$ rpki-client -vvf rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft File: -r3gfSxVjb3PPDIAdre1X9-gR0A.mft (raw, json) Hash identifier: QlTIAa1yGkW8k2DPVAJIfgVkDFkRU8XLHM0tiG5ugQU= Subject key identifier: BF:A5:4C:DD:FD:A3:F8:F4:74:10:B1:94:64:25:76:D7:58:31:44:A1 Authority key identifier: FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40 Certificate issuer: /CN=A918143E/serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740 Certificate serial: 0939 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft Manifest number: 0933 Signing time: Tue 28 May 2024 21:20:49 +0000 Manifest this update: Tue 28 May 2024 21:20:49 +0000 Manifest next update: Tue 04 Jun 2024 21:20:49 +0000 Files and hashes: 1: -r3gfSxVjb3PPDIAdre1X9-gR0A.crl (hash: VakPz0P7fdGkuEB3xeVzcfg3Y2uyAgUwglvDPmGFgLI=) 2: 7E4ED0E4798B11EA90252969C4F9AE02.roa (hash: StcHXD7OSDwjaAiPvm4lKhdtSQLcm5zEPAFncff2hIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 21:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2361 (0x939) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918143E/serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740 Validity Not Before: May 28 21:20:49 2024 GMT Not After : Jun 4 21:20:49 2024 GMT Subject: CN=66564ab1-9dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f1:68:66:43:1b:0f:ed:fe:4a:4c:ad:4a:42: b3:7d:cc:7c:fd:ae:80:41:a3:42:24:55:03:81:b2: ee:08:77:88:b4:8c:a8:15:34:e3:64:69:2a:8d:e1: a2:c3:2f:25:fa:c7:23:27:c5:f6:b5:1b:38:c9:de: 11:cc:c0:ec:cc:fa:a9:01:f2:91:df:ca:b5:13:49: 1a:80:3e:21:51:28:20:33:d6:47:1d:ea:e1:4e:79: 63:e4:18:f6:be:e3:b9:44:38:8d:02:8b:fc:7d:76: a7:fd:e4:ed:bb:d8:69:11:1a:8b:16:8b:10:1b:95: ef:0c:3b:ee:53:ca:fe:aa:7a:e8:62:89:a2:75:43: c4:7d:d4:44:a1:ca:0a:12:ef:62:c5:83:5a:78:55: a8:04:c4:d5:13:de:ea:a2:25:47:eb:fd:92:df:26: 65:d2:f3:9e:6f:7d:0a:47:5b:c9:da:15:59:54:d1: dd:14:d6:fa:4f:3d:bf:ef:38:f8:2a:a7:d7:77:b7: a4:3f:c9:a3:92:64:f3:17:b7:fd:fe:97:e7:01:67: 28:1d:93:7b:2f:92:db:a6:34:99:4e:d7:13:59:fa: f4:49:66:06:04:9f:c3:1a:01:bd:bb:38:31:99:f3: 10:ec:79:88:05:5a:2b:3f:73:bb:c3:aa:25:c7:d7: 3c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A5:4C:DD:FD:A3:F8:F4:74:10:B1:94:64:25:76:D7:58:31:44:A1 X509v3 Authority Key Identifier: keyid:FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:ff:e2:32:f5:c8:53:86:9f:b1:00:5c:92:87:54:40:df:d3: 14:15:bd:a1:f9:e2:f4:ca:ec:6e:ee:2a:da:82:5d:2a:ce:10: b0:92:cf:7d:2a:93:a9:f6:6a:38:fe:7d:11:f2:97:ef:cb:a2: cf:57:49:ff:3b:e9:40:55:a6:84:58:6d:5f:40:18:44:46:36: eb:8b:58:78:a8:c9:8f:e8:9a:a5:c8:fe:11:17:d8:a0:91:e2: 51:bd:0e:70:86:5e:a8:ab:9e:e0:91:bc:89:fa:76:7e:78:e1: 4b:d9:fe:73:fe:b1:4a:d8:02:e1:49:68:4d:b1:6e:d7:81:69: d5:09:79:c3:cf:fd:e2:e2:b9:69:12:23:fa:b1:98:ff:0c:10: 3c:c1:b3:14:5f:4d:5a:57:bf:48:4c:c4:70:66:b8:f0:1f:5d: db:bf:c4:51:4f:08:a0:06:a4:19:17:67:a8:d3:16:ea:96:39: de:d7:95:f4:bb:8c:53:42:62:fa:4e:19:d5:a9:f2:fc:b6:63: ab:43:d9:40:3e:6f:06:1e:f4:73:bd:d7:96:cb:c7:32:22:27: be:17:b7:5e:10:e3:0a:5e:19:af:1a:ce:b7:83:80:c0:92:74: c4:0f:fb:58:26:e4:56:7f:27:67:2f:f5:b3:3c:3d:52:b3:98: bb:03:0a:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0M0UxMTAvBgNVBAUTKEZBQkRFMDdEMkM1NThEQkRDRjNDMzIwMDc2QjdCNTVG REZBMDQ3NDAwHhcNMjQwNTI4MjEyMDQ5WhcNMjQwNjA0MjEyMDQ5WjAYMRYwFAYD VQQDEw02NjU2NGFiMS05ZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfFoZkMbD+3+SkytSkKzfcx8/a6AQaNCJFUDgbLuCHeItIyoFTTjZGkqjeGi wy8l+scjJ8X2tRs4yd4RzMDszPqpAfKR38q1E0kagD4hUSggM9ZHHerhTnlj5Bj2 vuO5RDiNAov8fXan/eTtu9hpERqLFosQG5XvDDvuU8r+qnroYomidUPEfdREocoK Eu9ixYNaeFWoBMTVE97qoiVH6/2S3yZl0vOeb30KR1vJ2hVZVNHdFNb6Tz2/7zj4 KqfXd7ekP8mjkmTzF7f9/pfnAWcoHZN7L5LbpjSZTtcTWfr0SWYGBJ/DGgG9uzgx mfMQ7HmIBVorP3O7w6olx9c8pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+lTN39 o/j0dBCxlGQldtdYMUShMB8GA1UdIwQYMBaAFPq94H0sVY29zzwyAHa3tV/foEdA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTQzRS9BM0MwN0I4Njc5 ODkxMUVBQkNCQTIxNjZDNEY5QUUwMi8tcjNnZlN4VmpiM1BQRElBZHJlMVg5LWdS MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1yM2dmU3hWamIzUFBESUFkcmUxWDktZ1IwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTQzRS9BM0MwN0I4Njc5ODkxMUVBQkNCQTIxNjZDNEY5QUUwMi8tcjNnZlN4Vmpi M1BQRElBZHJlMVg5LWdSMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ/+Iy9chThp+xAFySh1RA39MUFb2h+eL0yuxu7iragl0qzhCwks99 KpOp9mo4/n0R8pfvy6LPV0n/O+lAVaaEWG1fQBhERjbri1h4qMmP6JqlyP4RF9ig keJRvQ5whl6oq57gkbyJ+nZ+eOFL2f5z/rFK2ALhSWhNsW7XgWnVCXnDz/3i4rlp EiP6sZj/DBA8wbMUX01aV79ITMRwZrjwH13bv8RRTwigBqQZF2eo0xbqljne15X0 u4xTQmL6ThnVqfL8tmOrQ9lAPm8GHvRzvdeWy8cyIie+F7deEOMKXhmvGs63g4DA knTED/tYJuRWfydnL/WzPD1Ss5i7Awoq -----END CERTIFICATE-----Generated at Tue May 28 22:51:28 2024 by rpki-client on console-ams.rpki-client.org