$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft File: rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json) Hash identifier: wDzlHzyP4VqFTacjE/Pkb/v0ZV6pMwVTEpgicCrQE2Y= Subject key identifier: 32:71:DF:05:DE:3B:BE:DD:68:D3:38:4C:90:EA:AC:4E:53:CE:38:BA Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Certificate serial: 33E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft Manifest number: 33D4 Signing time: Sat 18 May 2024 14:44:10 +0000 Manifest this update: Sat 18 May 2024 14:44:09 +0000 Manifest next update: Sat 25 May 2024 14:44:09 +0000 Files and hashes: 1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: Dwj5Oo2PL52Ack23vd0A1N1qj2ViFB7cB8knN2WIt/w=) 2: D1893F2435F111EBBFEA4039C4F9AE02.roa (hash: SDlK72tVgqLaEiiVBcuX/ceq5NukKuq9JwXB6vZpsxI=) 3: 83D16ACCF54C11EEB856F155C4F9AE02.roa (hash: xZPMbqwzJRxdS3NKOuo3HufbnVPt6zDUUGu0rLBix2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13281 (0x33e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Validity Not Before: May 18 14:44:09 2024 GMT Not After : May 25 14:44:09 2024 GMT Subject: CN=6648beba-9b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ed:8e:4e:46:7d:54:99:e5:0f:40:c1:9f:7c: 60:8b:11:86:78:40:eb:82:13:b3:f6:de:26:33:65: 68:d1:10:52:3c:e3:3d:b5:29:4d:ee:e7:72:e7:61: 26:b7:8e:aa:99:5b:85:b3:a1:7e:48:2d:0a:7b:bc: 0a:10:b6:b1:68:4a:b0:0c:9a:d3:a0:ad:a2:6c:93: fa:73:ab:ef:d2:63:db:9c:ef:61:f7:81:33:27:6b: 5d:d1:69:01:ed:2c:ad:4e:fe:0a:0d:45:0c:86:94: 56:81:4f:fa:c7:1c:85:d3:1e:22:25:0e:81:26:14: 74:77:1f:2d:3a:00:cf:25:57:70:70:95:1e:78:ce: 2c:fe:ea:cb:e6:da:ac:82:b2:5d:0e:f5:98:2d:2f: 0f:0c:10:ba:57:fe:86:d3:4d:24:b3:af:00:ae:c4: e8:f3:e9:c6:13:f6:78:5b:73:57:60:2e:54:37:12: d1:8d:56:92:48:fb:38:60:d2:da:57:1f:0a:66:79: 7f:55:80:fe:86:1a:d4:18:89:86:00:47:f4:9a:8b: 51:3d:96:eb:23:f0:b1:7a:bb:a4:ab:3d:78:da:07: 33:8c:6b:e3:0a:da:b0:b8:cf:a5:e1:ac:19:ad:5e: 21:a0:b7:ee:b3:73:74:2d:54:b4:43:ab:1b:2b:2e: 67:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:71:DF:05:DE:3B:BE:DD:68:D3:38:4C:90:EA:AC:4E:53:CE:38:BA X509v3 Authority Key Identifier: keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:c5:f8:aa:87:d5:1e:7f:07:dd:1a:88:5b:e2:e1:d5:5a:ca: ba:e9:2f:d5:05:b2:8b:70:f6:bc:b9:a3:ee:6c:1d:50:a7:f9: 0b:02:9b:fc:b9:02:62:04:3b:c6:72:78:94:22:da:cd:d5:9e: c0:00:59:c6:29:96:17:e7:6c:42:ae:64:1e:b5:01:f7:7f:77: c9:48:a1:41:87:9a:7c:fc:95:73:ad:5b:8a:18:14:a9:74:98: 2a:31:39:97:b6:c9:8f:11:cc:24:38:14:c1:8c:39:30:7b:34: bc:df:20:3d:b8:c3:e6:5e:43:15:35:1a:0d:2d:1e:8f:1d:ff: bc:1b:d5:65:f7:75:ff:f9:23:62:31:32:c1:91:87:c2:1c:3e: ff:92:8b:9f:ae:02:c1:69:b7:69:8b:41:d7:33:9f:d2:0b:90: e7:26:fb:53:49:ba:23:7c:21:a3:39:37:34:7d:47:2f:17:b4: d6:5c:0c:b2:ef:61:d9:33:8c:c3:3d:02:d5:37:aa:b6:a8:2d: 8f:0d:fd:29:a2:0c:bd:06:06:16:88:51:4f:1a:7c:4c:9d:f4: 16:26:c6:fb:b1:cc:09:a5:e1:9e:5a:d1:84:79:50:96:70:bd: d6:26:3b:c4:0d:0a:9f:5b:5a:dd:b5:d0:98:bc:ca:60:57:95: 07:02:58:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKEFEMjcwRkRFOTlCMUYxMDY5REFCOEVGN0E1NzZBQTJD MkFGMkM2RjAwHhcNMjQwNTE4MTQ0NDA5WhcNMjQwNTI1MTQ0NDA5WjAYMRYwFAYD VQQDEw02NjQ4YmViYS05YjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+2OTkZ9VJnlD0DBn3xgixGGeEDrghOz9t4mM2Vo0RBSPOM9tSlN7udy52Em t46qmVuFs6F+SC0Ke7wKELaxaEqwDJrToK2ibJP6c6vv0mPbnO9h94EzJ2td0WkB 7SytTv4KDUUMhpRWgU/6xxyF0x4iJQ6BJhR0dx8tOgDPJVdwcJUeeM4s/urL5tqs grJdDvWYLS8PDBC6V/6G000ks68ArsTo8+nGE/Z4W3NXYC5UNxLRjVaSSPs4YNLa Vx8KZnl/VYD+hhrUGImGAEf0motRPZbrI/Cxerukqz142gczjGvjCtqwuM+l4awZ rV4hoLfus3N0LVS0Q6sbKy5n8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJx3wXe O77daNM4TJDqrE5Tzji6MB8GA1UdIwQYMBaAFK0nD96ZsfEGnauO96V2qiwq8sbw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC85RUY0MTEzMDFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhRYWRxNDczcFhhcUxDcnl4 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JTY1AzcG14OFFhZHE0NzNwWGFxTENyeXh2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC85RUY0MTEzMDFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhR YWRxNDczcFhhcUxDcnl4dkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAxfiqh9UefwfdGohb4uHVWsq66S/VBbKLcPa8uaPubB1Qp/kLApv8 uQJiBDvGcniUItrN1Z7AAFnGKZYX52xCrmQetQH3f3fJSKFBh5p8/JVzrVuKGBSp dJgqMTmXtsmPEcwkOBTBjDkwezS83yA9uMPmXkMVNRoNLR6PHf+8G9Vl93X/+SNi MTLBkYfCHD7/koufrgLBabdpi0HXM5/SC5DnJvtTSbojfCGjOTc0fUcvF7TWXAyy 72HZM4zDPQLVN6q2qC2PDf0pogy9BgYWiFFPGnxMnfQWJsb7scwJpeGeWtGEeVCW cL3WJjvEDQqfW1rdtdCYvMpgV5UHAlip -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org