$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft File: 3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json) Hash identifier: nCBKS68JgiX0/Olj62o/V14OyEonDNOLgz99KwANZlI= Subject key identifier: 34:EE:02:FE:72:43:1D:FC:D1:AD:C5:86:20:A4:4A:DE:89:6B:3B:F1 Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Certificate serial: 06C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft Manifest number: 293F Signing time: Sat 18 May 2024 17:23:50 +0000 Manifest this update: Sat 18 May 2024 17:23:50 +0000 Manifest next update: Sat 25 May 2024 17:23:50 +0000 Files and hashes: 1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: czZevCZDU9Slvl2R7iyix021LLbZnIgnDhpF6AKa9Tc=) 2: A076FA54BD2B11EBA3874022C4F9AE02.roa (hash: rECWrESPi1Gsv9lGCcHvMxOXH5JRYUB6cIjdJabfsHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1730 (0x6c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Validity Not Before: May 18 17:23:50 2024 GMT Not After : May 25 17:23:50 2024 GMT Subject: CN=6648e426-f656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:44:cf:f3:ee:d4:f7:8c:04:3b:ac:b7:8b: 60:d6:0a:59:0c:33:89:e0:dd:a0:2d:50:df:5b:cb: 94:3b:89:3a:e6:b6:d3:41:45:a8:28:98:b0:01:4f: b2:25:9d:d1:bc:01:78:1b:6a:3f:db:49:42:99:82: 7b:bf:b9:52:95:50:32:44:29:29:5d:f9:eb:08:0c: a0:64:80:c4:e6:59:85:10:f1:7f:96:fd:f6:1a:50: a0:a6:51:8a:b5:b8:9c:cc:07:ad:06:c8:b8:41:05: af:a5:80:3d:d4:7e:48:cf:07:f3:52:0f:ff:78:2d: 39:e1:fc:98:35:1b:1c:a3:7c:77:02:ce:bb:78:03: bd:f9:a5:2b:5f:77:ca:7a:65:7c:1c:e2:33:6a:0e: 85:88:7e:02:69:76:82:8f:bb:53:b8:a1:07:ca:3e: 2d:68:94:13:a5:8b:f4:c1:59:60:68:3a:d7:2f:5d: 6a:1f:77:94:69:d7:50:09:c2:93:81:56:4e:33:07: c0:eb:c0:10:bc:80:08:34:cc:9a:5c:7e:a7:80:e7: dd:0b:7d:a9:29:b1:d1:c0:d9:64:9b:94:0b:f6:a6: ba:76:ae:c0:10:9c:fb:26:2b:e5:15:8d:73:b0:cb: 8f:a9:5c:d9:7c:73:b0:6a:e9:89:b9:dd:4b:f3:9a: 14:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EE:02:FE:72:43:1D:FC:D1:AD:C5:86:20:A4:4A:DE:89:6B:3B:F1 X509v3 Authority Key Identifier: keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:aa:8a:fc:b5:b9:f0:20:ea:e6:f7:01:29:98:5c:10:e1:08: a7:16:12:d4:ea:7c:fa:85:e5:3d:ea:df:2e:7a:a1:f2:ef:67: 74:9c:74:70:ba:65:90:1b:9e:67:aa:ac:cd:fb:58:b0:68:39: d1:df:eb:b4:5a:b3:d1:54:40:1c:b9:a9:0a:06:90:dc:02:d0: 46:02:d1:f9:18:84:46:d4:b9:8b:c7:f5:f6:1d:03:c9:0a:8c: 44:b2:a9:f8:0b:c2:2c:2d:0d:e2:a4:70:aa:27:06:e8:19:d9: 11:60:ea:c2:8d:9f:09:74:40:c3:98:43:2e:bf:ec:b5:53:08: 20:60:65:5f:11:9c:64:04:9b:14:78:f5:90:f5:7d:c9:bb:b8: e3:94:96:4b:79:1b:49:8a:23:05:6a:b1:4f:08:95:b7:fb:1d: 5c:2f:ed:c2:85:df:95:8c:55:5e:00:d3:aa:bd:28:3f:8d:88: cf:47:1f:e3:42:02:26:0a:b3:90:bd:8c:d5:c6:a7:fd:2d:39: ec:52:21:6c:19:d1:42:dd:5d:f3:5a:f9:35:10:12:e3:c3:1a: 8b:f3:43:c5:24:28:c4:14:39:f5:6b:d6:e4:1a:43:e1:0d:2c: 58:7f:ea:c6:ed:2f:aa:b4:6c:1d:16:12:2f:83:59:f8:5d:27: ab:bb:c5:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4RUYxMTAvBgNVBAUTKERERDUzRjUyMjVFRDJGOERBOEQwOUU3QUFEOTgyQzgw QjZDRUFEQTgwHhcNMjQwNTE4MTcyMzUwWhcNMjQwNTI1MTcyMzUwWjAYMRYwFAYD VQQDEw02NjQ4ZTQyNi1mNjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0tEz/Pu1PeMBDust4tg1gpZDDOJ4N2gLVDfW8uUO4k65rbTQUWoKJiwAU+y JZ3RvAF4G2o/20lCmYJ7v7lSlVAyRCkpXfnrCAygZIDE5lmFEPF/lv32GlCgplGK tbiczAetBsi4QQWvpYA91H5IzwfzUg//eC054fyYNRsco3x3As67eAO9+aUrX3fK emV8HOIzag6FiH4CaXaCj7tTuKEHyj4taJQTpYv0wVlgaDrXL11qH3eUaddQCcKT gVZOMwfA68AQvIAINMyaXH6ngOfdC32pKbHRwNlkm5QL9qa6dq7AEJz7JivlFY1z sMuPqVzZfHOwaumJud1L85oU2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTuAv5y Qx380a3FhiCkSt6JazvxMB8GA1UdIwQYMBaAFN3VP1Il7S+NqNCeeq2YLIC2zq2o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0Mm8wSjU2clpnc2dMYk9y YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNkVV9VaVh0TDQybzBKNTZyWmdzZ0xiT3JhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0 Mm8wSjU2clpnc2dMYk9yYWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtqor8tbnwIOrm9wEpmFwQ4QinFhLU6nz6heU96t8ueqHy72d0nHRw umWQG55nqqzN+1iwaDnR3+u0WrPRVEAcuakKBpDcAtBGAtH5GIRG1LmLx/X2HQPJ CoxEsqn4C8IsLQ3ipHCqJwboGdkRYOrCjZ8JdEDDmEMuv+y1UwggYGVfEZxkBJsU ePWQ9X3Ju7jjlJZLeRtJiiMFarFPCJW3+x1cL+3Chd+VjFVeANOqvSg/jYjPRx/j QgImCrOQvYzVxqf9LTnsUiFsGdFC3V3zWvk1EBLjwxqL80PFJCjEFDn1a9bkGkPh DSxYf+rG7S+qtGwdFhIvg1n4XSeru8Vx -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org