$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json) Hash identifier: fPHtEaOlRGuVkBnPOSDvU5TYMiutsJY8jtUiUlammvU= Subject key identifier: F6:AF:2E:40:23:8E:80:41:E1:D1:11:27:79:02:7E:D5:5F:80:22:FA Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Certificate serial: 2951 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft Manifest number: 2951 Signing time: Sun 26 May 2024 15:53:14 +0000 Manifest this update: Sun 26 May 2024 15:53:13 +0000 Manifest next update: Sun 02 Jun 2024 15:53:13 +0000 Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: /DTe4bPiotTLRFYke35hcXFVaVyHreC2xouN6zyAIEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 14:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10577 (0x2951) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Validity Not Before: May 26 15:53:13 2024 GMT Not After : Jun 2 15:53:13 2024 GMT Subject: CN=66535ae9-6cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:24:0c:c5:11:18:40:ae:e1:c5:81:62:60: 00:5c:41:c7:79:96:38:94:eb:6f:d8:fa:c3:c2:3e: 3f:b8:9e:f4:d8:e4:27:f6:95:09:62:83:88:36:ca: c4:a2:fd:b0:1b:59:d8:7c:b4:4a:a1:4f:ec:2d:88: aa:b8:ed:24:54:d1:c3:d2:74:bc:88:d9:b6:f8:4e: 94:a9:8e:5d:a8:13:6e:af:9d:90:4b:85:57:08:bd: 3f:ca:cc:a1:e2:0c:3f:01:ed:90:3c:a3:f7:32:fb: b6:87:4a:c3:d6:53:54:58:50:c7:51:26:b4:65:f1: c8:1f:e2:be:09:90:05:ee:b9:bd:15:53:94:6a:b1: 17:c6:e9:03:67:ec:1c:3f:84:e4:99:ea:3c:0b:be: a4:ed:75:fc:5a:d0:e9:26:ea:10:9c:15:81:62:ed: 16:23:b3:77:14:59:47:49:58:ca:fd:a8:b5:03:4b: 2b:b8:41:06:a5:25:08:2e:74:2e:98:b3:bc:d6:4a: 2b:43:96:43:dc:c5:ec:d9:8c:b0:a9:ee:ca:05:86: d6:dd:de:1d:ec:47:bf:02:f7:2c:49:1a:21:69:d6: c2:06:9e:96:34:fe:42:cb:92:00:0c:6e:43:f7:f4: c2:8e:52:14:ed:11:d4:79:3b:f0:74:82:02:5b:f1: 60:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AF:2E:40:23:8E:80:41:E1:D1:11:27:79:02:7E:D5:5F:80:22:FA X509v3 Authority Key Identifier: keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:ad:ae:c2:e2:6a:da:5f:b7:59:14:35:76:93:58:a9:dd:60: 4a:78:19:d8:be:12:a4:fb:72:6d:61:0f:4c:af:ca:4b:04:28: a5:ef:b3:7c:c4:53:da:4c:d6:b1:3b:94:a5:63:db:20:07:4b: f0:33:14:fb:5c:cc:d0:e9:ee:7c:eb:fb:2c:9b:ae:bf:07:bc: 98:73:8f:8a:6e:d2:b6:85:f6:9c:ae:cc:b1:8e:d4:52:c2:4c: 39:a4:4d:9b:08:9c:17:d5:74:33:83:6e:98:bf:15:8e:37:bc: 1d:96:51:22:61:2b:89:ff:64:69:1b:99:81:19:31:db:55:cc: aa:7d:c7:c9:16:a0:64:9f:d5:2f:23:4b:86:c1:23:fb:03:78: d9:cd:72:71:6f:30:ac:e5:3e:72:c9:8b:0d:82:10:40:65:60: d9:c9:16:21:4d:57:6f:02:1e:f6:f4:d4:54:fa:ad:89:96:b5: a3:9e:7b:37:b5:ac:0c:2f:af:ea:28:77:6b:65:ba:d6:fc:c1: 10:04:27:0c:4c:47:f7:f5:37:f7:20:2d:f3:1b:75:e2:ce:0a: 03:ff:94:fc:a9:9c:6a:ed:a2:81:97:86:92:3a:a9:0e:bd:e6: fa:3e:a3:bf:b0:5a:94:8e:7e:80:2c:0c:ce:bc:77:a0:9f:17: 5e:ee:85:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB QjE1NzVCQzMwHhcNMjQwNTI2MTU1MzEzWhcNMjQwNjAyMTU1MzEzWjAYMRYwFAYD VQQDEw02NjUzNWFlOS02Y2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJokDMURGECu4cWBYmAAXEHHeZY4lOtv2PrDwj4/uJ702OQn9pUJYoOINsrE ov2wG1nYfLRKoU/sLYiquO0kVNHD0nS8iNm2+E6UqY5dqBNur52QS4VXCL0/ysyh 4gw/Ae2QPKP3Mvu2h0rD1lNUWFDHUSa0ZfHIH+K+CZAF7rm9FVOUarEXxukDZ+wc P4Tkmeo8C76k7XX8WtDpJuoQnBWBYu0WI7N3FFlHSVjK/ai1A0sruEEGpSUILnQu mLO81korQ5ZD3MXs2Yywqe7KBYbW3d4d7Ee/AvcsSRohadbCBp6WNP5Cy5IADG5D 9/TCjlIU7RHUeTvwdIICW/FgRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPavLkAj joBB4dERJ3kCftVfgCL6MB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBra7C4mraX7dZFDV2k1ip3WBKeBnYvhKk+3JtYQ9Mr8pLBCil77N8 xFPaTNaxO5SlY9sgB0vwMxT7XMzQ6e586/ssm66/B7yYc4+KbtK2hfacrsyxjtRS wkw5pE2bCJwX1XQzg26YvxWON7wdllEiYSuJ/2RpG5mBGTHbVcyqfcfJFqBkn9Uv I0uGwSP7A3jZzXJxbzCs5T5yyYsNghBAZWDZyRYhTVdvAh729NRU+q2JlrWjnns3 tawML6/qKHdrZbrW/MEQBCcMTEf39Tf3IC3zG3XizgoD/5T8qZxq7aKBl4aSOqkO veb6PqO/sFqUjn6ALAzOvHegnxde7oV5 -----END CERTIFICATE-----Generated at Sun May 26 16:40:11 2024 by rpki-client on console-fra.rpki-client.org