$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: 7CCtnGP95GTn1SLLJbDdSnfhyNIyKfEtr+A6RjcW8xo= Subject key identifier: 0F:0F:0F:24:74:12:9C:08:B2:E4:95:74:7F:C8:A0:61:98:F6:4E:9D Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 0703 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 06F3 Signing time: Tue 28 May 2024 23:07:54 +0000 Manifest this update: Tue 28 May 2024 23:07:54 +0000 Manifest next update: Tue 04 Jun 2024 23:07:54 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: cxL0h0oULVO9jb+A+29UwaG354M5p6+eqShcOhKVJxQ=) 2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: hGyDaWsB6vStXrPUx8DBJUGAM8TcEy/X6DWGVh0ngjs=) 3: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: Oq+xa6PKUitDNpjJ0KBa6s7EUZ4J9jfgk0JZREcVIg8=) 4: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: Pz6CvoQxMzKLqI1q75InLhAVidS6RSQm6q6AgXZUE8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1795 (0x703) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: May 28 23:07:54 2024 GMT Not After : Jun 4 23:07:54 2024 GMT Subject: CN=665663ca-7a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:86:75:19:2b:f4:c3:c4:87:cc:bd:58:7a:48: 50:e8:80:21:22:9a:98:78:b6:76:9b:8c:6b:ac:00: 31:9f:3d:91:ea:13:c6:71:fb:94:94:bf:43:30:02: f5:d6:c9:88:2f:16:e1:d1:ee:aa:e6:5d:8d:88:39: 83:d1:e3:4a:c7:68:d8:93:e8:72:56:c1:be:d2:0c: d0:4d:03:01:ad:29:17:f9:46:83:6a:af:57:99:76: 3f:88:2b:44:c6:d3:55:0c:50:6f:df:65:4c:18:a9: da:4b:28:5f:ce:ea:c3:a5:ca:9b:4d:6b:bf:cb:de: 62:51:53:f9:e4:3f:b1:80:83:99:98:03:de:19:dd: 5c:ed:7e:dd:7b:40:d1:a8:96:37:9e:12:7c:bf:e8: 30:76:ff:e5:dc:87:e6:90:2e:98:dd:b2:e0:6e:4f: 90:d8:63:11:aa:05:a6:66:81:91:b9:48:42:21:29: a3:5f:20:94:d3:b9:87:c7:37:80:ce:be:c6:bf:94: e2:ef:66:14:b0:2f:2e:d8:af:d8:72:a2:bf:b7:a2: 8f:34:29:53:05:76:da:80:f8:4f:d9:ce:bc:ac:94: c3:68:6f:e5:08:7e:e0:84:51:45:f6:d9:f5:45:0c: e7:d2:10:df:ba:65:f8:72:b4:4c:28:ef:e9:d9:97: f7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0F:0F:24:74:12:9C:08:B2:E4:95:74:7F:C8:A0:61:98:F6:4E:9D X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:bb:9b:0b:b6:8b:ec:c4:57:81:81:06:24:95:5c:92:aa:13: d5:cb:63:a1:0c:08:18:4e:4d:31:e5:6c:91:e6:c5:87:60:cd: 09:16:16:12:d9:4b:42:60:ae:50:38:1a:e8:ea:42:c2:dd:80: 0c:45:7f:37:3e:e5:bc:5e:2f:5c:11:cc:f6:94:a5:13:0f:8a: c9:73:2c:ae:ae:d4:d8:b3:f3:34:86:a9:ed:b3:84:01:1a:d2: eb:85:b6:16:0b:b6:b2:a0:42:68:6d:b7:57:fc:1c:6d:0f:dd: 82:dd:c1:7d:c2:c1:22:4d:9c:b5:d4:2c:e5:21:52:1d:c0:5f: b8:0e:db:5d:0b:44:45:9e:c2:e1:b1:19:83:3e:30:26:fd:2d: 8d:3b:d6:91:15:40:35:55:16:a8:8a:ce:b5:18:c6:00:d5:0f: c7:fc:69:5b:ab:7e:62:ea:2d:dd:c9:80:8b:9c:a5:bf:5c:1c: 41:09:31:37:b4:57:62:76:d8:47:40:5e:a4:50:84:5f:7f:65: 00:e0:af:d7:7a:42:18:69:f2:58:23:ef:2a:e4:75:85:33:14: 39:27:b9:ca:53:32:ae:3a:3a:48:80:ff:b0:f0:e0:97:ee:f9: 8f:39:a7:dc:03:3c:eb:cc:33:92:53:9e:f7:62:a3:7a:43:20: e3:c2:d2:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjQwNTI4MjMwNzU0WhcNMjQwNjA0MjMwNzU0WjAYMRYwFAYD VQQDEw02NjU2NjNjYS03YTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6oZ1GSv0w8SHzL1YekhQ6IAhIpqYeLZ2m4xrrAAxnz2R6hPGcfuUlL9DMAL1 1smILxbh0e6q5l2NiDmD0eNKx2jYk+hyVsG+0gzQTQMBrSkX+UaDaq9XmXY/iCtE xtNVDFBv32VMGKnaSyhfzurDpcqbTWu/y95iUVP55D+xgIOZmAPeGd1c7X7de0DR qJY3nhJ8v+gwdv/l3IfmkC6Y3bLgbk+Q2GMRqgWmZoGRuUhCISmjXyCU07mHxzeA zr7Gv5Ti72YUsC8u2K/YcqK/t6KPNClTBXbagPhP2c68rJTDaG/lCH7ghFFF9tn1 RQzn0hDfumX4crRMKO/p2Zf30QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8PDyR0 EpwIsuSVdH/IoGGY9k6dMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXu5sLtovsxFeBgQYklVySqhPVy2OhDAgYTk0x5WyR5sWHYM0JFhYS 2UtCYK5QOBro6kLC3YAMRX83PuW8Xi9cEcz2lKUTD4rJcyyurtTYs/M0hqnts4QB GtLrhbYWC7ayoEJobbdX/BxtD92C3cF9wsEiTZy11CzlIVIdwF+4DttdC0RFnsLh sRmDPjAm/S2NO9aRFUA1VRaois61GMYA1Q/H/Glbq35i6i3dyYCLnKW/XBxBCTE3 tFdidthHQF6kUIRff2UA4K/XekIYafJYI+8q5HWFMxQ5J7nKUzKuOjpIgP+w8OCX 7vmPOafcAzzrzDOSU573YqN6QyDjwtLX -----END CERTIFICATE-----Generated at Wed May 29 02:29:55 2024 by rpki-client on console-ams.rpki-client.org