$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft File: 3af4p0oKdM_262MEKLbJ1w1XvXY.mft (raw, json) Hash identifier: 8JsqLOrwsQgIuWTlGUUn43ykI6/OVznYbAV0Oq88Bz8= Subject key identifier: D3:24:B4:B6:D4:04:9B:83:D1:25:8B:F8:9C:4B:EB:F7:11:38:F8:60 Authority key identifier: DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 Certificate issuer: /CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Certificate serial: 0CDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft Manifest number: 0CA9 Signing time: Sat 18 May 2024 18:53:12 +0000 Manifest this update: Sat 18 May 2024 18:53:11 +0000 Manifest next update: Sat 25 May 2024 18:53:11 +0000 Files and hashes: 1: 3af4p0oKdM_262MEKLbJ1w1XvXY.crl (hash: KveQ59vPZaGxkDHEpJq0iFADNp7gkHvBE80V7+e3m+g=) 2: CE83F0E6F0E411EAA47C3968C4F9AE02.roa (hash: 9t9GDp7ZqladtrdBUXmrc/NZZU8T2RDKfVbmG47fQD4=) 3: E69AF38AB11C11EAACC28D2EC4F9AE02.roa (hash: teS196GOIZT4ALLG0mGVFJBt9VHCuAp9QaaTbuShiyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Validity Not Before: May 18 18:53:11 2024 GMT Not After : May 25 18:53:11 2024 GMT Subject: CN=6648f917-28bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4c:e1:7e:3d:8a:50:e5:18:47:9f:ab:c4:76: 6f:1d:47:f1:93:0a:6d:6a:cd:8d:8b:5c:1a:d6:56: b7:ff:77:8f:2f:28:5a:2f:be:72:13:4b:8d:66:97: 19:0a:3c:95:16:23:cd:13:21:d6:42:73:68:1e:6b: d9:45:f0:b5:1e:dd:a6:b5:d2:4b:ac:2d:c7:67:29: cf:7b:17:41:89:cf:c9:e9:ae:c8:0e:97:56:d5:6a: 7c:64:3b:80:fb:c7:9f:29:d2:82:48:26:ee:66:4a: 39:46:fa:b4:8b:99:d8:a0:bb:0f:d8:c0:80:16:e8: 45:8b:99:64:e7:ab:b1:f7:75:b4:25:85:2d:d8:16: ce:c2:fb:f5:f4:d3:ba:dd:97:a0:35:74:0d:37:64: 1b:be:a0:ba:c5:44:62:f4:ae:88:14:a4:33:f5:ec: 10:bf:2b:d6:1d:25:98:48:8d:6c:09:f5:46:a0:1d: 33:5e:58:7e:6a:d3:82:fb:80:66:58:3d:d0:94:f4: 8b:fd:6a:af:8d:18:7d:80:ac:0a:ee:c1:42:c5:f0: 4a:78:28:b6:54:70:96:1a:a2:0d:f5:6e:97:34:59: 55:6f:4d:dd:37:dd:a0:de:1a:53:09:7a:98:29:a5: 84:5e:7d:07:29:94:1d:4b:a3:d7:6b:4f:00:bb:f5: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:24:B4:B6:D4:04:9B:83:D1:25:8B:F8:9C:4B:EB:F7:11:38:F8:60 X509v3 Authority Key Identifier: keyid:DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:9d:f4:9a:4b:a0:02:87:79:e1:de:73:d2:71:0c:a4:0c:7e: 68:25:1b:f3:aa:4e:72:ad:8b:c7:72:04:0d:e6:b0:97:92:ed: 09:92:d5:c3:ac:c4:d2:1c:da:82:69:6d:3d:9a:db:71:96:a9: 42:46:02:bc:7e:e2:b9:90:eb:e7:b4:d8:e9:f8:18:19:26:67: 42:30:a6:3f:92:8d:30:e1:dc:af:27:a4:fc:03:3d:1d:f0:55: 5d:a3:49:54:48:0e:9a:43:52:b6:f1:89:f1:88:d0:f9:31:fe: 02:2b:57:4a:f5:14:8c:78:46:64:92:47:dc:e0:2c:54:0d:3c: 1d:ad:82:6a:27:dd:bd:27:c7:99:31:cf:77:c9:e4:bd:7a:49: 18:1a:63:8d:2b:16:66:82:be:3b:9f:33:0a:f3:f3:91:2d:27: 53:6b:d3:ef:30:4f:74:bc:ce:c4:8e:05:59:5b:0c:7f:95:08: 03:10:cc:7f:5c:3a:35:90:42:44:9f:77:78:92:92:65:eb:bd: f3:2d:97:ec:08:50:91:02:d9:18:51:b6:73:81:e9:ab:cf:f2: 7d:bd:7d:1b:a2:40:08:e7:c3:89:8c:82:56:f9:4c:b9:a7:51: c0:f5:5c:cd:7b:c4:f0:49:ab:4b:6d:66:40:0c:9d:d0:b6:98: 67:89:b3:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEREQTdGOEE3NEEwQTc0Q0ZGNkVCNjMwNDI4QjZDOUQ3 MEQ1N0JENzYwHhcNMjQwNTE4MTg1MzExWhcNMjQwNTI1MTg1MzExWjAYMRYwFAYD VQQDEw02NjQ4ZjkxNy0yOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEzhfj2KUOUYR5+rxHZvHUfxkwptas2Ni1wa1la3/3ePLyhaL75yE0uNZpcZ CjyVFiPNEyHWQnNoHmvZRfC1Ht2mtdJLrC3HZynPexdBic/J6a7IDpdW1Wp8ZDuA +8efKdKCSCbuZko5Rvq0i5nYoLsP2MCAFuhFi5lk56ux93W0JYUt2BbOwvv19NO6 3ZegNXQNN2QbvqC6xURi9K6IFKQz9ewQvyvWHSWYSI1sCfVGoB0zXlh+atOC+4Bm WD3QlPSL/WqvjRh9gKwK7sFCxfBKeCi2VHCWGqIN9W6XNFlVb03dN92g3hpTCXqY KaWEXn0HKZQdS6PXa08Au/VZewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMktLbU BJuD0SWL+JxL6/cROPhgMB8GA1UdIwQYMBaAFN2n+KdKCnTP9utjBCi2ydcNV712 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yRDFBNTk1QUQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RNXzI2Mk1FS0xiSjF3MVh2 WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhZjRwMG9LZE1fMjYyTUVLTGJKMXcxWHZYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JDNC8yRDFBNTk1QUQ1MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RN XzI2Mk1FS0xiSjF3MVh2WFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXnfSaS6ACh3nh3nPScQykDH5oJRvzqk5yrYvHcgQN5rCXku0JktXD rMTSHNqCaW09mttxlqlCRgK8fuK5kOvntNjp+BgZJmdCMKY/ko0w4dyvJ6T8Az0d 8FVdo0lUSA6aQ1K28YnxiND5Mf4CK1dK9RSMeEZkkkfc4CxUDTwdrYJqJ929J8eZ Mc93yeS9ekkYGmONKxZmgr47nzMK8/ORLSdTa9PvME90vM7EjgVZWwx/lQgDEMx/ XDo1kEJEn3d4kpJl673zLZfsCFCRAtkYUbZzgemrz/J9vX0bokAI58OJjIJW+Uy5 p1HA9VzNe8TwSatLbWZADJ3QtphnibOh -----END CERTIFICATE-----Generated at Sat May 18 20:16:07 2024 by rpki-client on console-ams.rpki-client.org