$ rpki-client -vvf rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft File: 3gyPQrygWy9Vgea8y0wUpuZxthk.mft (raw, json) Hash identifier: mAfOenDYXifF/481obEPSguJaDWMU9+Ce1899E0DucQ= Subject key identifier: 48:3E:EA:A2:2C:5F:9A:E4:19:2C:54:27:CD:5E:36:C2:EF:05:48:E8 Authority key identifier: DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 Certificate issuer: /CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Certificate serial: 0F84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft Manifest number: 0F7B Signing time: Tue 30 Apr 2024 18:23:19 +0000 Manifest this update: Tue 30 Apr 2024 18:23:19 +0000 Manifest next update: Tue 07 May 2024 18:23:19 +0000 Files and hashes: 1: 3gyPQrygWy9Vgea8y0wUpuZxthk.crl (hash: D88M918nVZeuoUdkErSaaZIqk2AcgrttTl6N3g5uAcw=) 2: E366C4B83B2611E9906E7B81C4F9AE02.roa (hash: skPQL/OHQUZ2T4jdEo8Lb73ed/7BdXi85p0W2u9vqxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3972 (0xf84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Validity Not Before: Apr 30 18:23:19 2024 GMT Not After : May 7 18:23:19 2024 GMT Subject: CN=66313717-7f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:6e:ed:23:82:77:a0:7a:be:56:72:37:db: 94:24:5d:f1:71:e7:4c:92:07:85:3f:a5:09:fc:16: 53:b1:35:5f:50:72:d2:c0:16:e7:ae:3b:e3:62:f3: 99:eb:6d:72:f4:17:8a:bf:09:7e:e9:8e:a6:68:95: 45:c5:ae:5d:2b:bf:19:bf:95:37:cd:cc:3a:ea:3b: d5:cb:74:26:36:26:bf:d1:16:15:0a:ac:20:eb:92: d6:c5:18:d2:c3:a7:e1:14:8e:aa:cc:b0:90:63:c9: 88:89:e4:86:55:5c:a9:f6:a3:87:a1:9a:a5:ea:12: 55:16:8e:14:c2:70:10:62:47:cb:70:9c:a7:81:4b: cf:66:32:6d:2a:5c:a0:9c:b0:a1:aa:12:0a:5c:3f: 98:b3:dd:94:ce:04:73:88:c1:be:ba:6e:54:e6:fb: 93:b5:00:5f:a4:29:b9:44:3a:15:11:25:5a:cb:fa: 87:e3:1f:9b:e4:ab:c7:45:35:c2:a4:8b:e2:c5:90: 66:81:91:ef:a1:f0:d1:ee:80:09:83:0a:bb:01:ce: cb:4e:2b:cf:d1:b7:e8:29:ab:13:16:7b:08:f7:d7: 9c:5a:02:7f:5a:52:17:20:65:4c:2a:8e:1a:43:f7: 3b:17:7a:6c:23:77:fe:ed:43:4d:e7:c8:af:3b:a7: f6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3E:EA:A2:2C:5F:9A:E4:19:2C:54:27:CD:5E:36:C2:EF:05:48:E8 X509v3 Authority Key Identifier: keyid:DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:51:d3:d3:96:22:42:87:36:13:8d:50:d8:6e:cb:d6:31:47: 17:05:3c:fe:e8:db:a8:3c:12:f4:de:b9:db:8e:ab:66:69:bc: ba:62:23:8d:0f:41:f4:c6:96:75:52:21:c5:d3:f9:67:60:94: 7b:a8:d9:ae:39:b3:70:69:42:7b:81:25:fc:a5:49:e6:8c:52: e8:4a:f0:7e:41:93:ab:97:48:23:93:e8:f5:59:24:ef:5d:04: 22:dc:7f:30:1b:c9:f0:a2:b8:f5:e6:93:81:b1:26:80:39:47: f2:c5:47:06:6d:ea:82:d0:2d:f6:cf:68:a7:3b:bb:a2:f9:7d: c1:2d:00:24:98:67:64:82:6a:a5:7b:d3:c8:fa:55:83:b2:3e: 3d:63:7f:49:7e:6f:95:bf:fd:ea:89:28:a6:04:a0:73:eb:9e: 19:7f:a2:48:f4:34:eb:95:bb:29:cd:d8:51:35:7e:69:04:a8: 09:04:95:e7:5d:c2:85:bc:44:c8:95:7e:37:12:d3:af:05:fa: e7:e8:7e:bd:3e:19:3b:81:f4:c3:2e:dd:4a:ce:7e:45:c0:56: 4e:4b:09:ec:0b:ce:c2:00:5a:73:d2:a8:1b:15:2c:82:e4:53: 1f:58:e1:6b:84:7e:a0:23:df:93:a9:c4:2c:44:63:ec:37:d4: fd:66:2f:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczODYxMTAvBgNVBAUTKERFMEM4RjQyQkNBMDVCMkY1NTgxRTZCQ0NCNEMxNEE2 RTY3MUI2MTkwHhcNMjQwNDMwMTgyMzE5WhcNMjQwNTA3MTgyMzE5WjAYMRYwFAYD VQQDEw02NjMxMzcxNy03Zjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDNu7SOCd6B6vlZyN9uUJF3xcedMkgeFP6UJ/BZTsTVfUHLSwBbnrjvjYvOZ 621y9BeKvwl+6Y6maJVFxa5dK78Zv5U3zcw66jvVy3QmNia/0RYVCqwg65LWxRjS w6fhFI6qzLCQY8mIieSGVVyp9qOHoZql6hJVFo4UwnAQYkfLcJyngUvPZjJtKlyg nLChqhIKXD+Ys92UzgRziMG+um5U5vuTtQBfpCm5RDoVESVay/qH4x+b5KvHRTXC pIvixZBmgZHvofDR7oAJgwq7Ac7LTivP0bfoKasTFnsI99ecWgJ/WlIXIGVMKo4a Q/c7F3psI3f+7UNN58ivO6f2/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEg+6qIs X5rkGSxUJ81eNsLvBUjoMB8GA1UdIwQYMBaAFN4Mj0K8oFsvVYHmvMtMFKbmcbYZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM4Ni80OUNENkEzQzNC MjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5OVZnZWE4eTB3VXB1Wnh0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNneVBRcnlnV3k5VmdlYTh5MHdVcHVaeHRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM4Ni80OUNENkEzQzNCMjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5 OVZnZWE4eTB3VXB1Wnh0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpUdPTliJChzYTjVDYbsvWMUcXBTz+6NuoPBL03rnbjqtmaby6YiON D0H0xpZ1UiHF0/lnYJR7qNmuObNwaUJ7gSX8pUnmjFLoSvB+QZOrl0gjk+j1WSTv XQQi3H8wG8nworj15pOBsSaAOUfyxUcGbeqC0C32z2inO7ui+X3BLQAkmGdkgmql e9PI+lWDsj49Y39Jfm+Vv/3qiSimBKBz654Zf6JI9DTrlbspzdhRNX5pBKgJBJXn XcKFvETIlX43EtOvBfrn6H69Phk7gfTDLt1Kzn5FwFZOSwnsC87CAFpz0qgbFSyC 5FMfWOFrhH6gI9+TqcQsRGPsN9T9Zi+F -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:04 2024 by rpki-client on console-fra.rpki-client.org