$ rpki-client -vvf rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft File: 3oFz59KP6tHsOpLJdljacyhQk-U.mft (raw, json) Hash identifier: Uo/K8juEH3vYbrWjL3XWhE+UD0msRrAOxeOt0agNFdo= Subject key identifier: E0:CF:D0:3B:91:66:91:6D:44:09:D9:8A:DD:DA:90:A2:FC:CE:3A:B2 Authority key identifier: DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5 Certificate issuer: /CN=A917C11A/serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5 Certificate serial: 0602 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft Manifest number: 05FD Signing time: Sun 05 May 2024 00:04:59 +0000 Manifest this update: Sun 05 May 2024 00:04:58 +0000 Manifest next update: Sun 12 May 2024 00:04:58 +0000 Files and hashes: 1: 3oFz59KP6tHsOpLJdljacyhQk-U.crl (hash: 6JjLzQIImiVyDrJ5Mlmnq/JRbW+noGPG2b8IHiKy1Xg=) 2: 4002E4BA5A3B11EBA4020D68C4F9AE02.roa (hash: lEAUzX5yromH9S256XNG7qzmeT220WB95GeuIqYuZYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C11A/serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5 Validity Not Before: May 5 00:04:58 2024 GMT Not After : May 12 00:04:58 2024 GMT Subject: CN=6636cd2b-328f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:09:cb:8e:87:49:28:e6:65:82:24:87:d2: cb:72:bb:f3:55:75:a9:09:f4:ee:e1:af:dc:95:ba: 97:7a:0f:57:70:47:88:8f:a8:cb:86:cc:49:fc:23: 34:49:b0:d0:ac:9f:aa:a8:79:6e:fa:71:40:ec:28: d9:b2:69:5d:e9:12:63:2d:fb:f8:e2:e9:2c:33:9b: 2c:09:9d:b8:b7:0f:89:ed:90:29:29:bf:af:cd:4b: 9a:00:75:7a:1b:e4:6e:f3:c3:24:02:77:9b:46:56: 55:33:83:5f:f3:5e:92:f4:b2:9d:c2:24:41:68:b7: 44:66:17:31:79:94:49:db:3d:7c:b5:c9:c6:d0:39: bd:81:51:d4:cc:06:18:7e:38:aa:fb:35:18:09:08: 09:44:b2:c9:5b:3b:17:5c:d4:97:d7:21:93:2d:5c: 98:cb:25:93:f9:0d:f4:c4:ed:1f:38:ae:b1:19:d0: 43:0d:15:59:92:49:92:ab:aa:29:4b:04:34:83:3d: 83:8e:f0:13:30:2b:87:e9:2a:8c:a3:3e:f8:90:be: 12:c9:5f:0d:d0:c4:c7:54:c9:00:e2:65:bc:b7:c4: 68:e1:40:6e:1a:da:71:ab:7c:7d:05:73:7f:f0:a1: d3:8f:fd:b4:8f:12:c1:c5:63:64:7f:e9:4a:9c:8b: d1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CF:D0:3B:91:66:91:6D:44:09:D9:8A:DD:DA:90:A2:FC:CE:3A:B2 X509v3 Authority Key Identifier: keyid:DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:a2:d0:fd:51:1a:38:bd:d4:42:88:1a:93:c0:5f:2d:08:6e: 6d:e7:5e:50:75:82:9c:70:b0:a3:aa:04:78:4a:e5:b6:a0:a0: 76:85:65:c2:2f:25:7e:0d:01:a4:5d:d2:0a:95:06:70:44:86: 51:cf:2e:e5:fb:34:43:94:d4:ca:51:9b:1c:24:02:52:44:e0: 05:91:ba:cf:16:17:7d:d9:83:92:97:98:0b:d9:79:4d:04:6e: 60:c3:f8:83:ed:50:fc:c5:e4:0a:62:b0:86:ed:71:b7:95:18: 57:1c:d2:31:93:53:d4:fe:29:2f:5e:08:87:63:df:a6:1c:31: 54:82:26:4e:50:06:04:0b:78:eb:4b:13:bd:05:39:33:b0:7d: 3b:35:06:88:c8:82:59:80:75:d3:65:bf:9c:58:4a:b0:30:69: 11:cc:17:a6:81:39:a8:5c:60:2a:08:9a:d9:9b:ac:d6:db:02: d3:25:e0:d5:72:74:46:32:06:d1:8c:d5:3f:e8:1d:8e:50:ca: 8a:5e:6a:fe:e6:a4:76:d7:c7:c0:54:1f:61:1e:65:13:24:40: c5:a9:df:dd:a2:97:09:d4:22:6b:ab:59:e4:9a:08:a3:61:b1: 3a:1e:0c:29:c6:12:76:c8:63:c9:12:b7:ed:3a:a5:cb:d9:9b: d4:5e:a8:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxMUExMTAvBgNVBAUTKERFODE3M0U3RDI4RkVBRDFFQzNBOTJDOTc2NThEQTcz Mjg1MDkzRTUwHhcNMjQwNTA1MDAwNDU4WhcNMjQwNTEyMDAwNDU4WjAYMRYwFAYD VQQDEw02NjM2Y2QyYi0zMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJQJy46HSSjmZYIkh9LLcrvzVXWpCfTu4a/clbqXeg9XcEeIj6jLhsxJ/CM0 SbDQrJ+qqHlu+nFA7CjZsmld6RJjLfv44uksM5ssCZ24tw+J7ZApKb+vzUuaAHV6 G+Ru88MkAnebRlZVM4Nf816S9LKdwiRBaLdEZhcxeZRJ2z18tcnG0Dm9gVHUzAYY fjiq+zUYCQgJRLLJWzsXXNSX1yGTLVyYyyWT+Q30xO0fOK6xGdBDDRVZkkmSq6op SwQ0gz2DjvATMCuH6SqMoz74kL4SyV8N0MTHVMkA4mW8t8Ro4UBuGtpxq3x9BXN/ 8KHTj/20jxLBxWNkf+lKnIvRXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODP0DuR ZpFtRAnZit3akKL8zjqyMB8GA1UdIwQYMBaAFN6Bc+fSj+rR7DqSyXZY2nMoUJPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzExQS9DMDg2RUE5ODVB MzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlLUDZ0SHNPcExKZGxqYWN5aFFr LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvRno1OUtQNnRIc09wTEpkbGphY3loUWstVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzExQS9DMDg2RUE5ODVBMzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlLUDZ0 SHNPcExKZGxqYWN5aFFrLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkotD9URo4vdRCiBqTwF8tCG5t515QdYKccLCjqgR4SuW2oKB2hWXC LyV+DQGkXdIKlQZwRIZRzy7l+zRDlNTKUZscJAJSROAFkbrPFhd92YOSl5gL2XlN BG5gw/iD7VD8xeQKYrCG7XG3lRhXHNIxk1PU/ikvXgiHY9+mHDFUgiZOUAYEC3jr SxO9BTkzsH07NQaIyIJZgHXTZb+cWEqwMGkRzBemgTmoXGAqCJrZm6zW2wLTJeDV cnRGMgbRjNU/6B2OUMqKXmr+5qR218fAVB9hHmUTJEDFqd/dopcJ1CJrq1nkmgij YbE6HgwpxhJ2yGPJErftOqXL2ZvUXqjR -----END CERTIFICATE-----Generated at Sun May 5 01:13:19 2024 by rpki-client on console-ams.rpki-client.org