$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: PYv1Kh5pbnVGZizE9XSmzzC1EVMl7q/C4vFiVzHGgI8= Subject key identifier: 26:56:93:7B:9F:7F:81:38:F6:AE:5A:C5:4B:8B:89:F8:24:40:36:96 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 33CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 33CA Signing time: Sat 18 May 2024 14:38:13 +0000 Manifest this update: Sat 18 May 2024 14:38:13 +0000 Manifest next update: Sat 25 May 2024 14:38:13 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: t2LeytiSflV6eCQJbDzIhaEhRp7QE447E5CgLoqtq3I=) 2: 673DC29606B011EFA665703AC4F9AE02.roa (hash: YxKLoyNGvSvfT0xAnWYwcM9ka4knxwtNruW725q0CuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13259 (0x33cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: May 18 14:38:13 2024 GMT Not After : May 25 14:38:13 2024 GMT Subject: CN=6648bd55-e853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:2d:58:2f:31:22:fb:ac:50:1b:00:26:65: 82:f1:ca:34:8f:60:4e:57:46:8f:e4:45:94:ce:d3: c8:26:3c:38:54:e6:ac:85:15:7c:3a:9b:b6:ff:52: 77:5c:df:54:e9:b1:4b:cd:c6:e8:13:86:54:7d:4e: 28:fb:79:54:1b:6a:11:e2:98:a8:6b:be:7d:df:d4: bb:52:5e:8b:98:7d:4c:bc:07:04:06:7d:f0:70:58: 9f:1c:0c:6c:ad:74:43:04:a1:1d:83:f3:b7:0c:e1: a1:f6:a1:28:b2:7b:8b:24:94:4c:73:cb:c3:7e:19: 9d:f6:34:f2:9f:8a:9e:19:63:40:ae:6a:6a:c1:19: 1f:71:e3:d0:f4:98:ef:58:6b:73:0a:5c:0d:10:34: c1:9d:fb:b3:51:d1:a7:14:d9:6e:5c:10:1e:93:0a: 98:b0:29:c8:4f:b3:93:4d:a9:b7:31:31:f7:fd:96: f3:92:e8:b3:64:89:14:2f:1a:34:f0:3d:1f:c8:df: 2c:c3:60:79:4b:64:86:6f:a7:06:32:42:4a:30:d7: f8:b1:b2:fc:6d:8a:21:34:69:96:38:7a:3d:df:f0: 4a:15:2f:2f:e3:4a:ec:02:40:7f:7c:3d:05:96:cc: cf:37:29:54:02:46:24:c9:0f:d4:13:1b:e5:b6:81: 19:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:56:93:7B:9F:7F:81:38:F6:AE:5A:C5:4B:8B:89:F8:24:40:36:96 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:97:dd:59:68:f8:16:c9:da:a1:96:51:e2:f2:4d:66:1d:94: 73:95:56:b5:ee:a8:82:d6:95:eb:12:4c:c9:3a:4c:19:06:98: da:ad:09:96:45:e0:ef:6a:ca:4d:15:aa:32:4a:aa:ab:2a:5f: 79:82:2d:7b:7b:1c:b5:85:f4:99:8b:af:45:30:88:18:ad:72: de:11:b3:ae:35:43:ac:c3:44:a3:f9:8a:98:ac:7a:82:be:d6: 6b:4e:62:80:81:ae:93:1c:5a:94:a3:d3:a8:83:b8:9e:36:23: 1b:f7:a3:51:36:88:10:d3:82:84:db:32:f7:7d:f8:e9:fd:9a: 0f:11:15:65:dd:1d:de:db:40:39:81:5c:b0:ea:9b:01:58:12: 20:f7:5e:56:0b:40:48:8d:eb:b7:dd:cb:98:3e:88:57:28:51: c0:2e:d5:e5:a6:53:dc:2f:ef:8d:13:73:bf:3b:ec:35:b3:91: 80:af:72:3d:fc:98:82:9f:fa:b7:8a:67:c1:a6:ed:fa:8d:4c: f9:27:00:b3:d7:dd:dc:49:36:ff:f0:44:1a:ea:fb:27:fa:36: 1c:1c:48:59:f4:56:74:0a:ee:36:86:06:ea:d6:7d:02:aa:86: 2f:29:1c:bd:ab:eb:a3:8b:5f:ae:16:cd:16:b6:d2:05:f3:54: 04:a5:98:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjQwNTE4MTQzODEzWhcNMjQwNTI1MTQzODEzWjAYMRYwFAYD VQQDEw02NjQ4YmQ1NS1lODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOstWC8xIvusUBsAJmWC8co0j2BOV0aP5EWUztPIJjw4VOashRV8Opu2/1J3 XN9U6bFLzcboE4ZUfU4o+3lUG2oR4pioa75939S7Ul6LmH1MvAcEBn3wcFifHAxs rXRDBKEdg/O3DOGh9qEosnuLJJRMc8vDfhmd9jTyn4qeGWNArmpqwRkfcePQ9Jjv WGtzClwNEDTBnfuzUdGnFNluXBAekwqYsCnIT7OTTam3MTH3/ZbzkuizZIkULxo0 8D0fyN8sw2B5S2SGb6cGMkJKMNf4sbL8bYohNGmWOHo93/BKFS8v40rsAkB/fD0F lszPNylUAkYkyQ/UExvltoEZkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZWk3uf f4E49q5axUuLifgkQDaWMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9l91ZaPgWydqhllHi8k1mHZRzlVa17qiC1pXrEkzJOkwZBpjarQmW ReDvaspNFaoySqqrKl95gi17exy1hfSZi69FMIgYrXLeEbOuNUOsw0Sj+YqYrHqC vtZrTmKAga6THFqUo9Oog7ieNiMb96NRNogQ04KE2zL3ffjp/ZoPERVl3R3e20A5 gVyw6psBWBIg915WC0BIjeu33cuYPohXKFHALtXlplPcL++NE3O/O+w1s5GAr3I9 /JiCn/q3imfBpu36jUz5JwCz193cSTb/8EQa6vsn+jYcHEhZ9FZ0Cu42hgbq1n0C qoYvKRy9q+uji1+uFs0WttIF81QEpZiI -----END CERTIFICATE-----Generated at Sat May 18 15:26:07 2024 by rpki-client on console-fra.rpki-client.org