$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft File: 3VM9EaneKrkYCFCDvoLVFDTfRUA.mft (raw, json) Hash identifier: RpUw360VI8LHl0MKnrPbICqAjdFfI0XLv9BIoaLSlS8= Subject key identifier: EB:93:E4:54:85:37:CD:6B:FF:E0:69:74:06:0E:1E:B6:47:46:9E:14 Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40 Certificate issuer: /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540 Certificate serial: 150A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft Manifest number: 1503 Signing time: Fri 31 May 2024 17:33:28 +0000 Manifest this update: Fri 31 May 2024 17:33:28 +0000 Manifest next update: Fri 07 Jun 2024 17:33:28 +0000 Files and hashes: 1: 3VM9EaneKrkYCFCDvoLVFDTfRUA.crl (hash: pVWwsvpra+JwUw7lA2iwVbq34k1J1mPgAioJ4VqHKig=) 2: 116B4B06282011E8BBA2F625C4F9AE02.roa (hash: NJfgwr8reyKiWOTsgoS+1qUOFvWlAGnIvjQECs3DnIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5386 (0x150a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540 Validity Not Before: May 31 17:33:28 2024 GMT Not After : Jun 7 17:33:28 2024 GMT Subject: CN=665a09e8-a613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a5:27:cc:65:95:78:1e:76:23:1a:15:4e:42: be:b8:b5:e1:37:95:fe:e8:a6:38:44:0e:53:bc:26: f1:6c:fa:3e:bf:f2:19:54:fc:5c:44:8b:1f:c5:40: b4:cc:a2:99:4f:66:16:59:ac:07:89:bc:a0:a4:d0: e5:aa:e7:30:9c:c6:db:bb:91:91:7c:82:c6:29:af: a8:38:e4:33:cb:b6:db:4d:01:e3:72:f8:99:9e:92: b7:25:66:30:24:96:ff:5b:87:1e:60:89:91:a9:26: 3d:f9:4e:98:c8:f0:3f:c7:0c:b9:cb:14:2e:8f:8f: dc:6b:b2:a9:ce:2c:8d:fe:cf:cf:96:5a:ba:3f:3a: 81:44:a2:7d:e2:2c:5c:8f:a2:52:a3:f3:41:57:18: 6d:67:46:3d:95:f7:a3:83:98:6a:96:4b:44:28:22: 35:bb:58:fc:a1:75:3b:bf:f3:da:d1:54:36:90:83: dd:dd:50:44:08:d2:9b:c5:e7:03:4c:81:99:2d:f5: d3:53:ad:b6:61:c8:72:56:7d:d6:3b:67:39:10:6e: 9f:b8:23:8f:bb:1f:bf:a3:e6:48:f1:f6:5a:05:7f: 29:56:ae:f1:e1:a4:cf:db:ba:18:43:ed:25:d0:c2: 81:84:9f:06:49:92:cc:6c:80:15:43:4c:ce:30:b8: a3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:93:E4:54:85:37:CD:6B:FF:E0:69:74:06:0E:1E:B6:47:46:9E:14 X509v3 Authority Key Identifier: keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:30:a6:1b:a2:04:a5:c8:3e:85:69:c0:c1:e6:c9:28:a7:e0: 00:94:35:48:0e:da:fc:f9:e5:dc:eb:ca:0b:35:27:c3:bc:82: 09:16:d8:1d:e5:df:5b:9e:84:eb:af:7d:85:7d:50:a5:2c:c6: 89:1c:40:b8:db:1d:b8:b8:08:00:e2:4e:88:f8:e2:4e:3d:14: 77:4f:b2:45:21:84:1a:14:a0:1e:59:d4:aa:12:ba:3b:56:0f: b8:d1:7e:70:38:76:7b:e6:ff:d8:74:f6:ae:63:db:e7:0b:77: 8e:5a:4d:f8:a3:49:f4:f5:6d:19:85:43:63:6e:2d:c5:2e:24: e0:df:66:e7:8b:49:97:87:80:35:f9:62:fe:96:f4:6e:05:8f: 0b:1a:27:65:92:d7:db:11:65:d4:00:99:2b:fb:5d:b7:0d:6a: 27:f0:b5:a6:39:dd:35:06:ad:e0:eb:f2:ad:c9:52:27:4b:2c: 9c:10:75:90:e0:68:d3:75:1c:cf:82:62:2f:ff:c0:54:df:7b: a3:6f:8a:e6:da:8b:2b:a9:a2:b7:c0:f8:00:b8:c3:c1:f2:ad: 93:1f:b0:62:2b:e7:ae:52:ba:be:0b:38:9c:c5:b6:b5:a4:6a: b3:35:2a:c5:18:d6:9d:d4:1b:26:71:1b:a9:f8:fd:ae:01:17: 59:c9:14:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFQjYxMTAvBgNVBAUTKERENTMzRDExQTlERTJBQjkxODA4NTA4M0JFODJENTE0 MzRERjQ1NDAwHhcNMjQwNTMxMTczMzI4WhcNMjQwNjA3MTczMzI4WjAYMRYwFAYD VQQDEw02NjVhMDllOC1hNjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qUnzGWVeB52IxoVTkK+uLXhN5X+6KY4RA5TvCbxbPo+v/IZVPxcRIsfxUC0 zKKZT2YWWawHibygpNDlqucwnMbbu5GRfILGKa+oOOQzy7bbTQHjcviZnpK3JWYw JJb/W4ceYImRqSY9+U6YyPA/xwy5yxQuj4/ca7KpziyN/s/Pllq6PzqBRKJ94ixc j6JSo/NBVxhtZ0Y9lfejg5hqlktEKCI1u1j8oXU7v/Pa0VQ2kIPd3VBECNKbxecD TIGZLfXTU622YchyVn3WO2c5EG6fuCOPux+/o+ZI8fZaBX8pVq7x4aTP27oYQ+0l 0MKBhJ8GSZLMbIAVQ0zOMLij8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuT5FSF N81r/+BpdAYOHrZHRp4UMB8GA1UdIwQYMBaAFN1TPRGp3iq5GAhQg76C1RQ030VA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVCNi8xMDhGNTNBRTI4 MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUtya1lDRkNEdm9MVkZEVGZS VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNWTTlFYW5lS3JrWUNGQ0R2b0xWRkRUZlJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVCNi8xMDhGNTNBRTI4MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUty a1lDRkNEdm9MVkZEVGZSVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYMKYbogSlyD6FacDB5skop+AAlDVIDtr8+eXc68oLNSfDvIIJFtgd 5d9bnoTrr32FfVClLMaJHEC42x24uAgA4k6I+OJOPRR3T7JFIYQaFKAeWdSqEro7 Vg+40X5wOHZ75v/YdPauY9vnC3eOWk34o0n09W0ZhUNjbi3FLiTg32bni0mXh4A1 +WL+lvRuBY8LGidlktfbEWXUAJkr+123DWon8LWmOd01Bq3g6/KtyVInSyycEHWQ 4GjTdRzPgmIv/8BU33ujb4rm2osrqaK3wPgAuMPB8q2TH7BiK+euUrq+Czicxba1 pGqzNSrFGNad1BsmcRup+P2uARdZyRS/ -----END CERTIFICATE-----Generated at Fri May 31 20:34:15 2024 by rpki-client on console-ams.rpki-client.org