$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json) Hash identifier: y4+opTh6mBjKgHLX0szrNn2alcqJ/8Er+yylizLBSjI= Subject key identifier: 35:11:AC:F9:2D:1A:5A:90:F9:24:C6:0C:20:C7:EF:78:22:8A:46:CC Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft Manifest number: 18 Signing time: Sun 19 May 2024 08:43:27 +0000 Manifest this update: Sun 19 May 2024 08:43:26 +0000 Manifest next update: Sun 26 May 2024 08:43:26 +0000 Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: 9/H8adTvzG+CRFHjByYLu3/eDv9DQHTDXULhv384A5w=) 2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: pAJEpYyM6p0jvJHEUZ3Ci37u8Iyn4OPGSIHA+Nw0EQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Validity Not Before: May 19 08:43:26 2024 GMT Not After : May 26 08:43:26 2024 GMT Subject: CN=6649bbae-2760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:aa:74:43:87:d7:c6:d5:1d:a6:59:27:1e:b3: 36:c6:6e:38:86:a3:5d:13:d1:88:6d:d4:76:89:0a: e2:e1:7c:33:3c:58:d9:b0:65:23:46:3a:c7:79:8a: 39:97:c9:48:2f:72:50:9e:1a:18:82:af:6a:1d:bc: c2:ac:4a:7e:09:7f:82:fd:80:6c:72:85:cd:45:38: a0:68:98:b6:85:e2:9c:43:74:c7:cd:e4:4e:54:b8: 04:65:33:a1:a5:50:a2:b8:6f:a3:be:a3:ac:f0:ff: 10:c6:9e:9f:83:79:bf:65:7f:c4:a4:1b:03:b0:57: e2:31:ef:f3:04:6e:2c:09:3d:0c:b5:f5:37:56:2f: f4:02:06:2b:eb:75:8b:d3:65:cb:5b:de:00:ba:12: 3e:27:79:11:b8:4f:51:79:47:a6:d1:ab:cc:37:9e: a7:63:17:cc:c8:c2:a8:56:50:fb:50:46:13:f4:0e: a2:d9:df:9b:c6:f9:98:0f:4c:5f:e6:86:8c:ce:69: 0b:7f:0e:6a:55:c1:ae:9f:06:e3:ea:0d:4b:9e:79: 17:90:fa:54:57:e6:28:a7:63:29:0f:75:aa:6f:5d: 49:a3:83:4f:a9:2d:2d:11:59:85:77:c5:b7:29:b0: 9e:a9:73:76:f1:fb:8b:1e:33:7a:1f:ac:b2:6a:5b: 7c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:11:AC:F9:2D:1A:5A:90:F9:24:C6:0C:20:C7:EF:78:22:8A:46:CC X509v3 Authority Key Identifier: keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1c:73:bd:09:30:58:6d:99:a4:5d:d7:50:6e:bb:43:16:cf: 9b:5d:6c:d7:4b:0f:5e:4e:d5:80:eb:5e:77:70:b9:fb:50:79: 79:2e:b9:8e:ae:5c:d0:00:fb:f0:83:d2:ee:99:39:dd:f5:66: 51:8d:26:7a:1e:07:c7:ac:b9:b4:ea:c6:eb:e1:2c:66:dc:3e: 77:1f:5f:c6:d1:b9:60:2f:41:be:26:85:78:a3:8d:62:35:af: 32:07:d7:1b:db:16:5d:35:af:58:2d:20:e2:c7:1b:38:0a:27: 9b:d5:51:56:5d:6e:24:59:11:5c:4d:6f:22:1e:ca:00:e6:b1: 90:7e:27:44:64:a7:3a:d6:e3:a1:91:c5:5a:66:dc:5d:19:a0: 3e:aa:7b:da:06:ed:ac:6e:f3:c4:eb:c4:d9:e3:41:65:ae:7d: b3:82:ac:a3:8a:f4:c5:08:7b:dc:49:67:8b:d0:11:23:bf:72: db:cb:50:b0:8f:4d:56:27:29:7f:d4:71:16:33:a9:43:07:1c: ea:1c:01:5b:ca:87:2c:c2:15:9f:93:d8:7b:2e:43:c1:33:bf: ae:92:f2:46:5a:19:31:d4:6b:49:b9:bf:a7:a8:7d:2d:d1:a4: e7:92:2a:a0:bf:89:61:fa:d5:97:4c:c5:fc:1e:1d:0c:84:d7: ea:bb:88:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUUyRTExMC8GA1UEBRMoREQyNDMyRDhBRDZCQjNFOUU5OTY1NTgwQkJDNkQyMjIx OTA3QjNGNzAeFw0yNDA1MTkwODQzMjZaFw0yNDA1MjYwODQzMjZaMBgxFjAUBgNV BAMTDTY2NDliYmFlLTI3NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHqnRDh9fG1R2mWSceszbGbjiGo10T0Yht1HaJCuLhfDM8WNmwZSNGOsd5ijmX yUgvclCeGhiCr2odvMKsSn4Jf4L9gGxyhc1FOKBomLaF4pxDdMfN5E5UuARlM6Gl UKK4b6O+o6zw/xDGnp+Deb9lf8SkGwOwV+Ix7/MEbiwJPQy19TdWL/QCBivrdYvT Zctb3gC6Ej4neRG4T1F5R6bRq8w3nqdjF8zIwqhWUPtQRhP0DqLZ35vG+ZgPTF/m hozOaQt/DmpVwa6fBuPqDUueeReQ+lRX5iinYykPdapvXUmjg0+pLS0RWYV3xbcp sJ6pc3bx+4seM3ofrLJqW3x3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNRGs+S0a WpD5JMYMIMfveCKKRswwHwYDVR0jBBgwFoAU3SQy2K1rs+npllWAu8bSIhkHs/cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRTJFL0U3MUEwQkJDRjIx NzExRUVCQ0NDMzEyMEM0RjlBRTAyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNf Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM1NReTJLMXJzLW5wbGxXQXU4YlNJaGtIc19jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB RTJFL0U3MUEwQkJDRjIxNzExRUVCQ0NDMzEyMEM0RjlBRTAyLzNTUXkySzFycy1u cGxsV0F1OGJTSWhrSHNfYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEscc70JMFhtmaRd11Buu0MWz5tdbNdLD15O1YDrXndwuftQeXkuuY6u XNAA+/CD0u6ZOd31ZlGNJnoeB8esubTqxuvhLGbcPncfX8bRuWAvQb4mhXijjWI1 rzIH1xvbFl01r1gtIOLHGzgKJ5vVUVZdbiRZEVxNbyIeygDmsZB+J0RkpzrW46GR xVpm3F0ZoD6qe9oG7axu88TrxNnjQWWufbOCrKOK9MUIe9xJZ4vQESO/ctvLULCP TVYnKX/UcRYzqUMHHOocAVvKhyzCFZ+T2HsuQ8Ezv66S8kZaGTHUa0m5v6eofS3R pOeSKqC/iWH61ZdMxfweHQyE1+q7iP8= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org