$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft File: 3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json) Hash identifier: Ej4V2anzKiJdOXzPiVY3bp6k2ECp2/tipcniMgfenNk= Subject key identifier: 92:CD:C6:60:AE:D9:C2:7C:5F:1B:AE:EE:47:43:A1:3B:D7:3C:92:84 Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C Certificate issuer: /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Certificate serial: 02C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft Manifest number: 02C0 Signing time: Sun 05 May 2024 04:06:24 +0000 Manifest this update: Sun 05 May 2024 04:06:24 +0000 Manifest next update: Sun 12 May 2024 04:06:24 +0000 Files and hashes: 1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: jRa4kPGgpniXmPvdAIG/clFMkgb8qpTR/BRCh1GThTI=) 2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: vvesGwwdw13pevInYyT24HAMslE/0OP0vxw1abDxLHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 708 (0x2c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Validity Not Before: May 5 04:06:24 2024 GMT Not After : May 12 04:06:24 2024 GMT Subject: CN=663705c0-2146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:43:3e:af:24:3a:33:db:ce:c2:87:66:e7:d7: b4:69:2a:1c:66:44:48:e1:e1:a9:78:82:f2:11:6b: 41:8b:8a:9f:99:61:4b:8b:a4:c0:39:6b:11:a1:9d: a7:2b:4e:e0:55:cf:f9:8d:ff:01:fc:e0:43:39:7c: 42:c2:10:de:9d:04:04:cd:91:30:fe:b3:48:dd:f2: 0c:e2:b6:8a:98:41:b6:a1:ef:84:74:ec:d5:68:22: e9:7a:5e:05:d2:5a:5f:8f:5c:b3:7c:29:ba:a6:70: 6e:7c:d9:46:17:b8:60:f7:c0:32:70:f3:38:52:98: 99:9b:09:c3:19:fa:88:e9:6a:29:0d:2f:dc:c9:7c: ae:84:cd:52:8e:70:c2:1f:d4:14:f3:b6:e5:87:15: 0e:43:6c:6a:21:64:65:d2:d4:a3:ca:f2:1f:8f:5d: fa:22:52:5d:89:8c:89:a7:5e:db:62:50:46:1a:ce: d2:b9:28:1e:58:e4:7a:1f:df:46:b6:6a:02:fa:06: eb:77:2e:5e:b8:68:41:08:13:d5:4a:18:81:c5:2a: 78:bf:95:c3:81:03:ba:a9:2a:ae:56:8e:ee:34:cc: de:f0:e0:b2:f3:6c:98:c9:2b:c2:df:95:ef:f7:73: 3c:e5:25:3c:0e:c2:b5:d9:0e:c1:16:b9:37:28:df: 8a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CD:C6:60:AE:D9:C2:7C:5F:1B:AE:EE:47:43:A1:3B:D7:3C:92:84 X509v3 Authority Key Identifier: keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:67:18:5d:d7:76:c0:0e:01:94:05:3f:cf:68:4f:36:4f:d0: 40:7c:38:54:0b:fd:9a:38:5c:d0:1d:33:4c:d3:99:d2:c8:67: 45:45:81:9f:97:bc:fc:84:de:77:11:88:c8:3a:7a:74:a5:b7: b9:31:20:c9:35:ab:35:1d:ec:6d:c4:85:b5:eb:6f:6b:39:ed: ea:4d:7a:da:7d:c8:2b:f7:a3:d1:a5:7e:e7:12:71:19:72:76: 39:67:a4:02:bf:cf:2a:1a:60:fa:d4:2a:cb:f9:1c:7c:8e:b4: 35:f8:f7:87:2e:d2:7f:d8:46:3d:a0:ee:e3:1f:3a:52:6f:d7: 97:76:b6:c1:9d:b2:48:59:c6:5b:3d:01:05:5c:26:f2:c5:a1: 8a:61:89:7f:26:75:a0:18:4a:74:a6:a6:8e:77:3a:69:4b:b8: 34:16:72:d7:cd:13:62:f8:b8:f4:4c:f0:a8:16:ac:0c:87:ab: 58:7e:49:20:2b:9a:8a:60:02:8c:a9:1e:f4:68:8f:4a:f9:c4: f1:5e:51:37:3a:85:30:e2:b0:ea:81:38:43:bd:af:51:f3:56: 41:08:88:42:38:90:1f:7b:e0:a8:98:06:66:30:4f:25:88:f8: 52:a7:b9:6d:66:63:b8:78:af:14:c6:89:87:4e:36:e8:7b:4e: 33:2f:51:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFOTExMTAvBgNVBAUTKERDQ0JDQzk4OTM4MDkwOTlFRDAyQjcxNzgxODQzNjU0 MTZCMzFFMUMwHhcNMjQwNTA1MDQwNjI0WhcNMjQwNTEyMDQwNjI0WjAYMRYwFAYD VQQDEw02NjM3MDVjMC0yMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEM+ryQ6M9vOwodm59e0aSocZkRI4eGpeILyEWtBi4qfmWFLi6TAOWsRoZ2n K07gVc/5jf8B/OBDOXxCwhDenQQEzZEw/rNI3fIM4raKmEG2oe+EdOzVaCLpel4F 0lpfj1yzfCm6pnBufNlGF7hg98AycPM4UpiZmwnDGfqI6WopDS/cyXyuhM1SjnDC H9QU87blhxUOQ2xqIWRl0tSjyvIfj136IlJdiYyJp17bYlBGGs7SuSgeWOR6H99G tmoC+gbrdy5euGhBCBPVShiBxSp4v5XDgQO6qSquVo7uNMze8OCy82yYySvC35Xv 93M85SU8DsK12Q7BFrk3KN+KZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLNxmCu 2cJ8Xxuu7kdDoTvXPJKEMB8GA1UdIwQYMBaAFNzLzJiTgJCZ7QK3F4GENlQWsx4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU5MS8yRTkyMTYzNkE0 MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtKbnRBcmNYZ1lRMlZCYXpI aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNdk1tSk9Ba0pudEFyY1hnWVEyVkJhekhody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU5MS8yRTkyMTYzNkE0MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtK bnRBcmNYZ1lRMlZCYXpIaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHZxhd13bADgGUBT/PaE82T9BAfDhUC/2aOFzQHTNM05nSyGdFRYGf l7z8hN53EYjIOnp0pbe5MSDJNas1HextxIW1629rOe3qTXrafcgr96PRpX7nEnEZ cnY5Z6QCv88qGmD61CrL+Rx8jrQ1+PeHLtJ/2EY9oO7jHzpSb9eXdrbBnbJIWcZb PQEFXCbyxaGKYYl/JnWgGEp0pqaOdzppS7g0FnLXzRNi+Lj0TPCoFqwMh6tYfkkg K5qKYAKMqR70aI9K+cTxXlE3OoUw4rDqgThDva9R81ZBCIhCOJAfe+ComAZmME8l iPhSp7ltZmO4eK8UxomHTjboe04zL1FJ -----END CERTIFICATE-----Generated at Sun May 5 04:39:57 2024 by rpki-client on console-ams.rpki-client.org