$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft File: 3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json) Hash identifier: v2I5QUzEHMG4zvEA8Qw1D+lFr1c3U4lniKgAZwWooW0= Subject key identifier: 36:BF:28:19:09:B5:E1:BF:B3:A0:5C:9A:C2:FD:04:C5:19:7E:40:78 Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 Certificate issuer: /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Certificate serial: 02FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft Manifest number: 03B4 Signing time: Sun 19 May 2024 03:14:07 +0000 Manifest this update: Sun 19 May 2024 03:14:07 +0000 Manifest next update: Sun 26 May 2024 03:14:07 +0000 Files and hashes: 1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: IsuRTIcH3+Wc+4R2A5RPEBnr2RnYk6V4iA9ZS0y2vkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 767 (0x2ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Validity Not Before: May 19 03:14:07 2024 GMT Not After : May 26 03:14:07 2024 GMT Subject: CN=66496e7f-1396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:61:a3:2f:f1:2b:54:07:79:58:b6:14:c3:3b: e0:96:2d:d6:c9:1c:c4:78:cc:ad:bf:a3:16:4e:75: 93:63:2e:42:4b:9f:64:92:33:0a:3b:99:15:e1:24: f0:9d:ff:8b:dd:4f:40:de:88:6e:49:a9:c4:c4:e8: 7b:9e:28:83:32:7c:cb:dd:50:75:6d:19:5d:cb:a3: 0f:9b:c0:ac:3e:44:37:b5:63:ae:f6:66:38:a2:31: b7:44:b4:07:eb:63:4e:f2:26:81:59:7a:69:d8:68: 77:93:3f:e6:b9:01:0b:d1:41:41:4a:cf:44:24:79: 0b:aa:fa:16:eb:1a:e0:9b:fb:9e:00:06:74:65:08: 13:a6:70:e0:05:c7:c4:b4:6f:f2:87:ad:e4:37:d2: 24:cb:52:21:92:94:49:af:03:cf:5f:c7:26:99:21: 0d:6e:9f:ab:bd:25:e1:6d:89:73:08:45:95:53:eb: 2d:7b:d3:b3:66:67:26:d8:6d:56:0f:b4:74:80:90: 64:63:95:3f:73:3b:45:f6:07:77:31:8f:c8:fd:5b: 81:81:10:3c:2d:9f:8e:b1:3d:e3:76:ff:a2:c0:e9: f1:93:cb:c8:97:b0:21:ac:51:92:bb:a0:1a:c5:04: 9a:8c:5b:b6:1e:15:75:d8:23:c0:3b:a4:dd:98:04: c7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BF:28:19:09:B5:E1:BF:B3:A0:5C:9A:C2:FD:04:C5:19:7E:40:78 X509v3 Authority Key Identifier: keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:73:d5:c1:a8:4b:e6:84:3f:6f:41:af:99:c3:94:91:05:fe: e2:98:01:a0:4a:35:48:78:b7:c0:34:40:e2:de:79:e8:ff:be: e7:38:ef:02:42:a1:4d:5d:a4:03:c1:9c:bb:d4:23:41:e0:56: 00:80:76:17:7a:f5:ae:83:c4:b8:78:e3:ce:d6:07:e3:64:36: 41:07:49:ca:d8:6d:41:64:56:41:d0:f4:25:63:fc:53:b7:95: bd:d3:7c:75:f3:2c:f7:c7:31:de:fa:f4:fe:d9:2b:bd:a6:cc: 51:1c:2c:cf:52:04:28:46:78:3a:17:89:ce:44:a7:d7:9d:9c: 01:e9:0a:4a:09:be:47:e5:a4:08:38:b0:ad:55:60:18:d6:b4: d4:ec:45:a8:3f:34:71:b3:68:9e:36:5b:d4:f6:af:c2:a9:9a: 01:46:2f:b0:13:f5:9e:de:04:33:5c:4e:a4:89:67:81:90:cf: 6c:fe:7d:2c:57:81:48:50:10:be:7a:98:92:6e:e4:01:fb:fc: 31:53:6c:a5:c5:78:ce:2a:ce:9f:69:f5:6d:94:ce:4c:73:3d: 81:40:d5:6a:b5:b8:9e:ed:b0:cb:1c:02:ab:20:2e:12:4a:43: 54:88:45:8b:7a:40:d6:2c:c7:1e:44:a3:90:2f:eb:f3:8b:98: e1:52:6f:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKERENDAxQTk5MkREMzI5RjkzNERCQjIwRDU4MEI0Q0E3 Mjc5MERGQjEwHhcNMjQwNTE5MDMxNDA3WhcNMjQwNTI2MDMxNDA3WjAYMRYwFAYD VQQDEw02NjQ5NmU3Zi0xMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GGjL/ErVAd5WLYUwzvgli3WyRzEeMytv6MWTnWTYy5CS59kkjMKO5kV4STw nf+L3U9A3ohuSanExOh7niiDMnzL3VB1bRldy6MPm8CsPkQ3tWOu9mY4ojG3RLQH 62NO8iaBWXpp2Gh3kz/muQEL0UFBSs9EJHkLqvoW6xrgm/ueAAZ0ZQgTpnDgBcfE tG/yh63kN9Iky1IhkpRJrwPPX8cmmSENbp+rvSXhbYlzCEWVU+ste9OzZmcm2G1W D7R0gJBkY5U/cztF9gd3MY/I/VuBgRA8LZ+OsT3jdv+iwOnxk8vIl7AhrFGSu6Aa xQSajFu2HhV12CPAO6TdmATH3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDa/KBkJ teG/s6BcmsL9BMUZfkB4MB8GA1UdIwQYMBaAFN1AGpkt0yn5NNuyDVgLTKcnkN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtmazAyN0lOV0F0TXB5ZVEz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNVQWFtUzNUS2ZrMDI3SU5XQXRNcHllUTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtm azAyN0lOV0F0TXB5ZVEzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNc9XBqEvmhD9vQa+Zw5SRBf7imAGgSjVIeLfANEDi3nno/77nOO8C QqFNXaQDwZy71CNB4FYAgHYXevWug8S4eOPO1gfjZDZBB0nK2G1BZFZB0PQlY/xT t5W903x18yz3xzHe+vT+2Su9psxRHCzPUgQoRng6F4nORKfXnZwB6QpKCb5H5aQI OLCtVWAY1rTU7EWoPzRxs2ieNlvU9q/CqZoBRi+wE/We3gQzXE6kiWeBkM9s/n0s V4FIUBC+epiSbuQB+/wxU2ylxXjOKs6fafVtlM5Mcz2BQNVqtbie7bDLHAKrIC4S SkNUiEWLekDWLMceRKOQL+vzi5jhUm+e -----END CERTIFICATE-----Generated at Sun May 19 04:20:44 2024 by rpki-client on console-ams.rpki-client.org