$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft File: a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft (raw, json) Hash identifier: zBnR2C1LSqcq2xFJZpmtnjrVmbmA4W3too0p1IAQ65Y= Subject key identifier: C0:8E:89:73:72:24:8E:55:F4:A4:F7:68:0F:23:F6:B5:7C:DF:CB:31 Authority key identifier: 6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 Certificate issuer: /CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Certificate serial: 0885 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft Manifest number: 0880 Signing time: Sat 18 May 2024 21:35:17 +0000 Manifest this update: Sat 18 May 2024 21:35:17 +0000 Manifest next update: Sat 25 May 2024 21:35:17 +0000 Files and hashes: 1: a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl (hash: 2M5Z1WY0I7GOludjHAJtAuJn8BlbzIF0LRSQcqJXD3w=) 2: 73A482FC9A8C11EAB72EA56DC4F9AE02.roa (hash: y0IVg6IKxUm3csPbusIpeqIGZmaXYMDUyk8KKZg6iLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2181 (0x885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Validity Not Before: May 18 21:35:17 2024 GMT Not After : May 25 21:35:17 2024 GMT Subject: CN=66491f15-b9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:62:42:07:12:06:ae:77:5b:9b:48:03:10: de:2a:cd:bc:4b:ca:42:54:b7:76:e3:c3:fe:50:bd: c3:be:90:ee:c9:71:69:07:0c:32:66:0b:9a:4f:8b: 7a:35:50:b1:da:51:d5:74:af:31:d8:57:3c:76:41: ab:d4:69:6d:0f:0b:cd:af:0f:b6:60:a3:61:e1:5d: dd:71:a0:32:c2:3f:f9:1b:24:23:9b:09:bd:c8:dd: 7e:87:18:47:6b:07:99:63:be:25:50:f7:da:dd:01: be:ca:35:97:2a:49:f1:c3:e4:a1:62:b3:db:61:c3: 39:07:00:6d:f3:c1:d9:06:b4:60:74:a4:85:03:74: ab:5f:7c:1e:70:be:0a:2b:14:8d:1b:4c:e4:17:92: d5:78:13:54:3a:fa:dd:44:24:f0:3f:f1:a5:5d:84: 3f:cf:42:f6:d4:0f:9b:ac:35:46:6d:1a:97:f7:aa: 26:d0:c8:b9:a2:97:f7:1f:74:76:a5:5a:d4:fe:2a: 60:9d:c8:c2:5a:6d:65:53:ed:7d:6f:9d:c3:dd:82: 01:aa:d5:5e:a2:60:27:0b:1d:da:de:a4:41:92:a5: a5:fc:33:52:95:6d:00:5f:55:8f:01:65:b2:6f:43: df:4a:46:f3:87:f5:38:a0:21:cd:31:f6:19:cf:4d: 98:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8E:89:73:72:24:8E:55:F4:A4:F7:68:0F:23:F6:B5:7C:DF:CB:31 X509v3 Authority Key Identifier: keyid:6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:45:00:b8:1b:76:d2:80:e3:9c:59:6a:a5:0f:48:86:0c:14: 3e:58:d3:31:d9:4e:93:d9:db:3e:47:d3:1b:00:65:c0:49:02: 39:60:2c:96:a8:72:fa:9b:6d:80:99:2d:7a:03:eb:7b:1c:ec: fe:51:eb:09:d4:34:68:d1:48:a5:66:84:eb:64:2d:9b:2b:11: b3:3d:dd:97:a9:e0:a6:d5:c1:98:5c:26:05:15:2d:1f:de:ec: 0a:85:4b:f7:19:a6:21:17:35:a9:82:40:ff:cd:35:08:6c:70: 00:24:74:19:a6:08:9d:eb:f6:d3:8a:84:9d:7b:51:5a:c8:2f: 37:69:d5:a8:25:90:15:16:95:51:dc:7e:ed:b8:08:52:73:cc: ae:d8:82:4d:b8:e6:61:47:bc:1a:fb:7d:f0:29:bc:30:ef:59: 18:f1:ec:86:38:32:26:72:4e:d0:9f:3f:3b:13:68:f9:4e:95: 27:fb:c5:d9:4c:57:03:57:a2:e8:8e:81:4a:87:96:63:e5:60: 5c:4a:e3:1a:3f:4b:a4:24:1b:61:06:a4:e7:23:87:4d:c6:f5: 32:44:f4:44:5d:6d:d9:f9:d3:53:de:0b:54:3b:37:96:38:72: 0c:c4:99:78:f0:d6:91:bc:6f:f9:5b:ff:fb:fb:54:7c:df:76: 44:a8:99:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNEExMTAvBgNVBAUTKDZCNzMyREYwODg0QUFENjZBNUQ1QTFFRkU5QTYwRENE RTNCOUJFNTUwHhcNMjQwNTE4MjEzNTE3WhcNMjQwNTI1MjEzNTE3WjAYMRYwFAYD VQQDEw02NjQ5MWYxNS1iOWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDFiQgcSBq53W5tIAxDeKs28S8pCVLd248P+UL3DvpDuyXFpBwwyZguaT4t6 NVCx2lHVdK8x2Fc8dkGr1GltDwvNrw+2YKNh4V3dcaAywj/5GyQjmwm9yN1+hxhH aweZY74lUPfa3QG+yjWXKknxw+ShYrPbYcM5BwBt88HZBrRgdKSFA3SrX3wecL4K KxSNG0zkF5LVeBNUOvrdRCTwP/GlXYQ/z0L21A+brDVGbRqX96om0Mi5opf3H3R2 pVrU/ipgncjCWm1lU+19b53D3YIBqtVeomAnCx3a3qRBkqWl/DNSlW0AX1WPAWWy b0PfSkbzh/U4oCHNMfYZz02Y3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCOiXNy JI5V9KT3aA8j9rV838sxMB8GA1UdIwQYMBaAFGtzLfCISq1mpdWh7+mmDc3jub5V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE0QS8xQkE0QTZGMjlB ODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JXYWwxYUh2NmFZTnplTzV2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EzTXQ4SWhLcldhbDFhSHY2YVlOemVPNXZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REE0QS8xQkE0QTZGMjlBODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JX YWwxYUh2NmFZTnplTzV2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVRQC4G3bSgOOcWWqlD0iGDBQ+WNMx2U6T2ds+R9MbAGXASQI5YCyW qHL6m22AmS16A+t7HOz+UesJ1DRo0UilZoTrZC2bKxGzPd2XqeCm1cGYXCYFFS0f 3uwKhUv3GaYhFzWpgkD/zTUIbHAAJHQZpgid6/bTioSde1FayC83adWoJZAVFpVR 3H7tuAhSc8yu2IJNuOZhR7wa+33wKbww71kY8eyGODImck7Qnz87E2j5TpUn+8XZ TFcDV6LojoFKh5Zj5WBcSuMaP0ukJBthBqTnI4dNxvUyRPREXW3Z+dNT3gtUOzeW OHIMxJl48NaRvG/5W//7+1R833ZEqJmd -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org