$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json) Hash identifier: /ODlghiwsr26tiS8Zwh4wID81HNaEUDdUeNJHG1C3A0= Subject key identifier: 0E:0F:97:C8:FB:21:21:9D:D1:C4:9C:EF:D1:C8:32:44:43:2A:05:78 Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Certificate serial: 0BC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft Manifest number: 0B97 Signing time: Sat 18 May 2024 19:32:31 +0000 Manifest this update: Sat 18 May 2024 19:32:31 +0000 Manifest next update: Sat 25 May 2024 19:32:31 +0000 Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: w00RVrg5XXd+r4G8gzmU+F7M4GIg0HyRmRavrOHidxs=) 2: 64A2C96E919E11EEA5241125C4F9AE02.roa (hash: Aal+HBep+5xZrlmKHLkJr4jyZZt99dWiNpvcTmJl2F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3011 (0xbc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Validity Not Before: May 18 19:32:31 2024 GMT Not After : May 25 19:32:31 2024 GMT Subject: CN=6649024f-2907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:92:45:fa:04:4a:69:cb:b5:31:f8:fa:84: ad:6b:97:30:86:e3:af:2c:83:2e:93:37:1a:5a:7e: 13:16:9a:70:27:7b:20:92:00:cc:b7:df:93:d4:94: 2d:f0:c6:68:46:89:c1:c3:9b:86:19:b7:4b:96:8b: 42:1a:fd:f0:d8:1f:75:78:f6:29:17:2f:38:f9:91: 5d:bd:36:f5:95:92:dd:13:36:c1:60:a6:d2:b2:41: 9f:89:e6:1e:49:c8:34:c3:61:fa:bb:78:3c:b3:a9: 44:46:de:53:07:d5:97:54:79:2e:80:36:09:ac:fc: 10:fc:b8:3f:d8:57:5e:13:97:57:67:2c:33:f9:6c: a6:94:50:ca:a2:85:bb:28:5a:76:78:e2:a8:fd:7b: 26:50:16:b1:a4:36:05:e6:cf:d8:5c:7b:aa:ff:23: c2:01:0a:ca:0e:81:03:94:c1:f0:04:dd:2f:2e:04: 57:30:95:c8:d7:b3:32:5f:75:50:e5:42:98:1f:e6: f0:10:5e:e3:12:04:51:2c:66:3f:12:28:c0:50:b2: c3:96:6f:fd:17:7b:48:2d:15:bc:d6:54:3d:0c:82: a4:f9:e4:79:94:bc:a7:05:3a:69:7d:b4:df:6e:57: b9:e8:50:28:53:5e:64:e0:9f:ab:e5:1a:04:33:e4: 8e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0F:97:C8:FB:21:21:9D:D1:C4:9C:EF:D1:C8:32:44:43:2A:05:78 X509v3 Authority Key Identifier: keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:48:10:f4:17:cb:3c:ca:7c:f9:6f:00:52:d4:a3:a0:d5:fe: ef:a7:7e:3e:20:a8:26:de:a7:4b:62:24:ce:98:d2:8d:32:79: 17:86:a0:c1:09:24:f4:c9:43:13:57:a4:9e:59:5b:72:10:b7: c8:18:99:1e:4b:c3:88:e9:9a:a3:bf:39:68:c3:5c:7e:ba:c9: 0c:91:0d:b7:b5:78:8e:c1:6e:9c:d1:7b:ee:52:6a:6b:88:25: d6:d6:d9:89:72:b8:1a:1c:27:6f:da:d7:ca:63:4e:0d:35:b2: 38:8a:82:c6:12:fe:b5:f6:89:49:a8:3f:26:1b:25:7c:02:b1: d4:e3:b2:a1:43:f9:bd:2e:d2:ad:2e:c1:e6:66:6c:79:43:1f: 85:15:42:46:70:a8:15:9c:0a:a9:b4:4f:91:78:81:dc:ff:e6: 1f:10:e1:2f:da:0d:9b:d7:65:50:22:e6:11:8f:88:ac:b4:5b: d0:64:dc:cc:12:48:75:24:df:04:a0:fb:83:cd:13:bb:a1:27: 07:e8:1b:6b:e2:2a:84:bd:56:0d:2e:3b:bd:b4:e4:ba:60:17: 6b:a6:ca:6a:6d:ae:14:1e:d3:9f:e3:10:6d:3e:4e:2e:a2:11: 2c:fa:7a:e2:46:ce:41:79:48:3f:ff:6f:91:c0:bb:73:91:30: 10:b9:7a:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz NkREOENBMzQwHhcNMjQwNTE4MTkzMjMxWhcNMjQwNTI1MTkzMjMxWjAYMRYwFAYD VQQDEw02NjQ5MDI0Zi0yOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkCSRfoESmnLtTH4+oSta5cwhuOvLIMukzcaWn4TFppwJ3sgkgDMt9+T1JQt 8MZoRonBw5uGGbdLlotCGv3w2B91ePYpFy84+ZFdvTb1lZLdEzbBYKbSskGfieYe Scg0w2H6u3g8s6lERt5TB9WXVHkugDYJrPwQ/Lg/2FdeE5dXZywz+WymlFDKooW7 KFp2eOKo/XsmUBaxpDYF5s/YXHuq/yPCAQrKDoEDlMHwBN0vLgRXMJXI17MyX3VQ 5UKYH+bwEF7jEgRRLGY/EijAULLDlm/9F3tILRW81lQ9DIKk+eR5lLynBTppfbTf ble56FAoU15k4J+r5RoEM+SOewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4Pl8j7 ISGd0cSc79HIMkRDKgV4MB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5 NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTZEQy80NEE3RTVFODA5NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlo cThqNHo5YjJZaWMyM1l5alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFSBD0F8s8ynz5bwBS1KOg1f7vp34+IKgm3qdLYiTOmNKNMnkXhqDB CST0yUMTV6SeWVtyELfIGJkeS8OI6Zqjvzlow1x+uskMkQ23tXiOwW6c0XvuUmpr iCXW1tmJcrgaHCdv2tfKY04NNbI4ioLGEv619olJqD8mGyV8ArHU47KhQ/m9LtKt LsHmZmx5Qx+FFUJGcKgVnAqptE+ReIHc/+YfEOEv2g2b12VQIuYRj4istFvQZNzM Ekh1JN8EoPuDzRO7oScH6Btr4iqEvVYNLju9tOS6YBdrpspqba4UHtOf4xBtPk4u ohEs+nriRs5BeUg//2+RwLtzkTAQuXph -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org