$ rpki-client -vvf rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft File: 3glSX1epVbpvLTKtIoMwQhUYLkU.mft (raw, json) Hash identifier: BQHNUUd5vCxzdnLBdII5MTOVi9Tgvq5wLHczPdKz8B8= Subject key identifier: CA:CC:1B:7F:4D:F1:79:96:EB:E4:6F:2E:43:DC:8A:36:EB:09:1E:58 Authority key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45 Certificate issuer: /CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft Manifest number: 88 Signing time: Wed 15 May 2024 07:12:13 +0000 Manifest this update: Wed 15 May 2024 07:12:13 +0000 Manifest next update: Wed 22 May 2024 07:12:13 +0000 Files and hashes: 1: 3glSX1epVbpvLTKtIoMwQhUYLkU.crl (hash: ZJMlw0wnGyNNZC6ROnhncxhJbQX+VglQXEsPHI2Susk=) 2: 5D79BDF8486C11EEB3C19A71C4F9AE02.roa (hash: JR4QCnQHMEnbae0jDivqa08cLD58ejemmAtSkeG22K8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45 Validity Not Before: May 15 07:12:13 2024 GMT Not After : May 22 07:12:13 2024 GMT Subject: CN=6644604d-4c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:67:d2:27:b8:33:45:cc:6f:5e:a0:c9:f6: 6d:9b:a6:71:a6:24:12:8e:da:88:80:51:a6:de:2c: d8:5f:35:a5:66:8d:1b:15:83:88:47:d4:d5:96:ba: c3:86:81:f9:c4:5e:b4:3c:94:ab:f6:df:d3:2e:88: a2:73:12:a3:63:66:b4:23:f2:d4:22:32:ed:ef:75: e7:3f:06:1e:fe:0b:9e:ce:82:bf:80:a3:fe:6f:97: e3:f9:f5:48:d9:23:43:fd:9b:9d:85:e1:1e:62:73: 09:60:6a:a0:a6:ed:7e:ca:e8:1e:be:00:ba:1f:bf: 91:c3:e2:2a:7a:32:88:60:e0:ea:79:ef:8a:80:b0: d0:d3:da:0e:e9:bd:e3:c4:cc:a7:2b:eb:e2:be:82: 63:b6:53:6b:59:9f:8d:5c:b5:8a:57:f5:f0:4b:fe: 59:97:ba:38:a9:4d:a4:8f:94:cd:b4:28:3c:f0:6b: 77:72:cb:33:1d:1f:72:59:21:14:ca:a1:43:c7:a8: d4:7b:71:5f:45:ef:58:bd:07:df:8c:c8:02:c9:de: db:37:d4:27:37:62:71:e1:60:dc:07:aa:11:0b:a9: 75:e2:86:5b:11:d8:12:bc:80:53:0d:6f:db:ca:94: 8a:ab:ce:79:b0:57:01:86:f1:49:48:13:8c:01:9c: 91:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CC:1B:7F:4D:F1:79:96:EB:E4:6F:2E:43:DC:8A:36:EB:09:1E:58 X509v3 Authority Key Identifier: keyid:DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c1:1c:4b:42:f3:49:9f:b5:cf:b1:78:17:64:55:11:5a:4f: 85:95:a8:ad:68:b5:86:2c:21:83:da:a2:6a:3b:e5:bd:19:34: 25:97:01:bb:f6:81:ac:cf:c0:d4:66:14:d8:6a:a9:1b:34:68: f5:14:85:ea:7f:19:9f:39:d7:fc:2c:ea:02:01:ec:e4:f7:b3: 32:7e:d7:8c:bc:04:01:6e:d1:e6:dd:31:6f:bd:8f:37:aa:79: ee:1c:fd:e0:43:c8:ab:e4:b2:de:c2:09:b2:e2:6b:09:c1:ec: 20:f8:12:7e:df:b3:bf:e3:ce:f9:6d:73:2c:f0:e1:eb:ff:7c: fe:ba:ab:3a:41:12:6a:42:20:62:ac:10:f5:e1:d9:6e:ba:9a: a7:0d:56:85:03:1b:96:31:7c:6c:03:89:40:45:fa:d6:88:36: 05:74:4c:35:dd:b4:ab:b8:82:a1:7f:05:06:ee:c1:5f:cf:36: 95:85:7d:b3:81:38:8a:75:85:eb:52:58:a6:f6:e2:eb:3e:ad: fd:75:86:7a:11:5b:62:ed:ab:78:d9:52:cd:27:69:da:1f:d6: 44:82:31:62:86:a2:33:14:fa:04:2d:93:32:42:8a:b6:c6:3d: d1:1b:d5:bb:a2:31:fb:4c:d3:70:cc:74:13:de:0f:27:e8:4a: d0:0e:f8:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlDMzIxMTAvBgNVBAUTKERFMDk1MjVGNTdBOTU1QkE2RjJEMzJBRDIyODMzMDQy MTUxODJFNDUwHhcNMjQwNTE1MDcxMjEzWhcNMjQwNTIyMDcxMjEzWjAYMRYwFAYD VQQDEw02NjQ0NjA0ZC00Yzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJVn0ie4M0XMb16gyfZtm6ZxpiQSjtqIgFGm3izYXzWlZo0bFYOIR9TVlrrD hoH5xF60PJSr9t/TLoiicxKjY2a0I/LUIjLt73XnPwYe/guezoK/gKP+b5fj+fVI 2SND/ZudheEeYnMJYGqgpu1+yugevgC6H7+Rw+IqejKIYODqee+KgLDQ09oO6b3j xMynK+vivoJjtlNrWZ+NXLWKV/XwS/5Zl7o4qU2kj5TNtCg88Gt3csszHR9yWSEU yqFDx6jUe3FfRe9YvQffjMgCyd7bN9QnN2Jx4WDcB6oRC6l14oZbEdgSvIBTDW/b ypSKq855sFcBhvFJSBOMAZyR4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrMG39N 8XmW6+RvLkPcijbrCR5YMB8GA1UdIwQYMBaAFN4JUl9XqVW6by0yrSKDMEIVGC5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUMzMi9DNEVBMUI5RTQ2 RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFlcFZicHZMVEt0SW9Nd1FoVVlM a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNnbFNYMWVwVmJwdkxUS3RJb013UWhVWUxrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUMzMi9DNEVBMUI5RTQ2RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFlcFZi cHZMVEt0SW9Nd1FoVVlMa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcwRxLQvNJn7XPsXgXZFURWk+FlaitaLWGLCGD2qJqO+W9GTQllwG7 9oGsz8DUZhTYaqkbNGj1FIXqfxmfOdf8LOoCAezk97MyfteMvAQBbtHm3TFvvY83 qnnuHP3gQ8ir5LLewgmy4msJwewg+BJ+37O/4875bXMs8OHr/3z+uqs6QRJqQiBi rBD14dluupqnDVaFAxuWMXxsA4lARfrWiDYFdEw13bSruIKhfwUG7sFfzzaVhX2z gTiKdYXrUlim9uLrPq39dYZ6EVti7at42VLNJ2naH9ZEgjFihqIzFPoELZMyQoq2 xj3RG9W7ojH7TNNwzHQT3g8n6ErQDvjh -----END CERTIFICATE-----Generated at Wed May 15 09:04:06 2024 by rpki-client on console-ams.rpki-client.org