$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft File: u3QQVrccdV0D-5zyFKQSTKTzdgw.mft (raw, json) Hash identifier: ieOk1LszlvXNkWeOzAzVEus+Wbz1V7epm9WX7i4Sx8Q= Subject key identifier: 2C:1B:19:E6:DF:61:7C:C6:24:8C:B2:A6:30:B1:FC:6D:CA:F9:3B:9E Authority key identifier: BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C Certificate issuer: /CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C Certificate serial: 0B53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft Manifest number: 0B4B Signing time: Sat 18 May 2024 19:40:13 +0000 Manifest this update: Sat 18 May 2024 19:40:13 +0000 Manifest next update: Sat 25 May 2024 19:40:13 +0000 Files and hashes: 1: u3QQVrccdV0D-5zyFKQSTKTzdgw.crl (hash: YE3LF2AP/eI17fnxh6zEA3u6NbhHLWR1Y2C56tTUtis=) 2: 5AD6AAFE0F1111EA932F3E45C4F9AE02.roa (hash: +nBaQ+ic2ZSPFayaPDgoHYdKuoR8Op4WTYi22UZYGXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2899 (0xb53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C Validity Not Before: May 18 19:40:13 2024 GMT Not After : May 25 19:40:13 2024 GMT Subject: CN=6649041d-3c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:be:31:9f:98:37:41:bf:54:65:a3:6c:db:77: f3:31:44:2f:1c:35:fb:fd:48:e3:c2:c7:93:d8:1c: 8a:92:ef:43:f3:1a:2f:9e:7a:94:fd:31:04:56:0b: a0:99:b2:ba:53:54:a6:5a:b2:58:31:8f:0f:e0:54: 11:8d:4a:b6:18:56:17:14:37:eb:ed:e2:6f:69:13: 91:54:b0:15:8f:ea:67:3a:54:81:1c:cf:db:3e:97: 88:07:41:20:0f:44:3c:bf:b1:69:f9:bc:54:8f:9d: 6c:32:f7:ae:40:1a:f0:6a:7e:c1:60:4b:56:ae:94: f4:25:cc:e5:b4:92:35:10:61:45:be:b1:61:28:ba: 8d:04:69:92:d7:bd:7f:0b:fa:7b:8a:06:83:ef:d1: 71:b8:71:e5:0c:4e:63:93:05:41:c9:ae:16:0c:9f: 14:03:c8:6c:e4:c4:56:29:f7:be:32:18:7b:46:0e: 2d:f4:31:e9:64:20:21:41:16:53:60:f2:ce:61:00: 69:f9:70:80:8e:96:da:b5:62:6a:ca:fa:27:17:12: a2:bb:42:7a:fa:ea:88:9e:4a:8c:98:13:f1:4b:63: f0:2b:90:c9:c3:cf:ee:ad:98:3b:a0:f9:32:5d:18: 65:ff:96:4b:b8:6a:c7:c0:1c:82:f3:62:26:fa:5c: 44:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1B:19:E6:DF:61:7C:C6:24:8C:B2:A6:30:B1:FC:6D:CA:F9:3B:9E X509v3 Authority Key Identifier: keyid:BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:de:c2:0f:22:9c:ea:3e:f6:b2:cf:83:a3:de:af:f4:c8:14: df:21:6a:d1:6a:5b:24:c5:7f:3d:e1:f6:36:66:ae:7a:86:9a: 7d:08:59:79:a2:1e:ee:57:cb:fe:af:f0:23:47:67:d0:91:38: ea:f4:72:91:59:47:82:f5:3a:08:db:6c:fd:a3:ee:6e:bc:5f: e4:73:95:b3:8f:89:b5:ce:38:07:61:14:15:ff:2e:a0:45:16: a1:3b:33:74:e5:7c:37:98:a1:40:02:50:e5:3f:42:9e:45:b5: c7:cb:7c:93:dd:97:81:9d:7d:43:68:39:2b:13:29:b0:1d:e9: d9:8d:f3:8c:b8:d8:a3:d2:4c:4b:e3:9b:eb:7d:23:81:fb:78: 30:01:bb:10:23:b5:fe:dd:61:45:d8:ed:e7:06:3b:97:50:58: be:2e:ea:4e:83:a3:e1:03:26:50:4a:73:e8:3b:9d:17:4d:cf: ea:f6:f5:48:b4:7b:3c:b7:55:df:d2:f5:8a:06:c5:58:66:26: 7f:eb:10:12:2d:d9:32:f0:11:cd:87:f4:5c:10:91:3f:52:e7: 33:52:b3:09:9d:c7:b0:99:f4:1c:26:e8:a9:9d:1b:0f:fa:7b: 8b:ef:67:0d:86:0b:31:c5:20:ea:92:a6:24:bc:d4:5e:c3:e3: 23:cb:e5:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwQUExMTAvBgNVBAUTKEJCNzQxMDU2QjcxQzc1NUQwM0ZCOUNGMjE0QTQxMjRD QTRGMzc2MEMwHhcNMjQwNTE4MTk0MDEzWhcNMjQwNTI1MTk0MDEzWjAYMRYwFAYD VQQDEw02NjQ5MDQxZC0zYzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr74xn5g3Qb9UZaNs23fzMUQvHDX7/UjjwseT2ByKku9D8xovnnqU/TEEVgug mbK6U1SmWrJYMY8P4FQRjUq2GFYXFDfr7eJvaRORVLAVj+pnOlSBHM/bPpeIB0Eg D0Q8v7Fp+bxUj51sMveuQBrwan7BYEtWrpT0JczltJI1EGFFvrFhKLqNBGmS171/ C/p7igaD79FxuHHlDE5jkwVBya4WDJ8UA8hs5MRWKfe+Mhh7Rg4t9DHpZCAhQRZT YPLOYQBp+XCAjpbatWJqyvonFxKiu0J6+uqInkqMmBPxS2PwK5DJw8/urZg7oPky XRhl/5ZLuGrHwByC82Im+lxEmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwbGebf YXzGJIyypjCx/G3K+TueMB8GA1UdIwQYMBaAFLt0EFa3HHVdA/uc8hSkEkyk83YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTBBQS82QTRGRkM3QTBG MTAxMUVBQTk2OUZFNDNDNEY5QUUwMi91M1FRVnJjY2RWMEQtNXp5RktRU1RLVHpk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzUVFWcmNjZFYwRC01enlGS1FTVEtUemRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTBBQS82QTRGRkM3QTBGMTAxMUVBQTk2OUZFNDNDNEY5QUUwMi91M1FRVnJjY2RW MEQtNXp5RktRU1RLVHpkZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj3sIPIpzqPvayz4Oj3q/0yBTfIWrRalskxX894fY2Zq56hpp9CFl5 oh7uV8v+r/AjR2fQkTjq9HKRWUeC9ToI22z9o+5uvF/kc5Wzj4m1zjgHYRQV/y6g RRahOzN05Xw3mKFAAlDlP0KeRbXHy3yT3ZeBnX1DaDkrEymwHenZjfOMuNij0kxL 45vrfSOB+3gwAbsQI7X+3WFF2O3nBjuXUFi+LupOg6PhAyZQSnPoO50XTc/q9vVI tHs8t1Xf0vWKBsVYZiZ/6xASLdky8BHNh/RcEJE/UuczUrMJncewmfQcJuipnRsP +nuL72cNhgsxxSDqkqYkvNRew+Mjy+W8 -----END CERTIFICATE-----Generated at Sat May 18 20:48:18 2024 by rpki-client on console-fra.rpki-client.org