$ rpki-client -vvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json) Hash identifier: lSF+o6lNuiYUWY9kGghFPUfFsOOhAJhYYHp0xgZghaY= Subject key identifier: A5:FB:7E:76:97:2F:94:EB:E5:3D:65:42:C2:EC:9B:62:97:30:DB:1C Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Certificate serial: 06D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft Manifest number: 06CD Signing time: Sat 18 May 2024 22:58:17 +0000 Manifest this update: Sat 18 May 2024 22:58:17 +0000 Manifest next update: Sat 25 May 2024 22:58:17 +0000 Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: dMmjQvu7pwKzxb50tAS7dPplgt3HwFdh2KTvTqpLvMw=) 2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: YV2x84DiirJLvW5sO6TKN1rFR9zcOJbtoohEkrg65ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1746 (0x6d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Validity Not Before: May 18 22:58:17 2024 GMT Not After : May 25 22:58:17 2024 GMT Subject: CN=66493289-329a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:19:ad:d1:ac:89:db:42:5c:0a:bf:05:bf:79: 90:49:52:98:77:38:23:d8:16:2e:81:f7:73:4f:37: 18:ac:f1:70:b5:39:14:49:cc:f7:e0:67:47:8e:22: 92:19:fa:d6:b0:d5:1a:32:2e:7e:96:e3:a1:66:14: 9a:e2:19:f7:a7:cc:bb:24:05:90:b3:c8:e6:f2:ce: 26:51:2a:99:93:06:d8:79:92:8a:c6:f7:3b:08:89: cd:d5:ee:34:4a:d8:63:89:54:ea:c0:a5:a5:83:63: d0:90:be:af:a9:5a:58:c8:9c:66:3a:df:56:fe:30: ba:31:31:bb:9a:6e:0e:67:5c:65:f7:f7:22:71:27: 00:14:19:24:24:ff:b7:87:6c:0b:ef:52:52:02:b5: 5f:85:6a:bf:88:54:eb:c9:64:50:d2:ae:fc:d6:d6: 0f:00:38:7e:28:be:e5:5d:9e:88:40:b0:59:ce:3e: ad:e6:3b:06:16:32:87:da:3c:a4:d6:d9:f4:81:82: e1:49:df:06:ca:1b:37:12:6c:22:96:bf:90:d6:61: e5:66:81:fc:10:76:8f:d2:ae:89:c9:b3:f1:e2:94: de:6a:15:d8:52:ba:12:44:73:1f:9a:30:cf:b8:4f: 1c:5e:12:6b:fb:1c:8a:0b:f3:e7:21:db:1e:b2:5e: a3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FB:7E:76:97:2F:94:EB:E5:3D:65:42:C2:EC:9B:62:97:30:DB:1C X509v3 Authority Key Identifier: keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:28:2c:cc:33:e9:d2:65:a4:58:dc:0b:24:39:9c:6d:61:88: a1:74:2a:8c:7c:2e:fc:c6:9c:6d:e4:6d:ad:95:b1:d8:39:11: bd:df:91:1d:47:e9:7a:5b:0b:ff:c2:db:93:b7:fa:bd:4b:16: 55:67:92:a0:f1:d7:a7:35:b9:3f:d6:d1:18:dc:3f:3b:03:1a: 8e:21:26:17:26:58:9f:59:8d:79:9e:2c:c9:05:cd:5c:87:6c: 2d:79:b0:c7:6a:10:d5:6c:3e:4d:00:8f:5f:64:d1:d1:56:32: 3b:bb:61:39:09:00:d3:80:38:17:a3:ac:60:d3:f8:79:16:49: 25:0a:6e:06:74:9a:37:db:05:24:be:13:9a:c0:50:61:e1:ea: 61:d6:db:d2:1f:e6:71:7b:a3:49:6c:85:1b:bf:cc:64:ed:53: 79:1e:5f:83:d8:90:a8:63:f1:e1:44:66:9c:63:f7:50:bd:d8: 19:1b:d6:18:a0:32:03:36:c2:df:99:2b:6b:b5:73:47:2f:82: ed:be:8c:76:03:19:4d:42:fe:10:6e:da:ec:5f:53:45:c3:99: da:9f:23:17:36:21:0b:69:6d:8a:68:a3:c8:ce:4b:f4:87:a6: 82:9a:2c:c6:2f:ee:df:bb:0b:1c:63:37:7a:af:c1:43:b2:c0: 9c:b4:d8:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGRDIxMTAvBgNVBAUTKDkzNzg2OTFENUE4M0NDMDI2QjhEMUYyMzI4MDYwMDgz NzFCRURDMDQwHhcNMjQwNTE4MjI1ODE3WhcNMjQwNTI1MjI1ODE3WjAYMRYwFAYD VQQDEw02NjQ5MzI4OS0zMjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRmt0ayJ20JcCr8Fv3mQSVKYdzgj2BYugfdzTzcYrPFwtTkUScz34GdHjiKS GfrWsNUaMi5+luOhZhSa4hn3p8y7JAWQs8jm8s4mUSqZkwbYeZKKxvc7CInN1e40 SthjiVTqwKWlg2PQkL6vqVpYyJxmOt9W/jC6MTG7mm4OZ1xl9/cicScAFBkkJP+3 h2wL71JSArVfhWq/iFTryWRQ0q781tYPADh+KL7lXZ6IQLBZzj6t5jsGFjKH2jyk 1tn0gYLhSd8Gyhs3Emwilr+Q1mHlZoH8EHaP0q6JybPx4pTeahXYUroSRHMfmjDP uE8cXhJr+xyKC/PnIdsesl6jCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKX7fnaX L5Tr5T1lQsLsm2KXMNscMB8GA1UdIwQYMBaAFJN4aR1ag8wCa40fIygGAINxvtwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEZEMi9COTRCNEY3QzBD MzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpBSnJqUjhqS0FZQWczRy0z QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szaHBIVnFEekFKcmpSOGpLQVlBZzNHLTNBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEZEMi9COTRCNEY3QzBDMzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpB SnJqUjhqS0FZQWczRy0zQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGKCzMM+nSZaRY3AskOZxtYYihdCqMfC78xpxt5G2tlbHYORG935Ed R+l6Wwv/wtuTt/q9SxZVZ5Kg8denNbk/1tEY3D87AxqOISYXJlifWY15nizJBc1c h2wtebDHahDVbD5NAI9fZNHRVjI7u2E5CQDTgDgXo6xg0/h5FkklCm4GdJo32wUk vhOawFBh4eph1tvSH+Zxe6NJbIUbv8xk7VN5Hl+D2JCoY/HhRGacY/dQvdgZG9YY oDIDNsLfmStrtXNHL4Ltvox2AxlNQv4QbtrsX1NFw5nanyMXNiELaW2KaKPIzkv0 h6aCmizGL+7fuwscYzd6r8FDssCctNiy -----END CERTIFICATE-----Generated at Sun May 19 00:16:15 2024 by rpki-client on console-fra.rpki-client.org