$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft File: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json) Hash identifier: VfPYLT1XWwQlQU/N62eEdpG8nxWyaYrGSbm4c2yn4b0= Subject key identifier: 0E:C7:2A:C2:A0:3F:3C:D9:88:1E:10:00:B4:EF:1C:29:00:5C:6D:1D Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Certificate serial: 097A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft Manifest number: 0974 Signing time: Sat 18 May 2024 20:59:28 +0000 Manifest this update: Sat 18 May 2024 20:59:28 +0000 Manifest next update: Sat 25 May 2024 20:59:28 +0000 Files and hashes: 1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: jUer6BoyivRVExwyoTSuvTgGjGouOob3a1CZAsGvaoY=) 2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: OJuUeP3/MhnZuj46uoZjHhNgvQX9+E3YIgo5c+femP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2426 (0x97a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Validity Not Before: May 18 20:59:28 2024 GMT Not After : May 25 20:59:28 2024 GMT Subject: CN=664916b0-f17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7b:0a:f5:f4:2b:69:a5:3d:99:4f:20:67:20: dc:29:9d:90:46:62:70:ad:88:bc:f1:86:9c:57:d8: f2:63:46:f8:d7:02:4b:a7:31:44:74:5f:92:de:85: e0:14:2d:87:ba:0e:86:a5:73:a3:86:06:29:18:45: 9c:55:a6:4f:9b:81:a8:f4:c4:e2:8c:e9:6c:19:05: 6f:6e:eb:df:ce:67:d5:a7:38:60:14:57:f8:53:6a: d6:a0:1f:66:a4:3c:f6:be:3b:12:22:99:11:21:24: 83:f9:7b:af:97:49:17:cc:d6:5f:bf:2e:72:76:a9: ef:15:02:4e:62:08:1c:42:83:56:27:ce:1a:2a:93: ec:f1:5c:3b:90:d3:44:04:79:26:b8:6a:7b:73:04: 4f:2e:26:a6:72:82:14:79:6c:7d:11:a1:dd:7c:40: 64:f4:7d:c0:05:ea:e7:b5:94:98:d3:09:21:d7:e1: de:20:81:56:51:b5:70:ac:a3:ac:35:0f:fd:03:8e: 4f:02:8a:c5:70:3b:af:4a:22:a1:c0:25:bb:52:f4: a5:f5:b1:15:19:5a:50:92:7a:ea:bb:37:35:fc:b4: be:94:36:0c:05:40:76:36:b9:3b:dc:50:2a:f9:ed: 76:e4:71:46:be:a2:e4:e9:6b:24:54:a3:d5:01:d4: 99:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C7:2A:C2:A0:3F:3C:D9:88:1E:10:00:B4:EF:1C:29:00:5C:6D:1D X509v3 Authority Key Identifier: keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:f6:cc:9a:32:26:f1:1b:27:99:4f:46:26:6b:c5:79:ba:16: 5c:fd:f2:b7:25:24:d4:fb:15:a4:21:3f:67:e5:51:1d:05:79: 1d:8e:c9:f9:f0:ef:0e:94:e3:0c:a7:1b:6a:82:94:11:05:43: f7:95:64:51:a6:99:5c:49:da:9c:24:bc:f8:b2:b6:77:2f:ae: 75:ac:bf:76:e7:fa:58:9c:14:f3:4f:2e:8b:16:a5:24:8d:63: 56:4f:9f:be:76:7b:c6:b6:ab:3c:75:a5:a0:e3:cc:9c:68:3e: d3:e1:e8:06:1a:1a:07:df:87:1d:dd:72:0e:e6:29:82:d0:23: 8e:3a:79:e8:87:04:18:72:c7:22:65:8d:44:57:54:e5:e7:10: ec:56:83:c0:dd:7d:17:ef:48:1b:1b:de:05:80:44:37:03:31: c2:fe:84:69:42:02:af:f1:9d:fc:06:95:c5:bf:74:12:34:63: d8:e9:c2:55:d6:29:1a:9c:f0:cf:78:0a:84:d9:2f:cf:68:7a: 91:94:1b:86:ee:77:f8:11:b7:40:6a:ee:f0:3c:99:49:45:ec: dc:a0:95:52:27:84:e6:6e:af:a9:16:65:43:59:fd:73:63:5a: 06:c1:9f:c5:14:9c:e4:8c:87:24:6f:20:d0:bd:0e:c4:28:09: b3:19:93:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2QkUxMTAvBgNVBAUTKEREMTE4QkJCMzQ5RjJDOUI0MEREOUJCNzFBNUI2MUM2 NEJEQjNFMTEwHhcNMjQwNTE4MjA1OTI4WhcNMjQwNTI1MjA1OTI4WjAYMRYwFAYD VQQDEw02NjQ5MTZiMC1mMTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6HsK9fQraaU9mU8gZyDcKZ2QRmJwrYi88YacV9jyY0b41wJLpzFEdF+S3oXg FC2Hug6GpXOjhgYpGEWcVaZPm4Go9MTijOlsGQVvbuvfzmfVpzhgFFf4U2rWoB9m pDz2vjsSIpkRISSD+Xuvl0kXzNZfvy5ydqnvFQJOYggcQoNWJ84aKpPs8Vw7kNNE BHkmuGp7cwRPLiamcoIUeWx9EaHdfEBk9H3ABerntZSY0wkh1+HeIIFWUbVwrKOs NQ/9A45PAorFcDuvSiKhwCW7UvSl9bEVGVpQknrquzc1/LS+lDYMBUB2Nrk73FAq +e125HFGvqLk6WskVKPVAdSZRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7HKsKg PzzZiB4QALTvHCkAXG0dMB8GA1UdIwQYMBaAFN0Ri7s0nyybQN2btxpbYcZL2z4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZCRS80NEMyOUUwRTZC NzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxKdEEzWnUzR2x0aHhrdmJQ aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNSR0x1elNmTEp0QTNadTNHbHRoeGt2YlBoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZCRS80NEMyOUUwRTZCNzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxK dEEzWnUzR2x0aHhrdmJQaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI9syaMibxGyeZT0Yma8V5uhZc/fK3JSTU+xWkIT9n5VEdBXkdjsn5 8O8OlOMMpxtqgpQRBUP3lWRRpplcSdqcJLz4srZ3L651rL925/pYnBTzTy6LFqUk jWNWT5++dnvGtqs8daWg48ycaD7T4egGGhoH34cd3XIO5imC0COOOnnohwQYcsci ZY1EV1Tl5xDsVoPA3X0X70gbG94FgEQ3AzHC/oRpQgKv8Z38BpXFv3QSNGPY6cJV 1ikanPDPeAqE2S/PaHqRlBuG7nf4EbdAau7wPJlJRezcoJVSJ4Tmbq+pFmVDWf1z Y1oGwZ/FFJzkjIckbyDQvQ7EKAmzGZOf -----END CERTIFICATE-----Generated at Sat May 18 21:24:23 2024 by rpki-client on console-fra.rpki-client.org