$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json) Hash identifier: WBSrK2B/X5ZatSTDkly1js2dbs6EwfPEk2fQBGuSnU4= Subject key identifier: 3B:BA:6E:0F:47:29:C5:91:A8:34:C7:CF:58:BD:C2:19:00:F3:31:71 Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft Manifest number: 0865 Signing time: Sat 18 May 2024 21:38:22 +0000 Manifest this update: Sat 18 May 2024 21:38:22 +0000 Manifest next update: Sat 25 May 2024 21:38:22 +0000 Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: LO0FB5EF6+/Qtr6cxWLyXYY7kRiJlihr49Pw5cHRbiw=) 2: 649A355C5F0F11EBBDB7C113C4F9AE02.roa (hash: 87oEZjsADi0wATsrr5oT1WDzAIv+RsUiGtSSQ4cAuO4=) 3: 20544B84F14511ECA1AE5F4EC4F9AE02.roa (hash: TejrQZ9//dz8pw5abLLeeWWk5O7Slayjh+ANs1GKDDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: May 18 21:38:22 2024 GMT Not After : May 25 21:38:22 2024 GMT Subject: CN=66491fce-c0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d2:b1:b2:17:55:a7:b9:8a:b5:f7:6e:58:09: 85:16:a3:b0:80:84:b5:bb:f0:3b:cf:29:1b:02:8e: fa:0e:96:b8:1d:fb:c5:a1:bd:fc:0d:03:2b:d6:b0: 02:64:1d:17:e8:43:49:68:c4:2a:2b:ec:8d:7f:34: 70:36:20:95:82:1a:46:2d:cb:d2:0e:4d:02:87:04: b0:b6:7b:99:d6:1b:f7:9c:48:11:6e:64:20:ed:29: 86:cc:ca:07:eb:88:9a:e3:39:cc:20:89:65:fa:ac: 45:f4:80:40:c6:90:47:83:d8:ae:d5:a1:f9:08:7b: 75:0c:e6:bc:2c:0b:91:a0:20:93:77:02:f4:27:8f: 9d:4c:a6:82:f6:d2:03:28:8b:de:bd:53:9c:13:fe: 07:ad:2c:7c:f3:07:32:df:cb:b2:d7:7f:2d:c6:59: 01:d1:9f:b9:5d:57:e2:a7:8b:26:bb:74:39:24:b0: 23:de:0d:2d:fe:fd:44:ff:e0:ca:ba:47:d3:79:15: 32:9f:2f:85:1f:a9:62:c6:de:68:1f:9b:98:83:a1: e0:f7:5d:83:8b:8d:d5:5d:c2:ed:cf:ce:39:bc:af: 26:e5:ea:9d:4b:6a:82:31:eb:4e:9e:a8:e5:5f:50: d8:89:96:8e:7e:0b:58:6e:b1:8f:61:08:a2:9e:cb: 77:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BA:6E:0F:47:29:C5:91:A8:34:C7:CF:58:BD:C2:19:00:F3:31:71 X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:38:94:c2:ee:37:43:ae:15:5b:06:84:13:06:5d:5f:0a:2b: e5:92:ae:15:70:d6:d4:be:f0:46:0e:c3:d4:a1:6c:1f:13:dc: a3:a5:0f:e4:45:46:9b:44:53:63:e7:45:3f:e8:28:c1:5a:96: b5:92:6a:21:be:a0:fd:28:f3:9d:52:2b:2d:ea:89:9c:dc:80: ca:32:56:8e:8b:7a:9e:4f:ea:5b:43:1c:a8:0e:86:a8:4d:e6: 33:8c:aa:7e:ec:fe:2d:93:a9:ef:69:97:71:39:c9:9e:00:8b: 29:c3:55:71:56:4d:87:31:78:5c:6e:52:4e:45:10:a0:df:29: 60:9d:38:a3:76:cb:5e:83:45:9f:1e:d9:ec:47:ab:4f:c6:1d: f1:86:9d:1d:76:40:bb:14:0c:3e:0f:d4:b1:e2:e5:f4:80:89: 2b:b5:5e:e9:1d:48:f5:82:c5:32:c7:5f:70:a2:d7:16:bf:af: 0f:c3:32:f7:da:c1:48:f0:46:03:ec:a0:9d:ea:7b:ee:a7:e2: 9e:23:88:c4:9c:6c:0a:08:3f:4c:cf:82:22:43:f2:7a:a4:ae: 1d:72:60:a7:ca:32:ff:45:c4:2c:63:9d:17:94:76:31:5e:c1: 9d:0c:ac:06:ed:84:5f:92:97:3e:5a:a4:9b:94:63:ca:22:cc: c1:3b:22:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjQwNTE4MjEzODIyWhcNMjQwNTI1MjEzODIyWjAYMRYwFAYD VQQDEw02NjQ5MWZjZS1jMGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NKxshdVp7mKtfduWAmFFqOwgIS1u/A7zykbAo76Dpa4HfvFob38DQMr1rAC ZB0X6ENJaMQqK+yNfzRwNiCVghpGLcvSDk0ChwSwtnuZ1hv3nEgRbmQg7SmGzMoH 64ia4znMIIll+qxF9IBAxpBHg9iu1aH5CHt1DOa8LAuRoCCTdwL0J4+dTKaC9tID KIvevVOcE/4HrSx88wcy38uy138txlkB0Z+5XVfip4smu3Q5JLAj3g0t/v1E/+DK ukfTeRUyny+FH6lixt5oH5uYg6Hg912Di43VXcLtz845vK8m5eqdS2qCMetOnqjl X1DYiZaOfgtYbrGPYQiinst3NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDu6bg9H KcWRqDTHz1i9whkA8zFxMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J T0F4WFNTMnhqeXZJU2NVb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzOJTC7jdDrhVbBoQTBl1fCivlkq4VcNbUvvBGDsPUoWwfE9yjpQ/k RUabRFNj50U/6CjBWpa1kmohvqD9KPOdUist6omc3IDKMlaOi3qeT+pbQxyoDoao TeYzjKp+7P4tk6nvaZdxOcmeAIspw1VxVk2HMXhcblJORRCg3ylgnTijdsteg0Wf HtnsR6tPxh3xhp0ddkC7FAw+D9Sx4uX0gIkrtV7pHUj1gsUyx19wotcWv68PwzL3 2sFI8EYD7KCd6nvup+KeI4jEnGwKCD9Mz4IiQ/J6pK4dcmCnyjL/RcQsY50XlHYx XsGdDKwG7YRfkpc+WqSblGPKIszBOyJa -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org