$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json) Hash identifier: mRy9wAGClIiEQNJIDWsrPW6AMuqMCfXIM+gemrXJ8rc= Subject key identifier: 55:CA:BE:7E:BA:52:3E:80:60:D3:DB:93:08:BC:0E:41:33:90:9A:FB Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Certificate serial: 0BBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft Manifest number: 0B92 Signing time: Mon 06 May 2024 19:38:34 +0000 Manifest this update: Mon 06 May 2024 19:38:34 +0000 Manifest next update: Mon 13 May 2024 19:38:34 +0000 Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: taY6yDoZ28x1YkfUUZbZAchkKOggDnsPBSCIbwu1XPE=) 2: 64A2C96E919E11EEA5241125C4F9AE02.roa (hash: Aal+HBep+5xZrlmKHLkJr4jyZZt99dWiNpvcTmJl2F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 19:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3006 (0xbbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Validity Not Before: May 6 19:38:34 2024 GMT Not After : May 13 19:38:34 2024 GMT Subject: CN=663931ba-2a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ea:e6:9c:32:81:81:7b:9b:6e:97:ba:21:df: b9:1b:4a:d2:6d:38:38:45:1b:34:0b:2f:a0:52:ee: 04:9c:6a:5d:89:27:fb:6a:e6:5b:b0:06:aa:1a:ce: b4:82:ef:a5:57:41:61:d0:71:6c:40:9a:b8:3a:ca: 3f:2b:50:c9:64:12:9e:24:f8:30:1f:76:62:94:41: 15:0e:32:f2:b2:40:11:4c:7d:76:72:ab:1e:74:6f: 72:b1:bd:19:ed:6e:f5:c0:73:06:ec:78:4a:6e:77: e1:f4:7b:4e:dc:1f:cf:2e:fc:82:e2:58:60:20:38: bf:ef:63:a7:f6:48:ab:dd:b7:fc:f8:84:7f:0f:a6: c0:40:57:77:77:ba:11:0d:3f:4b:78:23:35:3d:8b: 81:df:65:83:ec:10:22:50:77:60:56:ef:cf:b9:bf: ef:8e:67:33:a5:b3:51:fb:5d:b6:2d:41:87:59:af: e0:fb:bc:58:6b:50:97:59:bb:8f:f4:95:05:68:47: 8f:4b:52:0c:e3:05:9f:d7:27:0d:be:e6:0b:79:b8: 59:4a:4b:87:9c:68:a9:f7:9c:17:e0:a4:51:f7:29: 6f:f2:77:10:f3:ec:1a:a7:e2:7c:7d:22:8c:60:45: fd:bd:30:ce:05:05:56:c1:77:8c:fb:b4:4b:0a:81: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CA:BE:7E:BA:52:3E:80:60:D3:DB:93:08:BC:0E:41:33:90:9A:FB X509v3 Authority Key Identifier: keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:66:4a:76:f4:42:0e:80:1a:ac:3d:cb:77:9d:ce:bc:ec:fe: f7:ba:02:16:2c:5f:7a:56:93:13:b1:4c:dd:7d:fd:6d:11:cf: 22:9d:da:2b:1a:3b:85:cc:2e:fc:81:74:d2:c3:b6:2f:f8:76: 07:a8:2b:bb:d4:34:58:f5:a8:dd:3b:72:be:9f:22:f9:c1:e5: 7c:97:11:32:f4:65:91:61:f8:ae:b7:99:67:02:42:67:34:8e: 8a:cb:dd:64:0e:67:6a:c7:de:b1:c8:b7:63:30:67:aa:d6:80: 09:ca:11:42:d7:b6:6b:a0:9f:87:e3:4e:84:3b:ef:b7:50:bd: 1a:d0:1a:87:80:69:4f:22:65:7b:c3:01:54:50:1b:f1:9c:e0: 1f:e8:ca:d1:af:a5:35:aa:90:e9:b7:dc:33:de:6b:09:79:eb: 42:50:62:44:f0:67:95:6e:ee:7e:c3:51:ea:1e:9a:19:e3:3e: 71:f7:c1:3e:53:bc:e8:29:e4:4b:d3:45:e4:0c:53:3f:78:c8: e9:03:35:dc:86:4b:50:32:51:09:e2:d5:4f:6f:91:4b:e0:f5: 52:08:72:6a:77:9f:00:e1:8d:3b:3b:08:ce:15:ce:43:08:bd: a5:14:ef:24:63:b3:ff:10:05:c7:de:4f:a2:57:7f:3e:ac:a7: bb:ed:34:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz NkREOENBMzQwHhcNMjQwNTA2MTkzODM0WhcNMjQwNTEzMTkzODM0WjAYMRYwFAYD VQQDEw02NjM5MzFiYS0yYTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+rmnDKBgXubbpe6Id+5G0rSbTg4RRs0Cy+gUu4EnGpdiSf7auZbsAaqGs60 gu+lV0Fh0HFsQJq4Oso/K1DJZBKeJPgwH3ZilEEVDjLyskARTH12cqsedG9ysb0Z 7W71wHMG7HhKbnfh9HtO3B/PLvyC4lhgIDi/72On9kir3bf8+IR/D6bAQFd3d7oR DT9LeCM1PYuB32WD7BAiUHdgVu/Pub/vjmczpbNR+122LUGHWa/g+7xYa1CXWbuP 9JUFaEePS1IM4wWf1ycNvuYLebhZSkuHnGip95wX4KRR9ylv8ncQ8+wap+J8fSKM YEX9vTDOBQVWwXeM+7RLCoH1LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXKvn66 Uj6AYNPbkwi8DkEzkJr7MB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5 NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTZEQy80NEE3RTVFODA5NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlo cThqNHo5YjJZaWMyM1l5alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHZkp29EIOgBqsPct3nc687P73ugIWLF96VpMTsUzdff1tEc8indor GjuFzC78gXTSw7Yv+HYHqCu71DRY9ajdO3K+nyL5weV8lxEy9GWRYfiut5lnAkJn NI6Ky91kDmdqx96xyLdjMGeq1oAJyhFC17ZroJ+H406EO++3UL0a0BqHgGlPImV7 wwFUUBvxnOAf6MrRr6U1qpDpt9wz3msJeetCUGJE8GeVbu5+w1HqHpoZ4z5x98E+ U7zoKeRL00XkDFM/eMjpAzXchktQMlEJ4tVPb5FL4PVSCHJqd58A4Y07OwjOFc5D CL2lFO8kY7P/EAXH3k+iV38+rKe77TSl -----END CERTIFICATE-----Generated at Mon May 6 22:40:56 2024 by rpki-client on console-ams.rpki-client.org