$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json) Hash identifier: u4+sbzw16nsUWqFLKL+AH/NNoJvIcrrNTnL+ORZ0Bdw= Subject key identifier: C1:2A:3A:BF:3A:DA:09:FF:B1:79:69:2A:34:0C:60:8D:F4:88:67:BE Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Certificate serial: 0A55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft Manifest number: 0A4E Signing time: Thu 02 May 2024 20:29:55 +0000 Manifest this update: Thu 02 May 2024 20:29:55 +0000 Manifest next update: Thu 09 May 2024 20:29:55 +0000 Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: nZnONVT9LzdFv15Dop6xWLp/3unv7+56y24MpPK3HLU=) 2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: QMRA0FVStEOYnc4bxxbjBfYHOGHS2jiP/r1+CjS/IZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2645 (0xa55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Validity Not Before: May 2 20:29:55 2024 GMT Not After : May 9 20:29:55 2024 GMT Subject: CN=6633f7c3-d0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:92:6b:68:34:37:12:71:bb:14:96:f4:aa:22: 35:07:ea:da:51:7c:9c:53:1a:48:44:87:f1:16:8e: ea:85:9e:31:11:fe:0c:7c:5e:37:13:0d:51:bf:12: f7:17:ee:c3:96:41:1b:07:8a:15:85:e0:5c:56:9f: 53:30:dc:6b:29:e9:98:a5:69:1a:13:6c:b2:1c:25: 7b:df:65:a0:09:ca:02:73:b2:5a:56:8f:c7:90:29: 45:ed:5d:0c:60:6a:9c:57:fd:6e:62:f9:e3:fa:74: df:17:35:a9:03:b3:df:fc:b6:1b:ed:76:c3:83:5b: 8b:e3:a5:0d:11:29:fe:42:d0:59:f0:ae:03:cb:44: 75:01:2e:bd:2c:36:8e:cc:a6:67:1e:a4:6d:97:6f: 81:ec:b5:7b:19:48:bf:bb:af:72:26:d9:c5:8a:d2: 7c:e0:c0:45:84:73:a0:3d:6b:8e:dd:95:9e:69:d2: 5b:e4:3c:48:8c:68:87:fc:f3:87:84:19:49:74:19: 6a:5d:12:00:64:78:99:c4:5f:0f:2e:a3:f7:a8:18: 02:8f:dc:8a:d7:e3:43:78:63:3d:30:aa:18:cf:96: bc:03:e8:1e:e5:e4:5b:c2:f6:aa:c1:ef:16:24:dd: 93:ae:6d:e7:0d:da:ae:01:68:6a:9b:0f:25:38:f6: 82:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2A:3A:BF:3A:DA:09:FF:B1:79:69:2A:34:0C:60:8D:F4:88:67:BE X509v3 Authority Key Identifier: keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:73:03:65:0c:90:41:0e:4d:7e:35:d9:8c:26:97:f6:1d:7b: 2c:ab:e0:2f:d1:1b:86:f9:93:5d:74:6d:22:5d:b7:e9:f8:5c: a3:44:d3:54:71:64:3c:81:95:97:02:34:c0:41:71:23:71:1b: e8:be:66:89:32:e5:58:a2:ec:1c:52:77:87:9a:4d:0f:28:b3: b3:67:43:fd:62:36:25:3f:3a:bd:d6:4b:6d:1a:39:84:2f:80: 9a:c9:9f:a6:22:e6:54:e4:39:26:47:27:29:45:e6:81:55:f3: 62:27:78:b4:93:3e:8d:cc:72:43:f4:88:c3:b7:10:4f:b5:72: 6c:f5:37:8f:9e:40:c5:42:f9:45:56:87:24:61:1c:07:51:4b: cc:34:e9:32:27:fb:5f:2c:72:6f:23:a9:e5:c2:f1:0d:14:58: d1:d3:2f:5c:9b:b2:93:46:91:63:9e:50:eb:c2:0c:a7:97:38: b5:6b:22:8f:d2:0e:fb:a6:7a:92:8e:52:88:d5:d3:0b:a7:f1: 46:ef:59:76:78:55:78:62:19:8b:5d:06:8a:52:b4:c9:62:a1: 00:b9:e1:06:ae:42:ab:5e:73:7e:a6:b5:0b:9f:a6:b8:4c:5f: b0:9d:71:26:ce:b0:e4:13:22:27:ad:bd:9d:fa:94:73:8f:18: e0:66:c5:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5 QTdDMkFFMEQwHhcNMjQwNTAyMjAyOTU1WhcNMjQwNTA5MjAyOTU1WjAYMRYwFAYD VQQDEw02NjMzZjdjMy1kMGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15JraDQ3EnG7FJb0qiI1B+raUXycUxpIRIfxFo7qhZ4xEf4MfF43Ew1RvxL3 F+7DlkEbB4oVheBcVp9TMNxrKemYpWkaE2yyHCV732WgCcoCc7JaVo/HkClF7V0M YGqcV/1uYvnj+nTfFzWpA7Pf/LYb7XbDg1uL46UNESn+QtBZ8K4Dy0R1AS69LDaO zKZnHqRtl2+B7LV7GUi/u69yJtnFitJ84MBFhHOgPWuO3ZWeadJb5DxIjGiH/POH hBlJdBlqXRIAZHiZxF8PLqP3qBgCj9yK1+NDeGM9MKoYz5a8A+ge5eRbwvaqwe8W JN2Trm3nDdquAWhqmw8lOPaCVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEqOr86 2gn/sXlpKjQMYI30iGe+MB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho MndhZHE4NWRnM0NhZkNyZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZcwNlDJBBDk1+NdmMJpf2HXssq+Av0RuG+ZNddG0iXbfp+FyjRNNU cWQ8gZWXAjTAQXEjcRvovmaJMuVYouwcUneHmk0PKLOzZ0P9YjYlPzq91kttGjmE L4CayZ+mIuZU5DkmRycpReaBVfNiJ3i0kz6NzHJD9IjDtxBPtXJs9TePnkDFQvlF VockYRwHUUvMNOkyJ/tfLHJvI6nlwvENFFjR0y9cm7KTRpFjnlDrwgynlzi1ayKP 0g77pnqSjlKI1dMLp/FG71l2eFV4YhmLXQaKUrTJYqEAueEGrkKrXnN+prULn6a4 TF+wnXEmzrDkEyInrb2d+pRzjxjgZsUK -----END CERTIFICATE-----Generated at Thu May 2 22:13:17 2024 by rpki-client on console-fra.rpki-client.org