$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft File: rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json) Hash identifier: Te5wHSGon6u6ZlKAic6MC3YC0DbgT6XFvZc13rKHR30= Subject key identifier: 06:51:C2:76:4D:72:87:03:74:52:DC:F3:7C:D2:96:77:77:51:47:BA Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Certificate serial: 33D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft Manifest number: 33CC Signing time: Thu 02 May 2024 14:43:51 +0000 Manifest this update: Thu 02 May 2024 14:43:50 +0000 Manifest next update: Thu 09 May 2024 14:43:50 +0000 Files and hashes: 1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: uqViLA36o2YMvsSz4AR6ANHkgV2NuYyD3hQGR+QWm9Y=) 2: D1893F2435F111EBBFEA4039C4F9AE02.roa (hash: SDlK72tVgqLaEiiVBcuX/ceq5NukKuq9JwXB6vZpsxI=) 3: 83D16ACCF54C11EEB856F155C4F9AE02.roa (hash: xZPMbqwzJRxdS3NKOuo3HufbnVPt6zDUUGu0rLBix2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13273 (0x33d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Validity Not Before: May 2 14:43:50 2024 GMT Not After : May 9 14:43:50 2024 GMT Subject: CN=6633a6a6-a2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:63:77:97:2d:86:83:1f:95:5d:72:33:82:0a: d0:9a:bc:79:f1:34:6c:7f:41:40:bc:0e:a4:30:b2: 82:2f:b7:af:53:d7:a9:33:3b:0b:51:69:38:84:ca: 33:e4:3b:26:7d:d5:dd:38:57:eb:b6:6a:21:ca:ac: 00:a9:32:3c:52:bd:ff:fe:f9:c5:cd:9e:08:aa:c5: a5:69:29:88:d0:fc:4d:75:a7:c3:fd:fe:e1:e4:4c: f6:ed:28:76:8f:86:84:cc:eb:0c:2a:e1:fc:d4:ce: 50:a8:bd:c3:e0:de:73:37:c3:d4:fd:4f:14:9e:cf: 1b:fb:10:a6:f0:33:68:ec:a6:65:c5:c8:3d:0d:38: c6:f1:52:23:7f:2d:d5:04:ac:ee:6e:11:f6:d3:8f: e0:32:78:48:67:8d:d4:c2:77:77:69:8a:b1:5d:fa: 49:2d:3e:54:dd:e8:b3:8f:f2:3b:89:2a:be:84:ae: 17:7e:2e:79:d8:2f:73:ba:ec:c9:c9:c3:b5:21:5c: e0:ad:34:ec:30:b2:30:3a:dc:5a:03:23:af:97:e9: 89:85:44:d3:29:89:51:cd:4d:fc:c0:49:0a:41:cc: 52:d2:30:15:69:a6:58:54:ed:28:62:98:dc:c1:bd: 4d:19:a5:6f:71:30:34:41:ba:bc:6c:5a:e5:3e:7c: 14:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:51:C2:76:4D:72:87:03:74:52:DC:F3:7C:D2:96:77:77:51:47:BA X509v3 Authority Key Identifier: keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:22:e6:95:f9:73:d3:d6:22:d2:80:94:7a:ea:44:fe:66:c4: 2a:dc:07:17:b6:33:1a:7d:12:cc:a3:d4:6d:09:dd:f5:56:7b: fd:48:76:12:d0:f3:2b:15:ea:e2:99:ce:bd:19:e1:71:0c:7f: 7b:a3:87:b8:b8:11:b9:3a:1f:04:45:bd:48:d2:99:52:a9:27: 43:39:e3:19:1c:37:18:43:a1:d2:78:05:02:ce:ac:10:e8:ad: 57:63:a6:d8:b7:65:4c:65:b7:2c:4d:3f:01:91:c6:10:7c:53: 16:4d:b2:6a:8e:dd:c3:3b:e5:65:98:1b:e8:03:67:16:fe:cd: ad:19:a0:02:f4:93:b6:6b:f8:54:da:ae:33:b5:87:60:7d:d1: 47:ef:b5:b8:0d:fa:6e:22:39:9f:d1:0f:2c:31:82:7f:00:1c: 25:70:f5:f6:9b:c7:cf:e2:5c:66:bd:c1:41:e6:85:b0:6a:8f: 6a:75:2f:ad:6e:84:07:7c:07:25:57:16:76:78:a9:d4:68:28: 43:d4:47:ab:de:5d:3f:f1:65:93:c3:49:c6:fe:8d:e6:b8:6d: 83:d0:31:81:d0:9d:f4:38:7f:a0:cd:81:35:f2:bb:2d:65:9e: 3f:8d:05:ff:f5:97:78:5b:4d:0d:22:80:b6:9c:f4:d8:cf:75: 16:fb:28:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKEFEMjcwRkRFOTlCMUYxMDY5REFCOEVGN0E1NzZBQTJD MkFGMkM2RjAwHhcNMjQwNTAyMTQ0MzUwWhcNMjQwNTA5MTQ0MzUwWjAYMRYwFAYD VQQDEw02NjMzYTZhNi1hMmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8GN3ly2Ggx+VXXIzggrQmrx58TRsf0FAvA6kMLKCL7evU9epMzsLUWk4hMoz 5DsmfdXdOFfrtmohyqwAqTI8Ur3//vnFzZ4IqsWlaSmI0PxNdafD/f7h5Ez27Sh2 j4aEzOsMKuH81M5QqL3D4N5zN8PU/U8Uns8b+xCm8DNo7KZlxcg9DTjG8VIjfy3V BKzubhH204/gMnhIZ43Uwnd3aYqxXfpJLT5U3eizj/I7iSq+hK4Xfi552C9zuuzJ ycO1IVzgrTTsMLIwOtxaAyOvl+mJhUTTKYlRzU38wEkKQcxS0jAVaaZYVO0oYpjc wb1NGaVvcTA0Qbq8bFrlPnwUQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZRwnZN cocDdFLc83zSlnd3UUe6MB8GA1UdIwQYMBaAFK0nD96ZsfEGnauO96V2qiwq8sbw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC85RUY0MTEzMDFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhRYWRxNDczcFhhcUxDcnl4 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JTY1AzcG14OFFhZHE0NzNwWGFxTENyeXh2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC85RUY0MTEzMDFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhR YWRxNDczcFhhcUxDcnl4dkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANIuaV+XPT1iLSgJR66kT+ZsQq3AcXtjMafRLMo9RtCd31Vnv9SHYS 0PMrFerimc69GeFxDH97o4e4uBG5Oh8ERb1I0plSqSdDOeMZHDcYQ6HSeAUCzqwQ 6K1XY6bYt2VMZbcsTT8BkcYQfFMWTbJqjt3DO+VlmBvoA2cW/s2tGaAC9JO2a/hU 2q4ztYdgfdFH77W4DfpuIjmf0Q8sMYJ/ABwlcPX2m8fP4lxmvcFB5oWwao9qdS+t boQHfAclVxZ2eKnUaChD1Eer3l0/8WWTw0nG/o3muG2D0DGB0J30OH+gzYE18rst ZZ4/jQX/9Zd4W00NIoC2nPTYz3UW+yiJ -----END CERTIFICATE-----Generated at Thu May 2 17:18:30 2024 by rpki-client on console-ams.rpki-client.org