1ggq25IIWHbfYNCHX0rQPblzMqrvMBVp /ZnAYmOnMUgYhdl9HXtAyM3yRuThP2Yp9h5j0Ca20RnfRqpFVMVMZ21Q2MMixp1h oDBAw1IzI2HG8A9adoaYw5bmD4yEIRqYex3W7ge/8S1DuoCn1QGtoWOp1Njrm6y6 g+D78FzWUhe05/GkzU+Dv5nddOxqmwFG -----END CERTIFICATE-----Generated at Sat May 18 21:31:26 2024 by rpki-client on console-ams.rpki-client.org