$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json) Hash identifier: H14bF2mdnJFJMc+xsCC3HtL7xsRWTtaOvnlO2aowuqo= Subject key identifier: 47:48:DA:F3:2C:48:95:F7:FA:9B:06:92:70:2A:26:CF:B0:39:4B:DF Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Certificate serial: 034A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft Manifest number: 0336 Signing time: Tue 07 May 2024 03:01:22 +0000 Manifest this update: Tue 07 May 2024 03:01:21 +0000 Manifest next update: Tue 14 May 2024 03:01:21 +0000 Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: iuYrY+YD8vv7yu0BVIV1VW8ea8PXhid8bT2Qen8A98I=) 2: 2940AFDCD84211EDBD609A4DC4F9AE02.roa (hash: Uo58piz25i9Bob1imDU9UvvyWe420wfPeaSZtuylXk4=) 3: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: hknzYgKubvcvsxm1xF8fHySPRHrCG3VJpGUtjCzjN4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 842 (0x34a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Validity Not Before: May 7 03:01:21 2024 GMT Not After : May 14 03:01:21 2024 GMT Subject: CN=66399981-3196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:19:c6:9a:e6:0b:f6:d5:d4:93:94:70:0b:5e: 35:0a:ce:14:ec:fa:fa:e6:d5:58:62:2b:bf:37:8f: 52:81:4b:9d:21:ca:43:d6:fc:35:2e:14:94:ab:52: d3:ea:0c:6d:be:8d:4e:39:7d:06:57:12:37:61:fd: 17:d7:40:9b:88:dc:bb:16:c6:49:87:da:0f:99:76: ac:50:a2:df:77:81:25:2c:04:8e:36:83:37:41:93: 15:41:46:39:79:de:32:74:37:a0:4d:1e:fc:9d:83: bf:84:e0:50:cd:7d:8c:24:d1:5e:ad:40:ec:8c:37: bc:46:e1:8d:97:6d:5d:70:34:bc:ab:30:33:ae:09: ad:5e:d4:40:fc:23:f5:7c:4c:c0:51:9a:8d:62:3d: ce:1b:28:05:ae:77:73:3e:44:86:53:2e:20:bb:06: 24:49:53:6c:b0:71:e7:20:ce:fa:c6:e2:26:f5:8e: 32:0b:10:93:37:5e:fc:02:65:1e:4c:f1:2d:72:95: 91:01:16:2e:92:0c:30:fc:41:60:27:d0:12:b3:bb: 20:a4:d6:3d:b3:b5:7c:a2:98:55:b5:72:8f:db:b8: 00:b5:c6:86:dc:73:22:51:72:4f:b8:2a:9a:26:2c: fb:c2:34:fb:b7:0f:7a:af:f2:24:86:27:f0:af:61: 4e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:48:DA:F3:2C:48:95:F7:FA:9B:06:92:70:2A:26:CF:B0:39:4B:DF X509v3 Authority Key Identifier: keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:2a:7c:bd:7d:f9:d6:22:d0:b1:f7:f4:3a:7d:fb:26:a9:aa: b9:82:02:3c:c0:13:87:ac:06:db:7e:5a:19:00:d0:50:bf:ef: 6c:3e:89:fd:de:51:10:7d:6b:59:14:ee:00:c1:9d:1b:ff:0a: 35:e7:fe:55:d6:fc:14:ce:ad:de:ea:4f:53:90:41:59:95:93: 9e:e0:cc:90:c6:f0:04:ce:d1:2b:42:ce:9c:3b:4c:f0:aa:f8: 4c:2e:f8:53:e8:27:6b:64:f8:de:f4:59:2a:9a:85:27:3d:72: 05:bd:81:66:49:37:5a:66:6e:6f:5c:b8:e9:42:f1:cf:da:9a: 8f:4c:3d:d2:3d:d5:56:45:c0:fa:ce:e2:34:d3:3b:47:cd:d9: bb:d5:6b:22:79:c1:4d:d5:9b:33:c2:af:b0:b3:f8:2a:32:0f: 37:b8:7a:bf:d0:5e:fd:4d:a9:8b:2a:87:aa:ea:72:b0:62:2b: 9b:fb:e6:73:f9:d6:1d:47:5c:c0:87:90:ca:62:02:58:cb:3d: a4:c4:6b:a6:e5:3f:54:84:b6:0c:18:76:ca:d7:6d:c6:7b:d8: e1:4f:58:ec:7d:84:0f:c9:94:4b:7e:24:d9:cf:dd:95:12:f2: 3d:c2:88:28:d0:60:86:fe:26:c0:42:9e:8f:3d:b5:a8:3f:fc: 87:6c:f6:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw OTlDRjcwMTEwHhcNMjQwNTA3MDMwMTIxWhcNMjQwNTE0MDMwMTIxWjAYMRYwFAYD VQQDEw02NjM5OTk4MS0zMTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xnGmuYL9tXUk5RwC141Cs4U7Pr65tVYYiu/N49SgUudIcpD1vw1LhSUq1LT 6gxtvo1OOX0GVxI3Yf0X10CbiNy7FsZJh9oPmXasUKLfd4ElLASONoM3QZMVQUY5 ed4ydDegTR78nYO/hOBQzX2MJNFerUDsjDe8RuGNl21dcDS8qzAzrgmtXtRA/CP1 fEzAUZqNYj3OGygFrndzPkSGUy4guwYkSVNssHHnIM76xuIm9Y4yCxCTN178AmUe TPEtcpWRARYukgww/EFgJ9ASs7sgpNY9s7V8ophVtXKP27gAtcaG3HMiUXJPuCqa Jiz7wjT7tw96r/Ikhifwr2FOCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdI2vMs SJX3+psGknAqJs+wOUvfMB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU1Ni8xMDQ1MkFGQTdEQzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFO UHRHdlRrWGlKZEFKblBjQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASKny9ffnWItCx9/Q6ffsmqaq5ggI8wBOHrAbbfloZANBQv+9sPon9 3lEQfWtZFO4AwZ0b/wo15/5V1vwUzq3e6k9TkEFZlZOe4MyQxvAEztErQs6cO0zw qvhMLvhT6CdrZPje9FkqmoUnPXIFvYFmSTdaZm5vXLjpQvHP2pqPTD3SPdVWRcD6 zuI00ztHzdm71WsiecFN1Zszwq+ws/gqMg83uHq/0F79TamLKoeq6nKwYiub++Zz +dYdR1zAh5DKYgJYyz2kxGum5T9UhLYMGHbK123Ge9jhT1jsfYQPyZRLfiTZz92V EvI9wogo0GCG/ibAQp6PPbWoP/yHbPa6 -----END CERTIFICATE-----Generated at Tue May 7 03:49:58 2024 by rpki-client on console-ams.rpki-client.org