$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft File: P3MTY_5HQEYaWciPp2e9ijbsDfY.mft (raw, json) Hash identifier: xwSZdT45fSBOiCjbuQM9r/Gl1czwYPMN+7J5qzNjzaw= Subject key identifier: 53:EF:E0:0B:C1:96:C2:43:54:9F:8E:34:39:66:D6:07:02:63:60:4D Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6 Certificate issuer: /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6 Certificate serial: 0655 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft Manifest number: 064D Signing time: Sat 18 May 2024 23:40:32 +0000 Manifest this update: Sat 18 May 2024 23:40:32 +0000 Manifest next update: Sat 25 May 2024 23:40:32 +0000 Files and hashes: 1: P3MTY_5HQEYaWciPp2e9ijbsDfY.crl (hash: fuah2rv+k1zkqwYjGjkYhE9cDD6msHex7DJ5qq0H/08=) 2: 7D3B257298C411EC97E3503CC4F9AE02.roa (hash: ce4ePTxD5Rw6/EXwAE6IKueifUBmCporSH8E9XxekiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1621 (0x655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6 Validity Not Before: May 18 23:40:32 2024 GMT Not After : May 25 23:40:32 2024 GMT Subject: CN=66493c70-65ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:4e:64:2e:b7:26:ac:33:3e:13:a7:f2:36: 5a:d8:dc:84:19:40:73:55:18:53:8b:3a:fd:6b:35: 85:4f:40:18:1b:89:dc:fe:9f:5a:a4:46:17:d8:1f: bb:ff:bd:aa:c6:35:ce:a9:d6:6a:7a:58:6c:af:ab: 08:d0:5c:ca:3e:01:e1:7e:97:18:f3:68:2e:37:bd: 9c:8d:e8:1e:9e:cc:f9:7b:cf:d6:fc:aa:c5:3e:19: 78:b8:03:54:4c:83:6d:d1:a6:28:a0:cf:4b:9f:17: fe:45:ab:8f:2f:0d:7b:eb:09:58:4e:85:87:6e:03: ea:96:13:60:b6:27:9a:95:e2:b0:37:f2:e3:91:db: 7c:8f:b7:2e:bc:61:9d:59:dd:28:94:ad:52:8a:92: 3d:4d:49:40:51:60:c1:e7:64:c3:74:ab:ce:dd:f7: 51:a6:de:ee:f5:3e:f7:5c:7a:94:6d:a0:3c:9a:16: 5d:c6:db:5a:20:14:88:3a:dc:3b:4e:f2:52:66:fa: 20:a7:9f:99:ac:af:45:cb:5a:ed:f5:53:3c:18:98: fa:6d:96:6d:f7:25:95:d2:95:86:6f:73:b9:4d:b9: 4f:9f:00:de:f7:96:c4:49:0b:38:83:9d:1a:ff:a7: 2e:8d:d3:16:4c:03:92:5b:10:ba:0f:02:5a:d4:c1: 2f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EF:E0:0B:C1:96:C2:43:54:9F:8E:34:39:66:D6:07:02:63:60:4D X509v3 Authority Key Identifier: keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:eb:b7:00:43:b9:5d:e5:7d:a0:93:dc:0b:3c:e7:5a:34:ff: 23:ea:f6:ad:fe:51:fa:fb:e4:8b:e5:eb:ee:b7:ec:ce:b0:be: cb:d5:b9:c3:0b:21:92:c1:69:c1:dd:c3:f5:09:c5:7a:90:7a: 08:69:64:f0:da:17:be:88:56:c1:c8:29:d1:68:f2:b7:76:19: 11:4d:d3:ec:41:d9:a1:ef:f8:e3:c3:57:a7:f7:37:4b:b9:50: b7:f3:62:5d:fe:7b:99:69:d4:0f:12:ea:38:ca:f4:2f:37:3a: 20:f6:1a:8c:6a:7c:94:19:8f:6c:d3:a8:07:9a:35:bf:05:6f: 17:49:53:89:7f:fd:e2:50:8c:9b:a6:60:38:26:c2:40:5a:f3: 51:09:80:e2:74:b8:d1:7d:3a:2b:78:ff:f1:96:35:2c:a0:70: bb:99:38:88:43:a0:dd:b5:f7:c8:2c:ac:01:e4:6b:ef:01:f2: 5c:f9:30:74:44:ce:d4:f3:af:a1:a8:69:ed:91:ed:8b:e5:63: b9:55:41:33:a6:c9:e8:04:4f:00:f2:57:7a:41:d6:45:c4:6b: 0d:ca:3d:78:c0:87:f4:64:b7:9a:19:17:f0:38:52:de:a4:5a: 1b:4d:29:b4:74:57:f6:c0:57:8c:27:a0:06:bc:2f:04:43:6d: 43:73:17:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEMUQxMTAvBgNVBAUTKDNGNzMxMzYzRkU0NzQwNDYxQTU5Qzg4RkE3NjdCRDhB MzZFQzBERjYwHhcNMjQwNTE4MjM0MDMyWhcNMjQwNTI1MjM0MDMyWjAYMRYwFAYD VQQDEw02NjQ5M2M3MC02NWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr25OZC63JqwzPhOn8jZa2NyEGUBzVRhTizr9azWFT0AYG4nc/p9apEYX2B+7 /72qxjXOqdZqelhsr6sI0FzKPgHhfpcY82guN72cjegensz5e8/W/KrFPhl4uANU TINt0aYooM9Lnxf+RauPLw176wlYToWHbgPqlhNgtiealeKwN/Ljkdt8j7cuvGGd Wd0olK1SipI9TUlAUWDB52TDdKvO3fdRpt7u9T73XHqUbaA8mhZdxttaIBSIOtw7 TvJSZvogp5+ZrK9Fy1rt9VM8GJj6bZZt9yWV0pWGb3O5TblPnwDe95bESQs4g50a /6cujdMWTAOSWxC6DwJa1MEvRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPv4AvB lsJDVJ+ONDlm1gcCY2BNMB8GA1UdIwQYMBaAFD9zE2P+R0BGGlnIj6dnvYo27A32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQxRC84QURFMzNGQzQx MkUxMUVCOUE5NzRDMTZDNEY5QUUwMi9QM01UWV81SFFFWWFXY2lQcDJlOWlqYnNE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzTVRZXzVIUUVZYVdjaVBwMmU5aWpic0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkQxRC84QURFMzNGQzQxMkUxMUVCOUE5NzRDMTZDNEY5QUUwMi9QM01UWV81SFFF WWFXY2lQcDJlOWlqYnNEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA267cAQ7ld5X2gk9wLPOdaNP8j6vat/lH6++SL5evut+zOsL7L1bnD CyGSwWnB3cP1CcV6kHoIaWTw2he+iFbByCnRaPK3dhkRTdPsQdmh7/jjw1en9zdL uVC382Jd/nuZadQPEuo4yvQvNzog9hqManyUGY9s06gHmjW/BW8XSVOJf/3iUIyb pmA4JsJAWvNRCYDidLjRfToreP/xljUsoHC7mTiIQ6DdtffILKwB5GvvAfJc+TB0 RM7U86+hqGntke2L5WO5VUEzpsnoBE8A8ld6QdZFxGsNyj14wIf0ZLeaGRfwOFLe pFobTSm0dFf2wFeMJ6AGvC8EQ21Dcxeb -----END CERTIFICATE-----Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org