$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json) Hash identifier: Ch9JyEF0cuVDFr84P5feunObhwVuajxLeg9zK1fTByw= Subject key identifier: 53:44:42:0D:1A:71:3D:D9:0F:DD:AE:CB:AB:BE:10:B2:24:A7:8D:AA Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft Manifest number: 1E Signing time: Fri 17 May 2024 08:44:57 +0000 Manifest this update: Fri 17 May 2024 08:44:57 +0000 Manifest next update: Fri 24 May 2024 08:44:57 +0000 Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: ZqCEh0oOdA7yTbUthrqIin9XJcBdbqY1qMXYAXwf+4k=) 2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: Xbvsq704dPMvTDsWQcnktj8YjFOa8nuy1nElLVu+op0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Validity Not Before: May 17 08:44:57 2024 GMT Not After : May 24 08:44:57 2024 GMT Subject: CN=66471909-7903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:19:f0:5b:0a:04:fa:bf:d6:b4:ee:aa:3d: 0d:82:d1:12:57:4d:08:65:2a:87:c4:2c:32:55:65: 78:cc:cf:09:4f:bb:92:d0:ba:0a:f4:e3:03:bf:3b: 2f:ec:63:99:7c:a9:0b:64:a2:86:05:ed:5e:4a:b9: 84:f4:4d:95:e5:dd:17:15:d5:21:95:62:12:4b:c9: 7a:68:0c:55:7e:e5:9d:d3:fe:0e:0c:29:a4:8e:e3: 3f:7b:13:c4:b8:a1:f2:bd:ea:56:a4:c7:47:87:a5: 31:0a:89:6d:b2:64:67:3c:58:2f:ee:b4:f7:6a:a5: 9c:57:27:8a:29:a5:64:21:c5:47:18:ed:91:9e:7b: b2:c4:bf:b9:63:c7:12:89:ad:bb:d7:fb:6d:1a:c8: 48:ff:80:e3:7a:5e:73:48:1e:fd:aa:52:24:8b:30: 08:91:cd:2b:1a:fc:89:0d:bb:a1:37:57:72:5a:24: 32:f3:7c:b4:b6:43:e7:d5:69:f3:ab:da:07:f5:22: 62:14:3d:3b:0f:11:2b:54:46:36:fe:7f:d5:96:46: 15:84:57:ee:cf:84:fb:0b:30:78:83:03:ef:0f:c4: cc:20:71:33:3e:13:f4:4e:14:b8:c6:a3:6a:da:78: 82:db:84:a5:7a:af:f0:1b:02:fc:69:35:25:3f:cb: 30:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:44:42:0D:1A:71:3D:D9:0F:DD:AE:CB:AB:BE:10:B2:24:A7:8D:AA X509v3 Authority Key Identifier: keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:d0:06:42:7d:44:7d:e7:26:ba:2e:d3:e7:7b:45:9e:b1:3f: f7:17:4c:6a:29:7a:0c:8e:76:0a:6d:c6:8f:f3:3a:ae:9f:46: 52:25:ff:7c:ec:75:5e:2e:fa:a2:9c:bd:7c:be:93:4a:44:48: 4c:b9:6c:58:c1:af:11:49:13:63:ca:ad:8b:ee:ed:41:f7:4a: 6c:00:76:6b:ba:dc:a8:48:87:65:59:ae:89:aa:6b:be:ef:95: 7e:14:83:53:08:8d:a1:a3:b5:93:e2:ff:da:f6:fe:3e:f8:d7: 1b:61:b9:53:36:ed:ea:b9:a2:27:7d:f1:88:a8:b7:9d:4a:09: 4d:dc:b9:bb:89:3b:9f:c7:6b:35:50:21:18:ac:f0:ca:84:e5: 3a:22:d4:cb:3b:a5:bf:72:55:3b:e3:97:ba:9f:7b:dd:cf:88: 53:63:41:c7:6c:02:e6:ac:04:54:4f:e0:94:2c:97:91:84:d2: 71:67:35:c3:aa:63:c1:ae:bd:14:03:8e:11:ea:ab:0a:9e:c5: 36:83:0e:4c:cb:91:45:6b:59:10:ef:88:39:0d:7b:ae:0f:bf: cc:86:9a:4d:31:f8:51:90:b0:4c:95:b3:e6:f4:d3:1f:11:e6: 45:56:5f:4f:19:dc:21:bb:35:9b:e9:97:69:8b:f8:9d:d6:95: 3e:d2:0e:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDhGMzExMC8GA1UEBRMoREU4N0I2Njc2OTdENDZGNDU1MDVFQUExMjNCQUY2ODZE QjIyMDc4MTAeFw0yNDA1MTcwODQ0NTdaFw0yNDA1MjQwODQ0NTdaMBgxFjAUBgNV BAMTDTY2NDcxOTA5LTc5MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAqxnwWwoE+r/WtO6qPQ2C0RJXTQhlKofELDJVZXjMzwlPu5LQugr04wO/Oy/s Y5l8qQtkooYF7V5KuYT0TZXl3RcV1SGVYhJLyXpoDFV+5Z3T/g4MKaSO4z97E8S4 ofK96lakx0eHpTEKiW2yZGc8WC/utPdqpZxXJ4oppWQhxUcY7ZGee7LEv7ljxxKJ rbvX+20ayEj/gON6XnNIHv2qUiSLMAiRzSsa/IkNu6E3V3JaJDLzfLS2Q+fVafOr 2gf1ImIUPTsPEStURjb+f9WWRhWEV+7PhPsLMHiDA+8PxMwgcTM+E/ROFLjGo2ra eILbhKV6r/AbAvxpNSU/yzA3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU0RCDRpx PdkP3a7Lq74QsiSnjaowHwYDVR0jBBgwFoAU3oe2Z2l9RvRVBeqhI7r2htsiB4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVEOEYzL0VBNDVCM0MyRTVC QTExRUU5QjYwN0I0N0M0RjlBRTAyLzNvZTJaMmw5UnZSVkJlcWhJN3IyaHRzaUI0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM29lMloybDlSdlJWQmVxaEk3cjJodHNpQjRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE OEYzL0VBNDVCM0MyRTVCQTExRUU5QjYwN0I0N0M0RjlBRTAyLzNvZTJaMmw5UnZS VkJlcWhJN3IyaHRzaUI0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJfQBkJ9RH3nJrou0+d7RZ6xP/cXTGopegyOdgptxo/zOq6fRlIl/3zs dV4u+qKcvXy+k0pESEy5bFjBrxFJE2PKrYvu7UH3SmwAdmu63KhIh2VZromqa77v lX4Ug1MIjaGjtZPi/9r2/j741xthuVM27eq5oid98Yiot51KCU3cubuJO5/HazVQ IRis8MqE5Toi1Ms7pb9yVTvjl7qfe93PiFNjQcdsAuasBFRP4JQsl5GE0nFnNcOq Y8GuvRQDjhHqqwqexTaDDkzLkUVrWRDviDkNe64Pv8yGmk0x+FGQsEyVs+b00x8R 5kVWX08Z3CG7NZvpl2mL+J3WlT7SDuo= -----END CERTIFICATE-----Generated at Fri May 17 10:59:10 2024 by rpki-client on console-ams.rpki-client.org