$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json) Hash identifier: LH1/g1vWDasMrAFoIVYdRcehw1jF2GZqDkWv6xRFkJ0= Subject key identifier: 03:65:B2:A2:E2:07:82:87:C3:0F:5D:D9:12:05:6B:E9:2D:30:61:DD Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft Manifest number: 0243 Signing time: Fri 31 May 2024 04:34:39 +0000 Manifest this update: Fri 31 May 2024 04:34:39 +0000 Manifest next update: Fri 07 Jun 2024 04:34:39 +0000 Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: ng9ZoRsxL6XcBgg36Ztua98123ynkdGv4KvTiAuNOI0=) 2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: hytWkUSCqorBjsVGcfJr5jv9464HjP/9t0YsgMlNUeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 04:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Validity Not Before: May 31 04:34:39 2024 GMT Not After : Jun 7 04:34:39 2024 GMT Subject: CN=6659535f-a6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a6:60:bf:f4:d0:41:43:ad:74:0b:ce:b4:44: 72:7d:82:36:27:d7:2e:b3:8d:4d:93:b9:f7:ea:2f: 3e:f9:86:e2:7e:a9:64:3d:c2:27:d7:f5:c6:cd:72: ac:62:cf:80:a2:cf:53:15:55:b1:8b:52:6b:9f:2f: 44:b3:a8:3d:c4:df:a9:cc:38:63:5f:ab:8d:d5:87: f9:48:c0:49:67:20:6f:ea:5e:fb:42:54:fc:ee:95: 58:1c:c2:5a:28:d8:f7:1b:34:70:b4:a0:eb:15:f8: db:2a:21:31:ba:16:ea:34:28:5b:d1:30:db:e1:e7: 30:a8:70:aa:69:f3:d4:25:2a:23:19:0f:9a:c4:2e: 08:2a:c5:ed:72:c6:d1:d8:7d:fa:93:2f:41:60:d2: 6a:55:28:ae:34:06:43:7b:e3:61:9a:6c:bf:aa:87: 28:c0:79:ad:42:bb:ca:32:ea:7d:1a:79:35:d5:0d: 69:53:ee:f1:1b:c7:d0:e6:7d:6e:e7:1b:cd:65:a4: b2:98:4b:00:5a:bb:b1:f4:2c:ae:29:46:24:bf:66: 52:8c:0c:62:c0:c0:23:ea:a3:0f:fd:9a:0f:b8:77: af:e0:ff:93:66:55:a3:1a:3b:6a:81:c5:24:4e:f4: d5:19:21:a5:66:35:f6:61:0d:6d:68:07:75:7b:2b: 74:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:65:B2:A2:E2:07:82:87:C3:0F:5D:D9:12:05:6B:E9:2D:30:61:DD X509v3 Authority Key Identifier: keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:8b:9d:93:72:d5:2b:c5:2a:fd:15:20:6f:8f:ed:e9:f4:2e: 6d:ce:ec:1a:7d:6b:c2:eb:a1:47:7b:2f:3d:24:5e:9b:9f:1e: f8:cc:87:52:0b:e1:3d:5a:97:51:35:d0:61:f1:31:6b:a0:cd: 3c:9e:75:07:37:6e:f6:c6:c3:d2:2d:50:62:cd:f3:0a:0e:64: 2d:96:1d:02:6d:a5:94:bc:05:ae:bc:dc:ba:03:19:09:35:86: dd:40:b0:16:8c:33:93:b5:f0:52:16:33:a8:06:94:ac:1f:82: 8d:9c:35:94:4f:15:23:99:b7:df:cb:b3:91:2a:ea:da:f9:ab: 1f:a4:14:48:04:6c:7a:77:b7:b8:d0:1b:29:e9:d4:b9:64:c2: 86:e6:74:4d:4d:3b:0a:9e:1c:55:3b:a5:3f:3e:4a:49:4a:04: 61:14:fe:6d:90:63:8b:92:4b:10:ae:2c:dd:23:b5:0f:b0:ae: 6f:5c:71:74:60:44:7a:44:9c:50:66:9e:f5:86:f0:62:e5:ea: ff:6e:14:cc:fc:3b:47:29:ce:88:33:90:71:20:f6:af:d5:07: 8f:fe:2f:12:d9:52:1c:25:7b:40:d4:84:3f:71:fe:37:82:de: 44:40:fa:4b:97:09:80:ee:f9:96:6a:2d:06:48:28:d2:31:83: 6c:49:50:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx RDUyNjQzNUMwHhcNMjQwNTMxMDQzNDM5WhcNMjQwNjA3MDQzNDM5WjAYMRYwFAYD VQQDEw02NjU5NTM1Zi1hNmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16Zgv/TQQUOtdAvOtERyfYI2J9cus41Nk7n36i8++YbifqlkPcIn1/XGzXKs Ys+Aos9TFVWxi1Jrny9Es6g9xN+pzDhjX6uN1Yf5SMBJZyBv6l77QlT87pVYHMJa KNj3GzRwtKDrFfjbKiExuhbqNChb0TDb4ecwqHCqafPUJSojGQ+axC4IKsXtcsbR 2H36ky9BYNJqVSiuNAZDe+Nhmmy/qocowHmtQrvKMup9Gnk11Q1pU+7xG8fQ5n1u 5xvNZaSymEsAWrux9CyuKUYkv2ZSjAxiwMAj6qMP/ZoPuHev4P+TZlWjGjtqgcUk TvTVGSGlZjX2YQ1taAd1eyt0SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANlsqLi B4KHww9d2RIFa+ktMGHdMB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5 QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3 Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATi52TctUrxSr9FSBvj+3p9C5tzuwafWvC66FHey89JF6bnx74zIdS C+E9WpdRNdBh8TFroM08nnUHN272xsPSLVBizfMKDmQtlh0CbaWUvAWuvNy6AxkJ NYbdQLAWjDOTtfBSFjOoBpSsH4KNnDWUTxUjmbffy7ORKura+asfpBRIBGx6d7e4 0Bsp6dS5ZMKG5nRNTTsKnhxVO6U/PkpJSgRhFP5tkGOLkksQrizdI7UPsK5vXHF0 YER6RJxQZp71hvBi5er/bhTM/DtHKc6IM5BxIPav1QeP/i8S2VIcJXtA1IQ/cf43 gt5EQPpLlwmA7vmWai0GSCjSMYNsSVAa -----END CERTIFICATE-----Generated at Fri May 31 05:53:52 2024 by rpki-client on console-fra.rpki-client.org