$ rpki-client -vvf rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft File: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft (raw, json) Hash identifier: ++GtSd8vZ13Bd+Oy9c1lByXfAF+1Zl3w117bc0Rrv30= Subject key identifier: E1:D9:CF:3B:0A:40:BD:CB:AF:0E:C8:F8:F2:66:29:DA:5D:24:0D:3C Authority key identifier: DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 Certificate issuer: /CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Certificate serial: 0B25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft Manifest number: 0B1E Signing time: Sat 04 May 2024 20:00:47 +0000 Manifest this update: Sat 04 May 2024 20:00:46 +0000 Manifest next update: Sat 11 May 2024 20:00:46 +0000 Files and hashes: 1: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl (hash: irPWT4L+bDRVcb+aZpfvTD0wWX0DNbXCiZVLZ77HnrM=) 2: F66D3E4C175911EA9D8EF44FC4F9AE02.roa (hash: za5V23dtsz617j9FvPb9K7kvDfW4t8T7zFEAYMjrnqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2853 (0xb25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Validity Not Before: May 4 20:00:46 2024 GMT Not After : May 11 20:00:46 2024 GMT Subject: CN=663693ee-ec1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:dd:a3:82:9d:ea:c8:40:67:66:f0:00:77: 76:f0:90:4c:cc:fe:da:46:d0:27:c0:74:af:64:87: 89:b3:ab:99:30:e4:69:c0:29:8a:77:10:07:13:a0: 91:cb:e6:88:9f:21:a1:86:f8:1b:8a:a2:5a:31:20: a2:15:03:61:e4:fd:86:a5:8b:b6:b8:dc:3c:07:8a: 63:6b:73:d1:3c:fa:2f:39:bd:4a:1c:83:71:04:ee: 13:7e:18:26:f7:ba:4d:b6:b8:b5:5c:c3:76:23:b4: d3:e2:ba:2f:b3:f5:30:0a:a5:8d:a1:ca:bf:92:30: 12:63:a4:3c:82:d5:ee:cf:b3:90:e4:d2:cd:db:a3: d0:53:5b:85:b8:6d:13:07:c6:bf:74:bf:27:a9:29: 73:b4:6b:5c:95:85:39:bf:c3:de:8e:b9:d8:68:89: be:ce:18:2e:2c:23:74:b8:df:d7:2c:ba:ec:bf:d6: 08:54:43:31:c0:7b:ff:6a:b3:15:d5:7b:c7:0a:69: 71:3b:7f:3e:6b:f4:08:b9:ad:c6:1d:f4:22:95:37: ef:c9:b9:ee:69:d8:7a:8e:c8:ff:5d:e1:ea:e7:14: 8c:7a:28:a3:86:87:e2:74:93:6c:7e:c5:f0:c9:74: 16:c6:66:69:fd:23:44:1d:b4:03:56:1c:d2:23:d9: 70:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D9:CF:3B:0A:40:BD:CB:AF:0E:C8:F8:F2:66:29:DA:5D:24:0D:3C X509v3 Authority Key Identifier: keyid:DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9d:ed:ec:70:75:de:4e:d7:08:47:94:0d:2c:da:69:77:eb: 8b:8f:ec:85:69:11:a8:d1:de:b8:38:4f:00:30:33:e4:15:bf: b8:c7:ac:54:25:d0:1d:6e:7e:b7:06:5b:1c:6e:1e:2e:15:14: ee:bc:db:2a:1e:fd:c5:dc:27:27:2f:86:d6:82:94:51:3d:cc: cc:7a:12:57:12:47:de:5f:b8:b7:e0:66:5d:7b:64:d3:1b:1c: 33:6f:02:5f:49:94:de:2c:7c:b5:7a:1a:45:3b:18:fb:f8:7f: d3:bb:13:18:ef:17:96:38:81:39:b2:8d:79:f4:fe:c2:14:d2: 98:84:28:55:5f:59:14:97:d4:9f:e7:9a:e7:53:94:fd:7b:92: d4:7d:f1:c5:e1:42:61:30:64:9f:10:1d:9d:69:c9:91:bc:ff: 71:0a:c4:7b:10:00:7f:dd:df:42:32:ec:00:a8:99:d6:74:04: c4:c0:ad:08:8d:10:2c:ee:d0:bb:25:0d:25:aa:7b:70:1b:a1: 38:2d:e8:7c:e3:9b:ba:c1:d7:84:94:6f:7b:3f:31:42:34:1f: 43:47:f7:65:7c:3a:b9:6f:b7:72:66:e2:f9:75:29:b8:f9:ca: fa:7d:58:6e:d5:f5:79:79:da:71:da:6e:19:0d:15:48:33:7f: 5e:95:af:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4QjcxMTAvBgNVBAUTKERDMDMyQzVERDA0MkVEM0U4REUyQTcxMEZCMjY4MThB OTU3MzQyNjYwHhcNMjQwNTA0MjAwMDQ2WhcNMjQwNTExMjAwMDQ2WjAYMRYwFAYD VQQDEw02NjM2OTNlZS1lYzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcXdo4Kd6shAZ2bwAHd28JBMzP7aRtAnwHSvZIeJs6uZMORpwCmKdxAHE6CR y+aInyGhhvgbiqJaMSCiFQNh5P2GpYu2uNw8B4pja3PRPPovOb1KHINxBO4Tfhgm 97pNtri1XMN2I7TT4rovs/UwCqWNocq/kjASY6Q8gtXuz7OQ5NLN26PQU1uFuG0T B8a/dL8nqSlztGtclYU5v8PejrnYaIm+zhguLCN0uN/XLLrsv9YIVEMxwHv/arMV 1XvHCmlxO38+a/QIua3GHfQilTfvybnuadh6jsj/XeHq5xSMeiijhofidJNsfsXw yXQWxmZp/SNEHbQDVhzSI9lw2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHZzzsK QL3Lrw7I+PJmKdpdJA08MB8GA1UdIwQYMBaAFNwDLF3QQu0+jeKnEPsmgYqVc0Jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzhCNy82NjlCNDU1MjE3 NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdUNk40cWNRLXlhQmlwVnpR bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNBTXNYZEJDN1Q2TjRxY1EteWFCaXBWelFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzhCNy82NjlCNDU1MjE3NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdU Nk40cWNRLXlhQmlwVnpRbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPne3scHXeTtcIR5QNLNppd+uLj+yFaRGo0d64OE8AMDPkFb+4x6xU JdAdbn63Blscbh4uFRTuvNsqHv3F3CcnL4bWgpRRPczMehJXEkfeX7i34GZde2TT GxwzbwJfSZTeLHy1ehpFOxj7+H/TuxMY7xeWOIE5so159P7CFNKYhChVX1kUl9Sf 55rnU5T9e5LUffHF4UJhMGSfEB2dacmRvP9xCsR7EAB/3d9CMuwAqJnWdATEwK0I jRAs7tC7JQ0lqntwG6E4Leh845u6wdeElG97PzFCNB9DR/dlfDq5b7dyZuL5dSm4 +cr6fVhu1fV5edpx2m4ZDRVIM39ela/z -----END CERTIFICATE-----Generated at Sat May 4 21:19:27 2024 by rpki-client on console-ams.rpki-client.org