$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: A5MTGo/YRN+5dkJ+3IJeI4vis7S3b+tfGL2ToWWR+AE= Subject key identifier: 2A:9D:99:E8:48:D2:C0:32:C1:DF:12:5B:4E:72:D0:45:07:02:70:14 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 07C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 0799 Signing time: Sun 02 Jun 2024 14:54:30 +0000 Manifest this update: Sun 02 Jun 2024 14:54:30 +0000 Manifest next update: Sun 09 Jun 2024 14:54:30 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: dNrE4UdEAXvhmymujoLHDWYVFJo1D8n2fMQVQDnRtsE=) 2: 664604CCD8E211ED913C4684C4F9AE02.roa (hash: GI6FTz/63iOyD89xUjzyjPFzQsyS02fULKQPxC7ST4I=) 3: 5503948C15E911EF8907C019C4F9AE02.roa (hash: DlBXsGP7hQgf1ZKPelkD9oWT57vyij6P+7rPC2Mu7xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 14:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1984 (0x7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Jun 2 14:54:30 2024 GMT Not After : Jun 9 14:54:30 2024 GMT Subject: CN=665c87a6-1426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:a8:8e:b2:7a:35:84:8e:da:78:da:89:59: a1:68:a5:b0:4c:f3:65:dd:0b:04:21:fc:cf:43:a3: 22:c5:b6:0d:0e:81:a6:bf:cc:9d:13:15:a7:ea:cf: ec:7a:67:b5:70:b6:1a:8f:e6:c5:72:da:a5:ed:4d: 66:f3:10:94:09:93:08:e1:fd:40:4e:19:21:af:98: 1a:56:3c:c8:3e:f2:ef:1a:5d:e8:02:60:1e:5d:e2: 36:a7:b7:19:9c:fb:43:e4:2b:94:a5:0c:6a:93:49: a4:23:c2:1d:26:49:e2:d3:c2:7f:3e:de:95:3e:cd: 33:15:bd:98:7f:65:69:5f:1a:ac:78:8c:d0:24:12: 0d:80:8d:00:af:4c:4a:01:b0:0b:f2:83:11:83:44: 81:c0:c2:6b:91:83:fb:de:1c:37:15:8b:e3:65:b2: 0f:bc:f5:e3:8c:1e:37:90:75:da:6f:2c:0a:85:2b: 9c:f6:b4:56:48:89:ac:14:df:a6:0a:cb:f5:a6:75: af:30:5d:a4:0a:42:7c:7a:a9:38:ce:dd:15:75:b1: 94:b5:12:f2:d3:55:01:98:05:cb:cc:56:05:5d:40: 86:72:a5:75:33:d1:db:01:29:0d:f2:a4:27:22:7d: 2c:f3:81:23:fc:ea:9d:39:a6:7a:d8:02:67:e4:1e: 3a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9D:99:E8:48:D2:C0:32:C1:DF:12:5B:4E:72:D0:45:07:02:70:14 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:60:ae:97:3e:7b:9b:50:e8:6a:5c:aa:8a:67:de:2c:61:86: 1f:a3:dc:cc:81:ef:f8:10:91:c8:2d:3e:f8:6c:e4:89:16:f5: 69:1f:65:60:90:cd:a0:4f:e6:3f:ab:f2:6b:98:3a:a9:6a:0b: 43:b0:1b:fc:00:1f:87:78:b1:75:9d:9b:e4:f1:11:74:5c:86: 53:39:9b:fc:ba:24:fd:a3:0f:85:7f:0b:ab:15:7d:e9:f5:37: 07:77:97:4c:24:c2:c1:3f:3f:23:90:69:f3:fe:62:ce:da:e6: 70:cb:d8:da:8c:1a:8b:b8:db:2d:54:64:4b:94:87:4c:8c:11: 5b:80:6a:86:96:76:c3:f9:b7:b4:b4:8c:25:2a:33:8c:e3:2c: 5c:21:83:f7:4f:8a:a3:37:0c:3c:c9:20:5f:c3:49:61:dd:a5: 03:e7:f1:96:5a:2c:c3:09:42:20:c8:76:2c:f6:01:4a:aa:8b: b0:f8:4e:5d:79:5e:e7:df:93:89:4f:bd:44:84:02:f5:66:e6: 1e:24:1d:e0:fe:e0:73:97:5e:f6:13:f7:1d:b7:73:89:db:37: a4:34:3e:8b:d7:7b:17:3b:a0:9d:70:00:81:55:ba:3f:14:08: 13:ea:6d:7e:39:55:bb:0c:bf:84:7f:fe:f7:13:2e:cc:d4:58: 30:1a:ce:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjQwNjAyMTQ1NDMwWhcNMjQwNjA5MTQ1NDMwWjAYMRYwFAYD VQQDEw02NjVjODdhNi0xNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrqojrJ6NYSO2njaiVmhaKWwTPNl3QsEIfzPQ6MixbYNDoGmv8ydExWn6s/s eme1cLYaj+bFctql7U1m8xCUCZMI4f1AThkhr5gaVjzIPvLvGl3oAmAeXeI2p7cZ nPtD5CuUpQxqk0mkI8IdJkni08J/Pt6VPs0zFb2Yf2VpXxqseIzQJBINgI0Ar0xK AbAL8oMRg0SBwMJrkYP73hw3FYvjZbIPvPXjjB43kHXabywKhSuc9rRWSImsFN+m Csv1pnWvMF2kCkJ8eqk4zt0VdbGUtRLy01UBmAXLzFYFXUCGcqV1M9HbASkN8qQn In0s84Ej/OqdOaZ62AJn5B46IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqdmehI 0sAywd8SW05y0EUHAnAUMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8YK6XPnubUOhqXKqKZ94sYYYfo9zMge/4EJHILT74bOSJFvVpH2Vg kM2gT+Y/q/JrmDqpagtDsBv8AB+HeLF1nZvk8RF0XIZTOZv8uiT9ow+FfwurFX3p 9TcHd5dMJMLBPz8jkGnz/mLO2uZwy9jajBqLuNstVGRLlIdMjBFbgGqGlnbD+be0 tIwlKjOM4yxcIYP3T4qjNww8ySBfw0lh3aUD5/GWWizDCUIgyHYs9gFKqouw+E5d eV7n35OJT71EhAL1ZuYeJB3g/uBzl172E/cdt3OJ2zekND6L13sXO6CdcACBVbo/ FAgT6m1+OVW7DL+Ef/73Ey7M1FgwGs7D -----END CERTIFICATE-----Generated at Sun Jun 2 18:46:18 2024 by rpki-client on console-ams.rpki-client.org