$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft File: 3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json) Hash identifier: WyDS059QonieFhEY1S6Mdc0yzExRGsps2NccrCfVH5M= Subject key identifier: 3C:76:30:08:CF:8E:28:F1:B4:17:5F:88:4B:44:C5:12:E9:C6:1B:12 Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 Certificate issuer: /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Certificate serial: 0740 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft Manifest number: 0739 Signing time: Sat 18 May 2024 22:26:26 +0000 Manifest this update: Sat 18 May 2024 22:26:25 +0000 Manifest next update: Sat 25 May 2024 22:26:25 +0000 Files and hashes: 1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: k1rTUIO8bIrlxTL6CHUpRZjMBMwwai8C+6Jhm2YOj90=) 2: D5E920EC194A11EC83D2C21FC4F9AE02.roa (hash: e5rN3MaCKkzkirvm/eA6M+bzzjdijgjg8zwdRjr6n+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1856 (0x740) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Validity Not Before: May 18 22:26:25 2024 GMT Not After : May 25 22:26:25 2024 GMT Subject: CN=66492b11-9d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:26:a2:d3:46:7c:c0:84:33:d9:cf:f5:44:24: 2a:06:52:bb:65:63:18:f5:38:1f:54:5e:72:bd:d1: d4:55:66:e8:ce:f9:84:07:b8:22:29:aa:99:b7:68: c1:ac:94:92:41:38:db:50:3b:21:85:d1:74:56:ea: e2:57:19:77:39:60:f8:6a:4f:be:cc:3b:fc:f8:bb: 4e:d0:4f:06:5b:46:a5:9b:0b:d2:b2:57:ab:86:b4: 05:77:0b:a7:fd:0c:dc:57:14:5a:55:ac:8b:d3:09: ca:6d:74:71:30:67:ad:f9:03:bf:c8:f1:bd:46:5c: 76:c2:c2:39:29:f4:02:d3:e7:52:c8:8e:f0:73:0f: 10:24:42:d2:fc:75:c8:37:06:9d:66:45:f1:bb:31: 13:76:35:8d:71:5a:85:2f:11:bd:45:f5:a7:82:1c: ed:23:e1:b7:f1:10:66:f6:d9:10:17:2a:83:b1:61: b7:fb:fd:ab:5c:a3:7a:3f:15:43:a7:4c:44:29:a7: 1e:a8:9c:fb:0e:34:93:10:15:ed:0b:9b:7e:be:bc: 09:95:18:2f:fe:a7:e6:11:30:ef:a8:14:57:aa:d1: 46:5b:33:69:53:09:65:16:d3:37:c7:58:cc:75:d8: 81:e4:06:01:7a:fd:85:fd:8f:2f:d9:b9:a6:9d:cf: ea:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:76:30:08:CF:8E:28:F1:B4:17:5F:88:4B:44:C5:12:E9:C6:1B:12 X509v3 Authority Key Identifier: keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7d:f9:36:16:e2:bf:5d:e2:b2:27:20:dc:ba:6d:ae:29:b7: 9d:d5:9a:81:c1:9b:22:cd:43:45:fb:8d:ac:3b:b7:4c:b6:56: c2:3e:d9:28:d1:bb:62:25:d6:43:40:bb:d3:60:42:37:4c:02: ac:5c:91:af:66:10:ee:45:e3:b1:87:fe:f7:ce:f8:a9:94:0d: 46:5a:58:9c:a7:dd:ae:c4:e2:01:e0:9f:d0:20:6c:60:76:52: 8c:08:42:1d:8f:4c:c5:dd:99:ae:53:33:6f:5f:a1:52:c5:71: 16:ab:e5:b5:0e:6c:71:b3:b6:64:51:f7:a4:72:35:44:3d:82: 8c:44:bc:1c:93:00:ec:5f:62:32:46:2d:1d:8b:42:b2:b3:c5: f7:02:2b:1f:b3:f4:b3:e6:be:c4:07:c1:27:62:c5:00:02:70: 47:4b:8f:12:62:34:a7:d3:09:5b:80:ca:27:68:cf:5e:89:94: 45:56:67:77:88:e8:0b:18:23:95:48:c3:b0:5a:1c:59:73:b0: b3:7c:c1:37:db:48:d3:e7:6c:35:6a:9a:3d:84:da:88:15:6f: 82:d8:11:60:df:ba:1a:13:b2:75:90:53:30:ad:37:72:46:ee: 81:7f:b0:da:bc:54:f6:59:2b:03:7f:5c:f1:4b:1d:c9:5d:dd: f0:4b:cc:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDQjQxMTAvBgNVBAUTKERDRTYyMjdDMDU0N0MwMEFFQzY1QzVFNjgwRjYxNzkz RjQ5RDU1ODMwHhcNMjQwNTE4MjIyNjI1WhcNMjQwNTI1MjIyNjI1WjAYMRYwFAYD VQQDEw02NjQ5MmIxMS05ZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyai00Z8wIQz2c/1RCQqBlK7ZWMY9TgfVF5yvdHUVWbozvmEB7giKaqZt2jB rJSSQTjbUDshhdF0VuriVxl3OWD4ak++zDv8+LtO0E8GW0almwvSslerhrQFdwun /QzcVxRaVayL0wnKbXRxMGet+QO/yPG9Rlx2wsI5KfQC0+dSyI7wcw8QJELS/HXI NwadZkXxuzETdjWNcVqFLxG9RfWnghztI+G38RBm9tkQFyqDsWG3+/2rXKN6PxVD p0xEKaceqJz7DjSTEBXtC5t+vrwJlRgv/qfmETDvqBRXqtFGWzNpUwllFtM3x1jM ddiB5AYBev2F/Y8v2bmmnc/q2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDx2MAjP jijxtBdfiEtExRLpxhsSMB8GA1UdIwQYMBaAFNzmInwFR8AK7GXF5oD2F5P0nVWD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNCNC8zQTdBRDNCMkUz ODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdBcnNaY1htZ1BZWGtfU2RW WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNPWWlmQVZId0Fyc1pjWG1nUFlYa19TZFZZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkNCNC8zQTdBRDNCMkUzODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdB cnNaY1htZ1BZWGtfU2RWWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtffk2FuK/XeKyJyDcum2uKbed1ZqBwZsizUNF+42sO7dMtlbCPtko 0btiJdZDQLvTYEI3TAKsXJGvZhDuReOxh/73zviplA1GWlicp92uxOIB4J/QIGxg dlKMCEIdj0zF3ZmuUzNvX6FSxXEWq+W1Dmxxs7ZkUfekcjVEPYKMRLwckwDsX2Iy Ri0di0Kys8X3Aisfs/Sz5r7EB8EnYsUAAnBHS48SYjSn0wlbgMonaM9eiZRFVmd3 iOgLGCOVSMOwWhxZc7CzfME320jT52w1apo9hNqIFW+C2BFg37oaE7J1kFMwrTdy Ru6Bf7DavFT2WSsDf1zxSx3JXd3wS8zN -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org