$ rpki-client -vvf rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft File: mc3A6r4YBBJhGaHVGpjMhxkT86k.mft (raw, json) Hash identifier: SaucfOL/Hkc4ZFa+xZoQaiZei5RovD1mLvDFguXbBdY= Subject key identifier: E8:5A:4D:98:22:2B:DE:6A:FF:36:83:E5:CE:23:08:75:B5:E6:7B:43 Authority key identifier: 99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9 Certificate issuer: /CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9 Certificate serial: 06BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft Manifest number: 06B6 Signing time: Fri 26 Apr 2024 23:08:23 +0000 Manifest this update: Fri 26 Apr 2024 23:08:23 +0000 Manifest next update: Fri 03 May 2024 23:08:23 +0000 Files and hashes: 1: mc3A6r4YBBJhGaHVGpjMhxkT86k.crl (hash: wdaAN+k0V3+MLHA8DSXHcguR6M9LU+1Pg17pvJY/LEA=) 2: AE26CE12180911EB962CB216C4F9AE02.roa (hash: IhePS3j385LdYR7mqTCypnNrI1A+ZbVNzeveI3VyTNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1725 (0x6bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9 Validity Not Before: Apr 26 23:08:23 2024 GMT Not After : May 3 23:08:23 2024 GMT Subject: CN=662c33e7-997e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:41:15:9e:dd:3a:df:98:62:cf:f0:81:91: d6:d5:0d:bc:ee:c3:0f:2e:18:5c:dd:a7:da:05:fc: 81:6a:d6:90:76:4c:32:2d:1d:d7:02:d7:ab:5c:c3: cb:53:19:b0:e2:ca:91:e7:03:05:7a:fa:bc:71:00: 22:fb:c1:b2:00:71:c9:ef:9e:cd:35:e8:b0:f4:fb: 2b:de:8a:e2:7f:ea:b2:e5:ef:37:09:0b:74:43:fd: 8e:1b:bc:f1:ec:48:e7:fa:62:76:2c:b8:bb:20:f9: da:58:1c:be:7b:af:4a:cd:e4:5a:4e:22:67:21:ec: c2:0a:57:fe:91:28:24:06:4d:4e:57:a4:34:a4:c6: 4f:82:18:26:1e:e5:80:41:ba:ab:a6:6b:e4:43:11: 11:c7:fa:1b:9c:8f:5e:b1:9f:e9:4f:21:84:ec:32: 6f:57:f6:50:e6:78:38:09:c6:ca:ea:8e:1c:4b:17: b5:e4:a0:fd:6a:19:35:25:3b:a9:4a:f7:2c:c1:0a: 67:02:2a:97:fb:03:1a:b6:dc:cc:62:df:4d:40:41: d5:6f:4a:f8:75:84:59:7b:29:d3:2d:ea:f3:2f:51: 4d:5a:4c:28:6d:75:db:58:ca:6d:13:82:e5:39:e6: 19:48:76:ca:50:b8:d2:22:3d:aa:17:ef:54:7b:f1: bd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5A:4D:98:22:2B:DE:6A:FF:36:83:E5:CE:23:08:75:B5:E6:7B:43 X509v3 Authority Key Identifier: keyid:99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:32:1b:8a:5b:32:04:29:27:9a:2b:78:56:da:3c:41:a5:3e: 7e:8b:ee:19:b3:df:37:88:ec:f8:06:7d:13:55:df:48:fa:c5: 64:20:ff:4a:03:ec:85:44:1a:ec:00:e3:fe:ae:42:20:5a:76: 6c:ab:72:5b:84:4e:aa:20:2d:6e:6c:d4:82:f1:b2:11:28:d1: af:0a:7f:71:52:ff:34:8f:39:25:b2:75:50:1c:50:7e:b3:70: 79:6e:f0:24:2d:ef:d7:b7:bd:c2:12:a5:f9:b5:c9:22:a5:b6: 1a:ac:36:4a:50:d2:ff:4d:9b:5c:c2:38:cc:91:13:ab:3b:ed: ca:29:81:26:86:38:90:34:c2:54:7d:8c:da:65:b4:02:cb:61: e4:f9:07:df:66:ff:59:85:54:ec:c5:99:30:45:de:2e:d0:53: 5b:37:7c:d8:83:0c:cd:a6:f6:4d:63:a5:45:cf:71:c5:58:c8: 4d:36:ee:36:04:c8:50:6e:5a:ac:82:0c:47:c5:38:4f:bf:a9: 76:60:84:32:af:71:35:77:ce:e3:d5:ab:91:40:d3:b4:7a:2b: fe:43:fb:45:e2:6a:6a:a6:88:a9:d5:0f:92:d2:3c:bc:5e:4d: 7f:2b:b0:11:0b:db:b5:a3:17:cd:cb:b6:23:10:d6:6b:2a:df: e1:b3:29:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNGN0YxMTAvBgNVBAUTKDk5Q0RDMEVBQkUxODA0MTI2MTE5QTFENTFBOThDQzg3 MTkxM0YzQTkwHhcNMjQwNDI2MjMwODIzWhcNMjQwNTAzMjMwODIzWjAYMRYwFAYD VQQDEw02NjJjMzNlNy05OTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6dBFZ7dOt+YYs/wgZHW1Q287sMPLhhc3afaBfyBataQdkwyLR3XAterXMPL Uxmw4sqR5wMFevq8cQAi+8GyAHHJ757NNeiw9Psr3orif+qy5e83CQt0Q/2OG7zx 7Ejn+mJ2LLi7IPnaWBy+e69KzeRaTiJnIezCClf+kSgkBk1OV6Q0pMZPghgmHuWA QbqrpmvkQxERx/obnI9esZ/pTyGE7DJvV/ZQ5ng4CcbK6o4cSxe15KD9ahk1JTup SvcswQpnAiqX+wMattzMYt9NQEHVb0r4dYRZeynTLerzL1FNWkwobXXbWMptE4Ll OeYZSHbKULjSIj2qF+9Ue/G9mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhaTZgi K95q/zaD5c4jCHW15ntDMB8GA1UdIwQYMBaAFJnNwOq+GAQSYRmh1RqYzIcZE/Op MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0Y3Ri9FMzdFNUIzMjE1 MEUxMUVCOENFQjk1NDNDNEY5QUUwMi9tYzNBNnI0WUJCSmhHYUhWR3BqTWh4a1Q4 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21jM0E2cjRZQkJKaEdhSFZHcGpNaHhrVDg2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0Y3Ri9FMzdFNUIzMjE1MEUxMUVCOENFQjk1NDNDNEY5QUUwMi9tYzNBNnI0WUJC SmhHYUhWR3BqTWh4a1Q4NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAMhuKWzIEKSeaK3hW2jxBpT5+i+4Zs983iOz4Bn0TVd9I+sVkIP9K A+yFRBrsAOP+rkIgWnZsq3JbhE6qIC1ubNSC8bIRKNGvCn9xUv80jzklsnVQHFB+ s3B5bvAkLe/Xt73CEqX5tckipbYarDZKUNL/TZtcwjjMkROrO+3KKYEmhjiQNMJU fYzaZbQCy2Hk+QffZv9ZhVTsxZkwRd4u0FNbN3zYgwzNpvZNY6VFz3HFWMhNNu42 BMhQblqsggxHxThPv6l2YIQyr3E1d87j1auRQNO0eiv+Q/tF4mpqpoip1Q+S0jy8 Xk1/K7ARC9u1oxfNy7YjENZrKt/hsylr -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:18 2024 by rpki-client on console-ams.rpki-client.org