$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft File: p3fkgYyg3MY4LlYlcG-YyB6TByA.mft (raw, json) Hash identifier: P7FMuKj9vNOWGOEC1uv6N/vsQl8GX+8KO2XfCNNKU/w= Subject key identifier: 97:1E:BD:3F:AD:99:7C:92:E0:81:0A:79:7D:02:87:CE:7D:6E:23:ED Authority key identifier: A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20 Certificate issuer: /CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720 Certificate serial: 0D6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft Manifest number: 0D63 Signing time: Sat 18 May 2024 18:37:06 +0000 Manifest this update: Sat 18 May 2024 18:37:05 +0000 Manifest next update: Sat 25 May 2024 18:37:05 +0000 Files and hashes: 1: p3fkgYyg3MY4LlYlcG-YyB6TByA.crl (hash: C4CpaxcYE7PkhieKYNJEyhzrDgybSrrMeexYo6Zv7hg=) 2: EE78BE36068611EDA1C2070DC4F9AE02.roa (hash: Rv5KdZYUUJXCu7wDvbb7pgmO3r2+H7sPCodZxryWYjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3434 (0xd6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720 Validity Not Before: May 18 18:37:05 2024 GMT Not After : May 25 18:37:05 2024 GMT Subject: CN=6648f552-1f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f2:fc:a2:27:ea:e8:4a:15:e4:64:42:87:29: 00:e2:80:10:b5:eb:86:15:0e:4d:34:e7:eb:ae:b8: df:d0:9f:39:35:f4:75:a6:79:18:81:fa:61:e1:c1: 9f:11:19:e0:4d:60:ae:c4:79:a9:1e:63:a0:66:28: 28:9f:d6:d0:25:1e:48:86:0b:06:5e:36:2e:ce:08: fe:c7:10:8b:d7:c2:a3:0e:91:5a:f4:80:30:9a:0e: 73:00:40:9f:48:f7:28:8a:4f:e7:0e:6f:37:2a:5e: b3:26:41:6c:52:4a:17:2d:30:72:4e:be:67:f1:f2: 70:5e:8d:4f:54:55:1c:73:8f:db:0b:04:a2:53:08: fc:f3:a4:53:d0:a3:9d:b9:93:7e:e5:56:31:0f:c4: 32:94:a7:1f:27:3a:05:83:59:4e:df:e7:22:e9:f0: f9:7a:b5:08:85:1e:2d:27:1b:7f:71:68:89:e1:2c: c8:58:d2:73:7b:e6:76:23:7a:39:86:10:66:98:98: f8:97:9f:21:9c:89:0a:5a:67:ae:da:b2:fa:67:03: 41:c8:a0:8a:3a:ae:a1:62:a2:2f:8f:6e:75:75:87: 31:ef:b7:1b:8b:6b:63:92:80:0f:b6:4f:79:28:04: 9a:56:1a:b7:e4:d3:8f:85:57:5a:d3:51:b4:98:46: 44:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1E:BD:3F:AD:99:7C:92:E0:81:0A:79:7D:02:87:CE:7D:6E:23:ED X509v3 Authority Key Identifier: keyid:A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:37:14:02:a8:eb:73:90:a2:7b:a6:be:6e:d9:d7:d7:c6:2b: af:61:57:6d:4b:46:ff:c4:72:41:c5:83:21:65:fd:5d:30:96: 0d:39:20:bc:ae:a3:f1:3f:8d:43:69:1a:1b:d8:f3:06:14:7e: 7a:4a:ac:bd:6c:53:95:d7:69:26:bc:32:56:72:e2:54:d9:6c: 7c:fe:14:42:38:63:3a:07:a9:81:05:b3:02:0a:0e:1d:70:b8: e6:92:c1:86:17:c8:bf:9e:17:45:06:a8:24:1e:0c:0c:d1:d3: 6c:20:ae:e2:fc:c4:6f:f1:39:f4:ac:f2:4a:4d:ce:e1:08:5b: fa:67:22:cd:37:53:3a:80:a8:67:35:81:a5:8f:9b:69:e6:30: 9d:f5:2a:4d:e9:f8:5a:0f:7f:af:30:04:cd:07:64:d8:d1:f5: d8:6f:be:22:65:5b:3a:45:61:e2:55:96:09:43:6c:dd:b8:6a: a6:c9:e6:db:5e:22:e8:2e:f7:ed:28:db:1d:75:c3:19:d4:e7: 85:22:32:46:14:42:bb:c3:c7:db:7f:b6:1f:32:0d:c8:0d:5f: 4f:c4:f8:96:9e:d8:7d:55:44:a5:60:a4:dd:7b:2a:f0:1e:ee: 26:0a:d2:70:94:1e:dd:64:39:f5:3f:ca:03:42:bb:52:6e:4b: b9:b4:bf:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGOTQxMTAvBgNVBAUTKEE3NzdFNDgxOENBMERDQzYzODJFNTYyNTcwNkY5OEM4 MUU5MzA3MjAwHhcNMjQwNTE4MTgzNzA1WhcNMjQwNTI1MTgzNzA1WjAYMRYwFAYD VQQDEw02NjQ4ZjU1Mi0xZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PL8oifq6EoV5GRChykA4oAQteuGFQ5NNOfrrrjf0J85NfR1pnkYgfph4cGf ERngTWCuxHmpHmOgZigon9bQJR5IhgsGXjYuzgj+xxCL18KjDpFa9IAwmg5zAECf SPcoik/nDm83Kl6zJkFsUkoXLTByTr5n8fJwXo1PVFUcc4/bCwSiUwj886RT0KOd uZN+5VYxD8QylKcfJzoFg1lO3+ci6fD5erUIhR4tJxt/cWiJ4SzIWNJze+Z2I3o5 hhBmmJj4l58hnIkKWmeu2rL6ZwNByKCKOq6hYqIvj251dYcx77cbi2tjkoAPtk95 KASaVhq35NOPhVda01G0mEZE/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcevT+t mXyS4IEKeX0Ch859biPtMB8GA1UdIwQYMBaAFKd35IGMoNzGOC5WJXBvmMgekwcg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY5NC81QjI0QTVDOEE2 QzExMUU5OEMzNzlFMEZDNEY5QUUwMi9wM2ZrZ1l5ZzNNWTRMbFlsY0ctWXlCNlRC eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZmtnWXlnM01ZNExsWWxjRy1ZeUI2VEJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY5NC81QjI0QTVDOEE2QzExMUU5OEMzNzlFMEZDNEY5QUUwMi9wM2ZrZ1l5ZzNN WTRMbFlsY0ctWXlCNlRCeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASNxQCqOtzkKJ7pr5u2dfXxiuvYVdtS0b/xHJBxYMhZf1dMJYNOSC8 rqPxP41DaRob2PMGFH56Sqy9bFOV12kmvDJWcuJU2Wx8/hRCOGM6B6mBBbMCCg4d cLjmksGGF8i/nhdFBqgkHgwM0dNsIK7i/MRv8Tn0rPJKTc7hCFv6ZyLNN1M6gKhn NYGlj5tp5jCd9SpN6fhaD3+vMATNB2TY0fXYb74iZVs6RWHiVZYJQ2zduGqmyebb XiLoLvftKNsddcMZ1OeFIjJGFEK7w8fbf7YfMg3IDV9PxPiWnth9VUSlYKTdeyrw Hu4mCtJwlB7dZDn1P8oDQrtSbku5tL+c -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org