$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json) Hash identifier: 9nVy37YeiOtU9DoG0S/e3yLNoNoyejWSEXl3b5S2djQ= Subject key identifier: 7A:E5:ED:A2:2C:5F:43:E2:E1:7A:C7:99:38:23:73:1A:24:B7:74:DA Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft Manifest number: 39 Signing time: Fri 17 May 2024 08:24:12 +0000 Manifest this update: Fri 17 May 2024 08:24:11 +0000 Manifest next update: Fri 24 May 2024 08:24:11 +0000 Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: MvtUprzmN34N59IQUuWWXandWzdb9mEqdOnuEiqTaUo=) 2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: Oi/wjO5pl87EaRKCP4x5ACCYkYXxBJycl7Ltw0ZviNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Validity Not Before: May 17 08:24:11 2024 GMT Not After : May 24 08:24:11 2024 GMT Subject: CN=6647142b-a21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bb:d6:91:e3:af:32:9f:b0:ff:f4:fe:0d:4a: 27:92:0e:da:7a:aa:86:ab:db:01:94:75:1e:5f:8f: 55:2e:f2:9c:12:fc:9e:1e:d7:3d:be:0f:d2:85:7c: 8c:e4:77:e6:46:2b:ba:98:86:7a:0b:36:5c:f4:91: d0:60:26:7d:01:ed:81:47:99:9b:2e:88:39:8a:f8: e9:2a:5a:e6:2e:5d:0d:30:c9:52:8c:0b:34:3a:37: d3:7b:26:22:87:36:1e:19:11:9e:ff:8b:98:81:17: 13:32:62:bb:15:b2:bf:a2:0c:83:d3:b0:25:9f:8d: 2b:ce:5d:13:20:24:4f:93:cb:8e:29:16:54:c8:85: d0:0d:1d:37:c1:49:bd:85:2c:59:4a:b5:bb:38:1e: dd:f7:7d:30:10:3a:e5:ca:e7:71:a6:f2:40:ad:25: 67:c0:1a:78:04:b6:65:a0:b0:a4:2e:ec:ff:4f:36: 06:53:73:49:b0:73:b7:d0:6d:6b:cf:79:eb:05:67: b8:54:93:09:67:e1:c9:1b:8a:1d:8b:c2:19:17:db: 35:0d:78:5e:5b:e5:2b:f4:a9:c6:0f:1d:d7:cb:a2: b9:4b:ca:0b:df:47:64:3b:cf:e1:85:82:8e:d5:c1: c8:5b:85:24:8e:57:cb:20:a1:f9:3c:4c:9a:f5:b4: eb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E5:ED:A2:2C:5F:43:E2:E1:7A:C7:99:38:23:73:1A:24:B7:74:DA X509v3 Authority Key Identifier: keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:8f:2c:04:36:7c:fa:c4:83:f1:1d:5e:d1:bd:d0:35:14:c1: 9e:aa:bd:ef:c6:46:5b:29:ca:4c:4c:04:37:3c:d7:5b:0a:7d: d1:8d:7c:34:5a:46:35:3a:b8:9e:b0:2f:0a:26:b1:34:24:e7: 27:d2:d1:6f:c4:4c:ab:c4:de:98:92:2a:91:c4:81:af:98:b8: d7:3b:72:ee:40:c0:8f:3b:82:03:79:d1:10:a8:c6:06:a8:4b: 7f:72:ca:aa:85:e1:8f:98:00:b7:41:5d:7d:b0:05:d4:2c:44: 96:60:25:4d:61:86:73:a1:11:8f:01:07:69:85:91:c8:02:2b: 8e:db:df:93:70:9b:fb:12:ef:5e:71:63:dd:64:ae:a4:14:6a: 73:69:48:42:b2:23:24:a1:0a:77:f8:20:04:f6:cb:dc:b3:15: fb:a3:aa:b0:56:91:c4:3d:99:63:e9:31:5b:a5:9e:30:73:b4: 0d:27:58:e8:ac:c5:fe:3d:4c:18:59:ae:6c:e0:6d:35:f9:b5: 81:fe:23:be:df:c0:5b:98:f2:7e:29:78:6e:bd:46:3b:b6:87: 58:51:2a:76:ae:24:cc:0a:46:e9:7c:79:aa:8c:d7:9e:29:7b: 94:a8:93:b4:d1:1b:13:06:38:11:da:2f:e4:2c:2c:1a:d8:25: 40:35:48:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTBCNjExMC8GA1UEBRMoM0VDNEY3NUU2NEI3MkE4ODc4NkFGNEI5N0M5ODQ4NkNC RDZEMkY1NjAeFw0yNDA1MTcwODI0MTFaFw0yNDA1MjQwODI0MTFaMBgxFjAUBgNV BAMTDTY2NDcxNDJiLWEyMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCau9aR468yn7D/9P4NSieSDtp6qoar2wGUdR5fj1Uu8pwS/J4e1z2+D9KFfIzk d+ZGK7qYhnoLNlz0kdBgJn0B7YFHmZsuiDmK+OkqWuYuXQ0wyVKMCzQ6N9N7JiKH Nh4ZEZ7/i5iBFxMyYrsVsr+iDIPTsCWfjSvOXRMgJE+Ty44pFlTIhdANHTfBSb2F LFlKtbs4Ht33fTAQOuXK53Gm8kCtJWfAGngEtmWgsKQu7P9PNgZTc0mwc7fQbWvP eesFZ7hUkwln4ckbih2LwhkX2zUNeF5b5Sv0qcYPHdfLorlLygvfR2Q7z+GFgo7V wchbhSSOV8sgofk8TJr1tOufAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeuXtoixf Q+LheseZOCNzGiS3dNowHwYDVR0jBBgwFoAUPsT3XmS3Koh4avS5fJhIbL1tL1Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMEI2LzVGQkU0M0I0QkYz MDExRUVCRTRGM0MxRUM0RjlBRTAyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUHNUM1htUzNLb2g0YXZTNWZKaEliTDF0TDFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF MEI2LzVGQkU0M0I0QkYzMDExRUVCRTRGM0MxRUM0RjlBRTAyL1BzVDNYbVMzS29o NGF2UzVmSmhJYkwxdEwxWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAaPLAQ2fPrEg/EdXtG90DUUwZ6qve/GRlspykxMBDc811sKfdGNfDRa RjU6uJ6wLwomsTQk5yfS0W/ETKvE3piSKpHEga+YuNc7cu5AwI87ggN50RCoxgao S39yyqqF4Y+YALdBXX2wBdQsRJZgJU1hhnOhEY8BB2mFkcgCK47b35Nwm/sS715x Y91krqQUanNpSEKyIyShCnf4IAT2y9yzFfujqrBWkcQ9mWPpMVulnjBztA0nWOis xf49TBhZrmzgbTX5tYH+I77fwFuY8n4peG69Rju2h1hRKnauJMwKRul8eaqM154p e5Sok7TRGxMGOBHaL+QsLBrYJUA1SGE= -----END CERTIFICATE-----Generated at Fri May 17 10:59:09 2024 by rpki-client on console-ams.rpki-client.org