$ rpki-client -vvf rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft File: 3HxGdMlvt2fql8B49oDvV07eu78.mft (raw, json) Hash identifier: LPgUeYiH5MYswaDRUV28wt3r8D3784ZAbYiDJ6O1hIk= Subject key identifier: F8:46:4D:FE:E9:E1:B1:6B:50:CA:60:0B:C3:0D:9D:7B:11:68:F2:3F Authority key identifier: DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF Certificate issuer: /CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF Certificate serial: 05A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft Manifest number: 05A2 Signing time: Sun 19 May 2024 00:21:58 +0000 Manifest this update: Sun 19 May 2024 00:21:57 +0000 Manifest next update: Sun 26 May 2024 00:21:57 +0000 Files and hashes: 1: 3HxGdMlvt2fql8B49oDvV07eu78.crl (hash: /W0jRIm1gZeri0lcYB5xR4H1WCHOcOuVHBNTC6K4EnU=) 2: A88A17FA823C11EBB35EF50FC4F9AE02.roa (hash: +lc9qF4/0cFnbDSjkHv12c/HLXSEkUkDJKnqsUHgJl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1448 (0x5a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF Validity Not Before: May 19 00:21:57 2024 GMT Not After : May 26 00:21:57 2024 GMT Subject: CN=66494626-ee98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ce:83:16:82:77:0a:31:8c:ff:bc:1c:d5:da: a9:f8:89:ff:06:51:d9:0b:00:34:af:07:de:31:fd: c8:fe:b8:07:bb:51:de:7a:1d:58:5d:4b:38:eb:33: 35:7d:25:9c:f2:0c:29:f2:b5:01:35:7a:75:59:42: b5:a0:80:a2:bb:c9:8f:76:7e:34:b8:e3:ce:bb:3e: 8b:87:1f:0f:78:5e:5f:5e:b2:6d:4a:5b:1c:e8:13: 6c:26:c8:6f:d7:0b:7e:d0:7a:58:69:a9:ad:47:7f: 10:43:47:32:3a:fd:25:6b:d2:66:9e:81:4d:0d:31: 46:91:8d:d3:aa:b2:46:95:b9:2d:b0:1d:6e:9f:8a: c8:b9:5b:58:00:08:a7:b8:22:31:29:cf:9f:ef:cf: 9d:f3:04:61:30:6c:98:a5:ed:c4:c9:95:38:ad:1f: 40:f2:4c:af:e9:cf:35:2c:24:ab:f9:f6:87:46:a3: 88:38:90:5c:13:52:c6:3f:b5:b6:99:76:88:4b:65: 05:f0:d1:3f:bf:b7:97:7f:e9:e4:ce:9b:75:d8:a7: 8a:53:d2:b8:c0:dd:5d:db:54:dd:62:f2:b1:f7:b5: 8c:2c:07:97:b7:e0:5e:18:dd:5a:56:53:7d:1f:84: 7a:bb:8e:9a:b4:68:a6:20:56:cb:f0:18:55:3a:15: 3a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:46:4D:FE:E9:E1:B1:6B:50:CA:60:0B:C3:0D:9D:7B:11:68:F2:3F X509v3 Authority Key Identifier: keyid:DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:6e:34:a4:cc:14:9c:4f:2b:55:ee:d5:3c:4b:82:46:d8:43: 9d:23:3f:a6:d3:a3:4d:e8:99:5d:d1:36:37:1e:a2:8d:be:95: a7:4e:a0:53:53:0f:72:ed:ca:cc:49:9f:13:43:5b:ce:dc:de: 3f:dc:d1:e4:da:86:de:25:a0:8d:3a:16:5c:11:91:ce:7f:cf: 43:db:ed:b7:1c:30:94:48:b1:7a:16:27:a1:96:f0:81:fd:49: 73:3a:d3:2a:5e:bf:7e:6d:8f:26:cb:38:3d:20:2f:03:7a:7a: 76:3d:f9:a0:e1:f7:93:ac:63:dc:5e:bb:88:f4:e6:4a:64:d8: c2:9d:d4:b6:f1:cb:b5:d8:53:34:b8:4d:13:4e:ef:8a:36:43: 64:45:43:c8:be:fc:e9:d1:ad:ef:51:89:85:dc:f6:e7:94:18: 52:f5:75:74:fe:52:27:a7:49:00:ee:6c:62:d6:05:77:62:fc: d4:7a:e5:b0:8f:3e:4d:94:9d:cf:56:32:6a:b5:68:d0:c6:80: 12:33:76:50:ca:a7:6f:49:ae:85:2e:2b:13:17:27:ec:29:29: 99:99:7e:28:71:ad:19:7f:86:24:19:80:b9:df:92:cc:51:b9: c4:ae:61:74:3e:28:ef:ef:ad:63:36:a7:04:33:86:c2:3b:36: 80:a0:ea:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NEMzExMTAvBgNVBAUTKERDN0M0Njc0Qzk2RkI3NjdFQTk3QzA3OEY2ODBFRjU3 NEVERUJCQkYwHhcNMjQwNTE5MDAyMTU3WhcNMjQwNTI2MDAyMTU3WjAYMRYwFAYD VQQDEw02NjQ5NDYyNi1lZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxs6DFoJ3CjGM/7wc1dqp+In/BlHZCwA0rwfeMf3I/rgHu1Heeh1YXUs46zM1 fSWc8gwp8rUBNXp1WUK1oICiu8mPdn40uOPOuz6Lhx8PeF5fXrJtSlsc6BNsJshv 1wt+0HpYaamtR38QQ0cyOv0la9JmnoFNDTFGkY3TqrJGlbktsB1un4rIuVtYAAin uCIxKc+f78+d8wRhMGyYpe3EyZU4rR9A8kyv6c81LCSr+faHRqOIOJBcE1LGP7W2 mXaIS2UF8NE/v7eXf+nkzpt12KeKU9K4wN1d21TdYvKx97WMLAeXt+BeGN1aVlN9 H4R6u46atGimIFbL8BhVOhU6OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhGTf7p 4bFrUMpgC8MNnXsRaPI/MB8GA1UdIwQYMBaAFNx8RnTJb7dn6pfAePaA71dO3ru/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0QzMS83NUY1N0IxMDgy M0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQyZnFsOEI0OW9EdlYwN2V1 NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIeEdkTWx2dDJmcWw4QjQ5b0R2VjA3ZXU3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0QzMS83NUY1N0IxMDgyM0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQy ZnFsOEI0OW9EdlYwN2V1NzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvbjSkzBScTytV7tU8S4JG2EOdIz+m06NN6Jld0TY3HqKNvpWnTqBT Uw9y7crMSZ8TQ1vO3N4/3NHk2obeJaCNOhZcEZHOf89D2+23HDCUSLF6FiehlvCB /UlzOtMqXr9+bY8myzg9IC8Denp2Pfmg4feTrGPcXruI9OZKZNjCndS28cu12FM0 uE0TTu+KNkNkRUPIvvzp0a3vUYmF3PbnlBhS9XV0/lInp0kA7mxi1gV3YvzUeuWw jz5NlJ3PVjJqtWjQxoASM3ZQyqdvSa6FLisTFyfsKSmZmX4oca0Zf4YkGYC535LM UbnErmF0Pijv761jNqcEM4bCOzaAoOq8 -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-ams.rpki-client.org