$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft File: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft (raw, json) Hash identifier: xYyab5Kb96e68u5NDwh6MHgIU7yTJy9P6NEq8F10Mnc= Subject key identifier: A6:6C:F8:FC:6A:76:9F:FB:DC:64:25:84:DC:47:00:82:62:7F:63:8E Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Certificate serial: 0492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft Manifest number: 048D Signing time: Sun 19 May 2024 01:37:54 +0000 Manifest this update: Sun 19 May 2024 01:37:53 +0000 Manifest next update: Sun 26 May 2024 01:37:53 +0000 Files and hashes: 1: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl (hash: NbedM+EZpQFRfHgu3ZBXmurZBdqH7Pwr32aU6Y7ml3o=) 2: B52EA19A6E0B11ECA6057963C4F9AE02.roa (hash: tEUrEzbRd337eFWp/iwI3to/g2MPSAe4n5mqYfsH+mU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1170 (0x492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Validity Not Before: May 19 01:37:53 2024 GMT Not After : May 26 01:37:53 2024 GMT Subject: CN=664957f2-f3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:11:2e:c4:d3:21:f3:6d:85:8b:9a:04:79:8e: 5b:61:69:74:8b:77:9a:94:d9:26:8e:73:cd:f5:e6: 75:ab:3e:28:76:dd:ce:ee:5e:ea:9b:8a:0d:d2:11: 3f:3b:db:9d:f8:8b:ed:61:69:dc:a8:42:66:f7:75: 9d:3b:1e:c7:82:68:b7:c5:87:f1:82:aa:02:cc:82: c4:37:da:b6:2c:28:05:05:52:98:14:39:46:2f:5b: 73:65:77:60:45:f0:55:d6:da:61:da:15:7c:c4:5e: cd:03:2e:b2:4a:35:4a:15:85:b7:4f:a8:f9:82:cb: b3:5f:79:93:66:d7:50:13:ba:9b:12:b2:76:1f:86: b7:7f:42:78:1d:b4:9b:43:35:fd:67:96:f2:13:7c: 87:04:e3:e0:82:01:fc:20:f1:b8:98:66:58:09:9b: 31:52:2a:7b:a4:71:25:2c:fc:a4:c5:c1:20:15:00: fb:5c:f8:2d:23:e6:2f:81:75:00:f7:da:d9:cc:24: 0f:c5:5e:4b:0f:10:a7:34:bf:44:cf:f8:1d:ce:ca: a1:5a:45:fa:c0:a3:1f:c2:0f:65:a1:07:87:af:b1: 03:e6:95:26:58:8b:10:b4:bb:81:4d:3e:e7:a3:16: eb:9a:ff:db:de:c8:96:6d:ef:52:51:fb:4c:96:44: 5d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6C:F8:FC:6A:76:9F:FB:DC:64:25:84:DC:47:00:82:62:7F:63:8E X509v3 Authority Key Identifier: keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:c7:15:0f:b9:ba:99:a1:55:89:99:7a:68:ea:50:6b:97:fc: 2d:5e:77:2c:5e:01:4b:78:50:94:3e:e4:80:d6:ae:f2:bc:10: a5:d6:d6:53:25:b5:29:a4:73:42:72:9e:76:e1:c0:98:fc:55: e1:85:cf:80:25:9c:62:3d:4f:a7:a2:fb:39:68:48:57:62:bb: c7:b4:d7:a5:3b:48:0c:79:9c:cd:3e:f7:7e:94:9f:f3:5f:14: 27:e2:f5:d9:12:97:ef:bb:4b:07:c9:bd:7f:84:0b:44:54:3b: fa:5b:9e:da:d9:74:4e:eb:f6:86:7f:ac:f8:50:ab:e0:ab:02: 3c:94:95:4b:2b:5c:1b:14:8a:85:8d:2a:4f:af:85:63:bd:46: cb:2d:06:99:a5:75:b7:f1:17:4b:ef:e7:79:3e:0a:c7:06:be: 2f:82:c7:63:ed:72:ab:85:09:75:14:c7:24:13:9a:22:ad:92: 25:db:63:99:74:b9:43:b5:ef:a3:93:41:ed:98:11:80:57:24: 56:03:d8:b7:e1:80:37:2c:54:78:4a:8e:bf:d4:40:75:72:60: 50:28:81:d0:49:72:0e:65:93:91:22:09:67:6a:88:fe:12:89: 4e:69:f7:7d:41:64:61:3b:11:91:b0:ea:c5:40:ef:36:21:f1: 0e:6d:79:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD MkVBMEVBNUIwHhcNMjQwNTE5MDEzNzUzWhcNMjQwNTI2MDEzNzUzWjAYMRYwFAYD VQQDEw02NjQ5NTdmMi1mM2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxEuxNMh822Fi5oEeY5bYWl0i3ealNkmjnPN9eZ1qz4odt3O7l7qm4oN0hE/ O9ud+IvtYWncqEJm93WdOx7Hgmi3xYfxgqoCzILEN9q2LCgFBVKYFDlGL1tzZXdg RfBV1tph2hV8xF7NAy6ySjVKFYW3T6j5gsuzX3mTZtdQE7qbErJ2H4a3f0J4HbSb QzX9Z5byE3yHBOPgggH8IPG4mGZYCZsxUip7pHElLPykxcEgFQD7XPgtI+YvgXUA 99rZzCQPxV5LDxCnNL9Ez/gdzsqhWkX6wKMfwg9loQeHr7ED5pUmWIsQtLuBTT7n oxbrmv/b3siWbe9SUftMlkRdqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZs+Pxq dp/73GQlhNxHAIJif2OOMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTk3Mi85QkY2QzQ0RUYwMzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0 YUt0bVp6cjNvVGJDNmc2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClxxUPubqZoVWJmXpo6lBrl/wtXncsXgFLeFCUPuSA1q7yvBCl1tZT JbUppHNCcp524cCY/FXhhc+AJZxiPU+novs5aEhXYrvHtNelO0gMeZzNPvd+lJ/z XxQn4vXZEpfvu0sHyb1/hAtEVDv6W57a2XRO6/aGf6z4UKvgqwI8lJVLK1wbFIqF jSpPr4VjvUbLLQaZpXW38RdL7+d5PgrHBr4vgsdj7XKrhQl1FMckE5oirZIl22OZ dLlDte+jk0HtmBGAVyRWA9i34YA3LFR4So6/1EB1cmBQKIHQSXIOZZORIglnaoj+ EolOafd9QWRhOxGRsOrFQO82IfEObXku -----END CERTIFICATE-----Generated at Sun May 19 02:39:38 2024 by rpki-client on console-fra.rpki-client.org