$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft File: 3COmnqHvwaN5SSwT6awUfEn1rQQ.mft (raw, json) Hash identifier: zgR9U7vyXhe5ijrZddVrwywgi27pwBNKZXPghNrJ5wg= Subject key identifier: 41:B8:41:87:5B:46:5B:54:BC:BB:6B:41:43:4D:4B:03:BF:F4:1A:BB Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft Manifest number: CC Signing time: Sun 19 May 2024 06:30:25 +0000 Manifest this update: Sun 19 May 2024 06:30:25 +0000 Manifest next update: Sun 26 May 2024 06:30:25 +0000 Files and hashes: 1: 3COmnqHvwaN5SSwT6awUfEn1rQQ.crl (hash: EGQVNwUYw5N9DNMwD91L1TJRVivnWP6iune4UTOa+lU=) 2: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (hash: GjQBLQ1QPq783AHBVS1MGjtSCxs3oCTF1KAHnsENe6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Validity Not Before: May 19 06:30:25 2024 GMT Not After : May 26 06:30:25 2024 GMT Subject: CN=66499c81-c135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2f:ec:27:3d:90:4d:ee:10:17:28:27:63:cc: 64:7a:ad:bf:dd:da:68:dc:75:4b:e4:ef:ad:63:47: 3d:f1:60:9e:3a:4c:7d:de:22:12:cf:b5:07:e9:1f: 91:d6:f0:3d:e8:5f:6c:7c:33:03:ec:aa:5c:da:5d: 1b:0a:f6:57:00:9e:f7:0c:47:f2:9f:47:f2:2b:50: cb:ac:52:af:09:cb:4d:90:63:d8:8c:8d:0a:f8:18: 76:e7:36:2b:d9:e7:30:fc:df:c5:ba:49:a0:98:0e: ed:36:a9:38:f0:b8:1c:fe:6d:21:40:74:ac:ae:21: fb:2d:20:9f:dc:bd:bd:85:3c:dd:62:2c:3e:5e:47: 0f:db:7e:48:4e:c7:1b:35:c3:fd:8c:d0:45:9b:01: cc:f4:ce:ea:0c:e0:83:6b:15:e0:52:81:60:87:2d: 44:4a:52:01:b2:d9:0c:48:5a:a7:2c:80:f4:75:be: 3d:3d:43:27:d8:6e:18:e8:1a:09:eb:9b:b1:ff:b4: f7:e0:8b:ec:3b:e9:ff:57:a3:98:ac:c3:71:ea:f3: ac:73:7f:5f:d5:18:63:30:fc:31:42:27:ae:2b:45: 5e:1e:73:bd:20:9b:a2:8a:79:62:07:ce:0d:12:98: 13:f0:d2:25:5d:c2:52:92:4e:38:1e:5d:3e:5f:25: ce:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B8:41:87:5B:46:5B:54:BC:BB:6B:41:43:4D:4B:03:BF:F4:1A:BB X509v3 Authority Key Identifier: keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:d8:b1:33:9a:b4:3f:a2:2d:0c:c9:48:5b:0c:aa:f0:38:e5: 4c:94:b0:d2:2c:fb:d2:a1:31:48:96:4f:88:1f:47:53:a2:cd: f7:d7:60:aa:2f:45:de:f2:70:26:bd:6c:1e:2e:74:85:68:70: dc:86:6f:4e:50:ac:8e:01:5c:b9:b9:88:d8:57:5b:79:46:df: 0a:06:82:63:3e:5f:db:cc:9a:35:ba:1f:bc:f8:e0:87:c6:e2: 20:6f:b1:96:06:41:61:02:66:d6:ab:5d:d1:94:82:2e:26:7f: 59:73:d2:f5:07:5a:45:31:79:7c:40:93:b2:89:1e:5c:93:a0: c0:b8:cd:94:9a:86:02:0e:0d:74:ac:3b:68:78:e5:02:ea:be: b1:b2:8c:33:c2:ed:4d:09:1e:db:7a:d6:d8:10:a1:1e:3a:01: a2:93:0c:9e:43:0d:8f:ac:fa:fb:ed:06:13:4e:6e:dc:49:b1: a6:a7:2b:c8:d6:68:c0:fa:f0:7c:b2:4b:f4:4a:57:1f:8b:ed: 7e:d6:1e:0e:21:e4:38:8a:69:8a:1f:97:09:8b:6c:b0:4e:56: a2:67:e6:dd:8d:6d:e8:e6:55:d0:c0:0e:08:2b:2f:a4:21:28: 91:ac:54:19:0f:ac:4a:78:3c:42:f8:be:ed:7d:ee:50:08:58: b4:84:75:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0QzIxMTAvBgNVBAUTKERDMjNBNjlFQTFFRkMxQTM3OTQ5MkMxM0U5QUMxNDdD NDlGNUFEMDQwHhcNMjQwNTE5MDYzMDI1WhcNMjQwNTI2MDYzMDI1WjAYMRYwFAYD VQQDEw02NjQ5OWM4MS1jMTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuS/sJz2QTe4QFygnY8xkeq2/3dpo3HVL5O+tY0c98WCeOkx93iISz7UH6R+R 1vA96F9sfDMD7Kpc2l0bCvZXAJ73DEfyn0fyK1DLrFKvCctNkGPYjI0K+Bh25zYr 2ecw/N/FukmgmA7tNqk48Lgc/m0hQHSsriH7LSCf3L29hTzdYiw+XkcP235ITscb NcP9jNBFmwHM9M7qDOCDaxXgUoFghy1ESlIBstkMSFqnLID0db49PUMn2G4Y6BoJ 65ux/7T34IvsO+n/V6OYrMNx6vOsc39f1RhjMPwxQieuK0VeHnO9IJuiinliB84N EpgT8NIlXcJSkk44Hl0+XyXOKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEG4QYdb RltUvLtrQUNNSwO/9Bq7MB8GA1UdIwQYMBaAFNwjpp6h78GjeUksE+msFHxJ9a0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjRDMi9CMTdFOTVENjAz NzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndhTjVTU3dUNmF3VWZFbjFy UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDT21ucUh2d2FONVNTd1Q2YXdVZkVuMXJRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjRDMi9CMTdFOTVENjAzNzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndh TjVTU3dUNmF3VWZFbjFyUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH2LEzmrQ/oi0MyUhbDKrwOOVMlLDSLPvSoTFIlk+IH0dTos3312Cq L0Xe8nAmvWweLnSFaHDchm9OUKyOAVy5uYjYV1t5Rt8KBoJjPl/bzJo1uh+8+OCH xuIgb7GWBkFhAmbWq13RlIIuJn9Zc9L1B1pFMXl8QJOyiR5ck6DAuM2UmoYCDg10 rDtoeOUC6r6xsowzwu1NCR7betbYEKEeOgGikwyeQw2PrPr77QYTTm7cSbGmpyvI 1mjA+vB8skv0Slcfi+1+1h4OIeQ4immKH5cJi2ywTlaiZ+bdjW3o5lXQwA4IKy+k ISiRrFQZD6xKeDxC+L7tfe5QCFi0hHUT -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org