$ rpki-client -vvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.mft (raw, json) Hash identifier: ZhzQlkjrIz9VZfg+rAnOXnslaXcD+ytafmFOUja8vgs= Subject key identifier: 48:7E:C6:64:18:22:C3:41:7B:CA:4A:F4:D0:5C:D8:F8:2C:A6:CC:94 Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 Certificate issuer: /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Certificate serial: 06BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft Manifest number: 06B9 Signing time: Sat 18 May 2024 23:05:53 +0000 Manifest this update: Sat 18 May 2024 23:05:53 +0000 Manifest next update: Sat 25 May 2024 23:05:53 +0000 Files and hashes: 1: 3CH4ZzeyOX3SsmCej7QGhuPI92E.crl (hash: eIvfxyI11d/P7Kzx/GUGyvC4Nd902z1FN03tP8rzHps=) 2: 9F5F0EC6135911EBBC97C718C4F9AE02.roa (hash: LwyG3cBK685X5Hy6zcxvokAuNx9OxDQ6PWKOHUrID2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1725 (0x6bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Validity Not Before: May 18 23:05:53 2024 GMT Not After : May 25 23:05:53 2024 GMT Subject: CN=66493451-81eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:21:8e:4b:50:db:5b:3c:6a:68:e3:f6:be: 27:6a:c4:d0:89:30:cb:a9:0e:8c:8f:38:2f:1e:79: 28:ab:c9:77:36:fd:31:6c:ff:ba:3c:49:70:a6:25: 47:f7:e9:3a:17:81:bf:a6:20:ec:b4:d9:53:db:d3: 12:d4:69:ca:d9:29:9d:78:04:b8:66:2d:4f:6f:45: 0a:6c:b8:8c:f4:0b:a1:ef:95:3f:0b:23:18:3d:e4: 98:f5:44:9c:bc:0a:d8:6c:a6:2d:04:b4:e1:45:69: 3b:fe:ba:c1:b3:f7:f0:d5:40:0d:0a:56:09:8e:3b: 9f:b2:cf:2c:54:28:86:fb:29:05:e4:1a:ac:a4:9f: 1e:76:a3:e1:af:69:7b:04:21:e3:6a:e2:67:5f:36: f8:ba:37:a3:9f:07:2a:39:ad:fa:dc:07:16:31:d7: df:dc:24:e7:5e:03:4d:dd:9e:6d:91:59:f1:f4:80: 58:4e:c6:52:b8:a3:47:4c:db:04:ac:3e:4c:c7:04: 1f:44:bf:b1:72:ad:8c:7c:66:73:00:8f:40:30:ad: 6e:b5:ad:e6:99:25:dd:f6:f0:a5:6b:73:27:fe:fb: c6:05:1b:77:97:60:4a:2a:2c:7c:ed:76:6b:1d:93: 15:0c:9a:b9:ef:54:60:df:f8:b5:6c:d7:1e:47:73: 6e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7E:C6:64:18:22:C3:41:7B:CA:4A:F4:D0:5C:D8:F8:2C:A6:CC:94 X509v3 Authority Key Identifier: keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:04:e5:ef:35:ba:80:e2:1d:ef:fe:8d:25:c7:30:cb:54:fe: 42:ce:ae:72:48:4a:31:0a:22:8e:b8:2c:41:4b:3a:bb:55:20: 04:42:fb:ca:b6:d2:07:c2:3d:8f:2f:5e:5e:fb:2b:fe:7c:eb: d6:b7:80:bb:b7:54:fd:a1:fe:15:19:c0:aa:76:ab:f4:47:54: f9:89:84:8b:b3:43:7c:44:73:aa:63:dc:71:53:70:c1:0e:01: 34:ab:47:c2:d4:e1:92:0b:5c:ec:7e:c0:d2:34:f5:4c:23:8c: e0:b3:47:10:55:38:69:be:16:58:71:a3:2e:4f:ae:22:2c:c2: 05:ef:7c:eb:d3:8d:3c:e6:1c:1e:c3:7b:a5:09:c3:1c:48:b0: c4:ad:a8:d8:ad:36:b1:c6:b6:7c:52:2d:f1:f4:ba:da:ca:ae: 84:73:39:df:1b:6e:1b:76:4d:03:8b:0e:37:c0:a2:37:a8:b2: 5d:83:c7:66:4a:b2:89:3f:b0:65:17:f3:8b:73:7d:cb:32:87: 5e:98:f0:fe:4f:3b:9f:c1:44:98:10:11:ff:e9:f5:77:8f:7a: 98:31:e2:a7:0b:ce:23:eb:88:84:a2:aa:38:3d:90:39:56:35: 9a:d9:00:a4:72:82:1d:dc:2c:25:e1:df:25:bd:a1:05:e2:e5: 6c:b4:3d:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OUMxMTAvBgNVBAUTKERDMjFGODY3MzdCMjM5N0REMkIyNjA5RThGQjQwNjg2 RTNDOEY3NjEwHhcNMjQwNTE4MjMwNTUzWhcNMjQwNTI1MjMwNTUzWjAYMRYwFAYD VQQDEw02NjQ5MzQ1MS04MWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3AhjktQ21s8amjj9r4nasTQiTDLqQ6MjzgvHnkoq8l3Nv0xbP+6PElwpiVH 9+k6F4G/piDstNlT29MS1GnK2SmdeAS4Zi1Pb0UKbLiM9Auh75U/CyMYPeSY9USc vArYbKYtBLThRWk7/rrBs/fw1UANClYJjjufss8sVCiG+ykF5BqspJ8edqPhr2l7 BCHjauJnXzb4ujejnwcqOa363AcWMdff3CTnXgNN3Z5tkVnx9IBYTsZSuKNHTNsE rD5MxwQfRL+xcq2MfGZzAI9AMK1uta3mmSXd9vCla3Mn/vvGBRt3l2BKKix87XZr HZMVDJq571Rg3/i1bNceR3NucQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEh+xmQY IsNBe8pK9NBc2PgspsyUMB8GA1UdIwQYMBaAFNwh+Gc3sjl90rJgno+0BobjyPdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5Qy9BMkRGQjMzNjEz NTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9YM1NzbUNlajdRR2h1UEk5 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDSDRaemV5T1gzU3NtQ2VqN1FHaHVQSTkyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5Qy9BMkRGQjMzNjEzNTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9Y M1NzbUNlajdRR2h1UEk5MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNBOXvNbqA4h3v/o0lxzDLVP5Czq5ySEoxCiKOuCxBSzq7VSAEQvvK ttIHwj2PL15e+yv+fOvWt4C7t1T9of4VGcCqdqv0R1T5iYSLs0N8RHOqY9xxU3DB DgE0q0fC1OGSC1zsfsDSNPVMI4zgs0cQVThpvhZYcaMuT64iLMIF73zr04085hwe w3ulCcMcSLDErajYrTaxxrZ8Ui3x9Lrayq6EcznfG24bdk0Diw43wKI3qLJdg8dm SrKJP7BlF/OLc33LModemPD+TzufwUSYEBH/6fV3j3qYMeKnC84j64iEoqo4PZA5 VjWa2QCkcoId3Cwl4d8lvaEF4uVstD0q -----END CERTIFICATE-----Generated at Sun May 19 00:30:21 2024 by rpki-client on console-ams.rpki-client.org