$ rpki-client -vvf rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft File: 3oFz59KP6tHsOpLJdljacyhQk-U.mft (raw, json) Hash identifier: ZgCyqbCAuoJEsGtvfTlKj6XKtihbu6ee/k0gm7zKrDc= Subject key identifier: 65:3D:F4:33:CD:A0:96:79:92:4F:C8:63:7E:D7:E6:BA:C5:B4:8A:37 Authority key identifier: DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5 Certificate issuer: /CN=A917C11A/serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5 Certificate serial: 0608 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft Manifest number: 0603 Signing time: Sat 18 May 2024 23:53:50 +0000 Manifest this update: Sat 18 May 2024 23:53:50 +0000 Manifest next update: Sat 25 May 2024 23:53:49 +0000 Files and hashes: 1: 3oFz59KP6tHsOpLJdljacyhQk-U.crl (hash: hvdrzRDt9EJ1UOjmWe0Hw7yosgr0MJXjwm7OnvkXTwc=) 2: 4002E4BA5A3B11EBA4020D68C4F9AE02.roa (hash: lEAUzX5yromH9S256XNG7qzmeT220WB95GeuIqYuZYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1544 (0x608) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C11A/serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5 Validity Not Before: May 18 23:53:50 2024 GMT Not After : May 25 23:53:49 2024 GMT Subject: CN=66493f8e-2c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:64:0f:ca:5c:9c:e7:35:11:67:60:b0:27:45: 56:f0:6c:8a:b3:0c:b5:c2:ee:e1:a5:37:9d:d4:de: 75:2f:f7:81:da:2e:18:a8:05:07:cc:1d:89:59:0b: 77:d7:6f:4d:8a:1f:97:0e:bf:60:44:cd:ab:db:d9: 9c:7e:5a:6b:b0:cc:6c:97:2e:a7:12:09:b2:7d:d0: ae:e9:79:35:e7:36:55:99:bf:ea:37:b3:ce:c5:72: e1:ce:61:5f:cf:51:18:11:50:67:3a:45:d2:e3:a5: f2:cd:87:25:13:a2:a4:bb:e3:65:28:c9:09:f0:13: f7:0c:04:ce:9b:81:52:f4:12:4e:89:49:b5:ac:85: 86:3b:2c:e6:bc:f9:06:63:f5:6d:60:70:36:9e:e0: a5:2f:28:4c:72:ff:d9:4f:a6:d6:d8:25:2a:5f:1f: bb:1d:38:48:45:71:64:14:89:92:e2:52:20:8f:fb: 00:25:7f:3f:34:93:d9:27:0b:09:09:96:aa:4b:b1: a2:ea:a2:07:1b:a3:89:22:fb:f5:2b:31:c0:b0:f2: 85:90:30:a9:ba:47:47:f7:3c:b2:03:27:01:a5:4d: 31:a0:ec:b7:ba:97:4a:39:b4:02:e6:99:c3:f3:ac: 17:e3:b0:0b:a4:02:05:29:61:81:72:de:20:c2:3e: 7e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3D:F4:33:CD:A0:96:79:92:4F:C8:63:7E:D7:E6:BA:C5:B4:8A:37 X509v3 Authority Key Identifier: keyid:DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0b:40:f2:6e:12:81:48:69:46:de:c7:f5:fb:f4:ef:88:79: 70:6f:f9:77:e9:59:e6:48:d6:03:e7:c5:2a:56:07:38:e6:c0: 07:65:ef:e6:9e:26:54:a1:b5:85:1d:55:0c:d1:63:0e:3f:38: e2:24:eb:7f:a4:70:57:aa:3a:40:05:fe:be:0f:2a:e3:d3:02: 8d:9f:52:60:ce:f2:9e:6d:7a:41:c0:4d:3b:67:05:cd:19:a1: 02:88:a4:32:14:3a:e9:61:9c:69:90:2d:7c:d0:16:b9:31:eb: 02:98:9a:87:26:3e:dd:42:6f:22:b7:e7:fd:f9:77:f7:5f:27: c6:bf:65:31:eb:a6:50:2e:53:2b:ee:f3:53:ce:a3:20:b1:7f: 23:14:0b:9d:8e:de:18:88:1e:e7:75:88:e3:8a:04:93:24:1e: d7:88:94:24:e4:7c:34:3c:7f:ec:46:5e:df:47:96:fe:57:5c: d1:33:06:48:09:e5:a1:84:51:75:7f:d6:b8:d9:c7:4c:9c:b1: 49:62:9f:30:71:59:e2:bd:e8:16:ea:31:41:d3:3b:9b:c0:72: 67:46:c9:1e:08:36:0d:67:60:68:d6:66:aa:51:f6:03:4e:4b: 48:b6:c0:99:1f:1d:3d:c3:1b:eb:b3:f4:a0:9a:3a:0f:82:20: c6:58:3b:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxMUExMTAvBgNVBAUTKERFODE3M0U3RDI4RkVBRDFFQzNBOTJDOTc2NThEQTcz Mjg1MDkzRTUwHhcNMjQwNTE4MjM1MzUwWhcNMjQwNTI1MjM1MzQ5WjAYMRYwFAYD VQQDEw02NjQ5M2Y4ZS0yYzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6GQPylyc5zURZ2CwJ0VW8GyKswy1wu7hpTed1N51L/eB2i4YqAUHzB2JWQt3 129Nih+XDr9gRM2r29mcflprsMxsly6nEgmyfdCu6Xk15zZVmb/qN7POxXLhzmFf z1EYEVBnOkXS46XyzYclE6Kku+NlKMkJ8BP3DATOm4FS9BJOiUm1rIWGOyzmvPkG Y/VtYHA2nuClLyhMcv/ZT6bW2CUqXx+7HThIRXFkFImS4lIgj/sAJX8/NJPZJwsJ CZaqS7Gi6qIHG6OJIvv1KzHAsPKFkDCpukdH9zyyAycBpU0xoOy3updKObQC5pnD 86wX47ALpAIFKWGBct4gwj5+YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGU99DPN oJZ5kk/IY37X5rrFtIo3MB8GA1UdIwQYMBaAFN6Bc+fSj+rR7DqSyXZY2nMoUJPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzExQS9DMDg2RUE5ODVB MzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlLUDZ0SHNPcExKZGxqYWN5aFFr LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvRno1OUtQNnRIc09wTEpkbGphY3loUWstVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzExQS9DMDg2RUE5ODVBMzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlLUDZ0 SHNPcExKZGxqYWN5aFFrLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqC0DybhKBSGlG3sf1+/TviHlwb/l36VnmSNYD58UqVgc45sAHZe/m niZUobWFHVUM0WMOPzjiJOt/pHBXqjpABf6+Dyrj0wKNn1JgzvKebXpBwE07ZwXN GaECiKQyFDrpYZxpkC180Ba5MesCmJqHJj7dQm8it+f9+Xf3XyfGv2Ux66ZQLlMr 7vNTzqMgsX8jFAudjt4YiB7ndYjjigSTJB7XiJQk5Hw0PH/sRl7fR5b+V1zRMwZI CeWhhFF1f9a42cdMnLFJYp8wcVnivegW6jFB0zubwHJnRskeCDYNZ2Bo1maqUfYD TktItsCZHx09wxvrs/SgmjoPgiDGWDsy -----END CERTIFICATE-----Generated at Sun May 19 00:30:18 2024 by rpki-client on console-ams.rpki-client.org