$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json) Hash identifier: zvrYkX7JszXFGENTcF+PdWM0tiI2eeBITm+SC7N/mME= Subject key identifier: F4:E8:F4:D5:BC:44:61:8A:BC:2D:90:51:9C:C6:7A:71:53:A7:5D:AA Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Certificate serial: 0390 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft Manifest number: 038D Signing time: Sun 19 May 2024 02:39:39 +0000 Manifest this update: Sun 19 May 2024 02:39:39 +0000 Manifest next update: Sun 26 May 2024 02:39:39 +0000 Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: DKib6XcLuu5GQ4kIjNdMEwgU5qh2YOxujwJ2TU5xfiA=) 2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: MaYbbHtjpLS1xFLxKLibRDfvViTN5yjw7d1U+zaG5ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 912 (0x390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Validity Not Before: May 19 02:39:39 2024 GMT Not After : May 26 02:39:39 2024 GMT Subject: CN=6649666b-5039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ae:b7:74:4d:44:ad:20:47:32:dd:5c:4a:7c: d5:87:ab:f5:92:29:5b:52:a7:fc:1e:aa:37:05:e0: ef:38:6e:1e:3e:65:bd:00:0d:f2:b5:9c:2d:cb:a1: c7:61:44:e8:6a:cb:8a:1b:a5:24:a0:74:f9:e3:f5: 09:db:6d:0c:5b:3d:16:1d:bd:c5:57:a8:73:48:b2: b7:a9:d5:18:3d:4e:6a:a0:fe:90:7f:c8:0a:0e:61: 20:c9:46:59:57:bb:f9:c8:59:a4:4d:2e:a1:83:50: 1c:42:d2:80:3c:14:4f:d9:c1:48:ed:61:42:b3:fb: 11:c6:4f:bd:7b:e9:f8:46:42:20:69:30:ad:82:ba: 17:ad:63:54:f6:6e:d7:ae:03:99:a8:f7:89:10:92: 52:f6:c2:a8:49:80:dd:57:74:e6:91:7e:94:5d:b5: d7:a0:75:0d:64:fb:76:1c:ad:64:eb:a2:4d:97:70: a9:33:27:71:8f:11:bd:6c:a5:6a:b4:24:43:af:16: 79:fd:f1:9a:d2:ab:09:5f:f9:5b:7e:49:44:dc:b5: 26:45:f8:af:62:44:f1:e7:5e:15:73:29:ce:4c:4f: 39:df:55:c7:eb:74:17:8d:56:1e:7d:67:4d:06:ef: e3:08:05:2d:be:6a:5b:cb:7f:40:4b:c6:29:29:11: ec:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E8:F4:D5:BC:44:61:8A:BC:2D:90:51:9C:C6:7A:71:53:A7:5D:AA X509v3 Authority Key Identifier: keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:4a:c7:33:35:e4:1e:9f:03:d2:87:b6:99:13:26:05:ce:c1: 41:28:c9:0d:26:2c:ea:de:2b:b7:60:99:1d:08:3f:97:d6:37: 04:1c:33:2b:45:4d:7b:f6:f7:02:e5:96:6b:79:a5:88:a1:84: f3:98:81:82:fd:fd:84:f7:3a:7d:0c:a0:5e:12:6b:c7:22:b0: 1e:4c:a5:42:56:e7:c9:ce:34:f7:b6:56:0f:3d:b5:14:0c:91: 90:26:96:2d:a1:51:52:c4:6c:97:ad:f2:98:ef:29:49:a8:69: 33:cf:90:39:34:f0:18:33:92:51:71:f6:97:c5:6f:a2:5d:27: f5:ae:3b:1f:64:fb:d6:f5:3f:57:a3:76:ef:46:51:98:85:b9: 97:fc:a2:56:ec:04:67:99:91:b5:72:54:a0:e1:b3:d8:06:a6: 7f:9a:2d:0a:c9:a3:24:b4:58:37:aa:1e:ce:2d:f1:af:1c:72: df:b9:70:17:e0:b1:69:1d:3e:39:f3:93:34:44:82:fc:3d:ef: 2a:fc:b7:14:63:4b:a0:51:3c:7b:4c:eb:aa:86:af:ef:4a:a5: 01:29:f8:84:48:54:02:07:70:8c:75:6e:74:0d:e9:29:91:5d: e9:0e:a7:0f:2d:95:22:6e:1f:62:f8:61:82:11:d6:26:56:83: c2:e6:70:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE QjY4OEZFNTMwHhcNMjQwNTE5MDIzOTM5WhcNMjQwNTI2MDIzOTM5WjAYMRYwFAYD VQQDEw02NjQ5NjY2Yi01MDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzK63dE1ErSBHMt1cSnzVh6v1kilbUqf8Hqo3BeDvOG4ePmW9AA3ytZwty6HH YUToasuKG6UkoHT54/UJ220MWz0WHb3FV6hzSLK3qdUYPU5qoP6Qf8gKDmEgyUZZ V7v5yFmkTS6hg1AcQtKAPBRP2cFI7WFCs/sRxk+9e+n4RkIgaTCtgroXrWNU9m7X rgOZqPeJEJJS9sKoSYDdV3TmkX6UXbXXoHUNZPt2HK1k66JNl3CpMydxjxG9bKVq tCRDrxZ5/fGa0qsJX/lbfklE3LUmRfivYkTx514VcynOTE8531XH63QXjVYefWdN Bu/jCAUtvmpby39AS8YpKRHscQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTo9NW8 RGGKvC2QUZzGenFTp12qMB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2 NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlBOS81MjU0ODZCODU2NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdF b0lrakZwVFBnNG5iYUlfbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABSsczNeQenwPSh7aZEyYFzsFBKMkNJizq3iu3YJkdCD+X1jcEHDMr RU179vcC5ZZreaWIoYTzmIGC/f2E9zp9DKBeEmvHIrAeTKVCVufJzjT3tlYPPbUU DJGQJpYtoVFSxGyXrfKY7ylJqGkzz5A5NPAYM5JRcfaXxW+iXSf1rjsfZPvW9T9X o3bvRlGYhbmX/KJW7ARnmZG1clSg4bPYBqZ/mi0KyaMktFg3qh7OLfGvHHLfuXAX 4LFpHT4585M0RIL8Pe8q/LcUY0ugUTx7TOuqhq/vSqUBKfiESFQCB3CMdW50Dekp kV3pDqcPLZUibh9i+GGCEdYmVoPC5nDD -----END CERTIFICATE-----Generated at Sun May 19 03:14:50 2024 by rpki-client on console-fra.rpki-client.org