$ rpki-client -vvf rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft File: 3gyPQrygWy9Vgea8y0wUpuZxthk.mft (raw, json) Hash identifier: zCYIEdck05uo5rwDuh9MGLFwA5GFN1b/02h/TtmU9jc= Subject key identifier: 0C:70:88:E7:27:08:A9:BC:6A:71:07:92:7F:8C:E5:2A:5A:18:E7:B8 Authority key identifier: DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 Certificate issuer: /CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Certificate serial: 0F93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft Manifest number: 0F8A Signing time: Thu 30 May 2024 18:28:32 +0000 Manifest this update: Thu 30 May 2024 18:28:32 +0000 Manifest next update: Thu 06 Jun 2024 18:28:32 +0000 Files and hashes: 1: 3gyPQrygWy9Vgea8y0wUpuZxthk.crl (hash: LhB8RA1b0qLwC4mhYqylVIvMoQ+U7RmTRMWnXN73mQ8=) 2: E366C4B83B2611E9906E7B81C4F9AE02.roa (hash: skPQL/OHQUZ2T4jdEo8Lb73ed/7BdXi85p0W2u9vqxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 16:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3987 (0xf93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Validity Not Before: May 30 18:28:32 2024 GMT Not After : Jun 6 18:28:32 2024 GMT Subject: CN=6658c550-54e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:14:a3:35:f0:29:6a:bd:77:f3:1e:33:aa: fc:f9:44:aa:f5:a9:81:cd:4d:24:b7:45:d3:f4:c4: 61:0f:d7:2e:3d:5a:41:c1:c1:af:a4:3e:21:54:a6: 57:ef:90:d8:ed:94:7e:06:16:49:03:6f:2c:b2:99: c6:db:30:ce:2b:8d:a7:1a:da:3e:2d:97:82:62:55: ab:6d:d2:0a:73:1b:c7:2d:ee:ef:be:c8:cf:2c:4c: a3:07:de:75:91:f8:c9:00:b7:c8:8d:9b:31:42:6f: 4a:83:c4:f1:82:b2:09:ea:47:38:4c:2d:bf:03:d8: 87:ff:1e:92:8c:dd:25:3d:09:41:36:13:bd:52:ad: 9b:6e:c6:70:a9:f5:a9:c3:f4:2b:b8:4b:c3:62:a5: fd:3a:1c:6f:76:7d:bf:86:50:90:06:e3:91:0b:5a: 9b:6a:a2:2b:59:b7:b5:df:42:05:d8:90:ef:43:e6: 8f:81:e6:06:31:69:42:5a:a9:f0:6f:ae:8a:97:3c: 54:54:be:b5:e6:24:58:e6:de:3b:ec:c9:48:f0:2c: 14:9f:d5:ea:79:86:f5:f1:1d:4f:ed:06:7f:42:5e: a6:22:eb:dd:68:d3:16:73:d4:fb:bd:0a:ba:90:34: 88:ea:85:81:7d:de:1d:cd:ad:c2:90:30:49:2e:dd: db:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:70:88:E7:27:08:A9:BC:6A:71:07:92:7F:8C:E5:2A:5A:18:E7:B8 X509v3 Authority Key Identifier: keyid:DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:dd:8d:a6:b8:c8:fc:b9:15:0d:b0:32:b4:b0:d3:c4:f0:e8: b0:d9:10:fc:a4:87:9e:3c:35:e3:61:c6:49:6e:07:03:47:30: 72:16:1c:7e:52:66:31:8c:74:d1:a6:70:e9:e9:20:95:6c:d4: c0:aa:5a:04:84:a0:ac:44:be:d7:e3:f9:d4:40:a8:58:cf:06: 61:fe:e1:8a:fe:70:d5:c2:95:b2:95:e8:b1:dd:42:f0:a4:00: f2:cd:43:48:0a:1f:15:38:f8:72:89:b7:78:24:3c:2b:01:1e: 50:5f:82:a2:f9:b2:fc:cd:c8:06:d3:63:0d:e5:4b:e7:32:cb: de:5d:6a:a8:3c:28:ac:ff:1c:46:c0:27:8e:3f:e3:07:ae:2a: 2b:72:29:d3:11:a6:7c:df:4a:55:ee:f1:36:46:e9:13:57:f8: 5d:a2:ea:a7:a0:79:f5:b2:ff:3e:72:32:d4:f7:83:48:f1:df: 40:21:6b:d1:b1:2c:35:ec:eb:55:4d:fd:eb:6d:aa:f8:8c:dc: 2b:be:2f:9f:d5:09:4d:b3:79:e5:1e:34:b8:6f:2c:8b:84:f7: 6c:25:73:f1:18:2c:98:e8:7d:10:84:10:9e:1a:72:74:6c:2d: cb:d7:0d:bb:15:72:b7:2d:01:d2:da:30:af:b1:88:bb:c7:52: b2:46:04:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczODYxMTAvBgNVBAUTKERFMEM4RjQyQkNBMDVCMkY1NTgxRTZCQ0NCNEMxNEE2 RTY3MUI2MTkwHhcNMjQwNTMwMTgyODMyWhcNMjQwNjA2MTgyODMyWjAYMRYwFAYD VQQDEw02NjU4YzU1MC01NGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdwUozXwKWq9d/MeM6r8+USq9amBzU0kt0XT9MRhD9cuPVpBwcGvpD4hVKZX 75DY7ZR+BhZJA28sspnG2zDOK42nGto+LZeCYlWrbdIKcxvHLe7vvsjPLEyjB951 kfjJALfIjZsxQm9Kg8TxgrIJ6kc4TC2/A9iH/x6SjN0lPQlBNhO9Uq2bbsZwqfWp w/QruEvDYqX9Ohxvdn2/hlCQBuORC1qbaqIrWbe130IF2JDvQ+aPgeYGMWlCWqnw b66KlzxUVL615iRY5t477MlI8CwUn9XqeYb18R1P7QZ/Ql6mIuvdaNMWc9T7vQq6 kDSI6oWBfd4dza3CkDBJLt3bEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxwiOcn CKm8anEHkn+M5SpaGOe4MB8GA1UdIwQYMBaAFN4Mj0K8oFsvVYHmvMtMFKbmcbYZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM4Ni80OUNENkEzQzNC MjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5OVZnZWE4eTB3VXB1Wnh0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNneVBRcnlnV3k5VmdlYTh5MHdVcHVaeHRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM4Ni80OUNENkEzQzNCMjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5 OVZnZWE4eTB3VXB1Wnh0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB03Y2muMj8uRUNsDK0sNPE8Oiw2RD8pIeePDXjYcZJbgcDRzByFhx+ UmYxjHTRpnDp6SCVbNTAqloEhKCsRL7X4/nUQKhYzwZh/uGK/nDVwpWyleix3ULw pADyzUNICh8VOPhyibd4JDwrAR5QX4Ki+bL8zcgG02MN5UvnMsveXWqoPCis/xxG wCeOP+MHriorcinTEaZ830pV7vE2RukTV/hdouqnoHn1sv8+cjLU94NI8d9AIWvR sSw17OtVTf3rbar4jNwrvi+f1QlNs3nlHjS4byyLhPdsJXPxGCyY6H0QhBCeGnJ0 bC3L1w27FXK3LQHS2jCvsYi7x1KyRgSG -----END CERTIFICATE-----Generated at Thu May 30 20:35:34 2024 by rpki-client on console-fra.rpki-client.org