$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft File: u3QQVrccdV0D-5zyFKQSTKTzdgw.mft (raw, json) Hash identifier: PmYehmDZyNAV2MFkZnKZmHwKy7cnr/9pPMGTOmbbNc0= Subject key identifier: FB:C8:B7:F7:E0:60:B4:5F:F5:99:F9:64:B8:B2:1B:BF:2D:32:D7:2C Authority key identifier: BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C Certificate issuer: /CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C Certificate serial: 0B4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft Manifest number: 0B44 Signing time: Thu 02 May 2024 19:46:53 +0000 Manifest this update: Thu 02 May 2024 19:46:52 +0000 Manifest next update: Thu 09 May 2024 19:46:52 +0000 Files and hashes: 1: u3QQVrccdV0D-5zyFKQSTKTzdgw.crl (hash: NyldyMYaAPhF1iVT/PkcMnFacPZxDhsrKw/ZXlzWcoA=) 2: 5AD6AAFE0F1111EA932F3E45C4F9AE02.roa (hash: +nBaQ+ic2ZSPFayaPDgoHYdKuoR8Op4WTYi22UZYGXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2892 (0xb4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C Validity Not Before: May 2 19:46:52 2024 GMT Not After : May 9 19:46:52 2024 GMT Subject: CN=6633edac-d79a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:82:80:68:88:fa:65:0c:ac:1c:d7:fa:64:95: 8c:11:7c:36:80:0f:c5:01:cc:d9:00:85:58:e5:a1: 6d:17:25:fd:ec:e2:2f:57:7a:9b:d4:43:1c:5e:98: 1e:ef:38:97:93:f7:09:d0:f1:c8:df:89:7d:85:7b: 4e:29:0a:19:ac:92:68:f2:64:71:20:ec:0b:81:29: 6a:87:77:38:d2:12:af:f5:31:08:1e:41:62:45:10: dc:ec:81:3a:71:e9:f0:e7:fc:c3:cb:71:3e:17:c8: 52:18:41:18:54:78:e8:f0:fa:37:19:b5:54:4b:d0: 2d:1f:71:03:71:59:23:c3:d5:78:08:8a:74:b7:fa: 51:17:6f:86:a4:5f:59:53:e1:75:15:39:f7:02:4e: f4:18:91:e8:dd:d4:04:c4:b2:e4:f4:e8:e3:d3:f6: 6d:ac:a0:d5:d6:86:54:4f:e6:77:0c:2a:ce:2c:e4: 84:a9:a6:03:90:a4:54:98:00:94:6a:5e:60:6d:eb: d8:1a:a0:78:55:df:a3:94:71:af:b5:e8:5c:ad:f5: cb:7a:c4:c6:3e:96:97:af:0c:94:9b:8d:62:bc:46: 7a:81:39:2d:eb:2f:d5:5d:a8:f7:38:67:f1:62:5b: 7e:c5:e3:e8:db:c8:1f:88:28:b8:33:21:a6:7d:ae: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C8:B7:F7:E0:60:B4:5F:F5:99:F9:64:B8:B2:1B:BF:2D:32:D7:2C X509v3 Authority Key Identifier: keyid:BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f1:f8:42:bf:af:c7:22:67:b1:63:bc:b4:17:c1:2f:93:a2: f8:0a:75:43:f8:de:52:70:a7:80:1a:30:9f:9a:dd:37:7d:37: 69:a1:69:5e:f5:95:45:2e:0e:07:67:0b:60:d6:86:2e:1e:d0: 28:d8:9a:0d:3d:0f:31:6c:a1:34:49:89:f3:ea:56:0e:2c:ac: 11:cc:d6:d3:f0:07:8f:f0:c5:91:84:29:51:b7:30:ed:b7:9c: 94:30:0a:a1:69:7b:27:eb:bc:b0:77:a8:cd:a4:23:97:c7:06: 2f:2c:ba:1a:93:b6:9e:c9:35:45:5c:b0:e4:94:c9:80:1c:73: e1:4e:d5:73:fb:6d:2c:b6:2b:d9:a0:4d:eb:af:e0:bd:dc:4d: 13:d2:cb:66:52:a2:50:67:d5:be:29:c6:e2:f9:64:70:c1:bd: 4e:4c:a4:fb:ab:5e:d2:87:72:01:d1:a7:91:72:f6:2d:1e:da: 38:3a:97:f9:15:6c:74:a2:98:d8:8b:24:a8:1f:1c:bd:66:1d: 8d:ce:ed:90:52:b4:26:6b:a2:16:af:42:b9:5d:ff:60:00:83: 74:b2:6a:ac:00:95:73:e6:0e:74:18:1c:3e:c9:f4:b0:e7:c2: ae:d7:86:b2:d8:87:46:49:b2:50:63:fe:39:c4:53:34:2f:fa: 41:37:f2:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwQUExMTAvBgNVBAUTKEJCNzQxMDU2QjcxQzc1NUQwM0ZCOUNGMjE0QTQxMjRD QTRGMzc2MEMwHhcNMjQwNTAyMTk0NjUyWhcNMjQwNTA5MTk0NjUyWjAYMRYwFAYD VQQDEw02NjMzZWRhYy1kNzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7oKAaIj6ZQysHNf6ZJWMEXw2gA/FAczZAIVY5aFtFyX97OIvV3qb1EMcXpge 7ziXk/cJ0PHI34l9hXtOKQoZrJJo8mRxIOwLgSlqh3c40hKv9TEIHkFiRRDc7IE6 cenw5/zDy3E+F8hSGEEYVHjo8Po3GbVUS9AtH3EDcVkjw9V4CIp0t/pRF2+GpF9Z U+F1FTn3Ak70GJHo3dQExLLk9Ojj0/ZtrKDV1oZUT+Z3DCrOLOSEqaYDkKRUmACU al5gbevYGqB4Vd+jlHGvtehcrfXLesTGPpaXrwyUm41ivEZ6gTkt6y/VXaj3OGfx Ylt+xePo28gfiCi4MyGmfa6k6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvIt/fg YLRf9Zn5ZLiyG78tMtcsMB8GA1UdIwQYMBaAFLt0EFa3HHVdA/uc8hSkEkyk83YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTBBQS82QTRGRkM3QTBG MTAxMUVBQTk2OUZFNDNDNEY5QUUwMi91M1FRVnJjY2RWMEQtNXp5RktRU1RLVHpk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzUVFWcmNjZFYwRC01enlGS1FTVEtUemRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTBBQS82QTRGRkM3QTBGMTAxMUVBQTk2OUZFNDNDNEY5QUUwMi91M1FRVnJjY2RW MEQtNXp5RktRU1RLVHpkZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB98fhCv6/HImexY7y0F8Evk6L4CnVD+N5ScKeAGjCfmt03fTdpoWle 9ZVFLg4HZwtg1oYuHtAo2JoNPQ8xbKE0SYnz6lYOLKwRzNbT8AeP8MWRhClRtzDt t5yUMAqhaXsn67ywd6jNpCOXxwYvLLoak7aeyTVFXLDklMmAHHPhTtVz+20stivZ oE3rr+C93E0T0stmUqJQZ9W+Kcbi+WRwwb1OTKT7q17Sh3IB0aeRcvYtHto4Opf5 FWx0opjYiySoHxy9Zh2Nzu2QUrQma6IWr0K5Xf9gAIN0smqsAJVz5g50GBw+yfSw 58Ku14ay2IdGSbJQY/45xFM0L/pBN/L8 -----END CERTIFICATE-----Generated at Thu May 2 20:50:26 2024 by rpki-client on console-fra.rpki-client.org