$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft File: 3ETtNb69CygywHT8LEaqsM1oL94.mft (raw, json) Hash identifier: fwQqSTXKWZdygF4SiPjFc6DLF5OGI/AoTfRYh25c3FY= Subject key identifier: C1:3F:03:06:EC:36:34:07:ED:4A:3A:8E:70:52:D3:64:AC:98:D6:7C Authority key identifier: DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE Certificate issuer: /CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Certificate serial: 0FCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft Manifest number: 1799 Signing time: Fri 31 May 2024 18:28:54 +0000 Manifest this update: Fri 31 May 2024 18:28:53 +0000 Manifest next update: Fri 07 Jun 2024 18:28:53 +0000 Files and hashes: 1: 3ETtNb69CygywHT8LEaqsM1oL94.crl (hash: 8ivQ8wc0Vd0vOvNyqrjz/ggExNQsueU9kwahO7ZA+Hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4045 (0xfcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Validity Not Before: May 31 18:28:53 2024 GMT Not After : Jun 7 18:28:53 2024 GMT Subject: CN=665a16e6-f46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f8:26:30:14:be:05:10:2d:9c:89:b6:2a:80: 38:1d:f9:30:17:37:59:5e:20:0b:e1:42:5b:b7:5d: 81:53:6b:de:4b:4c:ca:2b:62:b0:a2:f8:94:c5:a4: f8:4e:22:50:dc:17:49:27:d8:18:ff:4e:9f:ad:5a: 8c:54:30:7f:e4:32:cd:5d:0a:78:be:35:3a:d0:67: 15:37:f1:7d:cf:0e:d7:4f:18:29:7b:c7:20:ce:c4: 4b:87:56:a5:26:6d:4d:a2:73:79:86:4a:88:49:2d: 3b:20:2c:8b:5f:e5:e4:cb:e1:61:0b:b9:94:86:40: 2a:c8:7e:38:c8:51:03:5c:4f:27:ac:8f:05:01:80: 56:bc:16:2f:96:96:9b:4b:58:81:85:42:52:d2:c9: a4:fe:8b:e7:6d:32:4f:ee:9b:33:40:bd:51:b7:1b: ab:b7:35:5c:4f:c7:78:b1:3e:c2:5b:61:dd:3f:b0: af:d6:be:d9:67:27:cf:fc:14:a0:e3:77:4a:15:d4: d4:b1:ea:0a:c1:b9:48:3b:0e:1b:04:0f:58:97:4e: 63:b1:5d:97:2f:95:4d:2b:34:20:23:c0:78:50:ff: 64:e8:49:17:e0:af:93:40:2d:1f:fa:ca:0c:f8:03: 6b:01:c8:37:e1:9d:4e:51:b4:bd:75:07:2c:1f:4a: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3F:03:06:EC:36:34:07:ED:4A:3A:8E:70:52:D3:64:AC:98:D6:7C X509v3 Authority Key Identifier: keyid:DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:93:1d:84:d7:e9:19:a4:b3:e8:4e:95:f7:58:d3:f4:ec:0b: 61:1a:b8:bd:86:6e:c7:cf:e4:e9:b6:7e:44:2d:3a:56:2b:3f: a8:8d:a9:2b:5d:5e:9c:0f:f2:91:8d:34:1c:28:38:ac:da:55: 3b:4c:6d:68:02:7c:e9:1a:17:eb:eb:d2:28:fa:9c:2a:e8:ef: 7d:84:84:29:1b:5b:a4:2e:d8:e0:a6:85:98:38:d1:86:6e:85: 3e:f7:fe:01:e0:f7:fb:ee:84:8b:8d:23:9b:cc:02:7d:fc:6c: 04:d6:f9:9e:2a:ab:02:f6:86:34:5f:cc:0a:31:be:60:b4:1d: de:d4:cb:e3:47:0e:34:fa:5e:ee:45:d7:db:cd:ff:fa:55:0d: b2:35:71:b2:08:a3:07:e5:d1:7e:ee:7b:84:be:48:d8:2a:88: dc:d3:42:75:e3:80:7d:ce:1e:6d:c3:bb:da:59:20:c7:3f:fe: 5a:5e:1c:c3:c0:7e:e0:ec:ab:fe:ef:94:4b:85:1b:68:07:2b: 4e:25:86:bb:34:e8:2b:d5:ae:46:63:1d:0e:da:d6:2e:80:de: b4:65:a3:4c:c9:b7:95:3d:1c:15:4e:58:62:41:0d:3a:5c:09: 91:33:43:1f:bb:5d:f5:40:6f:8f:b0:4b:26:a8:75:65:00:26: 62:d7:9f:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKERDNDRFRDM1QkVCRDBCMjgzMkMwNzRGQzJDNDZBQUIw Q0Q2ODJGREUwHhcNMjQwNTMxMTgyODUzWhcNMjQwNjA3MTgyODUzWjAYMRYwFAYD VQQDEw02NjVhMTZlNi1mNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmfgmMBS+BRAtnIm2KoA4HfkwFzdZXiAL4UJbt12BU2veS0zKK2KwoviUxaT4 TiJQ3BdJJ9gY/06frVqMVDB/5DLNXQp4vjU60GcVN/F9zw7XTxgpe8cgzsRLh1al Jm1NonN5hkqISS07ICyLX+Xky+FhC7mUhkAqyH44yFEDXE8nrI8FAYBWvBYvlpab S1iBhUJS0smk/ovnbTJP7pszQL1RtxurtzVcT8d4sT7CW2HdP7Cv1r7ZZyfP/BSg 43dKFdTUseoKwblIOw4bBA9Yl05jsV2XL5VNKzQgI8B4UP9k6EkX4K+TQC0f+soM +ANrAcg34Z1OUbS9dQcsH0p79wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFME/Awbs NjQH7Uo6jnBS02SsmNZ8MB8GA1UdIwQYMBaAFNxE7TW+vQsoMsB0/CxGqrDNaC/e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5Z3l3SFQ4TEVhcXNNMW9M OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFVHROYjY5Q3lneXdIVDhMRWFxc00xb0w5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5 Z3l3SFQ4TEVhcXNNMW9MOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNkx2E1+kZpLPoTpX3WNP07AthGri9hm7Hz+Tptn5ELTpWKz+ojakr XV6cD/KRjTQcKDis2lU7TG1oAnzpGhfr69Io+pwq6O99hIQpG1ukLtjgpoWYONGG boU+9/4B4Pf77oSLjSObzAJ9/GwE1vmeKqsC9oY0X8wKMb5gtB3e1MvjRw40+l7u Rdfbzf/6VQ2yNXGyCKMH5dF+7nuEvkjYKojc00J144B9zh5tw7vaWSDHP/5aXhzD wH7g7Kv+75RLhRtoBytOJYa7NOgr1a5GYx0O2tYugN60ZaNMybeVPRwVTlhiQQ06 XAmRM0Mfu131QG+PsEsmqHVlACZi15+M -----END CERTIFICATE-----Generated at Fri May 31 19:47:48 2024 by rpki-client on console-fra.rpki-client.org