$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft File: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json) Hash identifier: T71m0jRudaUgIM+BXzak3orPTdapN+eF0L3Q+swcMJk= Subject key identifier: CC:A3:9F:53:9B:66:54:86:FD:B4:98:DF:CC:AE:A5:25:E0:5E:E7:C5 Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 Certificate issuer: /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Certificate serial: 0A7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft Manifest number: 3E3C Signing time: Sat 18 May 2024 14:56:29 +0000 Manifest this update: Sat 18 May 2024 14:56:28 +0000 Manifest next update: Sat 25 May 2024 14:56:28 +0000 Files and hashes: 1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: t8IxiYQjdjYqVMm5k8fd7uaNLP+Pcr7r8sA0tPQow/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2683 (0xa7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Validity Not Before: May 18 14:56:28 2024 GMT Not After : May 25 14:56:28 2024 GMT Subject: CN=6648c19c-0a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:02:01:35:58:89:de:f4:ef:f5:c5:4a:a4: da:e2:61:98:12:51:43:ff:60:5b:f8:9b:83:df:15: 30:46:38:ae:a4:c1:db:56:5a:c6:0a:01:17:16:e7: 91:fb:92:a7:08:09:5e:d0:0d:ee:88:7e:34:5c:61: d1:34:e7:d6:90:b4:7a:30:de:33:4a:91:1a:f7:cb: 34:d0:5d:9a:8b:90:ac:5a:fc:50:5e:81:9c:35:a9: eb:c1:d1:74:25:b5:34:23:bf:e0:d4:42:1f:fe:2e: c2:25:2c:84:bd:4d:50:c5:61:89:10:73:b7:db:9d: e0:4a:40:50:d1:52:c4:d3:30:f6:f0:97:a8:2b:52: b0:6b:cf:de:1a:31:cd:e7:89:89:ed:a9:1f:03:c5: 59:49:15:ca:8b:6d:8d:2f:88:87:98:3e:16:40:7d: 4e:83:1b:db:4a:21:e7:6d:24:2b:4e:96:fb:fe:61: 1f:be:74:82:cb:f4:7e:b3:32:d0:be:a2:04:50:23: 20:58:2f:ac:8f:53:24:a8:c1:87:d6:5c:e5:c1:f3: 46:28:d4:83:2a:f3:ec:22:7f:6f:50:3f:75:63:fd: 0e:ac:30:a0:22:54:c3:92:4f:e7:d9:7f:32:12:95: 29:1f:11:20:f8:7e:e2:69:98:00:c6:ac:8b:e7:75: 57:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A3:9F:53:9B:66:54:86:FD:B4:98:DF:CC:AE:A5:25:E0:5E:E7:C5 X509v3 Authority Key Identifier: keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:59:49:16:69:23:2f:70:89:e6:1a:3a:b5:a3:64:19:47:54: 61:c5:6b:92:34:a1:0f:24:b6:67:f2:cf:18:f3:e3:15:ae:96: 2d:74:3e:12:49:20:01:9a:65:28:de:d4:3c:bc:7b:a0:4c:e4: 9e:09:97:27:4d:27:dd:23:fe:1d:02:91:6c:b3:fc:db:0a:b2: 57:c2:21:11:a7:fb:3c:05:cb:d0:2b:5f:f4:c1:f1:b2:3d:59: 24:6b:61:28:e5:0f:09:08:2f:b2:fd:0c:d0:7d:36:fc:fa:a4: a6:fa:73:47:a0:f1:2a:c2:10:52:82:53:9b:4b:c7:fd:94:59: 1e:5c:d8:d8:86:eb:fd:ae:00:55:11:b8:97:5a:73:48:50:b8: 7b:f8:1c:e6:9e:9c:e2:57:b4:5f:d0:76:8e:fc:5e:76:4d:0a: da:ee:43:ee:ac:d2:46:02:c8:cb:e7:47:7b:81:25:d6:e5:c9: dc:43:ad:b0:d1:db:86:fd:84:1b:ea:3c:68:db:a4:05:09:b4: 05:f2:c5:e5:cb:0d:6a:c4:98:d8:e9:92:06:c9:67:62:f5:70: a3:36:71:73:9e:cf:d1:9a:de:12:20:35:4d:83:e1:52:53:e0: d9:96:22:38:32:b2:97:ba:6f:98:02:4e:e3:d0:52:35:fb:84: f4:e8:c5:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBQUExMTAvBgNVBAUTKERDRjU0NzBDNUM4NzgyODhENjFEOUVBNUE1MTVENTg1 MEU3QjU4NzMwHhcNMjQwNTE4MTQ1NjI4WhcNMjQwNTI1MTQ1NjI4WjAYMRYwFAYD VQQDEw02NjQ4YzE5Yy0wYTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5cCATVYid707/XFSqTa4mGYElFD/2Bb+JuD3xUwRjiupMHbVlrGCgEXFueR +5KnCAle0A3uiH40XGHRNOfWkLR6MN4zSpEa98s00F2ai5CsWvxQXoGcNanrwdF0 JbU0I7/g1EIf/i7CJSyEvU1QxWGJEHO3253gSkBQ0VLE0zD28JeoK1Kwa8/eGjHN 54mJ7akfA8VZSRXKi22NL4iHmD4WQH1OgxvbSiHnbSQrTpb7/mEfvnSCy/R+szLQ vqIEUCMgWC+sj1MkqMGH1lzlwfNGKNSDKvPsIn9vUD91Y/0OrDCgIlTDkk/n2X8y EpUpHxEg+H7iaZgAxqyL53VXBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyjn1Ob ZlSG/bSY38yupSXgXufFMB8GA1UdIwQYMBaAFNz1Rwxch4KI1h2epaUV1YUOe1hz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFBQS84RjU4OTI5NDFE OTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdvaldIWjZscFJYVmhRNTdX SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNQVkhERnlIZ29qV0haNmxwUlhWaFE1N1dITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFBQS84RjU4OTI5NDFEOTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdv aldIWjZscFJYVmhRNTdXSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaWUkWaSMvcInmGjq1o2QZR1RhxWuSNKEPJLZn8s8Y8+MVrpYtdD4S SSABmmUo3tQ8vHugTOSeCZcnTSfdI/4dApFss/zbCrJXwiERp/s8BcvQK1/0wfGy PVkka2Eo5Q8JCC+y/QzQfTb8+qSm+nNHoPEqwhBSglObS8f9lFkeXNjYhuv9rgBV EbiXWnNIULh7+BzmnpziV7Rf0HaO/F52TQra7kPurNJGAsjL50d7gSXW5cncQ62w 0duG/YQb6jxo26QFCbQF8sXlyw1qxJjY6ZIGyWdi9XCjNnFzns/Rmt4SIDVNg+FS U+DZliI4MrKXum+YAk7j0FI1+4T06MWt -----END CERTIFICATE-----Generated at Sat May 18 15:58:25 2024 by rpki-client on console-ams.rpki-client.org