$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAF9/E61E7D5CE90011EAB59F6971C4F9AE02/3r0oU3qS6xPagPeYhK77f1FpqHk.mft File: 3r0oU3qS6xPagPeYhK77f1FpqHk.mft (raw, json) Hash identifier: 67w9WvOE1H4bpBomzLzhVxTrQhkc5KkPrKZsvPp3uMY= Subject key identifier: 3C:C6:C9:49:F9:A4:B7:90:FF:86:89:CA:86:6A:E8:F3:D1:62:3E:71 Authority key identifier: DE:BD:28:53:7A:92:EB:13:DA:80:F7:98:84:AE:FB:7F:51:69:A8:79 Certificate issuer: /CN=A91EEAF9/serialNumber=DEBD28537A92EB13DA80F79884AEFB7F5169A879 Certificate serial: 073D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3r0oU3qS6xPagPeYhK77f1FpqHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEAF9/E61E7D5CE90011EAB59F6971C4F9AE02/3r0oU3qS6xPagPeYhK77f1FpqHk.mft Manifest number: 072E Signing time: Fri 31 May 2024 23:17:12 +0000 Manifest this update: Fri 31 May 2024 23:17:12 +0000 Manifest next update: Fri 07 Jun 2024 23:17:12 +0000 Files and hashes: 1: 3r0oU3qS6xPagPeYhK77f1FpqHk.crl (hash: E0cKBvPbd6kD229XcD+xG+JwXMaNG7U4jARyNDvlg+E=) 2: 589708D0E90211EA90508273C4F9AE02.roa (hash: ulwnaJUqgqYhcMqKXCZ3V35jJQ/Q2GnHGtkw1iJ1xfk=) 3: 57F6CEF6E90211EA90508273C4F9AE02.roa (hash: 4MPn228qeCmaCUawXu73fAIrfe9xyRU0ytinuJC8HQ4=) 4: 57787F4CE90211EA90508273C4F9AE02.roa (hash: uPzmKNatWWQkNp8x+zlq+NQrlZ/SAL+Q1qeZRNXxNP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEAF9/E61E7D5CE90011EAB59F6971C4F9AE02/3r0oU3qS6xPagPeYhK77f1FpqHk.crl rsync://rpki.apnic.net/member_repository/A91EEAF9/E61E7D5CE90011EAB59F6971C4F9AE02/3r0oU3qS6xPagPeYhK77f1FpqHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3r0oU3qS6xPagPeYhK77f1FpqHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1853 (0x73d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEAF9/serialNumber=DEBD28537A92EB13DA80F79884AEFB7F5169A879 Validity Not Before: May 31 23:17:12 2024 GMT Not After : Jun 7 23:17:12 2024 GMT Subject: CN=665a5a78-16d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:54:42:27:05:70:ed:37:ef:b5:2b:46:23:d7: cf:7e:c2:56:8e:d5:3c:8f:71:41:bd:28:ee:50:28: 53:7d:9b:91:cb:d6:40:e0:7c:62:be:61:9d:71:49: 06:3e:89:f4:b8:7a:7d:b1:96:ec:9a:1b:d7:0e:54: 41:02:36:e6:dd:f6:26:c3:25:f8:9a:45:77:03:f4: eb:de:6b:fc:5a:60:1d:a0:a3:70:50:d6:ad:45:bc: b3:9d:90:9d:bf:10:3d:2c:44:b8:fa:00:73:58:66: d7:b5:6f:37:fd:e1:b7:ed:07:a2:15:7c:21:58:5c: 07:c8:69:ef:e7:c2:e1:1c:34:a0:95:de:5f:6d:13: fc:12:4e:94:c5:ba:b3:5b:4e:a5:b6:c2:8b:c0:cf: bd:55:3a:60:04:53:de:c2:a9:c8:b2:38:f0:57:89: e1:00:b0:90:df:be:64:bf:24:32:bb:2e:c8:44:6d: 81:41:7d:4e:76:d3:58:cc:e8:db:48:34:64:08:d9: 40:62:7c:d2:71:f9:31:20:60:32:ee:28:76:15:c8: 83:fe:f6:a0:59:0f:63:f1:02:e8:ef:ff:63:02:98: d4:18:92:78:61:66:1d:09:53:ab:0a:76:60:d9:e0: 24:94:26:ca:95:60:c8:d2:e3:49:54:a6:54:14:45: 1f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C6:C9:49:F9:A4:B7:90:FF:86:89:CA:86:6A:E8:F3:D1:62:3E:71 X509v3 Authority Key Identifier: keyid:DE:BD:28:53:7A:92:EB:13:DA:80:F7:98:84:AE:FB:7F:51:69:A8:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEAF9/E61E7D5CE90011EAB59F6971C4F9AE02/3r0oU3qS6xPagPeYhK77f1FpqHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3r0oU3qS6xPagPeYhK77f1FpqHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAF9/E61E7D5CE90011EAB59F6971C4F9AE02/3r0oU3qS6xPagPeYhK77f1FpqHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:8a:32:6b:b4:c3:3b:d7:96:2a:d8:51:4e:98:ad:95:7c:52: cb:f8:16:8c:a1:5b:8b:0b:ee:db:28:67:5d:64:c3:6c:c1:c0: ac:89:1e:16:fc:b1:c6:86:1f:4d:0b:40:74:52:f9:e7:d7:06: 06:ca:af:00:78:25:17:38:5c:57:ac:61:27:4c:85:e0:61:97: 43:dd:53:4b:53:10:b2:ce:d1:4a:8f:49:c2:3d:30:d7:56:6f: a6:ef:69:ce:0f:70:14:2e:d2:87:6c:54:52:d3:78:70:91:b4: ff:53:fa:01:05:ec:0c:a9:b3:27:47:90:f0:5d:44:d0:dc:ff: b1:b4:db:c2:32:cb:97:ef:ed:ae:48:11:28:f8:47:5c:60:07: 87:90:7c:eb:f1:93:67:74:e0:97:8c:79:5c:b8:0d:8e:ef:1e: dd:80:47:24:d3:e0:e3:d3:8e:27:b9:ef:0b:d8:b5:32:a5:52: 4c:01:87:b2:ab:29:aa:cf:b9:e8:7c:78:96:17:72:5f:3d:f0: 06:64:cb:04:a5:bd:3c:60:10:ef:bf:ee:90:7b:2d:06:df:68: 18:42:f8:2c:12:b9:f9:d2:ff:dc:ca:30:61:51:b6:d6:45:4c: f0:cf:98:11:ec:3a:57:c1:be:ea:59:7f:29:84:05:2e:31:c2: 9e:25:77:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBRjkxMTAvBgNVBAUTKERFQkQyODUzN0E5MkVCMTNEQTgwRjc5ODg0QUVGQjdG NTE2OUE4NzkwHhcNMjQwNTMxMjMxNzEyWhcNMjQwNjA3MjMxNzEyWjAYMRYwFAYD VQQDEw02NjVhNWE3OC0xNmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVRCJwVw7TfvtStGI9fPfsJWjtU8j3FBvSjuUChTfZuRy9ZA4HxivmGdcUkG Pon0uHp9sZbsmhvXDlRBAjbm3fYmwyX4mkV3A/Tr3mv8WmAdoKNwUNatRbyznZCd vxA9LES4+gBzWGbXtW83/eG37QeiFXwhWFwHyGnv58LhHDSgld5fbRP8Ek6Uxbqz W06ltsKLwM+9VTpgBFPewqnIsjjwV4nhALCQ375kvyQyuy7IRG2BQX1OdtNYzOjb SDRkCNlAYnzScfkxIGAy7ih2FciD/vagWQ9j8QLo7/9jApjUGJJ4YWYdCVOrCnZg 2eAklCbKlWDI0uNJVKZUFEUfAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzGyUn5 pLeQ/4aJyoZq6PPRYj5xMB8GA1UdIwQYMBaAFN69KFN6kusT2oD3mISu+39Raah5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUFGOS9FNjFFN0Q1Q0U5 MDAxMUVBQjU5RjY5NzFDNEY5QUUwMi8zcjBvVTNxUzZ4UGFnUGVZaEs3N2YxRnBx SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNyMG9VM3FTNnhQYWdQZVloSzc3ZjFGcHFIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUFGOS9FNjFFN0Q1Q0U5MDAxMUVBQjU5RjY5NzFDNEY5QUUwMi8zcjBvVTNxUzZ4 UGFnUGVZaEs3N2YxRnBxSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxijJrtMM715Yq2FFOmK2VfFLL+BaMoVuLC+7bKGddZMNswcCsiR4W /LHGhh9NC0B0Uvnn1wYGyq8AeCUXOFxXrGEnTIXgYZdD3VNLUxCyztFKj0nCPTDX Vm+m72nOD3AULtKHbFRS03hwkbT/U/oBBewMqbMnR5DwXUTQ3P+xtNvCMsuX7+2u SBEo+EdcYAeHkHzr8ZNndOCXjHlcuA2O7x7dgEck0+Dj044nue8L2LUypVJMAYey qymqz7nofHiWF3JfPfAGZMsEpb08YBDvv+6Qey0G32gYQvgsErn50v/cyjBhUbbW RUzwz5gR7DpXwb7qWX8phAUuMcKeJXdD -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:32 2024 by rpki-client on console-ams.rpki-client.org