$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: CYGpUvPvfuYqK5n9yKsxBabwlDyhIvMSUBUX2lTf/pc= Subject key identifier: 90:67:8A:21:E7:80:E6:2C:8A:1E:D3:6E:EE:F4:10:0D:E0:47:E4:22 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 0298 Signing time: Sun 05 May 2024 03:45:51 +0000 Manifest this update: Sun 05 May 2024 03:45:50 +0000 Manifest next update: Sun 12 May 2024 03:45:50 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: 4V5yGB9lSQZvi2J2ZLNkKnqEEE/09o0wz0QL4DSsR9s=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: BjnEXUQnM/w5/elkxHxhuklRbVefDC0b1z2jDyjryYY=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: Swm8wcaeAGU6W3RSshCj74MA0EDyTsqkbcfipXQ6I6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: May 5 03:45:50 2024 GMT Not After : May 12 03:45:50 2024 GMT Subject: CN=663700ef-9ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b0:70:fd:29:ed:01:60:7e:b9:64:42:aa:52: c8:d7:d6:5e:02:7d:f0:5f:21:ce:d0:e9:4c:22:45: 73:69:72:0f:c3:bb:1e:3c:4d:7d:ee:3d:c2:51:3c: 66:51:3f:54:c6:02:76:89:e4:66:66:ab:5e:14:db: 6f:04:94:e1:7a:eb:ec:2a:65:f9:92:0b:c7:45:ba: 53:d8:c1:05:4b:c7:de:b9:8c:7a:59:73:56:15:9e: ce:84:f3:19:2c:de:2b:fc:fd:04:ad:9a:9d:27:a7: 64:98:b0:7c:8d:8f:49:a6:41:89:e4:64:3c:78:6d: 60:93:a8:04:21:3f:21:13:be:fb:c3:03:c0:18:7d: 85:4c:f9:ca:c3:3d:10:fc:0e:2a:98:67:3b:fb:d3: 0a:82:8f:71:e4:da:7f:3a:5d:2f:f7:ee:63:89:45: d5:cd:c8:43:f3:cf:94:ca:76:c3:8a:a1:a1:7a:38: d8:03:69:a4:00:c2:da:31:3b:ca:90:20:e5:df:c6: 10:31:e5:f9:6c:4f:73:1c:5a:97:73:6b:6a:37:b4: 26:a6:89:1a:36:69:65:ea:6c:c9:3a:63:9b:d0:03: 91:a0:f4:32:8a:1f:8e:5a:2a:cf:83:50:2b:65:06: 60:eb:40:a5:e7:fc:c9:1d:c3:a4:02:e9:a1:de:59: 3a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:67:8A:21:E7:80:E6:2C:8A:1E:D3:6E:EE:F4:10:0D:E0:47:E4:22 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:03:99:d9:d4:1b:d2:fc:fa:d5:f5:70:6e:28:1d:54:77:3c: 9b:01:cd:76:be:0d:46:ff:0d:31:b2:d6:ee:23:f1:84:e3:76: f3:07:85:85:01:cd:12:ec:16:22:ab:bd:44:e3:52:02:bd:04: bf:c1:08:08:c9:f1:bd:f7:60:d9:f3:ad:30:06:0c:37:5e:fc: 60:c5:a3:bd:2e:cb:aa:b5:91:62:aa:c0:92:94:25:94:58:22: 33:26:4f:db:8c:81:10:0a:9c:07:dc:e8:44:dd:77:82:b7:69: 9e:bd:e6:9e:90:b0:26:5b:0e:32:e0:26:6d:7f:12:35:1b:63: 5f:f7:a9:25:83:c5:88:58:d4:ab:68:86:e6:5d:b5:71:15:b5: 4e:96:39:63:cb:ae:ef:cb:2f:26:fa:0c:a3:d3:91:7c:40:35: fd:61:5e:3d:9c:4e:91:ee:10:51:3d:9b:e6:cd:15:4f:82:24: 0a:f7:e0:16:84:54:2e:e3:66:e6:a4:71:d1:e1:dc:3e:26:46: 63:04:3a:0d:07:a6:15:19:25:c2:1c:5d:ac:75:d4:77:13:fa: 26:8b:df:43:a5:54:8b:d8:82:51:4a:14:fd:06:af:b7:5d:ee: b1:2e:4c:7b:9e:36:e7:c8:19:4b:c4:67:f3:1d:2e:97:3d:a2: 24:bc:69:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjQwNTA1MDM0NTUwWhcNMjQwNTEyMDM0NTUwWjAYMRYwFAYD VQQDEw02NjM3MDBlZi05YWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47Bw/SntAWB+uWRCqlLI19ZeAn3wXyHO0OlMIkVzaXIPw7sePE197j3CUTxm UT9UxgJ2ieRmZqteFNtvBJTheuvsKmX5kgvHRbpT2MEFS8feuYx6WXNWFZ7OhPMZ LN4r/P0ErZqdJ6dkmLB8jY9JpkGJ5GQ8eG1gk6gEIT8hE777wwPAGH2FTPnKwz0Q /A4qmGc7+9MKgo9x5Np/Ol0v9+5jiUXVzchD88+UynbDiqGhejjYA2mkAMLaMTvK kCDl38YQMeX5bE9zHFqXc2tqN7QmpokaNmll6mzJOmOb0AORoPQyih+OWirPg1Ar ZQZg60Cl5/zJHcOkAumh3lk6OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBniiHn gOYsih7Tbu70EA3gR+QiMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWA5nZ1BvS/PrV9XBuKB1UdzybAc12vg1G/w0xstbuI/GE43bzB4WF Ac0S7BYiq71E41ICvQS/wQgIyfG992DZ860wBgw3XvxgxaO9LsuqtZFiqsCSlCWU WCIzJk/bjIEQCpwH3OhE3XeCt2meveaekLAmWw4y4CZtfxI1G2Nf96klg8WIWNSr aIbmXbVxFbVOljljy67vyy8m+gyj05F8QDX9YV49nE6R7hBRPZvmzRVPgiQK9+AW hFQu42bmpHHR4dw+JkZjBDoNB6YVGSXCHF2sddR3E/omi99DpVSL2IJRShT9Bq+3 Xe6xLkx7njbnyBlLxGfzHS6XPaIkvGnL -----END CERTIFICATE-----Generated at Sun May 5 04:34:54 2024 by rpki-client on console-fra.rpki-client.org