$ rpki-client -vvf rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft File: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft (raw, json) Hash identifier: Tk5OdLqU44Oj6JfIrcpCUxcLAhHiMP5kSkGm2DwLcoQ= Subject key identifier: 26:45:DF:A5:92:15:69:AB:C7:12:B5:11:00:90:90:E6:5A:40:3E:24 Authority key identifier: DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F Certificate issuer: /CN=A917AFE7/serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Certificate serial: 03FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft Manifest number: 03F9 Signing time: Fri 03 May 2024 02:17:53 +0000 Manifest this update: Fri 03 May 2024 02:17:52 +0000 Manifest next update: Fri 10 May 2024 02:17:52 +0000 Files and hashes: 1: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl (hash: uwDmYY8iWry9OP6l2ayl3YErx9iPJTC1Wt1rZHLHmYk=) 2: D3D1604C2B6711EC8CD1C61FC4F9AE02.roa (hash: FY6mKfRkayQzRckcSJnAaWBwktUHix8YTyWPw31OktI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1022 (0x3fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AFE7/serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Validity Not Before: May 3 02:17:52 2024 GMT Not After : May 10 02:17:52 2024 GMT Subject: CN=66344950-edf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:22:62:a5:64:2a:94:36:ca:93:6a:72:98: 96:e4:53:99:c6:92:48:c2:77:da:b3:97:61:b7:90: ca:f1:b6:38:67:aa:0a:0f:17:5a:6a:14:b3:f5:30: b4:7b:21:61:d6:3f:a9:46:23:3b:3b:bc:3f:51:6d: a2:b5:57:b7:75:6a:cf:8a:fb:0e:35:53:b1:7b:b6: bd:d9:d4:a3:e1:2b:5b:6c:5c:76:12:a6:76:f6:57: 56:f0:c2:e0:f9:68:8e:c4:c4:12:68:9b:96:3a:6f: 07:37:65:87:d0:25:eb:cd:d5:b6:7c:57:cd:b0:60: 3b:ae:de:df:e5:a4:55:8d:2b:53:36:92:d1:70:f1: 94:d1:0c:e4:0f:06:57:86:34:f6:60:0b:65:af:c3: 6b:6e:ac:88:d6:62:c6:c3:59:ae:50:2b:75:05:1d: f1:fb:17:59:03:8d:0f:15:7d:a8:e2:bb:7d:11:ff: 02:04:7f:82:03:3f:a0:2f:e6:db:49:19:96:4d:1e: 60:cc:58:0d:61:cd:21:c6:b8:7f:f5:72:00:96:0a: 82:30:42:2a:ec:50:b9:64:38:d8:7a:be:d9:6e:36: 6a:55:d5:a4:c3:22:49:68:70:ac:cf:b0:db:ea:a1: 9d:bb:3c:19:c7:7a:44:dc:24:4c:6a:de:af:54:40: 7a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:45:DF:A5:92:15:69:AB:C7:12:B5:11:00:90:90:E6:5A:40:3E:24 X509v3 Authority Key Identifier: keyid:DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ed:3f:b6:d8:0f:b6:9f:ef:3b:64:9e:06:92:50:67:62:2f:d1: 9f:db:64:56:38:df:94:2e:be:d0:2e:ed:a4:63:39:74:1b:91: a9:7e:a5:8e:31:f8:99:b8:86:78:a9:63:d1:e3:5c:dc:60:39: 45:28:19:1f:fe:9a:03:d4:cb:59:7a:f2:49:cc:71:ca:af:3f: 31:03:b9:ce:51:9c:b0:0f:0e:a4:0d:35:a1:71:01:7c:10:d6: d6:dd:69:1d:77:ce:45:8d:f6:0d:a5:8b:42:19:ac:8f:34:0b: 6e:84:36:16:2c:dc:16:14:9e:89:b9:85:03:06:2d:06:2e:f0: 9d:7b:9c:08:90:84:30:27:36:60:97:f4:0d:d9:60:94:c0:7c: d9:29:f9:8d:46:ed:ef:71:f8:04:d4:2a:ad:dd:39:93:4c:30: 23:75:a7:d8:c9:e9:d2:f8:0b:e3:e4:6e:54:fc:b7:64:09:f2: ff:61:95:7a:6e:85:77:99:89:b1:5e:74:6c:70:35:64:57:e7: 26:e5:04:0d:80:7d:1b:31:89:94:5d:89:f2:24:c1:27:0f:3d: 09:6c:2b:94:9e:99:43:b2:ef:38:5e:98:8c:57:42:37:17:ff: e1:f9:50:28:bb:0f:27:6a:d6:fc:71:46:8a:56:58:85:da:d3: 74:c1:6b:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGRTcxMTAvBgNVBAUTKERDQzA3QTlEOEZGRTM3OEREREFGM0NEMEU0MUE5RUY2 RkREMzE0OEYwHhcNMjQwNTAzMDIxNzUyWhcNMjQwNTEwMDIxNzUyWjAYMRYwFAYD VQQDEw02NjM0NDk1MC1lZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdUiYqVkKpQ2ypNqcpiW5FOZxpJIwnfas5dht5DK8bY4Z6oKDxdaahSz9TC0 eyFh1j+pRiM7O7w/UW2itVe3dWrPivsONVOxe7a92dSj4StbbFx2EqZ29ldW8MLg +WiOxMQSaJuWOm8HN2WH0CXrzdW2fFfNsGA7rt7f5aRVjStTNpLRcPGU0QzkDwZX hjT2YAtlr8NrbqyI1mLGw1muUCt1BR3x+xdZA40PFX2o4rt9Ef8CBH+CAz+gL+bb SRmWTR5gzFgNYc0hxrh/9XIAlgqCMEIq7FC5ZDjYer7ZbjZqVdWkwyJJaHCsz7Db 6qGduzwZx3pE3CRMat6vVEB66QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZF36WS FWmrxxK1EQCQkOZaQD4kMB8GA1UdIwQYMBaAFNzAep2P/jeN3a880OQanvb90xSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUZFNy9GOEI2NTM3NDI5 MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40M2RyenpRNUJxZTl2M1RG STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNQjZuWV8tTjQzZHJ6elE1QnFlOXYzVEZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUZFNy9GOEI2NTM3NDI5MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40 M2RyenpRNUJxZTl2M1RGSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDtP7bYD7af7ztkngaSUGdiL9Gf22RWON+ULr7QLu2kYzl0G5GpfqWO MfiZuIZ4qWPR41zcYDlFKBkf/poD1MtZevJJzHHKrz8xA7nOUZywDw6kDTWhcQF8 ENbW3Wkdd85FjfYNpYtCGayPNAtuhDYWLNwWFJ6JuYUDBi0GLvCde5wIkIQwJzZg l/QN2WCUwHzZKfmNRu3vcfgE1Cqt3TmTTDAjdafYyenS+Avj5G5U/LdkCfL/YZV6 boV3mYmxXnRscDVkV+cm5QQNgH0bMYmUXYnyJMEnDz0JbCuUnplDsu84XpiMV0I3 F//h+VAouw8natb8cUaKVliF2tN0wWt6 -----END CERTIFICATE-----Generated at Fri May 3 04:45:17 2024 by rpki-client on console-fra.rpki-client.org