$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json) Hash identifier: pBrGLdYAFmjj/yKoYH4wIpd6ZVVHNhGBN86nPXj9rBY= Subject key identifier: C7:64:1E:8C:22:27:E5:C5:B4:16:BD:7E:DB:74:0D:B2:32:38:D1:F2 Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 03B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft Manifest number: 03B3 Signing time: Sun 05 May 2024 02:37:48 +0000 Manifest this update: Sun 05 May 2024 02:37:47 +0000 Manifest next update: Sun 12 May 2024 02:37:47 +0000 Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: LtclqcQlw+4YcCX2K0tyMVNHP+WcklNcH71BkDwvxNA=) 2: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: bVTzpK9T9o207F9qthG1GuGuZ+KEcGa/wwQ/ucbB/uU=) 3: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: 5OEOJeQkTIXwVen+bbReYBDvNRETezydGm/sseXD4Hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: May 5 02:37:47 2024 GMT Not After : May 12 02:37:47 2024 GMT Subject: CN=6636f0fb-b6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3f:34:0f:51:ef:c6:f7:22:5a:fd:7d:d3:cc: 95:05:c3:67:99:80:b4:2b:bc:c1:dc:13:4b:23:56: 10:83:83:88:a3:22:72:d2:8a:98:f5:b5:19:8b:fc: 94:b2:a7:9e:df:97:dc:4c:77:91:27:20:da:b6:6a: d5:65:71:0c:0e:9d:72:92:80:ca:74:79:3f:59:14: 29:f8:bf:12:7b:9b:2c:67:6e:a6:2a:84:e3:e4:3f: bc:0c:47:44:17:b0:78:91:3d:4a:ce:5a:2b:cd:6f: c5:84:92:53:83:1a:48:b6:c0:07:10:36:e4:e1:12: ba:ef:e2:4f:ad:03:96:79:6f:fc:27:dd:96:d0:f4: 63:3b:c5:ee:94:b5:bd:a0:6b:47:12:be:30:43:d2: ac:24:bf:ad:24:ed:a9:83:08:6e:69:85:ec:4a:fe: 70:67:28:ad:18:36:e5:1c:30:a3:8b:45:54:0e:e9: 4a:5a:28:ce:2e:5e:c3:ae:32:79:63:f7:5a:37:7d: 23:fe:cb:bd:a3:04:cc:1e:7e:3f:b3:d1:9b:1c:8c: a5:b2:24:44:5e:e3:81:8c:1f:69:72:6c:8e:5f:e6: f4:47:26:f7:ee:1f:b2:a1:8a:a6:63:6d:03:81:0b: cb:9a:dd:30:33:3f:a8:4a:9b:30:07:c3:9c:c3:c6: cc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:64:1E:8C:22:27:E5:C5:B4:16:BD:7E:DB:74:0D:B2:32:38:D1:F2 X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b1:be:fe:88:b4:8e:07:98:81:5f:58:d5:f0:d3:c6:de:13: 5c:c9:a7:9a:21:c1:e5:73:3d:f7:81:da:36:5b:a3:ec:fd:d4: ef:49:32:25:d1:fd:cf:7b:5e:5a:fa:87:9b:cb:b3:c9:ac:1c: 8f:9b:1d:97:c4:51:03:ed:4e:32:ef:ea:c0:b7:77:78:10:9f: e1:9e:70:1c:ca:58:f2:a9:ef:f3:d9:b9:79:25:d5:33:b8:ac: 51:af:1c:b7:4f:7d:74:fa:a7:a5:90:4e:84:03:b9:f2:4f:90: d6:4e:2e:88:2d:e1:b9:f2:85:57:0b:94:76:46:af:dc:f1:e5: 27:dc:b2:ca:73:1b:93:88:4e:e9:15:d8:ac:8e:93:b2:fe:22: 13:5f:bd:1f:ef:95:95:64:31:ea:b8:c1:87:28:ac:fa:e9:6c: 29:00:c9:21:37:c7:e7:4f:dd:6e:19:1e:1f:54:a7:38:3e:55: c1:4c:2d:9b:c4:46:55:54:4d:b1:a6:41:c6:a1:8e:14:27:df: a0:c4:f6:6c:34:28:b0:67:6d:5d:f5:a1:05:7a:0c:b8:5b:5a: 68:ee:e9:c5:16:27:9a:00:31:00:a2:22:7b:bf:4d:bb:a9:c9: 47:96:97:ad:92:1e:8c:5b:29:17:6a:4a:d1:77:de:07:82:93: 92:2b:57:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjQwNTA1MDIzNzQ3WhcNMjQwNTEyMDIzNzQ3WjAYMRYwFAYD VQQDEw02NjM2ZjBmYi1iNmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwj80D1HvxvciWv1908yVBcNnmYC0K7zB3BNLI1YQg4OIoyJy0oqY9bUZi/yU sqee35fcTHeRJyDatmrVZXEMDp1ykoDKdHk/WRQp+L8Se5ssZ26mKoTj5D+8DEdE F7B4kT1KzlorzW/FhJJTgxpItsAHEDbk4RK67+JPrQOWeW/8J92W0PRjO8XulLW9 oGtHEr4wQ9KsJL+tJO2pgwhuaYXsSv5wZyitGDblHDCji0VUDulKWijOLl7DrjJ5 Y/daN30j/su9owTMHn4/s9GbHIylsiREXuOBjB9pcmyOX+b0Ryb37h+yoYqmY20D gQvLmt0wMz+oSpswB8Ocw8bMEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdkHowi J+XFtBa9ftt0DbIyONHyMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y aS1hVm5XbURfaldQTzNxU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMsb7+iLSOB5iBX1jV8NPG3hNcyaeaIcHlcz33gdo2W6Ps/dTvSTIl 0f3Pe15a+oeby7PJrByPmx2XxFED7U4y7+rAt3d4EJ/hnnAcyljyqe/z2bl5JdUz uKxRrxy3T310+qelkE6EA7nyT5DWTi6ILeG58oVXC5R2Rq/c8eUn3LLKcxuTiE7p FdisjpOy/iITX70f75WVZDHquMGHKKz66WwpAMkhN8fnT91uGR4fVKc4PlXBTC2b xEZVVE2xpkHGoY4UJ9+gxPZsNCiwZ21d9aEFegy4W1po7unFFieaADEAoiJ7v027 qclHlpetkh6MWykXakrRd94HgpOSK1f/ -----END CERTIFICATE-----Generated at Sun May 5 03:09:54 2024 by rpki-client on console-ams.rpki-client.org