$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json) Hash identifier: gdyMvOUrEeK7G7X8kK2kneOwXPa18c3wn+BmjmieIhc= Subject key identifier: 96:D0:31:91:68:89:04:8B:E3:F6:62:BA:F3:1C:10:99:DE:7E:26:42 Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Certificate serial: 2957 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft Manifest number: 2957 Signing time: Sun 02 Jun 2024 15:59:40 +0000 Manifest this update: Sun 02 Jun 2024 15:59:40 +0000 Manifest next update: Sun 09 Jun 2024 15:59:40 +0000 Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: t9TcYBu+8P8b36XxzFU63fEOLZQa+MKg6fR6HW19EGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 14:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10583 (0x2957) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Validity Not Before: Jun 2 15:59:40 2024 GMT Not After : Jun 9 15:59:40 2024 GMT Subject: CN=665c96ec-8cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:5d:4c:19:d6:7b:8e:e8:bc:8f:dc:9b:06: d2:a7:b0:80:f0:83:46:2d:7e:7c:ac:e8:62:9d:93: d6:5a:b4:a4:d7:f7:95:a5:5c:4b:d2:66:08:aa:30: d5:2f:72:52:8d:72:90:c8:9c:0f:35:bd:57:c5:8c: 08:65:38:25:1d:08:f3:8f:5c:7e:9e:31:5e:6a:ff: 40:fa:86:ed:0a:ca:de:26:99:2e:bc:0e:5d:b0:6c: b2:dd:96:d8:6a:7e:d6:77:50:2a:ab:fa:05:f2:e2: e6:d9:fb:fd:8e:3b:d7:ae:81:0c:c2:6a:88:0b:5c: 58:c8:4a:5b:ad:35:22:dd:69:97:ae:62:4e:5f:ae: af:5b:6d:bb:b8:47:39:c9:45:87:33:bd:7d:80:0f: cd:16:46:52:87:95:1a:29:32:54:a7:e3:75:e5:9f: ab:d1:0d:e7:0a:ea:f8:86:44:fa:0c:06:49:e1:da: b1:49:24:4c:d9:96:46:cd:cf:12:17:85:8e:79:f0: 1f:e7:2e:51:03:13:ff:8c:70:fe:6a:67:f1:d9:b5: e2:0a:63:a4:06:cf:51:56:0f:2f:85:34:b2:9c:28: 43:ea:04:37:a8:91:17:5b:35:5f:19:38:71:49:54: c4:54:a7:c0:f5:2b:49:ac:8d:de:e4:91:cc:fc:3a: f3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D0:31:91:68:89:04:8B:E3:F6:62:BA:F3:1C:10:99:DE:7E:26:42 X509v3 Authority Key Identifier: keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:08:81:88:59:66:c6:f2:1b:66:9a:b3:4a:ee:ad:1c:a4:73: 21:97:a5:97:f7:af:b3:bb:7e:59:3d:88:89:48:5a:c0:4b:25: 3d:12:92:91:ec:fc:14:61:4e:49:43:3b:bf:cf:b2:c9:5a:1d: 35:04:54:8a:f3:41:3a:31:d2:a7:74:8c:24:5a:9f:f4:5d:18: 78:a4:0e:a3:5c:67:7b:b3:fb:17:d2:f8:43:61:aa:31:aa:98: 81:63:33:b2:7b:aa:26:47:9c:64:0b:81:8a:9b:0e:68:c0:85: 18:85:a2:26:da:8f:a1:f3:5b:85:ad:e2:65:c5:3f:35:16:c8: a4:0f:df:c4:7e:59:f1:eb:a3:09:e5:be:66:d8:ac:e0:86:07: f0:8b:c2:96:c0:4a:24:14:01:a3:9d:94:62:a7:e0:6d:10:19: fa:2f:3d:ac:ef:e1:e0:36:10:1a:e4:5c:5f:f9:63:13:3c:13: e5:79:e8:c9:8d:5e:a5:a2:cc:dd:19:0a:d5:93:0b:68:cc:2a: aa:40:81:86:75:2b:ed:0b:79:6c:f4:67:d7:b2:8c:6e:0f:da: 1d:64:74:fc:d3:21:09:1d:f6:ad:cc:a8:27:fb:0a:09:66:56: 9d:ef:2b:ae:45:93:7b:1b:d6:f6:05:9b:bd:33:0b:81:32:45: 45:ef:8e:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB QjE1NzVCQzMwHhcNMjQwNjAyMTU1OTQwWhcNMjQwNjA5MTU1OTQwWjAYMRYwFAYD VQQDEw02NjVjOTZlYy04Y2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvldTBnWe47ovI/cmwbSp7CA8INGLX58rOhinZPWWrSk1/eVpVxL0mYIqjDV L3JSjXKQyJwPNb1XxYwIZTglHQjzj1x+njFeav9A+obtCsreJpkuvA5dsGyy3ZbY an7Wd1Aqq/oF8uLm2fv9jjvXroEMwmqIC1xYyEpbrTUi3WmXrmJOX66vW227uEc5 yUWHM719gA/NFkZSh5UaKTJUp+N15Z+r0Q3nCur4hkT6DAZJ4dqxSSRM2ZZGzc8S F4WOefAf5y5RAxP/jHD+amfx2bXiCmOkBs9RVg8vhTSynChD6gQ3qJEXWzVfGThx SVTEVKfA9StJrI3e5JHM/DrztwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbQMZFo iQSL4/ZiuvMcEJnefiZCMB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9CIGIWWbG8htmmrNK7q0cpHMhl6WX96+zu35ZPYiJSFrASyU9EpKR 7PwUYU5JQzu/z7LJWh01BFSK80E6MdKndIwkWp/0XRh4pA6jXGd7s/sX0vhDYaox qpiBYzOye6omR5xkC4GKmw5owIUYhaIm2o+h81uFreJlxT81FsikD9/Eflnx66MJ 5b5m2Kzghgfwi8KWwEokFAGjnZRip+BtEBn6Lz2s7+HgNhAa5Fxf+WMTPBPleejJ jV6loszdGQrVkwtozCqqQIGGdSvtC3ls9GfXsoxuD9odZHT80yEJHfatzKgn+woJ Zlad7yuuRZN7G9b2BZu9MwuBMkVF746q -----END CERTIFICATE-----Generated at Sun Jun 2 18:46:25 2024 by rpki-client on console-ams.rpki-client.org