$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json) Hash identifier: kt4Rk5bYKv2Jodt5zD02NeGo635S4y1wjXJk/brukQo= Subject key identifier: F5:0E:D4:44:03:5D:82:57:6D:5D:57:F8:42:8F:51:F2:9E:FB:3A:85 Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Certificate serial: 0406 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft Manifest number: 0403 Signing time: Sat 25 May 2024 02:18:04 +0000 Manifest this update: Sat 25 May 2024 02:18:04 +0000 Manifest next update: Sat 01 Jun 2024 02:18:04 +0000 Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: vLlSvn9B8I8ObcOZOqhb/sLe8qKwFEy7XYEHO2jVMxI=) 2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: NznoTmi8l5BXvAh4os7Np/yLM2FpVcgBbcjtp7uh7SM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 00:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Validity Not Before: May 25 02:18:04 2024 GMT Not After : Jun 1 02:18:04 2024 GMT Subject: CN=66514a5c-9073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:4c:68:5d:d9:46:3d:e2:8a:41:f5:fc:74: e6:61:74:fc:bb:f6:b6:e9:db:0a:af:2c:c4:ce:4b: 42:fb:72:43:4d:2c:75:98:0f:a0:59:dc:5a:9e:0c: bb:75:9d:9e:3f:11:e6:b2:fb:2d:81:6d:3a:84:2e: a9:b7:45:59:cf:1e:8f:eb:ac:f7:29:dd:c0:d8:be: 8a:dc:f8:01:ed:aa:e9:9c:9d:bf:9d:7d:2e:fb:30: 1a:80:43:d3:50:92:b6:6a:97:8f:bd:ab:59:3e:53: dc:ee:5e:d4:7f:74:cc:73:0c:2b:20:b3:a3:10:7f: 0a:c3:1b:03:8a:32:37:15:a4:a6:a0:64:e3:6d:c5: 18:a5:9f:76:f6:e4:b8:49:80:c3:13:24:89:9c:66: b2:28:4b:54:90:e3:0c:3c:9c:6a:61:23:69:ff:e5: e4:40:e7:3a:42:1f:8f:d6:bb:02:f1:bc:0d:76:7a: 51:5e:93:1f:f8:1b:20:56:9c:cf:1a:fb:6a:a1:be: 84:30:d1:a2:03:b1:cf:68:91:9d:8a:97:2d:3f:f3: 81:47:82:c5:72:38:2a:07:d3:1e:9c:75:87:74:8c: 44:5d:97:c7:71:f9:54:8a:56:19:00:ba:03:9a:9a: dd:ee:24:8d:5b:4b:9b:37:15:2b:09:c7:5b:9c:1e: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0E:D4:44:03:5D:82:57:6D:5D:57:F8:42:8F:51:F2:9E:FB:3A:85 X509v3 Authority Key Identifier: keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:48:d9:4d:87:7d:b1:ae:7d:bd:67:6b:56:f4:51:e6:8f:7e: e1:9a:dc:7a:df:5d:cc:4f:67:ad:da:59:eb:12:b7:37:bc:08: be:38:b5:99:24:5d:0b:ea:c4:45:0f:58:02:62:65:09:31:09: ea:67:8b:9b:66:bb:a5:89:55:bc:3b:47:60:5d:d8:33:9c:0f: 34:1d:6b:3f:58:26:8a:a7:ae:ed:ae:df:7d:97:20:a9:1f:96: 99:57:f9:77:63:e4:60:da:8e:be:b0:b7:3b:7c:4e:b8:ee:ac: a8:bb:14:62:3a:19:15:55:52:84:d1:b8:03:7b:74:18:db:51: 50:db:99:6b:0a:cf:dc:91:37:6d:e5:73:39:09:f9:75:66:68: ff:2c:09:f2:a7:e9:f4:3a:f9:0e:3b:bf:b1:45:26:99:62:41: 28:ad:1a:94:cc:d8:e7:e9:dc:ac:17:a7:9c:0a:eb:b2:94:c4: 5c:c0:3d:16:68:5d:cc:be:2e:9a:18:ac:ca:a2:c7:28:e6:b1: b5:42:95:0e:25:44:dd:19:51:24:a6:82:e3:19:78:4c:44:b2: ac:4d:5b:c3:05:6a:dc:62:af:e2:38:af:85:04:61:a4:3f:f3: 04:3b:34:1f:16:4f:84:e8:26:c7:38:34:ed:85:f1:0f:4c:a0: 31:a8:69:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKERFNzhGNDNENTdDMEJFNzIyMjQ3NDMyRDZCQUFGN0Ey N0MxQTVCOUEwHhcNMjQwNTI1MDIxODA0WhcNMjQwNjAxMDIxODA0WjAYMRYwFAYD VQQDEw02NjUxNGE1Yy05MDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCNMaF3ZRj3iikH1/HTmYXT8u/a26dsKryzEzktC+3JDTSx1mA+gWdxangy7 dZ2ePxHmsvstgW06hC6pt0VZzx6P66z3Kd3A2L6K3PgB7arpnJ2/nX0u+zAagEPT UJK2apePvatZPlPc7l7Uf3TMcwwrILOjEH8KwxsDijI3FaSmoGTjbcUYpZ929uS4 SYDDEySJnGayKEtUkOMMPJxqYSNp/+XkQOc6Qh+P1rsC8bwNdnpRXpMf+BsgVpzP Gvtqob6EMNGiA7HPaJGdipctP/OBR4LFcjgqB9MenHWHdIxEXZfHcflUilYZALoD mprd7iSNW0ubNxUrCcdbnB6QowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUO1EQD XYJXbV1X+EKPUfKe+zqFMB8GA1UdIwQYMBaAFN549D1XwL5yIkdDLWuq96J8Glua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS8yRTQzQzNFQzI4 NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZuSWlSME10YTZyM29ud2FX NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajBQVmZBdm5JaVIwTXRhNnIzb253YVc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS8yRTQzQzNFQzI4NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZu SWlSME10YTZyM29ud2FXNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiSNlNh32xrn29Z2tW9FHmj37hmtx6313MT2et2lnrErc3vAi+OLWZ JF0L6sRFD1gCYmUJMQnqZ4ubZruliVW8O0dgXdgznA80HWs/WCaKp67trt99lyCp H5aZV/l3Y+Rg2o6+sLc7fE647qyouxRiOhkVVVKE0bgDe3QY21FQ25lrCs/ckTdt 5XM5Cfl1Zmj/LAnyp+n0OvkOO7+xRSaZYkEorRqUzNjn6dysF6ecCuuylMRcwD0W aF3Mvi6aGKzKosco5rG1QpUOJUTdGVEkpoLjGXhMRLKsTVvDBWrcYq/iOK+FBGGk P/MEOzQfFk+E6CbHODTthfEPTKAxqGnG -----END CERTIFICATE-----Generated at Sat May 25 03:05:57 2024 by rpki-client on console-fra.rpki-client.org