$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1AE/AD29E698DF2011EEAA104D15C4F9AE02/3R4ZrhJDI6QZfFocR7mPhO2yQlo.mft File: 3R4ZrhJDI6QZfFocR7mPhO2yQlo.mft (raw, json) Hash identifier: JSIr4PAdW6GueHeU9rBGhOj7n35h0jCtCLtmdUDDFko= Subject key identifier: EA:8B:3E:AF:EB:45:CF:6B:E1:17:5E:88:E8:10:DF:F1:84:EF:A7:37 Authority key identifier: DD:1E:19:AE:12:43:23:A4:19:7C:5A:1C:47:B9:8F:84:ED:B2:42:5A Certificate issuer: /CN=A91DF1AE/serialNumber=DD1E19AE124323A4197C5A1C47B98F84EDB2425A Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3R4ZrhJDI6QZfFocR7mPhO2yQlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1AE/AD29E698DF2011EEAA104D15C4F9AE02/3R4ZrhJDI6QZfFocR7mPhO2yQlo.mft Manifest number: 25 Signing time: Sun 19 May 2024 08:31:33 +0000 Manifest this update: Sun 19 May 2024 08:31:32 +0000 Manifest next update: Sun 26 May 2024 08:31:32 +0000 Files and hashes: 1: 3R4ZrhJDI6QZfFocR7mPhO2yQlo.crl (hash: bfeE8ugpSwbPUUAphTJ3HI+HEviQz8M2z9F+l83sn2k=) 2: 03E6331ADF2111EE808F5016C4F9AE02.roa (hash: /LEauKgNszQhHaV6kp+dm++8aB4s4kAPA+0yYh2du+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF1AE/AD29E698DF2011EEAA104D15C4F9AE02/3R4ZrhJDI6QZfFocR7mPhO2yQlo.crl rsync://rpki.apnic.net/member_repository/A91DF1AE/AD29E698DF2011EEAA104D15C4F9AE02/3R4ZrhJDI6QZfFocR7mPhO2yQlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3R4ZrhJDI6QZfFocR7mPhO2yQlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF1AE/serialNumber=DD1E19AE124323A4197C5A1C47B98F84EDB2425A Validity Not Before: May 19 08:31:32 2024 GMT Not After : May 26 08:31:32 2024 GMT Subject: CN=6649b8e4-95e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:69:50:8a:dc:30:7c:cb:b7:01:69:c4:e6: 93:3d:d5:e7:71:73:6b:fc:6a:c9:df:f7:93:95:3e: 1b:33:78:42:6a:17:c5:44:39:a7:0d:93:c3:f2:9a: 8d:f8:5d:f7:c1:06:e6:ee:60:1d:c3:76:c2:bd:f1: 4b:58:ea:af:9c:fe:e4:5c:e1:ee:e6:f4:9f:94:09: 64:61:f7:ff:65:e6:aa:20:d5:c8:ec:df:a8:b5:d1: 97:ce:22:cb:08:bf:99:e1:7f:73:56:f2:4a:c3:7c: 9d:3a:97:0b:2f:b1:d3:0f:5e:7a:03:77:b1:d1:92: 91:4c:4a:d7:16:29:aa:2e:f3:6d:5a:fe:d5:85:27: 23:23:5a:21:be:ed:91:1a:00:e0:fe:63:4a:83:31: 3b:79:f3:fc:34:2e:23:3a:a9:19:41:f1:ec:60:d3: 83:0a:eb:c4:b5:08:67:17:b6:22:73:ff:94:ca:1e: d4:73:78:f9:53:39:e1:43:06:63:59:38:55:61:ac: 79:1e:cc:4d:50:51:ce:99:73:10:b5:37:f0:ab:03: c2:06:c2:c1:fe:66:fa:63:a7:21:8b:0f:07:28:0d: c2:f4:84:08:03:fa:93:1e:af:8b:06:4a:2f:80:4a: 54:38:9c:fd:b4:1b:2f:93:a2:aa:ba:8c:c7:1c:dc: e6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8B:3E:AF:EB:45:CF:6B:E1:17:5E:88:E8:10:DF:F1:84:EF:A7:37 X509v3 Authority Key Identifier: keyid:DD:1E:19:AE:12:43:23:A4:19:7C:5A:1C:47:B9:8F:84:ED:B2:42:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF1AE/AD29E698DF2011EEAA104D15C4F9AE02/3R4ZrhJDI6QZfFocR7mPhO2yQlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3R4ZrhJDI6QZfFocR7mPhO2yQlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1AE/AD29E698DF2011EEAA104D15C4F9AE02/3R4ZrhJDI6QZfFocR7mPhO2yQlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:fc:5b:db:56:8c:c8:64:11:50:2f:84:e7:20:92:04:71:ef: 8f:a1:62:b3:16:a1:a9:fd:f9:4e:7b:5f:8c:54:1a:a8:af:8b: 5b:4c:94:c4:e8:f7:5e:83:d4:30:92:77:be:a8:02:ea:78:d2: 03:48:b0:2b:9b:7b:8b:3d:4d:df:78:7e:bf:d4:cd:0c:34:9f: 4d:f1:a3:38:54:64:77:db:41:77:06:4d:2b:bb:b8:70:e4:d2: e2:c0:05:0e:73:0e:a6:55:a5:36:23:ca:e5:8a:a9:bb:56:ae: 46:18:d7:1e:ee:ed:d6:77:d1:bc:89:07:25:cf:93:25:7d:7f: c2:96:8f:e5:f5:38:93:64:50:df:42:a2:43:59:f6:c1:56:25: 84:75:f0:f3:c7:09:bd:ee:63:c3:d4:41:8f:cb:af:d7:22:aa: 98:a6:11:e7:1a:4d:dd:a5:2b:e3:ea:9f:6e:02:66:3f:b3:2f: 59:52:25:b3:be:43:01:c2:06:96:e1:7a:91:7c:93:4a:ce:be: 9f:6a:0a:c2:74:10:b5:33:46:2d:7a:01:4e:37:34:ec:b8:75: 84:35:8f:32:f6:58:b1:ac:a5:8c:fa:f1:f6:58:2d:9e:ad:c8: fd:ec:4b:27:cb:a6:3b:df:36:c5:6f:5c:a1:cd:15:29:3e:01: 7c:cc:ce:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjFBRTExMC8GA1UEBRMoREQxRTE5QUUxMjQzMjNBNDE5N0M1QTFDNDdCOThGODRF REIyNDI1QTAeFw0yNDA1MTkwODMxMzJaFw0yNDA1MjYwODMxMzJaMBgxFjAUBgNV BAMTDTY2NDliOGU0LTk1ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxrGlQitwwfMu3AWnE5pM91edxc2v8asnf95OVPhszeEJqF8VEOacNk8Pymo34 XffBBubuYB3DdsK98UtY6q+c/uRc4e7m9J+UCWRh9/9l5qog1cjs36i10ZfOIssI v5nhf3NW8krDfJ06lwsvsdMPXnoDd7HRkpFMStcWKaou821a/tWFJyMjWiG+7ZEa AOD+Y0qDMTt58/w0LiM6qRlB8exg04MK68S1CGcXtiJz/5TKHtRzePlTOeFDBmNZ OFVhrHkezE1QUc6ZcxC1N/CrA8IGwsH+ZvpjpyGLDwcoDcL0hAgD+pMer4sGSi+A SlQ4nP20Gy+Toqq6jMcc3Ob/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6os+r+tF z2vhF16I6BDf8YTvpzcwHwYDVR0jBBgwFoAU3R4ZrhJDI6QZfFocR7mPhO2yQlow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMUFFL0FEMjlFNjk4REYy MDExRUVBQTEwNEQxNUM0RjlBRTAyLzNSNFpyaEpESTZRWmZGb2NSN21QaE8yeVFs by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM1I0WnJoSkRJNlFaZkZvY1I3bVBoTzJ5UWxvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MUFFL0FEMjlFNjk4REYyMDExRUVBQTEwNEQxNUM0RjlBRTAyLzNSNFpyaEpESTZR WmZGb2NSN21QaE8yeVFsby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHf8W9tWjMhkEVAvhOcgkgRx74+hYrMWoan9+U57X4xUGqivi1tMlMTo 916D1DCSd76oAup40gNIsCube4s9Td94fr/UzQw0n03xozhUZHfbQXcGTSu7uHDk 0uLABQ5zDqZVpTYjyuWKqbtWrkYY1x7u7dZ30byJByXPkyV9f8KWj+X1OJNkUN9C okNZ9sFWJYR18PPHCb3uY8PUQY/Lr9ciqpimEecaTd2lK+Pqn24CZj+zL1lSJbO+ QwHCBpbhepF8k0rOvp9qCsJ0ELUzRi16AU43NOy4dYQ1jzL2WLGspYz68fZYLZ6t yP3sSyfLpjvfNsVvXKHNFSk+AXzMzsE= -----END CERTIFICATE-----Generated at Sun May 19 09:04:14 2024 by rpki-client on console-fra.rpki-client.org