$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft File: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft (raw, json) Hash identifier: bENbDlOOc+dnAoYkPUn4ZHA4/jjiLmCCSKa5zgVNchE= Subject key identifier: A6:C9:08:CE:DC:F6:F2:0F:18:8D:95:C3:B1:4F:43:48:01:C5:F0:F1 Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F Certificate issuer: /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F Certificate serial: 0430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft Manifest number: 042C Signing time: Sun 05 May 2024 02:08:27 +0000 Manifest this update: Sun 05 May 2024 02:08:27 +0000 Manifest next update: Sun 12 May 2024 02:08:27 +0000 Files and hashes: 1: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl (hash: RAW1MshOCM2DcPD2q/7WWv2aDoFYqK9M0EJzY77/srg=) 2: 22DA1C02131B11EC83377D59C4F9AE02.roa (hash: Q+QV50Ae1OC4CB4UHmHO0exvqTzzrDQ//cgoO0wBYEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F Validity Not Before: May 5 02:08:27 2024 GMT Not After : May 12 02:08:27 2024 GMT Subject: CN=6636ea1b-e976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:50:3c:08:73:7f:90:bf:83:32:4f:5d:5f:49: 20:a5:4b:69:86:5f:b6:43:1f:ee:cd:96:39:d9:83: a0:ed:b8:63:4e:12:55:ef:ff:c7:ea:aa:e6:89:47: 39:8b:95:45:89:21:2c:62:83:7d:b9:06:6d:e2:1f: 13:84:0b:6c:d3:d3:bb:d3:74:34:3a:14:68:b5:47: e8:4f:ef:8b:07:80:c0:5a:3c:f5:53:3b:1e:0b:f9: ea:4a:4c:22:cc:7b:a1:d2:f0:30:fa:43:cc:7a:21: e6:f6:68:41:96:97:12:73:05:bf:49:54:8e:6d:1f: 8d:f4:65:9a:ef:55:1b:e5:4e:cf:90:73:1a:90:e1: 8d:cd:15:76:3e:fe:d3:dd:a7:b1:9a:a3:b4:4b:17: 85:6b:78:7d:49:b7:3e:8c:b4:df:32:0e:8b:b8:e5: bc:64:ad:7f:c1:ec:bb:8f:ae:6b:eb:41:e3:56:93: 02:74:4a:b2:f7:89:e4:12:2d:c3:fb:12:49:11:98: e1:07:05:64:96:79:5c:3e:b0:5b:00:6c:42:bf:d8: 3c:60:35:ac:c6:ee:9b:ee:86:18:23:ae:21:fd:50: 2f:66:78:fb:9c:d5:d9:4c:c3:5d:f0:af:ba:54:c8: 9a:9a:be:16:a1:c7:74:8e:3b:01:64:fd:0a:81:53: 81:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C9:08:CE:DC:F6:F2:0F:18:8D:95:C3:B1:4F:43:48:01:C5:F0:F1 X509v3 Authority Key Identifier: keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b4:4a:57:6b:6e:32:c3:01:57:7d:0f:6f:25:2e:bd:8c:b4: e6:a1:61:ea:9b:5d:ca:21:2f:b8:38:98:db:bc:48:ad:b3:e9: 40:73:0c:57:51:ea:84:33:0d:fe:f9:ae:bc:f4:f3:44:79:69: 4f:b1:bc:69:5e:01:0a:d8:81:79:93:f3:e2:b4:1a:87:94:d5: c6:2d:69:3f:68:1a:52:a0:e8:e3:cf:55:47:ad:b5:8c:cf:ce: 8c:90:4f:19:16:5b:2a:25:2d:68:2f:fc:09:68:c4:1a:d6:8f: 9e:88:91:d5:2c:8c:37:e3:36:46:9a:6d:07:9e:4e:33:87:34: 7b:45:e4:61:21:13:95:f9:50:e1:05:17:e5:4f:16:f0:93:f5: fa:5e:db:22:26:48:f4:b8:69:a4:0d:ea:b1:95:35:eb:5c:90: 6b:73:26:a2:0b:0e:bb:b8:89:82:29:69:9f:da:3f:3b:bb:48: fa:69:a1:1e:62:60:aa:31:8d:ac:bd:00:5d:72:f1:84:f5:37: dc:42:7e:24:95:a4:b2:d2:25:83:b7:e1:2b:3e:a9:13:ca:b1: d5:fa:fa:d9:88:78:4c:79:41:45:c1:66:da:e0:84:62:a6:0d: 39:56:e5:bb:02:f4:7b:d3:26:fe:88:1e:46:b7:bc:52:e8:8f: 77:10:a4:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIxMUUxMTAvBgNVBAUTKEZGNzVGRTkzRjg0NjJDQjc2M0FENTYxOTkyQjAzRDE2 M0QxNkVENUYwHhcNMjQwNTA1MDIwODI3WhcNMjQwNTEyMDIwODI3WjAYMRYwFAYD VQQDEw02NjM2ZWExYi1lOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FA8CHN/kL+DMk9dX0kgpUtphl+2Qx/uzZY52YOg7bhjThJV7//H6qrmiUc5 i5VFiSEsYoN9uQZt4h8ThAts09O703Q0OhRotUfoT++LB4DAWjz1UzseC/nqSkwi zHuh0vAw+kPMeiHm9mhBlpcScwW/SVSObR+N9GWa71Ub5U7PkHMakOGNzRV2Pv7T 3aexmqO0SxeFa3h9Sbc+jLTfMg6LuOW8ZK1/wey7j65r60HjVpMCdEqy94nkEi3D +xJJEZjhBwVklnlcPrBbAGxCv9g8YDWsxu6b7oYYI64h/VAvZnj7nNXZTMNd8K+6 VMiamr4Wocd0jjsBZP0KgVOB6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbJCM7c 9vIPGI2Vw7FPQ0gBxfDxMB8GA1UdIwQYMBaAFP91/pP4Riy3Y61WGZKwPRY9Fu1f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjExRS8wNkFGMUZCMjEz MTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xMZGpyVllaa3JBOUZqMFc3 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zWC1rX2hHTExkanJWWVprckE5RmowVzdWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjExRS8wNkFGMUZCMjEzMTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xM ZGpyVllaa3JBOUZqMFc3VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYtEpXa24ywwFXfQ9vJS69jLTmoWHqm13KIS+4OJjbvEits+lAcwxX UeqEMw3++a689PNEeWlPsbxpXgEK2IF5k/PitBqHlNXGLWk/aBpSoOjjz1VHrbWM z86MkE8ZFlsqJS1oL/wJaMQa1o+eiJHVLIw34zZGmm0Hnk4zhzR7ReRhIROV+VDh BRflTxbwk/X6XtsiJkj0uGmkDeqxlTXrXJBrcyaiCw67uImCKWmf2j87u0j6aaEe YmCqMY2svQBdcvGE9TfcQn4klaSy0iWDt+ErPqkTyrHV+vrZiHhMeUFFwWba4IRi pg05VuW7AvR70yb+iB5Gt7xS6I93EKR4 -----END CERTIFICATE-----Generated at Sun May 5 03:47:41 2024 by rpki-client on console-fra.rpki-client.org