$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7BB/8CE59DA4645F11EABC69297AC4F9AE02/u3h15MblRLV0ehFf6M32iYyN5zM.mft File: u3h15MblRLV0ehFf6M32iYyN5zM.mft (raw, json) Hash identifier: ZO1gR2T6/yIgOqmGcGIDJw1zQ7ArI4mmlPqSaktIQgA= Subject key identifier: 8F:86:EF:CF:3A:18:4E:A7:08:D2:0A:B3:58:AC:F4:6B:BE:ED:7A:56 Authority key identifier: BB:78:75:E4:C6:E5:44:B5:74:7A:11:5F:E8:CD:F6:89:8C:8D:E7:33 Certificate issuer: /CN=A919C7BB/serialNumber=BB7875E4C6E544B5747A115FE8CDF6898C8DE733 Certificate serial: 09B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3h15MblRLV0ehFf6M32iYyN5zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7BB/8CE59DA4645F11EABC69297AC4F9AE02/u3h15MblRLV0ehFf6M32iYyN5zM.mft Manifest number: 09A3 Signing time: Sat 18 May 2024 20:53:15 +0000 Manifest this update: Sat 18 May 2024 20:53:14 +0000 Manifest next update: Sat 25 May 2024 20:53:14 +0000 Files and hashes: 1: u3h15MblRLV0ehFf6M32iYyN5zM.crl (hash: 6VK+BaS0gUClP+Swu5lNfoOO8WVy1eYYXypcWzcm6+8=) 2: 33CAA25A05A611EEA86A0C2BC4F9AE02.roa (hash: Eg/JW4cJF7nsXObfOoTZK84gKFfE+zST8g2LwnJr8pE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7BB/8CE59DA4645F11EABC69297AC4F9AE02/u3h15MblRLV0ehFf6M32iYyN5zM.crl rsync://rpki.apnic.net/member_repository/A919C7BB/8CE59DA4645F11EABC69297AC4F9AE02/u3h15MblRLV0ehFf6M32iYyN5zM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3h15MblRLV0ehFf6M32iYyN5zM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2482 (0x9b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7BB/serialNumber=BB7875E4C6E544B5747A115FE8CDF6898C8DE733 Validity Not Before: May 18 20:53:14 2024 GMT Not After : May 25 20:53:14 2024 GMT Subject: CN=6649153a-e501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:e7:43:89:4d:6c:f3:82:5a:ad:07:9b:4f: ff:f6:39:03:d6:f3:67:5e:92:79:a3:bd:a5:14:07: 5e:30:76:78:d5:fa:f3:5b:c6:ef:6d:84:d2:2e:9f: eb:c1:03:a6:78:1f:06:2d:98:de:5f:50:8a:49:84: b8:8e:af:2a:90:93:27:e6:fa:aa:47:24:34:b3:60: 9e:1e:00:b3:d9:43:b9:18:e9:38:51:fe:a8:f8:9f: cc:49:8b:13:65:d2:71:99:28:d3:22:03:0a:e6:cb: a0:d2:32:6f:4b:e8:7a:23:17:8d:5c:9c:e8:3e:f9: 8b:7a:09:67:ac:e3:cc:62:8a:11:a5:f3:63:f9:b3: 4b:bc:04:b3:6f:8c:99:db:6a:aa:42:fb:a1:ee:4b: 73:2b:21:74:5e:c4:0c:6c:1a:74:0e:c3:af:b4:bb: 20:05:51:a2:8c:c2:ae:59:8f:f9:e7:2b:10:d0:82: f6:43:6c:22:35:ca:23:42:ba:39:d5:48:f4:3d:20: 3c:cd:5b:ff:5b:7a:87:f4:19:93:9b:90:99:da:ee: d9:ba:ce:ab:6c:3d:05:f0:90:07:96:5d:db:8b:87: 4e:7b:4d:0f:15:7f:ee:7a:13:30:44:ed:0a:b5:69: 77:12:cd:c5:fe:06:05:5c:8d:01:c2:a2:7e:cf:54: 2b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:86:EF:CF:3A:18:4E:A7:08:D2:0A:B3:58:AC:F4:6B:BE:ED:7A:56 X509v3 Authority Key Identifier: keyid:BB:78:75:E4:C6:E5:44:B5:74:7A:11:5F:E8:CD:F6:89:8C:8D:E7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7BB/8CE59DA4645F11EABC69297AC4F9AE02/u3h15MblRLV0ehFf6M32iYyN5zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3h15MblRLV0ehFf6M32iYyN5zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7BB/8CE59DA4645F11EABC69297AC4F9AE02/u3h15MblRLV0ehFf6M32iYyN5zM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:70:7b:7d:1e:5c:dd:00:e0:b4:50:c4:d0:7a:3c:1d:f2:fe: e3:22:5c:af:71:d8:b8:3a:88:93:a0:a2:2e:a6:22:9d:c2:d3: 8f:a6:cc:ea:a2:22:b5:98:63:6a:ba:73:3c:76:f7:94:33:19: 44:d0:cb:40:bc:3e:b5:d9:a4:9e:5e:ac:e3:98:d2:f4:60:49: 04:92:cb:60:bc:19:db:bb:da:4f:a4:f5:7c:bf:c5:71:52:a9: b8:8c:9e:89:6a:31:46:45:ae:1d:90:56:4a:7e:1f:59:df:49: 4f:c8:52:4b:2b:d5:94:db:21:c2:1a:54:fe:4f:a4:db:e3:22: ff:27:57:f2:03:40:49:ea:61:c2:c8:59:94:f5:d2:52:4b:f9: 84:0f:3c:00:8f:c2:b1:5c:7a:3f:a1:d7:e0:e8:b7:e3:39:72: 70:e2:8f:74:30:2f:03:c4:22:15:66:f8:b6:02:0a:9d:45:13: dd:9c:54:37:39:f6:9d:07:d1:d7:a2:63:ef:6b:67:0e:39:ce: 60:49:60:d1:1a:9a:7d:ad:cd:27:a7:98:bb:59:43:01:ca:f1: ea:14:aa:3e:6f:28:a6:96:ae:11:aa:47:73:ad:17:9d:b6:4c: 21:bd:69:6b:58:b7:aa:78:3a:ac:5b:60:df:ab:be:87:f7:05: 63:c6:6a:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QkIxMTAvBgNVBAUTKEJCNzg3NUU0QzZFNTQ0QjU3NDdBMTE1RkU4Q0RGNjg5 OEM4REU3MzMwHhcNMjQwNTE4MjA1MzE0WhcNMjQwNTI1MjA1MzE0WjAYMRYwFAYD VQQDEw02NjQ5MTUzYS1lNTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuf3nQ4lNbPOCWq0Hm0//9jkD1vNnXpJ5o72lFAdeMHZ41frzW8bvbYTSLp/r wQOmeB8GLZjeX1CKSYS4jq8qkJMn5vqqRyQ0s2CeHgCz2UO5GOk4Uf6o+J/MSYsT ZdJxmSjTIgMK5sug0jJvS+h6IxeNXJzoPvmLeglnrOPMYooRpfNj+bNLvASzb4yZ 22qqQvuh7ktzKyF0XsQMbBp0DsOvtLsgBVGijMKuWY/55ysQ0IL2Q2wiNcojQro5 1Uj0PSA8zVv/W3qH9BmTm5CZ2u7Zus6rbD0F8JAHll3bi4dOe00PFX/uehMwRO0K tWl3Es3F/gYFXI0BwqJ+z1QrCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+G7886 GE6nCNIKs1is9Gu+7XpWMB8GA1UdIwQYMBaAFLt4deTG5US1dHoRX+jN9omMjecz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdCQi84Q0U1OURBNDY0 NUYxMUVBQkM2OTI5N0FDNEY5QUUwMi91M2gxNU1ibFJMVjBlaEZmNk0zMmlZeU41 ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzaDE1TWJsUkxWMGVoRmY2TTMyaVl5TjV6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdCQi84Q0U1OURBNDY0NUYxMUVBQkM2OTI5N0FDNEY5QUUwMi91M2gxNU1ibFJM VjBlaEZmNk0zMmlZeU41ek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAicHt9HlzdAOC0UMTQejwd8v7jIlyvcdi4OoiToKIupiKdwtOPpszq oiK1mGNqunM8dveUMxlE0MtAvD612aSeXqzjmNL0YEkEkstgvBnbu9pPpPV8v8Vx Uqm4jJ6JajFGRa4dkFZKfh9Z30lPyFJLK9WU2yHCGlT+T6Tb4yL/J1fyA0BJ6mHC yFmU9dJSS/mEDzwAj8KxXHo/odfg6LfjOXJw4o90MC8DxCIVZvi2AgqdRRPdnFQ3 OfadB9HXomPva2cOOc5gSWDRGpp9rc0np5i7WUMByvHqFKo+byimlq4RqkdzrRed tkwhvWlrWLeqeDqsW2Dfq76H9wVjxmoi -----END CERTIFICATE-----Generated at Sat May 18 21:31:30 2024 by rpki-client on console-ams.rpki-client.org