$ rpki-client -vvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft File: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json) Hash identifier: WOR/1+HLufnUfi3JPK7tkSAugFdaT6PNXWVVi5FlaTY= Subject key identifier: DC:73:CE:83:EE:6F:EF:73:D6:58:A6:1C:38:F1:81:0C:FD:F4:BD:CD Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B Certificate issuer: /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Certificate serial: 2EB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft Manifest number: 2E8B Signing time: Fri 31 May 2024 15:49:21 +0000 Manifest this update: Fri 31 May 2024 15:49:21 +0000 Manifest next update: Fri 07 Jun 2024 15:49:20 +0000 Files and hashes: 1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: VjiEF2aCac9desDr2lSkqiEZySeSUPlVOE6JK2WzCuc=) 2: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: 4cueM8pcSigj2kT2dj0aJjJWwHKBC7hQib9USlPdQMM=) 3: 502355A2B13D11E59299870AC4F9AE02.roa (hash: G9kDbElePJ8W38i9PmXTvL4HE2aeG7iav0MRuaXGqgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11956 (0x2eb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Validity Not Before: May 31 15:49:21 2024 GMT Not After : Jun 7 15:49:20 2024 GMT Subject: CN=6659f181-1d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:18:8b:4e:b0:b2:d3:f6:29:fd:51:64:f9: fa:72:4c:65:23:38:d9:d1:82:4c:82:db:41:42:e9: cf:3b:20:39:3e:eb:44:02:2d:eb:be:55:82:1d:68: 2e:0f:20:3c:3c:3b:b1:a8:1f:c9:02:46:10:38:d3: 4c:f6:c0:1f:8e:8d:00:b5:f2:2a:ad:b3:50:4f:f8: 68:9b:7e:22:3a:ea:0f:c1:c5:68:53:39:8b:84:37: 7e:4b:43:4e:58:82:66:8e:95:f0:98:89:08:bf:89: 04:dd:ab:23:70:98:01:1f:b6:d7:32:d9:43:0c:a6: f3:0a:46:5c:04:31:a4:f9:50:39:68:bb:f5:45:0a: aa:96:4d:4f:23:aa:57:99:01:19:a1:c5:23:ce:75: df:c6:07:57:a2:97:e4:33:02:ff:01:c3:a3:65:ab: fa:80:48:aa:bb:ff:a3:65:90:98:d5:72:df:d4:77: 54:9d:79:5d:69:8f:b3:9d:1e:81:ce:db:df:1f:57: 7e:75:80:e1:ee:8a:c7:83:b7:2a:27:af:66:11:23: 14:0e:2f:b2:34:28:37:15:8b:bc:ff:53:b7:e5:b2: bc:4f:ac:78:83:bb:25:5e:29:4e:01:55:46:e7:a7: 09:21:ce:8f:18:94:41:ff:bc:22:61:f4:fc:87:c8: da:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:73:CE:83:EE:6F:EF:73:D6:58:A6:1C:38:F1:81:0C:FD:F4:BD:CD X509v3 Authority Key Identifier: keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:55:3d:34:d8:3f:b3:8a:23:b7:60:16:5b:7d:b2:44:81:c5: b0:3b:4c:6e:05:b4:2b:ef:f1:d0:68:e6:87:94:7c:64:65:86: ba:23:3d:50:0b:a1:98:01:20:4f:43:84:59:b1:c9:5e:f7:a8: 79:7a:6c:1c:a8:af:2d:3e:66:b2:51:0c:bb:f6:b7:e9:f8:3e: d8:dc:64:10:18:f7:99:c8:79:12:91:77:b7:59:17:48:d5:03: ce:bc:90:57:6f:6d:99:f5:3d:e6:b0:8c:f2:dd:2b:ce:9e:55: 39:87:f5:a8:60:61:71:db:d3:28:af:64:b3:a5:dc:c3:46:35: 06:d1:a2:6f:da:18:73:0f:05:3d:c7:17:d3:fa:07:69:ba:f4: 9f:8d:85:f1:02:36:dd:2b:fa:87:a3:a0:03:10:0b:7d:f4:66: b0:6e:17:26:82:5c:20:c4:e1:ed:b2:c0:80:da:e4:68:93:56: 2b:95:9e:ba:cc:1a:91:e4:ce:4f:6a:4a:1d:51:ce:45:9a:df: c9:b1:43:df:4e:e2:ca:e2:90:8a:8c:27:c9:e4:d1:ee:0a:2d: 04:dc:2c:13:3c:bd:c4:f8:3d:a1:36:09:7c:27:3c:93:07:31: 9a:c4:f7:61:fd:59:dd:89:89:e5:c3:e1:8a:e2:b7:e4:79:5b: 7f:ee:73:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3NjIxMTAvBgNVBAUTKERDQjMwRUNGNzhBMTMzNzVFRTUyNTI3OEY5Q0ZEMzBG N0M1OEFBOEIwHhcNMjQwNTMxMTU0OTIxWhcNMjQwNjA3MTU0OTIwWjAYMRYwFAYD VQQDEw02NjU5ZjE4MS0xZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvL4Yi06wstP2Kf1RZPn6ckxlIzjZ0YJMgttBQunPOyA5PutEAi3rvlWCHWgu DyA8PDuxqB/JAkYQONNM9sAfjo0AtfIqrbNQT/hom34iOuoPwcVoUzmLhDd+S0NO WIJmjpXwmIkIv4kE3asjcJgBH7bXMtlDDKbzCkZcBDGk+VA5aLv1RQqqlk1PI6pX mQEZocUjznXfxgdXopfkMwL/AcOjZav6gEiqu/+jZZCY1XLf1HdUnXldaY+znR6B ztvfH1d+dYDh7orHg7cqJ69mESMUDi+yNCg3FYu8/1O35bK8T6x4g7slXilOAVVG 56cJIc6PGJRB/7wiYfT8h8jaZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxzzoPu b+9z1limHDjxgQz99L3NMB8GA1UdIwQYMBaAFNyzDs94oTN17lJSePnP0w98WKqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjc2Mi84QUFFMEY4QzI4 MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0zWHVVbEo0LWNfVEQzeFlx b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNMTU96M2loTTNYdVVsSjQtY19URDN4WXFvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjc2Mi84QUFFMEY4QzI4MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0z WHVVbEo0LWNfVEQzeFlxb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTVT002D+ziiO3YBZbfbJEgcWwO0xuBbQr7/HQaOaHlHxkZYa6Iz1Q C6GYASBPQ4RZscle96h5emwcqK8tPmayUQy79rfp+D7Y3GQQGPeZyHkSkXe3WRdI 1QPOvJBXb22Z9T3msIzy3SvOnlU5h/WoYGFx29Mor2SzpdzDRjUG0aJv2hhzDwU9 xxfT+gdpuvSfjYXxAjbdK/qHo6ADEAt99GawbhcmglwgxOHtssCA2uRok1YrlZ66 zBqR5M5PakodUc5Fmt/JsUPfTuLK4pCKjCfJ5NHuCi0E3CwTPL3E+D2hNgl8JzyT BzGaxPdh/VndiYnlw+GK4rfkeVt/7nOG -----END CERTIFICATE-----Generated at Fri May 31 17:44:25 2024 by rpki-client on console-fra.rpki-client.org