$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft File: 3TbkXHHT2Ss80actX1qzJbNGrco.mft (raw, json) Hash identifier: O9+943FHHTbHtkRsliZKqERcPNm0rpyMd+z06WPkSMA= Subject key identifier: BF:26:CF:52:48:BB:F7:04:3F:5B:3F:88:73:2F:E8:0B:1E:45:3B:FD Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA Certificate issuer: /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft Manifest number: 2E Signing time: Fri 17 May 2024 08:31:53 +0000 Manifest this update: Fri 17 May 2024 08:31:52 +0000 Manifest next update: Fri 24 May 2024 08:31:52 +0000 Files and hashes: 1: 3TbkXHHT2Ss80actX1qzJbNGrco.crl (hash: FxSYO3Af3Nua+NZxGAdIo3Wv2wtxJbGgAd22jGdM/nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Validity Not Before: May 17 08:31:52 2024 GMT Not After : May 24 08:31:52 2024 GMT Subject: CN=664715f8-6c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:72:e7:22:34:00:95:95:34:30:28:5d:46:5e: 83:9d:01:dd:73:8e:18:2c:ed:77:6c:b9:d4:eb:cb: 51:89:62:1c:dd:f0:81:5f:21:31:e3:33:ab:55:71: d5:bb:7f:bb:ca:61:72:64:ca:85:3e:45:fd:af:c0: fb:8b:a6:a7:be:04:32:39:bf:80:75:4a:7c:21:86: ce:d7:a5:af:22:7d:c3:3c:94:2f:a0:76:64:c6:b5: a7:39:15:fd:34:7b:21:20:99:2d:a7:8a:13:d5:2a: be:e6:9a:3b:bd:c7:c2:21:fa:40:73:0e:fc:83:33: 02:4a:3f:da:2b:10:a5:8b:24:8e:1c:f1:80:a8:47: 7f:19:09:5c:21:85:67:3b:ee:68:ee:f2:15:20:a4: 6b:62:d4:56:bc:e1:d6:42:eb:d6:59:3a:aa:19:05: ab:ff:07:24:c6:bf:2d:59:72:73:7c:8d:dd:87:41: 7e:76:6e:11:73:d6:a8:ae:5b:2d:a8:c4:6b:d5:3e: d4:89:96:6b:cd:95:bd:88:e7:ae:8e:19:09:7b:ac: e0:5b:09:54:61:d0:60:09:81:b6:d8:05:f1:05:99: 0c:3b:64:c1:05:a6:5d:67:cf:74:fc:45:44:71:e5: 3c:ea:d9:a2:4a:8d:f5:3d:ad:ff:77:d6:61:90:ce: 69:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:26:CF:52:48:BB:F7:04:3F:5B:3F:88:73:2F:E8:0B:1E:45:3B:FD X509v3 Authority Key Identifier: keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d2:ed:ee:f0:f6:7c:65:0c:fc:f3:32:34:22:ee:03:e3:f8: ff:ab:d5:e3:44:b9:cc:e0:1d:05:de:9b:d6:74:4e:dd:64:de: a5:88:21:5d:db:74:24:e2:a9:a4:fe:87:73:e1:2d:c5:0a:d5: 97:cb:9a:cd:ae:44:89:90:dc:e0:e0:81:4b:58:2a:7f:28:e7: 10:6a:5e:bd:65:49:5f:c2:95:2f:00:e3:24:19:7a:66:33:db: 64:ac:ae:13:c9:7d:f5:fd:c9:b0:2f:13:0b:7c:77:e0:9a:c3: c2:81:22:22:e8:7b:9c:7a:c5:95:be:e4:c2:61:a2:d0:c2:57: a2:38:03:45:e3:ab:1a:52:24:bd:b9:cd:1b:61:eb:a7:3b:ef: 12:ac:b2:52:48:70:38:2c:02:ab:70:39:b3:18:a2:a7:d6:6c: 9f:f2:28:ee:23:f0:96:ca:11:8f:46:17:55:e7:e2:c2:f2:34: bf:aa:de:5f:74:3d:dd:cf:69:18:0c:72:b0:00:ae:ae:a8:74: 16:e8:58:e2:fa:8f:57:db:20:90:af:02:83:b4:70:5b:40:34: 5f:cb:f6:cb:58:38:6d:70:5f:df:81:e7:74:93:81:42:93:56: a9:10:3e:02:c1:5b:b9:21:1d:22:fe:ad:8d:56:be:95:5e:e7: 69:4a:b1:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjRCRTExMC8GA1UEBRMoREQzNkU0NUM3MUQzRDkyQjNDRDFBNzJENUY1QUIzMjVC MzQ2QURDQTAeFw0yNDA1MTcwODMxNTJaFw0yNDA1MjQwODMxNTJaMBgxFjAUBgNV BAMTDTY2NDcxNWY4LTZjMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+cuciNACVlTQwKF1GXoOdAd1zjhgs7XdsudTry1GJYhzd8IFfITHjM6tVcdW7 f7vKYXJkyoU+Rf2vwPuLpqe+BDI5v4B1Snwhhs7Xpa8ifcM8lC+gdmTGtac5Ff00 eyEgmS2nihPVKr7mmju9x8Ih+kBzDvyDMwJKP9orEKWLJI4c8YCoR38ZCVwhhWc7 7mju8hUgpGti1Fa84dZC69ZZOqoZBav/ByTGvy1ZcnN8jd2HQX52bhFz1qiuWy2o xGvVPtSJlmvNlb2I566OGQl7rOBbCVRh0GAJgbbYBfEFmQw7ZMEFpl1nz3T8RURx 5Tzq2aJKjfU9rf931mGQzmk3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvybPUki7 9wQ/Wz+Icy/oCx5FO/0wHwYDVR0jBBgwFoAU3TbkXHHT2Ss80actX1qzJbNGrcow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCNEJFLzc4QkQzMjI0Q0NG NzExRUU5RTg5RDY3QUM0RjlBRTAyLzNUYmtYSEhUMlNzODBhY3RYMXF6SmJOR3Jj by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM1Ria1hISFQyU3M4MGFjdFgxcXpKYk5HcmNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC NEJFLzc4QkQzMjI0Q0NGNzExRUU5RTg5RDY3QUM0RjlBRTAyLzNUYmtYSEhUMlNz ODBhY3RYMXF6SmJOR3Jjby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAArS7e7w9nxlDPzzMjQi7gPj+P+r1eNEuczgHQXem9Z0Tt1k3qWIIV3b dCTiqaT+h3PhLcUK1ZfLms2uRImQ3ODggUtYKn8o5xBqXr1lSV/ClS8A4yQZemYz 22SsrhPJffX9ybAvEwt8d+Caw8KBIiLoe5x6xZW+5MJhotDCV6I4A0XjqxpSJL25 zRth66c77xKsslJIcDgsAqtwObMYoqfWbJ/yKO4j8JbKEY9GF1Xn4sLyNL+q3l90 Pd3PaRgMcrAArq6odBboWOL6j1fbIJCvAoO0cFtANF/L9stYOG1wX9+B53STgUKT VqkQPgLBW7khHSL+rY1WvpVe52lKsRQ= -----END CERTIFICATE-----Generated at Fri May 17 10:10:49 2024 by rpki-client on console-fra.rpki-client.org