$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft File: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json) Hash identifier: Y6Fv0R2YSwS4hlMXhUnKkkhM2bdcRRMa1eXNCuXlxgU= Subject key identifier: 5A:F6:86:BE:44:6B:B9:AF:1D:A6:75:1B:0A:51:14:80:A9:AC:1F:B3 Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft Manifest number: 0137 Signing time: Sun 19 May 2024 05:00:52 +0000 Manifest this update: Sun 19 May 2024 05:00:51 +0000 Manifest next update: Sun 26 May 2024 05:00:51 +0000 Files and hashes: 1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: bTKodvUcirOc2bJvhvL1jIit3HJjc8tLd5JvMSNTkLc=) 2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: +n0AtuT6Jdla2/49nbRpW9RkyQDKQaYh3sVDv0xviWc=) 3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: xI0GnyvN5cK5+FijAC55cRTHb9/XhLz8klCv+xpDf+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Validity Not Before: May 19 05:00:51 2024 GMT Not After : May 26 05:00:51 2024 GMT Subject: CN=66498784-f574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:80:fb:62:3c:80:cb:52:8c:f8:8f:57:f3:6c: 37:63:6f:5f:b8:38:42:c3:eb:23:c7:bf:7a:43:78: 78:3d:62:7c:e5:3f:dd:ae:7b:08:96:d6:9b:d7:4a: eb:e3:b7:18:61:15:03:e6:41:db:a7:79:99:db:ba: 75:62:f4:16:55:5c:f2:41:76:7f:e4:54:4d:da:3d: b9:98:6a:37:3f:f1:4c:06:d5:af:d9:20:08:a1:56: d1:f4:4b:d1:04:6b:1e:69:15:b3:f0:63:53:31:6d: 73:ca:48:c1:42:05:77:49:1f:95:38:d1:c7:69:63: 0f:0c:f7:99:de:54:5a:26:d7:c7:e3:e7:e1:4a:f3: 52:dc:36:4d:29:1d:45:33:9d:b7:18:89:3a:f0:55: ea:c1:02:4b:6d:f3:0e:72:b0:70:24:54:1c:a8:ad: 4b:ee:16:35:3d:8b:12:60:04:df:7f:6b:95:3b:c7: b6:ea:4a:73:44:3e:2c:c6:2e:49:c7:fc:50:60:34: 1d:ff:6a:f8:60:a5:11:66:a2:ff:29:a7:83:05:2c: e4:16:61:1a:39:a7:20:c8:52:4e:46:e0:68:84:14: 48:d6:87:14:4f:1a:c4:7c:e0:b4:38:2d:80:83:47: e5:56:45:d5:13:88:90:88:b5:e4:be:1f:14:9f:db: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F6:86:BE:44:6B:B9:AF:1D:A6:75:1B:0A:51:14:80:A9:AC:1F:B3 X509v3 Authority Key Identifier: keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:7a:9e:ba:bc:a3:ec:6c:c4:7f:11:f7:8f:f2:cc:06:fb:d0: 35:67:41:4e:fb:21:d8:24:62:ba:b9:8c:c7:5e:a2:1d:7c:83: 58:08:cd:b9:19:9c:bf:6f:39:ea:5a:26:10:cd:49:d9:f7:74: 29:42:b4:f0:a9:9e:57:e6:cd:08:e0:24:04:a9:3c:ef:bf:e4: 61:b2:90:ff:16:c6:35:ab:b0:6e:df:0c:38:8a:e8:81:c3:de: a9:8a:6d:52:77:99:1d:d0:e9:22:11:f5:82:fc:52:88:12:b6: 5e:2f:42:e1:a4:cc:ef:64:6c:7f:19:c3:9d:ed:f2:9a:4b:b1: 25:6a:9d:2a:4c:4d:81:98:fb:8b:e9:6a:b0:29:54:06:27:74: 4c:47:7c:17:c6:2d:80:1d:b0:40:a1:b3:91:4e:c0:ba:f9:e3: 98:7d:0d:9d:11:a5:de:ce:46:2e:ce:5f:b5:cd:22:c9:db:5a: b7:a5:2b:b5:4d:9d:b1:ad:26:db:67:da:6d:eb:b2:42:01:83: 3c:61:bc:ea:cc:19:68:ac:d7:08:e3:a5:8d:dd:c0:89:e2:c6: 85:d7:67:70:dc:29:66:a5:1d:3d:42:1a:c6:24:0a:ea:80:23: f9:48:5f:82:67:94:b3:00:31:ef:4d:4d:b7:45:05:03:98:27: e0:49:10:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD OTRDQkM1QkEwHhcNMjQwNTE5MDUwMDUxWhcNMjQwNTI2MDUwMDUxWjAYMRYwFAYD VQQDEw02NjQ5ODc4NC1mNTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oD7YjyAy1KM+I9X82w3Y29fuDhCw+sjx796Q3h4PWJ85T/drnsIltab10rr 47cYYRUD5kHbp3mZ27p1YvQWVVzyQXZ/5FRN2j25mGo3P/FMBtWv2SAIoVbR9EvR BGseaRWz8GNTMW1zykjBQgV3SR+VONHHaWMPDPeZ3lRaJtfH4+fhSvNS3DZNKR1F M523GIk68FXqwQJLbfMOcrBwJFQcqK1L7hY1PYsSYATff2uVO8e26kpzRD4sxi5J x/xQYDQd/2r4YKURZqL/KaeDBSzkFmEaOacgyFJORuBohBRI1ocUTxrEfOC0OC2A g0flVkXVE4iQiLXkvh8Un9tspwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFr2hr5E a7mvHaZ1GwpRFICprB+zMB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9FNDJDQkM0QzQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJ VjR1ZVIwcnJnTEhKVEx4Ym8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcep66vKPsbMR/EfeP8swG+9A1Z0FO+yHYJGK6uYzHXqIdfINYCM25 GZy/bznqWiYQzUnZ93QpQrTwqZ5X5s0I4CQEqTzvv+RhspD/FsY1q7Bu3ww4iuiB w96pim1Sd5kd0OkiEfWC/FKIErZeL0LhpMzvZGx/GcOd7fKaS7Elap0qTE2BmPuL 6WqwKVQGJ3RMR3wXxi2AHbBAobORTsC6+eOYfQ2dEaXezkYuzl+1zSLJ21q3pSu1 TZ2xrSbbZ9pt67JCAYM8YbzqzBlorNcI46WN3cCJ4saF12dw3ClmpR09QhrGJArq gCP5SF+CZ5SzADHvTU23RQUDmCfgSRBZ -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org