$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft File: 3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json) Hash identifier: pAHKyngg0dmcTrp7PO9atEATXtIQCt+Vmz1Ueklt6dA= Subject key identifier: 0A:2A:43:17:F1:0E:91:7A:52:D4:0B:D8:14:C7:68:63:57:47:40:08 Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Certificate serial: 1DD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft Manifest number: 1DC8 Signing time: Sat 18 May 2024 16:27:18 +0000 Manifest this update: Sat 18 May 2024 16:27:17 +0000 Manifest next update: Sat 25 May 2024 16:27:17 +0000 Files and hashes: 1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: 30amqpRHzVj6szRZfLPjSQRv7DV5jE8d12TnWEO0gKs=) 2: 5D5A631E93D211EBAABA8D6AC4F9AE02.roa (hash: VbixlrcYm3LEti002JR+XkxlM0l6K+swgtUolMlyd4U=) 3: 5E7E296A93D211EBAABA8D6AC4F9AE02.roa (hash: Wv7mLnYz59NEFxrBxz+FkU2HP50vwl70ITbmuSz8buU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7641 (0x1dd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Validity Not Before: May 18 16:27:17 2024 GMT Not After : May 25 16:27:17 2024 GMT Subject: CN=6648d6e6-81ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f0:48:0d:fd:30:f2:e9:9a:37:1b:b4:b1:b9: 5f:13:87:f0:da:2c:bf:32:ed:ef:1e:71:98:fb:9d: f1:fe:ad:ef:94:3a:b7:e7:07:e8:c8:79:6b:60:dc: a0:e6:c6:29:dd:86:3d:4c:8e:6a:e3:b1:cc:90:9e: 1e:ff:91:73:12:57:94:ca:e3:7f:4f:05:1c:c9:5b: d2:e3:b7:56:cc:95:85:e2:a3:64:d7:0c:31:0b:41: 86:4f:7c:65:77:f2:80:d1:db:06:5a:7f:e5:c1:50: 99:08:d1:2f:aa:ab:8f:4b:0f:90:f6:84:1d:5b:0c: 14:f5:fc:18:4f:fa:93:02:cc:f8:10:46:94:cb:3a: 01:d5:6b:12:94:f1:fe:ee:44:2f:c8:b7:2d:1b:43: 2f:e3:fa:93:7e:da:d5:53:39:f2:fe:c4:0c:92:65: cd:2f:e0:48:b1:85:16:0e:8e:3f:4b:5f:21:d8:df: 89:fb:e5:52:60:fc:97:41:ba:e2:ce:5f:61:7d:4e: 4a:d1:01:33:f3:0c:34:1c:1e:69:22:e4:e3:70:5f: 18:67:a0:31:c5:7a:9c:3e:cd:e5:f8:b7:24:92:8f: 4b:38:16:92:a6:9f:36:5d:df:14:ed:ba:f2:51:ac: 7a:55:ee:aa:ad:97:d7:5a:41:9b:ce:b1:28:88:9e: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2A:43:17:F1:0E:91:7A:52:D4:0B:D8:14:C7:68:63:57:47:40:08 X509v3 Authority Key Identifier: keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:bd:85:72:0d:83:cf:3f:d7:85:c7:91:c4:ed:96:af:5c:32: 26:3f:7d:37:a3:4c:22:ae:6b:c8:37:13:1e:42:81:61:24:19: 0b:80:fc:c0:1d:10:12:be:1c:0c:46:1d:15:26:23:20:3c:56: d2:bf:da:2a:62:92:b6:ac:99:36:c3:fd:ac:f4:91:82:7f:e7: ad:d4:94:2d:25:82:d2:d7:48:e8:c3:61:cb:e9:35:e7:ff:ce: 88:b6:21:95:fa:d6:dc:9b:c2:90:8b:91:64:69:fe:ba:f8:06: 9c:c5:3e:5f:43:89:60:64:b7:b2:8e:fb:9f:ad:b5:5b:c3:fc: 42:e2:40:b2:ef:51:cb:9e:54:bf:d8:e6:4a:bd:30:94:65:92: de:7f:ae:dc:11:9d:60:c5:37:66:15:64:2e:6c:38:41:79:89: 04:db:63:cf:53:56:d6:6a:b2:11:f5:28:d9:c8:c4:d1:9f:cf: a8:b9:00:8f:aa:34:ee:ab:e4:e7:e8:ff:28:8f:b0:26:02:2a: 1c:b1:e4:e7:9e:0d:bf:7b:66:f9:6d:27:e4:97:6b:15:be:1f: 08:9e:99:87:74:e6:26:32:62:63:d3:dd:5b:74:a6:18:7b:33: b1:6d:b7:17:d3:f5:1d:65:0c:9f:a2:2f:68:70:5f:d7:bc:0c: 73:44:d9:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNzMxMTAvBgNVBAUTKERDNDc0RDZCMjVENUUxQTFDRDFEMjkwMDBDQ0MxNEVB RjkzMzQxRDIwHhcNMjQwNTE4MTYyNzE3WhcNMjQwNTI1MTYyNzE3WjAYMRYwFAYD VQQDEw02NjQ4ZDZlNi04MWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvBIDf0w8umaNxu0sblfE4fw2iy/Mu3vHnGY+53x/q3vlDq35wfoyHlrYNyg 5sYp3YY9TI5q47HMkJ4e/5FzEleUyuN/TwUcyVvS47dWzJWF4qNk1wwxC0GGT3xl d/KA0dsGWn/lwVCZCNEvqquPSw+Q9oQdWwwU9fwYT/qTAsz4EEaUyzoB1WsSlPH+ 7kQvyLctG0Mv4/qTftrVUzny/sQMkmXNL+BIsYUWDo4/S18h2N+J++VSYPyXQbri zl9hfU5K0QEz8ww0HB5pIuTjcF8YZ6AxxXqcPs3l+Lckko9LOBaSpp82Xd8U7bry Uax6Ve6qrZfXWkGbzrEoiJ55eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoqQxfx DpF6UtQL2BTHaGNXR0AIMB8GA1UdIwQYMBaAFNxHTWsl1eGhzR0pAAzMFOr5M0HS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM3My9DRkNBQzYxMDZG RjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRhSE5IU2tBRE13VTZ2a3pR ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFZE5heVhWNGFITkhTa0FETXdVNnZrelFkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM3My9DRkNBQzYxMDZGRjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRh SE5IU2tBRE13VTZ2a3pRZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOvYVyDYPPP9eFx5HE7ZavXDImP303o0wirmvINxMeQoFhJBkLgPzA HRASvhwMRh0VJiMgPFbSv9oqYpK2rJk2w/2s9JGCf+et1JQtJYLS10jow2HL6TXn /86ItiGV+tbcm8KQi5Fkaf66+AacxT5fQ4lgZLeyjvufrbVbw/xC4kCy71HLnlS/ 2OZKvTCUZZLef67cEZ1gxTdmFWQubDhBeYkE22PPU1bWarIR9SjZyMTRn8+ouQCP qjTuq+Tn6P8oj7AmAiocseTnng2/e2b5bSfkl2sVvh8InpmHdOYmMmJj091bdKYY ezOxbbcX0/UdZQyfoi9ocF/XvAxzRNmy -----END CERTIFICATE-----Generated at Sat May 18 17:20:07 2024 by rpki-client on console-ams.rpki-client.org