$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json) Hash identifier: BfGIMy2Ds2JlmpZczVedWrLULPihPlIo3NGInOzKEUM= Subject key identifier: E5:50:61:BD:1C:2D:A1:57:D2:A2:E6:E3:30:06:62:39:FD:4C:F4:F1 Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft Manifest number: 3B Signing time: Sun 19 May 2024 08:14:35 +0000 Manifest this update: Sun 19 May 2024 08:14:34 +0000 Manifest next update: Sun 26 May 2024 08:14:34 +0000 Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: Ym0dNBaHkBqvalhmKm2SfyStfR9e+1w9xxwXadmhHBw=) 2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: 8WbiXS8+ZFODz9G5sLTWbcDZvIsuRKDlPl9hBYHN3xY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Validity Not Before: May 19 08:14:34 2024 GMT Not After : May 26 08:14:34 2024 GMT Subject: CN=6649b4eb-00fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:59:54:83:41:d6:94:f3:b3:c5:a7:bf:66: 9b:b2:a2:13:f3:c5:6f:c4:e2:06:67:dc:27:9b:6b: 62:d4:75:1e:f7:2f:c6:2b:69:5a:a2:9d:c3:7a:19: 22:9c:85:2a:99:86:13:91:67:b9:d4:62:1e:98:77: 1d:e4:77:cb:ea:84:dc:8b:43:f4:00:8a:e9:1e:53: 50:10:71:31:57:1f:47:3b:ed:ec:f7:1a:ce:8c:63: 81:fc:c8:95:a5:d5:4d:ba:25:57:fd:ac:e0:38:8b: 39:7e:b7:e7:af:29:74:f4:3a:79:da:7b:d4:18:b6: 70:86:5d:ea:6c:80:f7:b3:11:92:6e:d0:8e:7b:1f: d3:ad:97:b6:1e:78:57:f9:0c:54:08:19:91:87:da: a7:2f:90:12:89:fc:6f:bd:dc:47:6a:db:5e:d7:e6: 04:50:42:4d:8c:59:27:97:a1:48:28:3f:d9:ae:48: 5b:2f:86:92:10:69:4e:8a:85:4c:47:b5:0a:42:98: d6:e2:fb:0e:04:7a:2c:87:89:45:6b:4d:f2:27:ef: 1c:72:49:ab:be:1b:0f:f1:0f:17:c1:b8:1e:10:b7: b8:be:72:40:96:8c:22:c6:43:6d:cd:2b:e8:f0:5c: 92:93:ab:a2:97:61:9a:77:2e:a3:d2:a0:4b:9b:ef: 6a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:50:61:BD:1C:2D:A1:57:D2:A2:E6:E3:30:06:62:39:FD:4C:F4:F1 X509v3 Authority Key Identifier: keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:51:35:0f:5b:1a:0e:0a:62:63:d6:06:92:e9:14:71:5b:f8: e2:94:25:89:67:f7:e4:95:b2:3f:fa:30:58:11:14:ed:95:6d: f0:ea:26:87:68:d0:cb:57:9a:e3:a0:c1:d1:20:d5:29:86:76: 1c:d3:ae:b5:b9:be:f6:cb:81:98:e5:d9:e9:20:65:95:98:ea: e7:d8:3d:ac:dc:43:79:83:d4:a4:5c:34:19:e6:45:08:f8:f4: 1f:af:7b:82:7e:6c:0a:e8:35:26:ab:6e:bc:8d:c7:ab:c3:51: 58:0f:f5:a2:8d:77:bf:1e:21:b9:b2:b3:5f:cf:9a:1e:6a:5f: d2:a9:55:4d:c8:e0:8b:ec:fd:0b:15:06:0e:12:df:1f:d5:df: 05:52:37:20:a7:10:82:6f:f6:13:b9:ef:e3:54:c1:e0:85:91: 80:ee:58:f6:3d:be:9b:db:5d:ab:35:f5:ef:2a:4e:0e:95:0e: d2:ab:39:80:98:f8:37:03:ac:26:7a:92:44:82:ae:aa:d9:9a: 50:71:ef:8d:3b:35:3a:ee:dc:68:98:45:89:f4:07:22:54:89: e2:06:a6:50:d6:9b:db:cf:44:31:6b:82:08:0f:34:3f:ca:11: 41:56:ea:e4:64:c6:63:f0:e4:52:a4:8d:33:34:6f:c0:f6:89: af:47:6b:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUYzMTExMC8GA1UEBRMoRENEQTA2OUUzRUZGODk1NkMwMTU3MjgxNkE3MDIzNTE5 NUYwNjcyNTAeFw0yNDA1MTkwODE0MzRaFw0yNDA1MjYwODE0MzRaMBgxFjAUBgNV BAMTDTY2NDliNGViLTAwZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB6FlUg0HWlPOzxae/ZpuyohPzxW/E4gZn3Ceba2LUdR73L8YraVqincN6GSKc hSqZhhORZ7nUYh6Ydx3kd8vqhNyLQ/QAiukeU1AQcTFXH0c77ez3Gs6MY4H8yJWl 1U26JVf9rOA4izl+t+evKXT0Onnae9QYtnCGXepsgPezEZJu0I57H9Otl7YeeFf5 DFQIGZGH2qcvkBKJ/G+93Edq217X5gRQQk2MWSeXoUgoP9muSFsvhpIQaU6KhUxH tQpCmNbi+w4EeiyHiUVrTfIn7xxySau+Gw/xDxfBuB4Qt7i+ckCWjCLGQ23NK+jw XJKTq6KXYZp3LqPSoEub72qXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5VBhvRwt oVfSoubjMAZiOf1M9PEwHwYDVR0jBBgwFoAU3NoGnj7/iVbAFXKBanAjUZXwZyUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5RjMxLzA5MkQyNTE2QkU2 MjExRUU4QzM3Q0IzQkM0RjlBRTAyLzNOb0duajdfaVZiQUZYS0JhbkFqVVpYd1p5 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM05vR25qN19pVmJBRlhLQmFuQWpVWlh3WnlVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 RjMxLzA5MkQyNTE2QkU2MjExRUU4QzM3Q0IzQkM0RjlBRTAyLzNOb0duajdfaVZi QUZYS0JhbkFqVVpYd1p5VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGpRNQ9bGg4KYmPWBpLpFHFb+OKUJYln9+SVsj/6MFgRFO2VbfDqJodo 0MtXmuOgwdEg1SmGdhzTrrW5vvbLgZjl2ekgZZWY6ufYPazcQ3mD1KRcNBnmRQj4 9B+ve4J+bAroNSarbryNx6vDUVgP9aKNd78eIbmys1/Pmh5qX9KpVU3I4Ivs/QsV Bg4S3x/V3wVSNyCnEIJv9hO57+NUweCFkYDuWPY9vpvbXas19e8qTg6VDtKrOYCY +DcDrCZ6kkSCrqrZmlBx7407NTru3GiYRYn0ByJUieIGplDWm9vPRDFrgggPND/K EUFW6uRkxmPw5FKkjTM0b8D2ia9Ha+4= -----END CERTIFICATE-----Generated at Sun May 19 09:32:19 2024 by rpki-client on console-ams.rpki-client.org