$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft File: 3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json) Hash identifier: E7zzxjmvufTLRNmSiwNbDObCjYH82sHxHafXXbTsf4E= Subject key identifier: 17:00:B7:58:A3:29:FE:15:E3:C8:B4:29:77:B8:D4:BF:FE:EC:53:A9 Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C Certificate issuer: /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Certificate serial: 02CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft Manifest number: 02C6 Signing time: Sun 19 May 2024 03:28:54 +0000 Manifest this update: Sun 19 May 2024 03:28:53 +0000 Manifest next update: Sun 26 May 2024 03:28:53 +0000 Files and hashes: 1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: mjOMtapERzw2EDKG6KjaxGVjHZ+sncmV3ttbrUL5QSY=) 2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: vvesGwwdw13pevInYyT24HAMslE/0OP0vxw1abDxLHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 714 (0x2ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Validity Not Before: May 19 03:28:53 2024 GMT Not After : May 26 03:28:53 2024 GMT Subject: CN=664971f5-99d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:08:f2:2d:f4:26:a6:80:47:81:45:b4:1e:ba: 2c:09:34:4e:d3:30:92:9a:39:44:8a:be:33:8f:4b: 7a:56:07:56:07:6d:d6:4c:78:a0:83:4e:d7:01:c9: 3a:04:19:ae:d6:13:22:b1:5a:f8:7e:e0:08:80:7d: 0a:35:b7:ec:b6:94:6e:8b:2a:03:f4:f7:e5:16:4b: 33:b6:62:69:5c:84:88:5a:3a:b3:9e:a3:0b:e0:be: 48:e4:61:fe:63:29:e7:d1:1e:5c:d1:c4:1c:8e:0b: 93:fc:14:73:55:07:c1:45:27:73:57:ba:16:9d:ab: 9f:81:61:a2:d7:7a:44:25:6a:a8:44:12:66:41:73: 1b:db:18:8e:ec:4b:2d:49:e8:93:1e:aa:4f:3f:7b: 39:fa:96:6f:14:ef:5d:1d:8a:a8:9c:72:ef:91:06: 20:00:12:55:cb:23:bf:23:80:2a:9f:de:f4:77:36: 3d:ab:6a:ed:6b:79:fd:fd:57:52:73:52:8f:b4:81: d0:ce:17:38:13:76:1c:08:f5:4c:fe:6d:91:80:1d: ca:a6:f9:61:01:80:08:60:3c:7b:18:18:99:9f:34: 3b:bf:a0:6d:c9:d5:04:b3:a5:1a:64:c9:ef:7c:c7: e7:c0:04:5d:3d:dd:76:47:96:cd:9d:7e:f4:0f:92: 24:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:00:B7:58:A3:29:FE:15:E3:C8:B4:29:77:B8:D4:BF:FE:EC:53:A9 X509v3 Authority Key Identifier: keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:49:a8:a8:85:08:14:af:a2:63:5c:35:f1:c9:39:0e:3a:a9: c9:05:11:b1:b5:d9:87:e1:5f:63:80:ce:01:9d:38:6c:0a:94: b1:34:6c:c8:55:e8:a2:d2:47:7b:16:cc:36:dc:c2:88:40:ac: 8e:b3:9e:b9:5c:d3:63:36:d5:70:91:cd:08:72:42:a5:3e:a1: e0:93:62:d4:c0:4d:b8:3f:ab:d3:f8:a7:f1:9b:5f:9c:8c:8a: e1:8b:35:8e:4b:c7:c6:29:67:dc:66:18:91:82:a3:af:2c:7e: e3:07:cb:87:90:45:75:c8:af:f5:7d:1a:81:11:85:5f:0b:3b: 81:1a:90:4f:86:2a:46:58:98:44:3c:12:ea:2b:34:6c:56:a9: 6c:27:b3:10:83:ef:bb:27:42:68:bf:d7:68:08:f8:09:a2:61: fc:8b:d6:ab:ce:8a:59:da:78:d9:f4:b1:c5:a2:f0:ab:aa:2c: f9:59:f8:a8:7c:5b:b9:94:86:52:cb:ed:6b:26:f5:f7:d8:56: 9b:c3:08:38:29:f2:10:c8:d8:36:f6:d2:c5:42:43:77:c5:67: 3b:46:72:67:ce:4f:fe:b0:e0:68:b3:6c:a5:98:fc:72:67:ec: a5:28:f0:36:ca:03:b9:b7:33:32:8e:fc:27:d8:e1:9a:6d:b5: e3:96:b4:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFOTExMTAvBgNVBAUTKERDQ0JDQzk4OTM4MDkwOTlFRDAyQjcxNzgxODQzNjU0 MTZCMzFFMUMwHhcNMjQwNTE5MDMyODUzWhcNMjQwNTI2MDMyODUzWjAYMRYwFAYD VQQDEw02NjQ5NzFmNS05OWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAjyLfQmpoBHgUW0HrosCTRO0zCSmjlEir4zj0t6VgdWB23WTHigg07XAck6 BBmu1hMisVr4fuAIgH0KNbfstpRuiyoD9PflFksztmJpXISIWjqznqML4L5I5GH+ Yynn0R5c0cQcjguT/BRzVQfBRSdzV7oWnaufgWGi13pEJWqoRBJmQXMb2xiO7Est SeiTHqpPP3s5+pZvFO9dHYqonHLvkQYgABJVyyO/I4Aqn970dzY9q2rta3n9/VdS c1KPtIHQzhc4E3YcCPVM/m2RgB3KpvlhAYAIYDx7GBiZnzQ7v6BtydUEs6UaZMnv fMfnwARdPd12R5bNnX70D5IkJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcAt1ij Kf4V48i0KXe41L/+7FOpMB8GA1UdIwQYMBaAFNzLzJiTgJCZ7QK3F4GENlQWsx4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU5MS8yRTkyMTYzNkE0 MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtKbnRBcmNYZ1lRMlZCYXpI aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNdk1tSk9Ba0pudEFyY1hnWVEyVkJhekhody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU5MS8yRTkyMTYzNkE0MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtK bnRBcmNYZ1lRMlZCYXpIaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4SaiohQgUr6JjXDXxyTkOOqnJBRGxtdmH4V9jgM4BnThsCpSxNGzI Veii0kd7Fsw23MKIQKyOs565XNNjNtVwkc0IckKlPqHgk2LUwE24P6vT+Kfxm1+c jIrhizWOS8fGKWfcZhiRgqOvLH7jB8uHkEV1yK/1fRqBEYVfCzuBGpBPhipGWJhE PBLqKzRsVqlsJ7MQg++7J0Jov9doCPgJomH8i9arzopZ2njZ9LHFovCrqiz5Wfio fFu5lIZSy+1rJvX32Fabwwg4KfIQyNg29tLFQkN3xWc7RnJnzk/+sOBos2ylmPxy Z+ylKPA2ygO5tzMyjvwn2OGabbXjlrRh -----END CERTIFICATE-----Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org