$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: fdqQCN829Pji8k9u9Fryhq5tmYOVnKnR3+jbgZjDkTw= Subject key identifier: 6E:AF:AD:95:7D:34:81:D4:40:1E:0C:39:CD:DC:2D:39:DE:7E:2C:E7 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 029E Signing time: Sun 19 May 2024 03:36:41 +0000 Manifest this update: Sun 19 May 2024 03:36:41 +0000 Manifest next update: Sun 26 May 2024 03:36:41 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: qxUbOckW6lG60vcxUzuk2g08rCrt4R4u9hP1cIQbNp4=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: BjnEXUQnM/w5/elkxHxhuklRbVefDC0b1z2jDyjryYY=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: Swm8wcaeAGU6W3RSshCj74MA0EDyTsqkbcfipXQ6I6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: May 19 03:36:41 2024 GMT Not After : May 26 03:36:41 2024 GMT Subject: CN=664973c9-4206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c4:62:9d:ca:1b:7c:bd:66:6c:19:4e:2c:b4: c4:3b:a3:8e:9f:b9:f5:b6:20:cb:69:ae:ab:9a:0c: aa:a0:89:6d:6e:21:8d:8a:5e:6e:8a:ba:f6:6d:f4: 39:2d:67:34:04:ee:04:9f:68:65:b3:61:cb:8d:07: 51:a4:44:11:88:36:b6:73:f8:c8:04:9e:8b:08:61: e9:d9:31:75:9a:8e:ce:c4:95:4b:fc:47:8c:5b:18: b0:5c:da:88:26:64:30:de:2c:45:75:62:72:22:29: f1:87:c8:0d:c1:b7:d2:5e:70:21:18:41:fa:12:98: 5c:f8:ec:a6:51:85:c6:d4:33:14:0f:a3:db:c8:66: c0:c2:1c:05:10:c7:eb:90:3d:7d:82:13:42:8b:0f: 1f:25:eb:59:22:89:47:6a:03:79:b8:2d:24:9b:25: 75:66:71:0f:8e:ce:cb:fa:6f:8e:4b:32:53:6a:20: 93:bd:47:e7:17:a1:b4:77:84:1e:ff:a4:d5:03:11: f3:f7:03:09:a5:06:9d:63:01:a0:d3:f0:95:ac:b4: 76:ae:fc:bf:ec:4c:5f:9a:2f:8d:b4:ee:a4:26:70: 95:6f:e5:c3:30:08:db:4c:10:e7:eb:5f:4d:08:0e: b5:ad:bf:e4:40:38:70:ab:25:5e:11:15:fd:f5:65: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AF:AD:95:7D:34:81:D4:40:1E:0C:39:CD:DC:2D:39:DE:7E:2C:E7 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:f4:d8:3a:eb:b6:5d:5b:9c:93:40:36:eb:4e:57:b4:1c:e3: f1:db:e1:8e:28:28:58:08:48:6e:7c:7a:af:a6:96:9f:f0:56: 1f:55:d0:7c:42:10:ac:5e:8a:79:55:6a:dd:b9:88:af:61:d7: 55:69:61:4f:09:a1:37:15:db:ed:83:db:bf:4d:6f:4b:7e:32: 73:fe:f4:dc:0c:38:90:14:b0:ca:a8:ae:35:63:aa:d0:ba:b5: 8f:73:20:66:ea:1e:b6:c3:94:c3:0f:42:dc:e3:48:a4:ab:b1: 26:a9:29:a8:3b:e3:87:25:a7:38:d9:fc:c8:a7:a1:7f:a9:59: 04:cd:33:8d:91:45:e4:01:c9:d8:5f:28:7a:71:21:52:9e:c0: 96:46:78:53:80:2f:44:85:18:a9:36:ee:06:17:35:31:5e:f1: 45:76:7c:9a:b9:c9:fa:4b:96:7d:54:93:17:7b:6b:b8:05:8e: 82:02:b8:17:0b:2e:9d:90:61:dc:c1:f8:53:5c:15:27:0a:ee: 83:54:46:60:3f:00:c0:6d:ef:a5:7a:1b:dc:cf:ee:b7:d1:17: b1:53:4c:d8:e1:41:a7:bd:d4:a9:6b:a0:3d:b8:70:f1:e9:fa: c9:ba:b0:e6:3f:0f:ff:8e:f8:ab:9b:8e:17:a1:77:bd:b1:c1: 46:cb:2a:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjQwNTE5MDMzNjQxWhcNMjQwNTI2MDMzNjQxWjAYMRYwFAYD VQQDEw02NjQ5NzNjOS00MjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28RincobfL1mbBlOLLTEO6OOn7n1tiDLaa6rmgyqoIltbiGNil5uirr2bfQ5 LWc0BO4En2hls2HLjQdRpEQRiDa2c/jIBJ6LCGHp2TF1mo7OxJVL/EeMWxiwXNqI JmQw3ixFdWJyIinxh8gNwbfSXnAhGEH6Ephc+OymUYXG1DMUD6PbyGbAwhwFEMfr kD19ghNCiw8fJetZIolHagN5uC0kmyV1ZnEPjs7L+m+OSzJTaiCTvUfnF6G0d4Qe /6TVAxHz9wMJpQadYwGg0/CVrLR2rvy/7Exfmi+NtO6kJnCVb+XDMAjbTBDn619N CA61rb/kQDhwqyVeERX99WVnAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6vrZV9 NIHUQB4MOc3cLTnefiznMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH9Ng667ZdW5yTQDbrTle0HOPx2+GOKChYCEhufHqvppaf8FYfVdB8 QhCsXop5VWrduYivYddVaWFPCaE3Fdvtg9u/TW9LfjJz/vTcDDiQFLDKqK41Y6rQ urWPcyBm6h62w5TDD0Lc40ikq7EmqSmoO+OHJac42fzIp6F/qVkEzTONkUXkAcnY Xyh6cSFSnsCWRnhTgC9EhRipNu4GFzUxXvFFdnyaucn6S5Z9VJMXe2u4BY6CArgX Cy6dkGHcwfhTXBUnCu6DVEZgPwDAbe+lehvcz+630RexU0zY4UGnvdSpa6A9uHDx 6frJurDmPw//jvirm44XoXe9scFGyypf -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org