$ rpki-client -vvf rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft File: r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft (raw, json) Hash identifier: PJ0s3JOhOqcPbFdwR84kk9tfmGvq7+WNq+1aaJ/ACDg= Subject key identifier: 22:1C:B1:36:DC:A4:EE:82:B4:4A:FD:FB:33:69:D5:92:7D:2D:B8:7F Authority key identifier: AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 Certificate issuer: /CN=A9127686/serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Certificate serial: 03EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft Manifest number: 03E7 Signing time: Fri 03 May 2024 02:22:26 +0000 Manifest this update: Fri 03 May 2024 02:22:25 +0000 Manifest next update: Fri 10 May 2024 02:22:25 +0000 Files and hashes: 1: r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl (hash: kxKBzO2bRFzrCoSwp+aBaD+kDQRJl1ZV6kPw0xh+ToU=) 2: 54BBE48A304411EC830F8610C4F9AE02.roa (hash: H1iIPAe1JccYvdw8kKI9ShVen2Ai6Zn5Tp5ucOlGusg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1003 (0x3eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127686/serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Validity Not Before: May 3 02:22:25 2024 GMT Not After : May 10 02:22:25 2024 GMT Subject: CN=66344a62-269c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4c:58:dc:3e:1e:0f:d4:3e:84:e0:42:e4:72: 6c:11:b5:a8:0d:14:d8:31:b5:a0:f8:52:da:20:a7: 92:ba:f9:59:ee:f3:cb:f7:92:51:81:4a:94:f3:91: 81:3c:19:ab:70:b2:9a:04:3e:93:d5:5f:00:b9:54: 01:c0:f5:97:d3:fe:73:53:47:82:ac:a9:89:6d:58: f0:f3:52:83:c9:7f:3a:ab:14:fb:2a:9e:b5:04:a1: 14:19:ad:db:d4:2b:8c:1c:e9:7d:a1:9d:b0:29:0a: 43:76:08:14:7b:59:ee:a6:7f:f4:8e:8e:4b:8f:e2: 6d:79:68:63:80:40:0f:46:35:79:1e:41:5e:cd:b2: d5:2c:f2:0b:2c:6f:ba:6b:74:dc:d0:c8:15:44:ef: 47:2f:47:4e:91:fc:5f:6c:3b:a3:19:0e:c5:8c:53: 5c:39:9a:f8:7c:70:19:54:68:54:56:d7:83:d3:9b: cb:25:d0:62:21:4a:92:43:f1:34:2a:86:1d:af:d1: f8:b6:a1:25:fa:21:af:4a:ea:1d:8d:b1:44:ac:d1: 98:f3:83:db:fe:9f:ad:55:5b:65:fa:8c:bb:bf:5a: 4f:ad:69:ac:33:4b:9b:0a:9d:e4:db:23:b8:57:ee: 22:de:ef:28:25:16:79:71:13:1c:31:c0:f9:95:40: 22:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1C:B1:36:DC:A4:EE:82:B4:4A:FD:FB:33:69:D5:92:7D:2D:B8:7F X509v3 Authority Key Identifier: keyid:AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:8e:0e:9d:75:ee:8a:0d:00:ac:a5:37:0b:a2:20:e6:4b:3d: 70:ab:f7:64:00:2d:1e:b1:86:42:d7:4c:bf:1e:14:7b:36:31: c0:e8:16:8f:49:a8:16:64:80:6d:94:de:92:09:3a:48:5f:34: 7b:99:cf:77:73:fa:e8:3a:2e:d0:cb:af:c5:80:11:9f:be:f7: 06:c9:8f:b3:29:5f:71:41:61:95:37:34:28:a1:1d:29:1a:89: 56:31:34:1d:c8:5e:0d:ce:6e:f9:16:2b:d7:4c:1b:5d:3c:22: d4:0f:74:ac:8e:99:86:cf:af:cc:90:97:ae:9b:1d:a9:3c:f9: 9d:7f:28:e8:75:31:0e:7a:17:44:a2:c9:d4:b6:15:54:09:ac: 4d:a8:07:da:a8:bc:f8:85:e6:5a:43:2e:0c:fb:21:c2:39:be: 94:55:c7:ff:8f:7f:0b:3a:5f:ff:ae:14:6e:a1:8c:74:e3:90: 27:ba:51:10:e1:d1:72:c7:ac:56:4e:ca:b6:fe:7f:fc:bb:5f: 20:fc:a5:db:b8:57:cc:33:45:ed:b3:17:57:b3:cb:38:33:c3: 47:e7:c1:ff:73:d6:39:60:df:e5:d2:3b:52:4d:ce:53:85:6f: fc:2d:95:3c:9d:d8:45:1d:a1:2f:08:e9:d8:92:34:b5:08:1d: 36:59:a1:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2ODYxMTAvBgNVBAUTKEFGNzFGNUIxNjc5NUY5QjdDRjJCMjQ1ODQ4MDc3RTEx Njg1QkE2RjAwHhcNMjQwNTAzMDIyMjI1WhcNMjQwNTEwMDIyMjI1WjAYMRYwFAYD VQQDEw02NjM0NGE2Mi0yNjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0xY3D4eD9Q+hOBC5HJsEbWoDRTYMbWg+FLaIKeSuvlZ7vPL95JRgUqU85GB PBmrcLKaBD6T1V8AuVQBwPWX0/5zU0eCrKmJbVjw81KDyX86qxT7Kp61BKEUGa3b 1CuMHOl9oZ2wKQpDdggUe1nupn/0jo5Lj+JteWhjgEAPRjV5HkFezbLVLPILLG+6 a3Tc0MgVRO9HL0dOkfxfbDujGQ7FjFNcOZr4fHAZVGhUVteD05vLJdBiIUqSQ/E0 KoYdr9H4tqEl+iGvSuodjbFErNGY84Pb/p+tVVtl+oy7v1pPrWmsM0ubCp3k2yO4 V+4i3u8oJRZ5cRMcMcD5lUAiFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIcsTbc pO6CtEr9+zNp1ZJ9Lbh/MB8GA1UdIwQYMBaAFK9x9bFnlfm3zyskWEgHfhFoW6bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY4Ni9DNzRCMUZGRTMw NDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1iZlBLeVJZU0FkLUVXaGJw dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzSDFzV2VWLWJmUEt5UllTQWQtRVdoYnB2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY4Ni9DNzRCMUZGRTMwNDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1i ZlBLeVJZU0FkLUVXaGJwdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2jg6dde6KDQCspTcLoiDmSz1wq/dkAC0esYZC10y/HhR7NjHA6BaP SagWZIBtlN6SCTpIXzR7mc93c/roOi7Qy6/FgBGfvvcGyY+zKV9xQWGVNzQooR0p GolWMTQdyF4Nzm75FivXTBtdPCLUD3SsjpmGz6/MkJeumx2pPPmdfyjodTEOehdE osnUthVUCaxNqAfaqLz4heZaQy4M+yHCOb6UVcf/j38LOl//rhRuoYx045AnulEQ 4dFyx6xWTsq2/n/8u18g/KXbuFfMM0XtsxdXs8s4M8NH58H/c9Y5YN/l0jtSTc5T hW/8LZU8ndhFHaEvCOnYkjS1CB02WaHU -----END CERTIFICATE-----Generated at Fri May 3 03:10:45 2024 by rpki-client on console-ams.rpki-client.org