$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft File: 3FfpX2KSEzop44hINlCWI10ZN8o.mft (raw, json) Hash identifier: F1SAdSjdEKmR6GKU4/6RgyfqCZP/cRQUDgNJVR/JOnc= Subject key identifier: 4D:CD:14:D7:6A:D9:17:4C:1F:48:F8:2D:2E:4E:95:98:D2:AA:38:A0 Authority key identifier: DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA Certificate issuer: /CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA Certificate serial: 1C3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft Manifest number: 1C32 Signing time: Sat 18 May 2024 16:35:26 +0000 Manifest this update: Sat 18 May 2024 16:35:26 +0000 Manifest next update: Sat 25 May 2024 16:35:26 +0000 Files and hashes: 1: 3FfpX2KSEzop44hINlCWI10ZN8o.crl (hash: nXBZAeBlvmanWnr6lMiIVdPy6VHc8sR8asu00dYj7DE=) 2: 3C1382D0BEA211E68902BC3DC4F9AE02.roa (hash: R6lxKa91pRcNYes/Mx5b7cIT3rzQQplO/fUnLb6QRBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7227 (0x1c3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA Validity Not Before: May 18 16:35:26 2024 GMT Not After : May 25 16:35:26 2024 GMT Subject: CN=6648d8ce-7b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:30:4d:d7:30:53:8c:8b:8e:9f:63:37:60:f2: 21:12:64:9c:b7:9d:45:30:16:b5:4f:2b:0b:8d:44: 55:11:64:90:36:36:60:98:1d:27:13:7f:e9:c3:8b: 92:de:23:43:ee:11:01:51:d5:98:0b:f7:ea:30:d3: c4:c6:73:5a:ea:b1:26:29:2f:1f:3d:b7:4c:b6:b0: 11:0b:be:89:25:43:74:83:03:a4:76:65:8e:54:8e: bd:c2:07:70:df:4c:38:db:a8:19:34:c4:cc:3c:58: 32:9b:db:ae:ab:0e:50:fb:c1:df:9c:7b:f1:96:33: f6:b9:e3:89:1f:b7:09:02:a4:a0:ff:e3:20:51:51: 7d:19:22:57:4f:55:45:a1:51:65:8a:92:24:65:a0: 18:53:d0:98:f4:38:ea:5b:59:5f:f7:f7:dc:1f:ef: a7:29:78:79:fe:85:91:81:db:c8:70:07:06:f4:34: 2c:d6:f1:3c:2c:34:e3:ba:66:87:26:a4:cc:c6:a2: 03:46:29:bc:ac:40:5d:92:fb:58:44:7e:f8:d0:ef: 70:7b:6d:f1:f1:69:c7:fa:61:bb:9e:1d:35:0d:c0: 41:6b:5d:af:26:e5:46:8b:2c:3a:5b:79:96:7d:a5: 28:4a:e2:44:97:4e:98:90:48:c6:c8:f1:b2:cd:3d: 07:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CD:14:D7:6A:D9:17:4C:1F:48:F8:2D:2E:4E:95:98:D2:AA:38:A0 X509v3 Authority Key Identifier: keyid:DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:4b:93:9b:82:b4:61:59:89:5d:59:6d:e6:67:bc:e1:23:b4: 22:9c:50:09:bb:10:85:9a:76:e1:a6:57:2a:e9:1c:ef:a3:ec: d2:9f:76:e1:a6:c5:a0:1a:3e:aa:e6:a3:0e:00:27:1f:f1:90: be:c4:96:79:8a:57:a3:2b:b8:cd:8e:fb:a3:73:09:ff:44:87: 4d:24:9d:70:84:66:ec:70:9f:8d:f4:0c:d6:36:07:5a:46:76: 29:5c:6b:65:c5:09:5c:ac:64:ef:96:b4:f8:c0:7a:78:7e:9a: 6b:c2:49:8c:b1:c3:e6:f4:a8:02:7b:2e:37:8e:1b:0d:6d:1b: f8:89:c4:ce:c9:0a:e4:6d:bb:a7:f9:b8:fd:8b:02:56:59:50: 8b:45:89:69:69:39:90:55:84:15:62:05:c3:3d:39:d1:2c:13: 45:e6:27:d6:fa:3e:25:27:df:3c:98:00:4e:4a:c7:6e:01:d6: 7e:69:95:0e:32:e4:a2:db:78:81:32:7f:f6:db:c7:9d:42:ae: a4:cb:0c:1c:08:82:99:d5:8b:1c:63:e9:c1:e3:24:6a:ed:1f: 99:6c:22:1e:fe:98:fd:4d:d1:76:0f:ca:d4:20:98:ae:c0:42: 9b:7b:b5:04:6e:11:82:80:d1:ce:e1:13:30:8f:47:5d:e3:dd: 1c:a5:cc:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxRTMxMTAvBgNVBAUTKERDNTdFOTVGNjI5MjEzM0EyOUUzODg0ODM2NTA5NjIz NUQxOTM3Q0EwHhcNMjQwNTE4MTYzNTI2WhcNMjQwNTI1MTYzNTI2WjAYMRYwFAYD VQQDEw02NjQ4ZDhjZS03YjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jBN1zBTjIuOn2M3YPIhEmSct51FMBa1TysLjURVEWSQNjZgmB0nE3/pw4uS 3iND7hEBUdWYC/fqMNPExnNa6rEmKS8fPbdMtrARC76JJUN0gwOkdmWOVI69wgdw 30w426gZNMTMPFgym9uuqw5Q+8HfnHvxljP2ueOJH7cJAqSg/+MgUVF9GSJXT1VF oVFlipIkZaAYU9CY9DjqW1lf9/fcH++nKXh5/oWRgdvIcAcG9DQs1vE8LDTjumaH JqTMxqIDRim8rEBdkvtYRH740O9we23x8WnH+mG7nh01DcBBa12vJuVGiyw6W3mW faUoSuJEl06YkEjGyPGyzT0HKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3NFNdq 2RdMH0j4LS5OlZjSqjigMB8GA1UdIwQYMBaAFNxX6V9ikhM6KeOISDZQliNdGTfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFFMy8wMjFBRTkyQUJE RTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6b3A0NGhJTmxDV0kxMFpO OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZnBYMktTRXpvcDQ0aElObENXSTEwWk44by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFFMy8wMjFBRTkyQUJERTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6 b3A0NGhJTmxDV0kxMFpOOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASS5ObgrRhWYldWW3mZ7zhI7QinFAJuxCFmnbhplcq6Rzvo+zSn3bh psWgGj6q5qMOACcf8ZC+xJZ5ilejK7jNjvujcwn/RIdNJJ1whGbscJ+N9AzWNgda RnYpXGtlxQlcrGTvlrT4wHp4fpprwkmMscPm9KgCey43jhsNbRv4icTOyQrkbbun +bj9iwJWWVCLRYlpaTmQVYQVYgXDPTnRLBNF5ifW+j4lJ988mABOSsduAdZ+aZUO MuSi23iBMn/228edQq6kywwcCIKZ1YscY+nB4yRq7R+ZbCIe/pj9TdF2D8rUIJiu wEKbe7UEbhGCgNHO4RMwj0dd490cpcwy -----END CERTIFICATE-----Generated at Sat May 18 17:20:04 2024 by rpki-client on console-ams.rpki-client.org