$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json) Hash identifier: 2DhM3HhGLs+UzJM1Sr1haufkW9xLtZKVQNYkBCG7s3c= Subject key identifier: 6D:2F:2D:42:DF:B9:B5:F6:F4:05:85:A1:DB:01:A0:42:FA:5A:76:D7 Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Certificate serial: 0A63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft Manifest number: 0A5C Signing time: Fri 31 May 2024 21:00:59 +0000 Manifest this update: Fri 31 May 2024 21:00:59 +0000 Manifest next update: Fri 07 Jun 2024 21:00:59 +0000 Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: j5cJ+rUb+Y31LqACOWLXgs+h6V5Pj8co/89fhkCL00o=) 2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: QMRA0FVStEOYnc4bxxbjBfYHOGHS2jiP/r1+CjS/IZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2659 (0xa63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Validity Not Before: May 31 21:00:59 2024 GMT Not After : Jun 7 21:00:59 2024 GMT Subject: CN=665a3a8b-db8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:60:00:b9:9c:2b:f9:98:ed:c0:a2:fb:ee:5b: b5:cd:65:3c:96:df:b5:d5:0d:ae:ce:c1:9e:6e:d4: 93:d9:e3:43:8a:63:01:e6:8e:01:da:3f:22:9f:13: 43:52:09:df:b9:91:cd:69:4b:ee:5b:fd:b1:3e:57: c5:a6:56:b9:42:50:ea:3f:60:fc:67:76:86:33:34: b5:9a:4a:cd:f1:5e:f4:b4:1c:4b:e7:ce:55:bf:2e: 3f:57:8c:98:17:a3:fc:82:93:2f:db:5d:8a:a3:bc: e2:a5:68:64:12:d4:30:3d:bb:8b:79:d9:1a:25:6b: fc:80:fe:dc:37:a6:cf:69:ab:7b:fe:04:eb:bf:52: c7:8a:16:e8:e0:05:22:c3:4a:6e:fd:8c:d8:a8:f0: b2:1c:39:01:4f:59:8a:8e:1a:16:9b:1a:b6:07:52: 84:bf:cc:4e:df:2f:7f:e3:be:dd:08:6d:1b:29:a4: 50:54:9e:9f:25:5b:52:03:a6:27:ca:df:2b:f4:44: 54:4b:bf:76:1b:94:18:c2:fd:50:d2:a5:09:96:8b: 71:58:9f:36:7e:bf:57:2c:96:d0:6b:4c:78:35:87: cb:75:9c:a1:61:c0:94:aa:33:8e:55:13:4b:fe:05: 88:bd:b9:a6:55:e7:29:7d:36:cf:dc:a4:e8:52:9e: d7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2F:2D:42:DF:B9:B5:F6:F4:05:85:A1:DB:01:A0:42:FA:5A:76:D7 X509v3 Authority Key Identifier: keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:61:8c:28:b0:4e:de:d7:3a:ef:30:ee:59:31:f2:6b:de:d2: 90:e0:fc:df:a0:26:8b:77:7f:85:7a:55:bc:91:22:e6:4c:1c: 85:97:f2:64:ab:19:17:7a:a5:11:60:a8:c8:20:ca:84:ca:e2: 0e:6e:bf:50:d7:e1:b3:e5:5e:97:c0:ce:5a:40:91:6f:2f:ed: fd:cd:eb:17:48:89:9b:33:f7:2b:a3:8a:2e:eb:1c:7a:a9:78: 4c:fc:e8:9d:84:82:e7:fc:f1:99:d9:3f:cb:4e:ab:3c:43:de: 86:ec:3f:cf:02:78:c0:33:1d:64:1a:16:e8:0a:76:44:d6:ac: a6:a5:5e:4a:24:f3:78:9b:2a:f6:46:3c:f3:0f:b3:fa:20:97: 7b:ec:90:2d:05:a3:b7:a4:6a:e3:ff:04:d2:8c:60:7c:ee:68: 99:10:22:6d:d0:44:f6:ae:d6:55:b0:5d:5c:7a:f4:1b:d5:6b: 27:51:6a:7b:05:73:55:48:69:c5:e6:be:86:f9:22:4e:a4:16: 7d:f2:e9:a1:95:4c:6e:28:69:13:2a:eb:99:b3:c9:f3:a3:28: a3:2b:db:82:5c:a1:ed:4f:19:34:6d:6c:1c:4e:0e:1d:0f:c4: 45:74:75:48:a4:7c:88:35:3b:cb:ad:ec:63:07:b4:98:34:22: 03:04:a5:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5 QTdDMkFFMEQwHhcNMjQwNTMxMjEwMDU5WhcNMjQwNjA3MjEwMDU5WjAYMRYwFAYD VQQDEw02NjVhM2E4Yi1kYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WAAuZwr+ZjtwKL77lu1zWU8lt+11Q2uzsGebtST2eNDimMB5o4B2j8inxND UgnfuZHNaUvuW/2xPlfFpla5QlDqP2D8Z3aGMzS1mkrN8V70tBxL585Vvy4/V4yY F6P8gpMv212Ko7zipWhkEtQwPbuLedkaJWv8gP7cN6bPaat7/gTrv1LHihbo4AUi w0pu/YzYqPCyHDkBT1mKjhoWmxq2B1KEv8xO3y9/477dCG0bKaRQVJ6fJVtSA6Yn yt8r9ERUS792G5QYwv1Q0qUJlotxWJ82fr9XLJbQa0x4NYfLdZyhYcCUqjOOVRNL /gWIvbmmVecpfTbP3KToUp7XVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0vLULf ubX29AWFodsBoEL6WnbXMB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho MndhZHE4NWRnM0NhZkNyZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2YYwosE7e1zrvMO5ZMfJr3tKQ4PzfoCaLd3+FelW8kSLmTByFl/Jk qxkXeqURYKjIIMqEyuIObr9Q1+Gz5V6XwM5aQJFvL+39zesXSImbM/cro4ou6xx6 qXhM/OidhILn/PGZ2T/LTqs8Q96G7D/PAnjAMx1kGhboCnZE1qympV5KJPN4myr2 RjzzD7P6IJd77JAtBaO3pGrj/wTSjGB87miZECJt0ET2rtZVsF1cevQb1WsnUWp7 BXNVSGnF5r6G+SJOpBZ98umhlUxuKGkTKuuZs8nzoyijK9uCXKHtTxk0bWwcTg4d D8RFdHVIpHyINTvLrexjB7SYNCIDBKX2 -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:15 2024 by rpki-client on console-ams.rpki-client.org