$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json) Hash identifier: M/C7ZqYIxw/upoQmS+1fjM8c32e6EyAQfF1W/mirMYg= Subject key identifier: 37:40:62:70:53:A6:D7:F1:CD:F4:C9:68:B9:97:E4:39:4B:33:BE:84 Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft Manifest number: 9D Signing time: Wed 15 May 2024 06:54:27 +0000 Manifest this update: Wed 15 May 2024 06:54:27 +0000 Manifest next update: Wed 22 May 2024 06:54:27 +0000 Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: dPtNPPjRZthSKf15x59QGI0MGRiLcJ60t+MRX0alHZM=) 2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: Uo8GZp0BhERmojcXwoqNsV/jrudPVaZUuleVx+XXWPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Validity Not Before: May 15 06:54:27 2024 GMT Not After : May 22 06:54:27 2024 GMT Subject: CN=66445c23-e7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:6d:51:d7:50:36:14:5a:43:5d:31:62:f2: 54:c7:06:30:1b:52:61:8f:49:81:5b:ca:05:cb:26: f6:e0:fd:36:07:4e:e7:d1:73:2c:b3:ac:c1:25:7a: a4:05:52:6d:fa:aa:02:6d:00:db:74:01:ab:62:55: d5:b3:7c:ef:cd:ab:a8:c4:af:69:b3:25:8c:ac:24: 4b:33:bd:c5:c5:45:18:6a:5a:12:0f:a6:46:11:6a: 46:7e:21:eb:02:0f:dc:3d:6b:ba:40:57:3b:c1:af: d4:43:65:92:f2:81:c7:da:79:37:84:70:5e:ae:ca: f9:9f:fa:e0:83:0f:44:07:fd:71:54:c5:57:af:f4: 55:ad:51:c1:13:38:6c:b9:9d:e0:21:ef:b4:39:b3: 35:9c:b4:ad:d5:07:49:93:7c:9e:82:96:07:da:fd: 80:f1:b0:52:aa:78:7d:73:e5:e4:e3:d4:22:a9:28: eb:99:25:31:63:89:bd:7f:21:e0:c4:fd:0f:43:9e: 48:88:85:55:b4:49:9b:60:4d:94:f3:ee:08:b9:f9: 02:8e:b8:10:c0:42:a8:d9:92:91:d3:e3:fc:0e:95: d5:d5:4d:a0:3b:03:c2:b0:d1:9c:e4:2d:4a:98:ff: 6b:40:85:b3:86:37:49:07:0a:20:1b:16:23:6d:3e: 2a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:40:62:70:53:A6:D7:F1:CD:F4:C9:68:B9:97:E4:39:4B:33:BE:84 X509v3 Authority Key Identifier: keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:fb:8e:ea:f8:54:62:c7:14:27:80:71:c1:f5:cd:42:c0:14: 23:62:be:0a:83:b5:96:20:c2:6c:b9:10:ab:6b:71:41:52:e4: 9b:03:87:c3:4a:1d:80:2d:d5:e6:a3:79:9e:5a:0d:a8:80:1b: c0:00:23:d0:55:19:c7:c3:71:28:9e:81:b7:88:a9:49:49:ca: ee:68:61:6c:e3:8e:27:37:a2:46:c3:21:78:7c:8f:29:b4:fd: 9f:25:0e:cf:87:d0:23:40:b1:47:6f:ac:b4:38:90:7f:16:80: 9d:12:c6:79:d1:a2:4a:83:05:92:35:0b:bb:41:ef:d9:85:3b: 23:93:27:bf:f0:27:9e:21:f7:67:e9:dc:24:65:ac:87:de:a3: 9b:c6:b6:87:08:ad:4a:8d:61:3b:91:b6:e5:92:ae:3c:98:32: c3:12:de:d1:1a:ea:f7:86:5c:65:45:fc:54:b8:12:ba:84:f8: bd:39:8a:94:b8:3b:db:f5:e2:a4:b0:78:e1:1c:92:2e:3b:d4: 34:dc:5b:58:f9:35:b8:da:5f:ac:c0:88:15:a5:28:ea:b8:68: c0:88:bf:14:dc:3d:80:1d:e2:d0:19:ed:b7:69:a0:fe:18:13: 88:f7:23:7e:70:c5:60:c9:ea:3b:6e:e5:26:a2:f6:c4:72:f5: e8:17:bf:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC M0FFREM5MEUwHhcNMjQwNTE1MDY1NDI3WhcNMjQwNTIyMDY1NDI3WjAYMRYwFAYD VQQDEw02NjQ0NWMyMy1lN2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmNtUddQNhRaQ10xYvJUxwYwG1Jhj0mBW8oFyyb24P02B07n0XMss6zBJXqk BVJt+qoCbQDbdAGrYlXVs3zvzauoxK9psyWMrCRLM73FxUUYaloSD6ZGEWpGfiHr Ag/cPWu6QFc7wa/UQ2WS8oHH2nk3hHBersr5n/rggw9EB/1xVMVXr/RVrVHBEzhs uZ3gIe+0ObM1nLSt1QdJk3yegpYH2v2A8bBSqnh9c+Xk49QiqSjrmSUxY4m9fyHg xP0PQ55IiIVVtEmbYE2U8+4IufkCjrgQwEKo2ZKR0+P8DpXV1U2gOwPCsNGc5C1K mP9rQIWzhjdJBwogGxYjbT4qJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdAYnBT ptfxzfTJaLmX5DlLM76EMB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1 MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1 Q0hqNnlueW9FN1N6cnR5UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu+47q+FRixxQngHHB9c1CwBQjYr4Kg7WWIMJsuRCra3FBUuSbA4fD Sh2ALdXmo3meWg2ogBvAACPQVRnHw3EonoG3iKlJScruaGFs444nN6JGwyF4fI8p tP2fJQ7Ph9AjQLFHb6y0OJB/FoCdEsZ50aJKgwWSNQu7Qe/ZhTsjkye/8CeeIfdn 6dwkZayH3qObxraHCK1KjWE7kbblkq48mDLDEt7RGur3hlxlRfxUuBK6hPi9OYqU uDvb9eKksHjhHJIuO9Q03FtY+TW42l+swIgVpSjquGjAiL8U3D2AHeLQGe23aaD+ GBOI9yN+cMVgyeo7buUmovbEcvXoF796 -----END CERTIFICATE-----Generated at Wed May 15 09:04:06 2024 by rpki-client on console-ams.rpki-client.org