$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.mft File: 3tdhLc0WClbGF4QCXEspBELPNb4.mft (raw, json) Hash identifier: RrH9y5TNWrrkHiJ3clRvBspZ10CVWgs5+c+mUVOxdmo= Subject key identifier: 82:39:0F:D8:CB:B9:9F:24:77:72:69:60:83:4F:C2:76:35:49:E3:3F Authority key identifier: DE:D7:61:2D:CD:16:0A:56:C6:17:84:02:5C:4B:29:04:42:CF:35:BE Certificate issuer: /CN=A91EC8F7/serialNumber=DED7612DCD160A56C61784025C4B290442CF35BE Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3tdhLc0WClbGF4QCXEspBELPNb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.mft Manifest number: 4A Signing time: Sun 19 May 2024 08:06:29 +0000 Manifest this update: Sun 19 May 2024 08:06:29 +0000 Manifest next update: Sun 26 May 2024 08:06:29 +0000 Files and hashes: 1: 3tdhLc0WClbGF4QCXEspBELPNb4.crl (hash: +xAQkjErH1A3080yWKZUCZ9PhVQzk/GC+MTFNyHMz34=) 2: B852EAA6C2A611EEB2AC4B6BC4F9AE02.roa (hash: G78kkQMQwJwIO1vnO9r2EC+O4Tv2Ybnavk65VnjZqR8=) 3: 859BA8EECDAC11EE9AB36F18C4F9AE02.roa (hash: 0v2TnpmxyumfaVdNd5PWBzt9E5sY5/dt3hfLp8BVYLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.crl rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3tdhLc0WClbGF4QCXEspBELPNb4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC8F7/serialNumber=DED7612DCD160A56C61784025C4B290442CF35BE Validity Not Before: May 19 08:06:29 2024 GMT Not After : May 26 08:06:29 2024 GMT Subject: CN=6649b305-4a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:62:0f:88:fd:d2:80:aa:c0:64:4d:de:19:1c: be:ac:70:64:61:70:b4:05:3e:08:8f:85:e5:3a:66: 85:0d:3e:2c:2c:9f:0b:dd:2b:0f:88:78:a6:d7:26: bb:06:55:13:22:40:10:0f:ed:7c:5a:e9:38:ee:2a: aa:f5:72:c1:e2:e2:f2:da:e6:7d:7e:db:9f:f1:6b: 99:38:67:41:cf:a1:18:14:60:ac:de:24:cf:a5:33: d6:46:34:29:82:3c:e3:00:cb:d0:c6:98:c3:af:25: a0:f4:e6:49:3f:80:97:ac:83:76:43:f2:86:2a:76: e1:b3:55:65:87:49:55:7e:72:f4:3a:0d:0e:b9:c4: 82:06:99:7b:72:8c:a2:ef:64:35:09:8b:b2:2d:b4: 8b:eb:42:58:61:d8:94:0e:49:35:1d:51:75:8c:3b: e9:0a:d0:89:4a:8a:d7:76:4a:78:69:12:8a:db:fd: ba:73:9e:6e:bb:33:25:22:85:59:f7:45:dd:f8:5d: fb:1e:12:b3:72:26:f0:57:f8:43:1d:a7:8f:86:c6: 82:77:64:30:df:9d:7b:0b:f8:db:b4:0c:2a:59:68: c6:e8:a2:0f:a1:38:fa:c0:3e:4f:92:17:3a:ee:27: d7:f8:5c:a5:14:41:9e:6b:24:b4:07:e2:e2:4b:05: 3e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:39:0F:D8:CB:B9:9F:24:77:72:69:60:83:4F:C2:76:35:49:E3:3F X509v3 Authority Key Identifier: keyid:DE:D7:61:2D:CD:16:0A:56:C6:17:84:02:5C:4B:29:04:42:CF:35:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3tdhLc0WClbGF4QCXEspBELPNb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:62:37:94:f1:42:ac:ff:5d:33:7e:e1:9e:4c:d6:d5:c1:37: 58:f7:7f:85:bd:d7:9d:99:b4:9b:6e:0e:b2:93:14:59:d6:a7: d0:af:75:39:0d:78:04:56:6d:c5:87:95:b4:78:7f:d0:69:89: 64:21:4a:d7:24:d9:13:ff:e0:bc:53:2a:26:1b:0a:1f:93:28: 6c:fa:3c:e0:e9:fc:df:d3:ae:39:19:d1:a7:c8:65:67:04:9d: a0:40:e9:55:91:79:dd:67:9d:85:e7:54:d1:e4:15:26:c9:be: 2d:08:75:de:86:72:a4:bd:b2:65:97:a8:d4:5e:66:69:a4:5d: 54:7e:ad:dd:de:e7:e3:95:9a:3d:36:85:01:b2:b5:3d:15:a3: 58:b0:06:fe:ac:55:d2:c6:33:05:88:cf:80:0b:ab:d3:c8:e5: 15:cd:bd:34:1e:79:a0:8e:ff:8e:6c:1e:f5:7e:e6:f1:6b:de: b5:83:0d:b6:fd:e4:cd:c6:26:62:fa:29:7c:76:d9:f3:d0:1e: 38:17:25:2d:10:6a:e9:3a:b8:21:7d:19:50:90:3c:8b:2b:3f: a3:cc:0f:f9:7b:64:86:85:2c:20:0d:fa:da:fd:36:e2:5b:13: de:5c:ed:18:9a:74:b2:49:a0:18:56:1b:de:ea:ee:27:cc:16: 95:7d:e1:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzhGNzExMC8GA1UEBRMoREVENzYxMkRDRDE2MEE1NkM2MTc4NDAyNUM0QjI5MDQ0 MkNGMzVCRTAeFw0yNDA1MTkwODA2MjlaFw0yNDA1MjYwODA2MjlaMBgxFjAUBgNV BAMTDTY2NDliMzA1LTRhNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgYg+I/dKAqsBkTd4ZHL6scGRhcLQFPgiPheU6ZoUNPiwsnwvdKw+IeKbXJrsG VRMiQBAP7Xxa6TjuKqr1csHi4vLa5n1+25/xa5k4Z0HPoRgUYKzeJM+lM9ZGNCmC POMAy9DGmMOvJaD05kk/gJesg3ZD8oYqduGzVWWHSVV+cvQ6DQ65xIIGmXtyjKLv ZDUJi7IttIvrQlhh2JQOSTUdUXWMO+kK0IlKitd2SnhpEorb/bpznm67MyUihVn3 Rd34XfseErNyJvBX+EMdp4+GxoJ3ZDDfnXsL+Nu0DCpZaMboog+hOPrAPk+SFzru J9f4XKUUQZ5rJLQH4uJLBT7BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgjkP2Mu5 nyR3cmlgg0/CdjVJ4z8wHwYDVR0jBBgwFoAU3tdhLc0WClbGF4QCXEspBELPNb4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDOEY3Lzc3ODZFNTdFQjJB NTExRUU5MERFQTIyMEM0RjlBRTAyLzN0ZGhMYzBXQ2xiR0Y0UUNYRXNwQkVMUE5i NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM3RkaExjMFdDbGJHRjRRQ1hFc3BCRUxQTmI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD OEY3Lzc3ODZFNTdFQjJBNTExRUU5MERFQTIyMEM0RjlBRTAyLzN0ZGhMYzBXQ2xi R0Y0UUNYRXNwQkVMUE5iNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIZiN5TxQqz/XTN+4Z5M1tXBN1j3f4W9152ZtJtuDrKTFFnWp9CvdTkN eARWbcWHlbR4f9BpiWQhStck2RP/4LxTKiYbCh+TKGz6PODp/N/TrjkZ0afIZWcE naBA6VWRed1nnYXnVNHkFSbJvi0Idd6GcqS9smWXqNReZmmkXVR+rd3e5+OVmj02 hQGytT0Vo1iwBv6sVdLGMwWIz4ALq9PI5RXNvTQeeaCO/45sHvV+5vFr3rWDDbb9 5M3GJmL6KXx22fPQHjgXJS0Qauk6uCF9GVCQPIsrP6PMD/l7ZIaFLCAN+tr9NuJb E95c7RiadLJJoBhWG97q7ifMFpV94eM= -----END CERTIFICATE-----Generated at Sun May 19 09:04:14 2024 by rpki-client on console-fra.rpki-client.org