$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft File: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json) Hash identifier: DRZYM/JyQgk7TxiK6LhIy7waThK3k2n9SXEOYFCXS1A= Subject key identifier: F3:77:B9:22:29:C8:5E:10:AB:9B:9F:E6:8C:76:1A:9E:5C:77:3B:57 Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 Certificate issuer: /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft Manifest number: 3A Signing time: Fri 31 May 2024 09:17:09 +0000 Manifest this update: Fri 31 May 2024 09:17:08 +0000 Manifest next update: Fri 07 Jun 2024 09:17:08 +0000 Files and hashes: 1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: 96YaJ6xwSpfxL0iDMJsNSU7BXa1bRXIqJm7IRD7Ja10=) 2: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: UI9VDDNj5/gUUO3ewueElxsuAaYwPSQhrOvYuANf840=) 3: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: kxgR+t9G3Yoo6D6Yn73+0inhOBPdrEAQX82yP7J/c8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2 Validity Not Before: May 31 09:17:08 2024 GMT Not After : Jun 7 09:17:08 2024 GMT Subject: CN=66599595-78e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:4c:d5:53:0f:85:a5:f0:72:a3:f5:dc:41: f8:9f:5f:bd:6e:fe:33:aa:ca:6d:bd:f7:6a:26:36: c7:f4:11:a4:69:a7:6e:66:1a:66:e8:fb:6d:7f:e5: f4:9d:bf:68:f7:35:ee:d0:04:fe:9b:29:48:a0:e5: 54:04:89:49:11:3c:18:55:5b:ef:50:41:18:71:df: 43:eb:bd:4b:67:de:e3:16:75:33:31:fb:70:bc:13: 2c:55:ba:f5:fc:92:2d:8b:0f:4a:54:8e:59:50:ec: 41:ec:9c:c3:20:21:1b:61:65:21:00:63:ab:1f:24: 41:1f:8e:ba:3f:e4:6c:fc:c2:2e:fe:2d:03:44:ce: ff:54:41:74:33:77:01:6c:86:1b:46:db:e8:ce:2f: 17:00:57:51:56:40:e3:19:7a:73:56:0b:61:47:2f: 2d:85:7c:79:f3:88:e7:80:8b:97:d4:05:ed:24:d6: 80:80:81:8f:a3:e3:4e:b0:15:9b:6f:65:c4:5b:aa: 30:ab:25:1f:a4:61:b3:3b:e1:d7:68:b1:5b:98:06: c6:e1:2a:2c:f1:31:55:5c:c6:ac:77:33:bd:88:7c: 5e:a5:78:75:60:70:e5:fc:e7:35:57:0a:20:49:74: 4f:89:50:24:96:a0:1c:1d:ba:49:8e:a3:67:68:bd: b5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:77:B9:22:29:C8:5E:10:AB:9B:9F:E6:8C:76:1A:9E:5C:77:3B:57 X509v3 Authority Key Identifier: keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:96:3a:e7:c5:8a:c3:ce:47:91:f1:2e:26:26:66:87:db:c2: 51:8d:27:98:6c:5d:c5:d5:25:47:74:b8:dd:95:45:53:54:1d: cb:d0:18:5c:f5:c9:66:f4:5e:bc:48:80:75:94:b6:6a:be:f4: eb:92:91:56:02:37:e6:98:b6:32:60:f5:76:0a:22:29:83:ea: 64:6f:53:f8:b6:c0:c5:6a:5d:2c:5a:29:ee:7e:8f:0a:02:f4: 85:a4:4a:2a:50:73:30:eb:31:d5:61:15:20:04:8e:e7:ca:c3: 30:a2:c5:82:8a:af:0c:7c:e9:bf:4f:9b:97:bb:e8:12:e7:39: 1b:2e:ce:3c:0d:8b:5a:f8:19:c4:54:17:06:35:26:8c:2e:32: be:15:50:76:78:8c:6f:bd:da:fe:b7:d2:6a:ec:17:42:a0:dc: 53:61:0b:3e:fa:71:19:e9:42:a5:bf:ad:5d:42:18:e8:bf:b1: 29:29:a4:16:aa:4c:47:3e:56:0b:65:f6:dd:fe:3b:6f:04:bf: e0:dd:06:44:fa:34:26:9d:dd:73:d5:2d:86:a3:ee:d5:01:6e: 58:9f:2a:02:8d:24:ab:82:75:d9:bf:22:cc:18:e1:bb:81:62: a8:a4:8f:08:59:e7:66:39:5c:23:d4:be:09:f5:dc:49:b2:84: b5:20:a2:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzY1MTExMC8GA1UEBRMoNzZENkZBN0NGOUJGOEU0MTVGMkY0MjYxOUI4MDQyODg3 NjNFNjdBMjAeFw0yNDA1MzEwOTE3MDhaFw0yNDA2MDcwOTE3MDhaMBgxFjAUBgNV BAMTDTY2NTk5NTk1LTc4ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAREzVUw+FpfByo/XcQfifX71u/jOqym2992omNsf0EaRpp25mGmbo+21/5fSd v2j3Ne7QBP6bKUig5VQEiUkRPBhVW+9QQRhx30PrvUtn3uMWdTMx+3C8EyxVuvX8 ki2LD0pUjllQ7EHsnMMgIRthZSEAY6sfJEEfjro/5Gz8wi7+LQNEzv9UQXQzdwFs hhtG2+jOLxcAV1FWQOMZenNWC2FHLy2FfHnziOeAi5fUBe0k1oCAgY+j406wFZtv ZcRbqjCrJR+kYbM74ddosVuYBsbhKizxMVVcxqx3M72IfF6leHVgcOX85zVXCiBJ dE+JUCSWoBwdukmOo2dovbUZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU83e5IinI XhCrm5/mjHYanlx3O1cwHwYDVR0jBBgwFoAUdtb6fPm/jkFfL0Jhm4BCiHY+Z6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDNjUxLzMzNEY2OEM4Q0VF QzExRUVBRTAzMzA2Q0M0RjlBRTAyL2R0YjZmUG1famtGZkwwSmhtNEJDaUhZLVo2 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZHRiNmZQbV9qa0ZmTDBKaG00QkNpSFktWjZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD NjUxLzMzNEY2OEM4Q0VFQzExRUVBRTAzMzA2Q0M0RjlBRTAyL2R0YjZmUG1famtG ZkwwSmhtNEJDaUhZLVo2SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKOWOufFisPOR5HxLiYmZofbwlGNJ5hsXcXVJUd0uN2VRVNUHcvQGFz1 yWb0XrxIgHWUtmq+9OuSkVYCN+aYtjJg9XYKIimD6mRvU/i2wMVqXSxaKe5+jwoC 9IWkSipQczDrMdVhFSAEjufKwzCixYKKrwx86b9Pm5e76BLnORsuzjwNi1r4GcRU FwY1JowuMr4VUHZ4jG+92v630mrsF0Kg3FNhCz76cRnpQqW/rV1CGOi/sSkppBaq TEc+Vgtl9t3+O28Ev+DdBkT6NCad3XPVLYaj7tUBblifKgKNJKuCddm/IswY4buB YqikjwhZ52Y5XCPUvgn13EmyhLUgoi4= -----END CERTIFICATE-----Generated at Fri May 31 10:01:44 2024 by rpki-client on console-ams.rpki-client.org