$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json) Hash identifier: NhUIcJAEdv5KsHXJd+K7DWaynokeW+ZMSu1+Ge091oo= Subject key identifier: 9F:80:FD:5C:10:BB:E3:4C:E2:A0:36:ED:A5:E0:1B:A7:CF:69:45:D6 Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft Manifest number: 24 Signing time: Wed 29 May 2024 09:14:44 +0000 Manifest this update: Wed 29 May 2024 09:14:43 +0000 Manifest next update: Wed 05 Jun 2024 09:14:43 +0000 Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: njmAW5zSzXkK8M1YswUxs8m/D8mJK/PUWwYb3/DuMT4=) 2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: Xbvsq704dPMvTDsWQcnktj8YjFOa8nuy1nElLVu+op0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 09:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Validity Not Before: May 29 09:14:43 2024 GMT Not After : Jun 5 09:14:43 2024 GMT Subject: CN=6656f204-0999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:96:f0:bb:e0:53:e6:98:75:80:b2:e6:85:39: 17:71:f9:94:9f:77:ee:ca:fb:87:9f:ce:ff:1f:3a: 03:bd:b7:53:f0:25:2a:95:28:6b:87:7a:5a:13:08: ba:af:f9:4c:7a:4a:8a:6d:3c:9f:4b:d9:51:1f:ca: dc:21:7e:6a:c3:9e:b6:a1:2b:46:a9:bd:f1:19:34: 62:a9:57:89:9c:fa:4e:5e:86:34:05:2d:60:18:23: 8f:c0:5f:74:1b:99:c2:04:ed:ae:34:56:ff:d5:be: 11:f1:75:07:3f:56:91:2f:3c:77:ad:cf:24:d6:53: 15:0c:a5:f7:ac:f2:a6:a6:47:57:a9:15:1a:99:ea: e3:dc:c7:35:ea:36:3c:f8:ed:84:d5:4a:a9:4d:eb: 6e:1a:de:88:ca:8b:76:5c:6c:8d:45:8f:fb:b2:2b: 04:f7:ba:98:9d:1e:89:36:b6:93:df:be:b5:b9:aa: 73:13:70:8d:32:79:87:e5:1e:cf:f1:92:f8:58:15: 4d:0e:82:72:62:23:fa:39:6f:58:cf:06:43:cc:f3: cd:d7:2e:7c:13:f2:32:28:6d:f6:3f:98:71:0a:e9: 0d:ba:ff:5d:7b:fc:dc:60:f5:de:d5:51:ec:a4:37: 84:61:ea:3d:1d:9b:e0:be:bf:06:ef:90:2f:28:ac: 9c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:80:FD:5C:10:BB:E3:4C:E2:A0:36:ED:A5:E0:1B:A7:CF:69:45:D6 X509v3 Authority Key Identifier: keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:d8:22:7c:aa:f3:c0:ab:8c:d4:c2:4a:ad:e3:33:04:79:63: d3:35:5e:a3:14:80:b2:cc:8d:42:7d:ec:d7:a3:17:3b:43:ef: 15:75:44:4a:69:41:8c:bc:b5:3c:80:d1:df:78:fc:70:4f:b9: 27:26:e3:8b:87:c5:5c:72:90:4b:e8:c0:d4:90:89:62:3e:8c: 86:f6:c1:5c:20:7d:05:ae:72:7a:91:eb:bb:52:11:50:5c:bc: 27:bc:e5:45:ea:84:4d:e7:f9:ba:98:65:9a:aa:87:89:c0:aa: d2:2c:e0:94:4d:d5:d9:08:1b:72:40:8f:13:6b:be:45:61:ed: e2:bf:d0:c3:cb:00:6c:48:28:14:27:e1:22:87:bc:ec:a1:de: c3:46:8d:ed:cf:e1:86:16:d5:f4:3b:6b:5e:d5:19:4b:67:7e: 0b:3d:d7:61:d3:ef:79:34:53:92:d1:f0:ac:4e:d8:e8:d1:a1: 11:d6:38:57:18:e8:7e:44:69:ad:e2:14:e2:bc:84:f5:e5:51: 99:7b:31:56:62:c5:2e:80:4d:25:39:7b:b6:25:36:fa:64:9e: d7:f4:55:ff:83:67:3f:d0:e0:62:04:22:5a:0e:4b:44:03:ef: f5:7e:6a:c1:bc:0f:a8:f6:f7:fc:fc:c6:cd:68:f8:e8:c0:74: d4:c5:f6:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDhGMzExMC8GA1UEBRMoREU4N0I2Njc2OTdENDZGNDU1MDVFQUExMjNCQUY2ODZE QjIyMDc4MTAeFw0yNDA1MjkwOTE0NDNaFw0yNDA2MDUwOTE0NDNaMBgxFjAUBgNV BAMTDTY2NTZmMjA0LTA5OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD3lvC74FPmmHWAsuaFORdx+ZSfd+7K+4efzv8fOgO9t1PwJSqVKGuHeloTCLqv +Ux6SoptPJ9L2VEfytwhfmrDnrahK0apvfEZNGKpV4mc+k5ehjQFLWAYI4/AX3Qb mcIE7a40Vv/VvhHxdQc/VpEvPHetzyTWUxUMpfes8qamR1epFRqZ6uPcxzXqNjz4 7YTVSqlN624a3ojKi3ZcbI1Fj/uyKwT3upidHok2tpPfvrW5qnMTcI0yeYflHs/x kvhYFU0OgnJiI/o5b1jPBkPM883XLnwT8jIobfY/mHEK6Q26/117/Nxg9d7VUeyk N4Rh6j0dm+C+vwbvkC8orJxRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn4D9XBC7 40zioDbtpeAbp89pRdYwHwYDVR0jBBgwFoAU3oe2Z2l9RvRVBeqhI7r2htsiB4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVEOEYzL0VBNDVCM0MyRTVC QTExRUU5QjYwN0I0N0M0RjlBRTAyLzNvZTJaMmw5UnZSVkJlcWhJN3IyaHRzaUI0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM29lMloybDlSdlJWQmVxaEk3cjJodHNpQjRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE OEYzL0VBNDVCM0MyRTVCQTExRUU5QjYwN0I0N0M0RjlBRTAyLzNvZTJaMmw5UnZS VkJlcWhJN3IyaHRzaUI0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAATYInyq88CrjNTCSq3jMwR5Y9M1XqMUgLLMjUJ97NejFztD7xV1REpp QYy8tTyA0d94/HBPuScm44uHxVxykEvowNSQiWI+jIb2wVwgfQWucnqR67tSEVBc vCe85UXqhE3n+bqYZZqqh4nAqtIs4JRN1dkIG3JAjxNrvkVh7eK/0MPLAGxIKBQn 4SKHvOyh3sNGje3P4YYW1fQ7a17VGUtnfgs912HT73k0U5LR8KxO2OjRoRHWOFcY 6H5Eaa3iFOK8hPXlUZl7MVZixS6ATSU5e7YlNvpkntf0Vf+DZz/Q4GIEIloOS0QD 7/V+asG8D6j29/z8xs1o+OjAdNTF9nI= -----END CERTIFICATE-----Generated at Wed May 29 10:43:10 2024 by rpki-client on console-ams.rpki-client.org