$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft File: P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json) Hash identifier: piYwgq0QHa3ffu6K5WzBY+8A8PZhVUzLZO0BFHupkDE= Subject key identifier: F6:31:2C:DD:AF:5D:83:2F:AF:6F:C5:45:BE:31:06:35:A1:C5:0C:54 Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft Manifest number: 010A Signing time: Sun 19 May 2024 05:34:33 +0000 Manifest this update: Sun 19 May 2024 05:34:32 +0000 Manifest next update: Sun 26 May 2024 05:34:32 +0000 Files and hashes: 1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: zSQ33Snoo+9SmWE9zF3JwJERX5S428Sa4bC9f5QEeWo=) 2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: JDG3Zcj1IE/daN539ed3bzDNeOHzDgFEcXPQHoixHxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Validity Not Before: May 19 05:34:32 2024 GMT Not After : May 26 05:34:32 2024 GMT Subject: CN=66498f69-beb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:77:3e:a2:67:59:ad:6f:2f:4e:51:f4:bc:40: 7e:7e:f1:a2:8d:7e:e5:ef:d7:d9:47:48:39:68:4a: 3c:08:79:70:96:a9:02:85:c8:18:53:22:00:fd:d0: bf:0b:21:8b:d8:f8:f4:0f:1f:9d:62:a2:7d:e1:d2: 84:46:28:fc:36:f8:9a:87:41:2d:f8:90:ce:df:b1: 6d:0c:d9:44:45:78:2b:da:10:5c:a8:94:f2:a4:fc: 2d:d5:c3:3a:8f:3d:17:a4:f6:78:43:88:30:15:e1: 08:98:35:9c:5c:4b:d1:17:a8:a7:b3:fa:44:e2:66: 66:c3:f0:f2:09:2d:73:b1:85:82:55:b2:a2:37:7c: ee:0a:6f:f0:96:4d:96:4e:36:eb:58:c5:b4:26:04: ee:26:49:26:f4:20:92:e1:24:d3:a2:e2:7d:e7:32: 3c:4f:4d:a4:40:66:0c:19:84:7b:9c:25:78:2f:a2: 23:ee:45:78:c8:4c:dd:cc:83:9d:57:c3:0b:7e:99: 81:2c:59:d3:e2:9f:73:e3:9b:f7:98:80:ad:be:78: d0:ae:ae:e9:7e:4c:93:46:c6:bf:16:a1:49:43:f7: f7:e1:af:d9:ed:6a:c8:c4:13:d8:66:39:d6:e0:84: 63:60:0e:9d:2f:46:c3:95:ad:78:2f:33:35:16:60: 37:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:31:2C:DD:AF:5D:83:2F:AF:6F:C5:45:BE:31:06:35:A1:C5:0C:54 X509v3 Authority Key Identifier: keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:fe:7b:14:58:a5:a8:49:12:55:c7:57:ac:7e:d7:2b:18:86: fe:82:e9:59:7f:5e:e1:d6:c4:dd:af:82:69:45:b3:49:33:c4: 18:30:e2:4f:2c:6c:ec:51:9f:2e:ba:6d:20:54:fa:72:40:8f: cb:59:a3:11:08:4a:cf:bc:05:13:7f:95:77:f1:55:79:ae:45: 72:9e:63:d0:31:ea:f0:92:70:b7:5c:dd:5e:e6:e2:26:ac:f5: 06:a1:3e:03:07:11:a9:12:d5:1e:7f:dd:18:1f:1f:f7:25:31: 9c:3b:61:58:f2:b2:9d:7b:0e:bc:ff:a2:fe:b6:c9:e4:1d:76: 75:bc:1f:0f:4b:85:75:93:d2:94:1e:63:88:c2:7b:d8:4e:71: b7:d3:3f:ea:e1:4b:da:0d:ee:47:d4:4d:8c:43:c9:1e:8c:8f: f3:c3:e6:9d:88:33:0c:48:5b:de:3b:b8:31:c9:d4:58:db:f9: 1c:9d:71:3d:5d:84:f4:e1:d3:63:3c:a3:e0:cc:02:a4:41:f8: 71:81:1e:93:b4:bf:a8:3b:28:52:ce:1c:06:31:41:7e:3a:03: f0:6f:47:e4:e6:f8:6c:16:6a:08:87:97:72:42:09:01:6e:fe: ab:62:e2:41:2f:aa:24:01:e4:12:8d:bf:65:74:3e:99:0e:05: 01:c0:90:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZERUMxMTAvBgNVBAUTKDNGNzNDQzNBODY3OUMwREIwNDQ5MUE0N0JFNzY5RDc1 QkE2REMxOTQwHhcNMjQwNTE5MDUzNDMyWhcNMjQwNTI2MDUzNDMyWjAYMRYwFAYD VQQDEw02NjQ5OGY2OS1iZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznc+omdZrW8vTlH0vEB+fvGijX7l79fZR0g5aEo8CHlwlqkChcgYUyIA/dC/ CyGL2Pj0Dx+dYqJ94dKERij8Nviah0Et+JDO37FtDNlERXgr2hBcqJTypPwt1cM6 jz0XpPZ4Q4gwFeEImDWcXEvRF6ins/pE4mZmw/DyCS1zsYWCVbKiN3zuCm/wlk2W TjbrWMW0JgTuJkkm9CCS4STTouJ95zI8T02kQGYMGYR7nCV4L6Ij7kV4yEzdzIOd V8MLfpmBLFnT4p9z45v3mICtvnjQrq7pfkyTRsa/FqFJQ/f34a/Z7WrIxBPYZjnW 4IRjYA6dL0bDla14LzM1FmA3ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYxLN2v XYMvr2/FRb4xBjWhxQxUMB8GA1UdIwQYMBaAFD9zzDqGecDbBEkaR752nXW6bcGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRFQy9ENDIxNzk0QThC RUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdOc0VTUnBIdm5hZGRicHR3 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzUE1Pb1o1d05zRVNScEh2bmFkZGJwdHdaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRFQy9ENDIxNzk0QThCRUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdO c0VTUnBIdm5hZGRicHR3WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE/nsUWKWoSRJVx1esftcrGIb+gulZf17h1sTdr4JpRbNJM8QYMOJP LGzsUZ8uum0gVPpyQI/LWaMRCErPvAUTf5V38VV5rkVynmPQMerwknC3XN1e5uIm rPUGoT4DBxGpEtUef90YHx/3JTGcO2FY8rKdew68/6L+tsnkHXZ1vB8PS4V1k9KU HmOIwnvYTnG30z/q4UvaDe5H1E2MQ8kejI/zw+adiDMMSFveO7gxydRY2/kcnXE9 XYT04dNjPKPgzAKkQfhxgR6TtL+oOyhSzhwGMUF+OgPwb0fk5vhsFmoIh5dyQgkB bv6rYuJBL6okAeQSjb9ldD6ZDgUBwJCv -----END CERTIFICATE-----Generated at Sun May 19 06:14:36 2024 by rpki-client on console-ams.rpki-client.org