$ rpki-client -vvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft File: 3fikyb7AEE4WzOMhqWWpLGYURTA.mft (raw, json) Hash identifier: QInxeuNSZAhQj5ko1Q2gwkEtmjaNpdf3RZSOQZIp0jE= Subject key identifier: 7A:28:A8:2F:C8:5D:8E:AD:15:BE:11:26:08:27:D2:9E:85:24:81:CA Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 Certificate issuer: /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Certificate serial: 0D3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft Manifest number: 0D31 Signing time: Fri 26 Apr 2024 18:40:29 +0000 Manifest this update: Fri 26 Apr 2024 18:40:28 +0000 Manifest next update: Fri 03 May 2024 18:40:28 +0000 Files and hashes: 1: 3fikyb7AEE4WzOMhqWWpLGYURTA.crl (hash: itGb+s5g0mndN676VXlBB/GBYSKiNMkf8pRyp4ZCEoI=) 2: 215FAD42B98611E9A053044FC4F9AE02.roa (hash: wTGd2ek5BWcBcdfNOE0XeJ+PA7L13PzSNAsYg6mQ1+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 18:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3386 (0xd3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Validity Not Before: Apr 26 18:40:28 2024 GMT Not After : May 3 18:40:28 2024 GMT Subject: CN=662bf51c-f12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ff:a9:34:31:56:18:fa:4d:d6:16:fa:4d:27: 99:46:6f:34:92:1d:d4:2c:2c:cc:03:26:50:5d:6e: 1e:eb:b0:3c:7e:2a:14:3e:d2:09:3c:28:30:a8:59: 67:7a:0d:2c:66:a4:20:72:5f:55:91:7b:43:f5:22: c6:32:79:72:be:f2:60:6b:e6:36:a0:5b:c4:ca:aa: fa:9d:40:37:3c:0a:ba:b1:16:ad:5b:fb:1c:05:77: f6:7a:f3:1e:d5:3f:97:17:00:2d:ed:53:46:78:67: ab:e6:c6:db:5f:90:47:45:64:6c:77:73:53:f8:32: 70:9f:7b:d9:5b:54:3e:ef:45:a4:bd:13:19:5c:d6: cb:ce:6b:74:53:5c:41:66:88:cb:da:cc:dc:2c:b1: f7:5a:d0:8d:b0:fe:40:e6:8c:c2:7a:2e:2c:2d:38: 2f:f4:6d:57:4e:d8:4d:d7:f9:77:f2:de:6b:ee:5f: 8a:eb:75:4a:16:3f:e6:24:fb:4a:3f:10:d9:5c:c5: bd:66:57:5f:27:ad:57:d7:e3:a0:eb:1e:69:32:a8: 36:5f:30:99:70:e7:85:a9:09:5b:95:e0:c2:e2:4c: 57:49:32:3a:58:f6:71:10:31:7b:d5:50:4e:ca:84: 5e:db:1c:fd:c2:33:a4:13:53:e9:bd:3c:ca:93:7d: f1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:28:A8:2F:C8:5D:8E:AD:15:BE:11:26:08:27:D2:9E:85:24:81:CA X509v3 Authority Key Identifier: keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:a8:e4:c6:47:4d:e6:f9:b1:90:80:a6:ee:23:5f:27:8c:80: 2a:b0:ae:9a:e2:e1:a8:49:9e:89:a8:b2:ab:c3:8b:b1:14:2a: 49:91:fe:fa:92:bf:b3:e8:49:1a:4e:fa:a8:80:16:07:20:63: fe:99:05:aa:80:e4:2b:6b:8a:aa:0d:4b:fe:fd:30:88:57:93: b5:8d:5a:f7:5a:89:d8:c7:d2:84:45:ef:ce:66:04:fb:d4:6b: ca:04:1f:c9:82:13:89:92:f1:99:df:e0:f7:e5:82:83:15:d2: 00:ac:e0:3d:89:1b:c8:5d:96:22:30:2c:f0:87:c7:40:bf:6b: 6c:9b:20:a4:33:e2:81:da:24:9a:9a:2b:55:c0:1d:c2:32:d4: 54:db:e6:61:bb:95:e9:4e:eb:76:08:f5:3f:4f:9d:4a:2a:a2: 18:a8:ac:4d:c5:81:44:cc:6f:63:4c:83:2e:89:bd:21:4a:56: 1b:a5:d5:49:2b:5f:2c:5f:b0:53:21:83:aa:c6:bc:e0:40:12: 45:85:88:11:9b:2b:28:3a:d1:8c:73:09:f8:49:d9:d0:87:8d: c2:bf:0d:2c:34:af:8b:a6:15:3c:ec:1e:d5:b4:c2:b9:df:86: 0a:13:d0:78:79:74:4c:2a:dc:c6:af:c7:2f:c7:fc:bb:99:4e: 83:f3:49:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxOEUxMTAvBgNVBAUTKERERjhBNEM5QkVDMDEwNEUxNkNDRTMyMUE5NjVBOTJD NjYxNDQ1MzAwHhcNMjQwNDI2MTg0MDI4WhcNMjQwNTAzMTg0MDI4WjAYMRYwFAYD VQQDEw02NjJiZjUxYy1mMTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwv+pNDFWGPpN1hb6TSeZRm80kh3ULCzMAyZQXW4e67A8fioUPtIJPCgwqFln eg0sZqQgcl9VkXtD9SLGMnlyvvJga+Y2oFvEyqr6nUA3PAq6sRatW/scBXf2evMe 1T+XFwAt7VNGeGer5sbbX5BHRWRsd3NT+DJwn3vZW1Q+70WkvRMZXNbLzmt0U1xB ZojL2szcLLH3WtCNsP5A5ozCei4sLTgv9G1XTthN1/l38t5r7l+K63VKFj/mJPtK PxDZXMW9ZldfJ61X1+Og6x5pMqg2XzCZcOeFqQlbleDC4kxXSTI6WPZxEDF71VBO yoRe2xz9wjOkE1PpvTzKk33x0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHooqC/I XY6tFb4RJggn0p6FJIHKMB8GA1UdIwQYMBaAFN34pMm+wBBOFszjIallqSxmFEUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE4RS9BNzk2RTkwQUFF MDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVFNFd6T01ocVdXcExHWVVS VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNmaWt5YjdBRUU0V3pPTWhxV1dwTEdZVVJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTE4RS9BNzk2RTkwQUFFMDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVF NFd6T01ocVdXcExHWVVSVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYqOTGR03m+bGQgKbuI18njIAqsK6a4uGoSZ6JqLKrw4uxFCpJkf76 kr+z6EkaTvqogBYHIGP+mQWqgOQra4qqDUv+/TCIV5O1jVr3WonYx9KERe/OZgT7 1GvKBB/JghOJkvGZ3+D35YKDFdIArOA9iRvIXZYiMCzwh8dAv2tsmyCkM+KB2iSa mitVwB3CMtRU2+Zhu5XpTut2CPU/T51KKqIYqKxNxYFEzG9jTIMuib0hSlYbpdVJ K18sX7BTIYOqxrzgQBJFhYgRmysoOtGMcwn4SdnQh43Cvw0sNK+LphU87B7VtMK5 34YKE9B4eXRMKtzGr8cvx/y7mU6D80l9 -----END CERTIFICATE-----Generated at Sun Apr 28 15:50:41 2024 by rpki-client on console-fra.rpki-client.org