$ rpki-client -vvf rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft File: -r3gfSxVjb3PPDIAdre1X9-gR0A.mft (raw, json) Hash identifier: fBsl6KuVRj2lSfSNTavhxY1CBSmNU0B5FIse7TKpqPM= Subject key identifier: E5:73:7E:67:04:E1:20:70:21:27:55:AE:F5:D2:7F:EB:C4:2A:6D:79 Authority key identifier: FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40 Certificate issuer: /CN=A918143E/serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740 Certificate serial: 0934 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft Manifest number: 092E Signing time: Sat 18 May 2024 21:09:24 +0000 Manifest this update: Sat 18 May 2024 21:09:24 +0000 Manifest next update: Sat 25 May 2024 21:09:24 +0000 Files and hashes: 1: -r3gfSxVjb3PPDIAdre1X9-gR0A.crl (hash: sw68J+debQ2EJg/V2GiWDNu1cLV2yWhSbBS5I2pH2uU=) 2: 7E4ED0E4798B11EA90252969C4F9AE02.roa (hash: StcHXD7OSDwjaAiPvm4lKhdtSQLcm5zEPAFncff2hIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2356 (0x934) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918143E/serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740 Validity Not Before: May 18 21:09:24 2024 GMT Not After : May 25 21:09:24 2024 GMT Subject: CN=66491904-2f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c2:09:af:eb:f5:44:dc:2b:5a:3c:fd:f0:10: b9:2d:75:56:1a:74:c8:d9:75:a3:6b:f6:85:c2:19: df:9f:a2:da:de:e0:27:1e:59:1b:a5:0f:1e:5e:8d: 55:4c:3e:bc:4a:68:86:0b:3b:c2:e3:84:3f:4b:93: 17:75:32:b6:1c:63:52:81:bb:fc:3a:6a:91:57:66: db:1e:55:ac:43:fe:70:ed:35:b6:46:52:b9:b7:80: 60:7c:41:f6:29:5a:62:16:36:bf:61:ac:23:c5:6f: 22:62:13:68:3c:46:96:7b:e9:af:48:88:70:f1:b5: 1d:fb:a6:84:2e:8f:b7:ce:f3:a8:9d:6c:4d:65:1e: 2f:1b:a4:44:f7:50:ca:8f:57:79:8d:f9:df:22:84: 53:c3:6c:61:ad:53:5c:fb:90:63:37:2b:5b:c9:4b: 22:d6:62:72:c7:ff:d8:cb:ee:0e:4c:d4:f1:f3:74: 0b:78:0c:8e:4d:fa:6e:95:de:52:8b:19:a6:7a:b5: 40:fd:ef:18:70:6d:e1:0d:d4:a9:80:a8:0f:55:19: 8b:f5:60:cd:97:8c:5d:ed:a5:b3:1f:a3:bd:f9:6f: ed:fa:46:1a:1e:c1:8f:af:5c:46:5a:bc:dd:85:c6: 75:cf:20:91:91:e6:21:d9:15:af:eb:75:7c:c4:e5: 59:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:73:7E:67:04:E1:20:70:21:27:55:AE:F5:D2:7F:EB:C4:2A:6D:79 X509v3 Authority Key Identifier: keyid:FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:8f:5f:95:27:43:5b:97:c6:bd:c5:c6:db:59:56:16:ed:48: d9:39:0d:2a:11:e4:06:08:05:3a:be:ec:72:a6:a0:6d:4b:f2: 0d:cd:bd:f6:e3:50:a2:fa:89:dd:4b:42:29:e2:3b:a5:36:1d: 8c:d2:bb:65:03:63:0a:8f:bf:2b:ca:18:25:2a:d3:ef:55:c9: df:f3:92:d2:28:4d:32:fc:cd:7d:89:0d:d0:ac:a7:32:4d:06: 42:c8:96:0d:93:bf:86:00:66:2b:8a:2a:ab:f4:31:e8:06:0e: 5b:d0:23:5b:60:34:80:c5:a0:ed:3e:61:82:f1:a7:d5:5a:b9: 3f:92:4b:7b:88:0f:6e:1a:34:48:d2:eb:33:9e:b4:32:1e:15: b4:66:24:bc:09:3e:a9:8e:4e:86:9f:67:1d:bd:6a:e7:29:a9: 10:da:ba:c3:27:0f:e9:af:a2:d4:63:c5:c7:09:d6:0b:4a:af: 61:d7:42:cc:20:97:80:41:96:f7:64:70:02:6b:38:42:67:e4: 01:03:f3:47:45:53:5a:3c:88:bb:14:6a:f7:01:a4:c1:72:6c: 50:69:18:cf:5d:f2:0c:45:9f:ae:c5:66:fa:3e:7b:b9:18:dc: 2e:6e:71:b4:58:dc:9e:66:82:01:42:cd:25:e5:f9:0e:d9:6b: d6:8b:e8:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0M0UxMTAvBgNVBAUTKEZBQkRFMDdEMkM1NThEQkRDRjNDMzIwMDc2QjdCNTVG REZBMDQ3NDAwHhcNMjQwNTE4MjEwOTI0WhcNMjQwNTI1MjEwOTI0WjAYMRYwFAYD VQQDEw02NjQ5MTkwNC0yZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMIJr+v1RNwrWjz98BC5LXVWGnTI2XWja/aFwhnfn6La3uAnHlkbpQ8eXo1V TD68SmiGCzvC44Q/S5MXdTK2HGNSgbv8OmqRV2bbHlWsQ/5w7TW2RlK5t4BgfEH2 KVpiFja/YawjxW8iYhNoPEaWe+mvSIhw8bUd+6aELo+3zvOonWxNZR4vG6RE91DK j1d5jfnfIoRTw2xhrVNc+5BjNytbyUsi1mJyx//Yy+4OTNTx83QLeAyOTfpuld5S ixmmerVA/e8YcG3hDdSpgKgPVRmL9WDNl4xd7aWzH6O9+W/t+kYaHsGPr1xGWrzd hcZ1zyCRkeYh2RWv63V8xOVZTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVzfmcE 4SBwISdVrvXSf+vEKm15MB8GA1UdIwQYMBaAFPq94H0sVY29zzwyAHa3tV/foEdA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTQzRS9BM0MwN0I4Njc5 ODkxMUVBQkNCQTIxNjZDNEY5QUUwMi8tcjNnZlN4VmpiM1BQRElBZHJlMVg5LWdS MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1yM2dmU3hWamIzUFBESUFkcmUxWDktZ1IwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTQzRS9BM0MwN0I4Njc5ODkxMUVBQkNCQTIxNjZDNEY5QUUwMi8tcjNnZlN4Vmpi M1BQRElBZHJlMVg5LWdSMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmj1+VJ0Nbl8a9xcbbWVYW7UjZOQ0qEeQGCAU6vuxypqBtS/INzb32 41Ci+ondS0Ip4julNh2M0rtlA2MKj78ryhglKtPvVcnf85LSKE0y/M19iQ3QrKcy TQZCyJYNk7+GAGYriiqr9DHoBg5b0CNbYDSAxaDtPmGC8afVWrk/kkt7iA9uGjRI 0usznrQyHhW0ZiS8CT6pjk6Gn2cdvWrnKakQ2rrDJw/pr6LUY8XHCdYLSq9h10LM IJeAQZb3ZHACazhCZ+QBA/NHRVNaPIi7FGr3AaTBcmxQaRjPXfIMRZ+uxWb6Pnu5 GNwubnG0WNyeZoIBQs0l5fkO2WvWi+hv -----END CERTIFICATE-----Generated at Sat May 18 22:27:56 2024 by rpki-client on console-ams.rpki-client.org