$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft File: 3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json) Hash identifier: n1mqyO0+UzkdOyhqBltIWodwQqAcTUBgdjcCiSy0V5w= Subject key identifier: 0E:A4:17:0B:ED:E5:13:D3:AE:4D:DE:A5:23:44:7D:E2:87:D3:08:C3 Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 Certificate issuer: /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Certificate serial: 073A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft Manifest number: 0733 Signing time: Sat 04 May 2024 22:37:23 +0000 Manifest this update: Sat 04 May 2024 22:37:22 +0000 Manifest next update: Sat 11 May 2024 22:37:22 +0000 Files and hashes: 1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: rWoPRolYrfpw61rRfAAtEjDua2hwB0lSxRzxFwrh7AM=) 2: D5E920EC194A11EC83D2C21FC4F9AE02.roa (hash: e5rN3MaCKkzkirvm/eA6M+bzzjdijgjg8zwdRjr6n+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1850 (0x73a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Validity Not Before: May 4 22:37:22 2024 GMT Not After : May 11 22:37:22 2024 GMT Subject: CN=6636b8a3-6b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:0f:f1:b8:8d:9b:e0:0c:fc:40:04:a8:1e: c4:2f:5a:42:e7:f0:10:cb:1a:7d:c8:6b:81:20:6f: fe:db:9f:4f:8d:87:f4:40:b3:4d:df:2e:97:36:74: 14:25:a8:81:be:bd:12:b2:d1:86:32:75:c4:97:0e: e0:df:32:3d:cd:26:9d:61:ce:ff:30:28:e6:75:7d: 5c:8b:ff:e3:e9:d4:db:91:49:c9:65:a9:2c:0d:63: 58:71:e7:69:ce:d3:fb:de:85:0d:16:78:38:8d:07: cf:f8:7a:85:cd:18:20:1f:4e:59:1f:57:90:6e:ab: 40:aa:4f:43:ed:02:73:c4:79:92:55:3d:61:5e:ec: b7:2e:92:fb:7a:6a:19:59:25:ab:01:6d:4b:ee:ad: e6:e2:4d:67:72:84:82:03:ec:3d:44:fa:0a:3a:a9: 59:1e:27:91:b1:73:1e:46:c0:b7:67:a6:3e:37:fb: 35:2b:e1:38:69:f1:6e:af:9b:03:fe:6f:b9:04:d3: 2a:11:c7:79:fc:86:e7:d7:a0:51:6d:ed:f5:95:a3: 04:f3:8f:df:52:87:cd:62:78:f1:39:45:e5:74:d6: 42:9b:c0:9c:a9:df:80:97:70:40:1f:0d:2d:72:26: f2:73:85:81:21:a0:9d:ac:90:1f:1e:3c:f9:e3:09: 09:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A4:17:0B:ED:E5:13:D3:AE:4D:DE:A5:23:44:7D:E2:87:D3:08:C3 X509v3 Authority Key Identifier: keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:60:36:cc:b4:89:f6:37:1c:49:d4:81:ae:d3:9b:55:dc:c9: 0b:59:e2:eb:1b:e3:05:b7:79:10:e2:0a:ff:0f:3d:52:0a:75: 3d:36:b8:48:dd:62:37:18:16:a8:9f:70:19:1a:15:94:9f:43: 82:1d:c1:70:5a:98:88:2c:5b:91:b6:39:be:7c:b6:0f:90:89: 4b:09:0a:ea:4d:71:7c:db:02:96:23:da:72:af:e2:c6:a1:1d: 78:72:68:fa:45:ee:14:ef:ea:00:f2:4a:d2:db:7e:ca:55:b7: bf:fd:7c:09:cd:b2:e8:60:ac:a8:b7:52:e1:37:b4:c4:7a:c6: f3:06:12:e1:01:09:6e:e9:eb:33:10:4a:7f:a9:7d:6c:cc:36: bf:63:bc:22:cd:d6:58:b1:7f:8f:f4:66:56:52:05:b7:dc:c4: 6a:8a:08:d7:cd:47:87:40:df:82:84:d1:e8:e3:75:0c:d1:16: 68:2d:bd:88:0b:83:67:a1:a8:78:2a:24:b6:ad:0f:29:07:04: 14:fd:86:13:4a:c2:28:4a:5a:69:31:06:d2:50:a7:cf:8c:ba: 35:ca:fe:db:f5:63:6f:56:e2:5a:b3:2a:88:6d:19:87:08:78: 27:61:88:7a:79:e0:b9:e1:a2:f7:30:bb:aa:39:cf:45:87:69: 95:25:f7:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDQjQxMTAvBgNVBAUTKERDRTYyMjdDMDU0N0MwMEFFQzY1QzVFNjgwRjYxNzkz RjQ5RDU1ODMwHhcNMjQwNTA0MjIzNzIyWhcNMjQwNTExMjIzNzIyWjAYMRYwFAYD VQQDEw02NjM2YjhhMy02YjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzUP8biNm+AM/EAEqB7EL1pC5/AQyxp9yGuBIG/+259PjYf0QLNN3y6XNnQU JaiBvr0SstGGMnXElw7g3zI9zSadYc7/MCjmdX1ci//j6dTbkUnJZaksDWNYcedp ztP73oUNFng4jQfP+HqFzRggH05ZH1eQbqtAqk9D7QJzxHmSVT1hXuy3LpL7emoZ WSWrAW1L7q3m4k1ncoSCA+w9RPoKOqlZHieRsXMeRsC3Z6Y+N/s1K+E4afFur5sD /m+5BNMqEcd5/Ibn16BRbe31laME84/fUofNYnjxOUXldNZCm8Ccqd+Al3BAHw0t cibyc4WBIaCdrJAfHjz54wkJqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6kFwvt 5RPTrk3epSNEfeKH0wjDMB8GA1UdIwQYMBaAFNzmInwFR8AK7GXF5oD2F5P0nVWD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNCNC8zQTdBRDNCMkUz ODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdBcnNaY1htZ1BZWGtfU2RW WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNPWWlmQVZId0Fyc1pjWG1nUFlYa19TZFZZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkNCNC8zQTdBRDNCMkUzODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdB cnNaY1htZ1BZWGtfU2RWWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8YDbMtIn2NxxJ1IGu05tV3MkLWeLrG+MFt3kQ4gr/Dz1SCnU9NrhI 3WI3GBaon3AZGhWUn0OCHcFwWpiILFuRtjm+fLYPkIlLCQrqTXF82wKWI9pyr+LG oR14cmj6Re4U7+oA8krS237KVbe//XwJzbLoYKyot1LhN7TEesbzBhLhAQlu6esz EEp/qX1szDa/Y7wizdZYsX+P9GZWUgW33MRqigjXzUeHQN+ChNHo43UM0RZoLb2I C4Nnoah4KiS2rQ8pBwQU/YYTSsIoSlppMQbSUKfPjLo1yv7b9WNvVuJasyqIbRmH CHgnYYh6eeC54aL3MLuqOc9Fh2mVJfeZ -----END CERTIFICATE-----Generated at Sun May 5 00:14:43 2024 by rpki-client on console-ams.rpki-client.org