$ rpki-client -vvf rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft File: 3JGEsEpTx6Fy980mJV612APjRwU.mft (raw, json) Hash identifier: lz4v6LNNq6XYr8mKS0xWkazs/YDnlEhAjQ/KeXv3r5o= Subject key identifier: 92:78:CD:7C:9C:BD:88:3F:FA:F4:80:F7:2A:6D:54:03:35:9B:E6:51 Authority key identifier: DC:91:84:B0:4A:53:C7:A1:72:F7:CD:26:25:5E:B5:D8:03:E3:47:05 Certificate issuer: /CN=A919910B/serialNumber=DC9184B04A53C7A172F7CD26255EB5D803E34705 Certificate serial: 05D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft Manifest number: 05CA Signing time: Sat 27 Apr 2024 00:04:44 +0000 Manifest this update: Sat 27 Apr 2024 00:04:43 +0000 Manifest next update: Sat 04 May 2024 00:04:43 +0000 Files and hashes: 1: 3JGEsEpTx6Fy980mJV612APjRwU.crl (hash: z6rU0GXvolQSXMsHLkIPps8pxvGZoYwOGDe3QEx+ulo=) 2: BB199EBC6F8711EB9E412A2BC4F9AE02.roa (hash: sP31WAUCzENpbJfGNg8j+9jw8+Cri9Up4Ad/8v47yRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.crl rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 00:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1489 (0x5d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919910B/serialNumber=DC9184B04A53C7A172F7CD26255EB5D803E34705 Validity Not Before: Apr 27 00:04:43 2024 GMT Not After : May 4 00:04:43 2024 GMT Subject: CN=662c411b-166c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:fd:0a:61:65:30:b0:6b:3a:75:54:6f:4c: b6:a1:89:d9:05:28:9f:72:a0:38:8c:c1:13:59:fe: 1d:bf:00:7e:1b:fc:2e:d3:c9:b5:dc:7a:72:d1:d5: be:51:01:b1:41:ab:f5:43:d3:ef:46:f3:80:12:d3: 0b:ad:5f:c0:50:b8:26:80:ea:ce:ee:24:40:a6:5a: 6f:7c:15:12:36:33:bc:dc:d9:13:b8:3a:f3:e3:6a: 33:7e:73:c1:97:08:57:78:b3:d8:20:8f:b0:02:95: 26:0c:31:82:d5:54:c2:5f:81:96:5c:a0:a6:1b:7a: 88:ec:c8:f4:af:6d:f5:5a:e1:b8:5f:ff:c2:b4:ca: 3e:48:4e:71:e7:e4:66:33:ed:13:8e:b6:52:44:f4: fc:99:f3:ab:e8:01:68:c3:bd:86:2e:f8:dc:3c:17: b8:50:7d:7c:9e:04:97:34:ea:e3:13:e2:1c:36:09: 67:07:b1:9a:b4:e8:72:09:6d:93:3f:4b:3f:d5:ca: 26:9a:68:5a:8d:5d:5f:a6:0a:2c:f8:2f:d1:8b:f3: 98:18:d1:42:4d:51:ce:2a:a0:02:ae:e8:de:1a:81: d3:fc:68:9a:f8:b8:c0:fc:44:c5:bf:38:06:3d:e0: d8:6b:5b:2e:dd:8f:07:a8:82:26:0a:13:65:7e:1b: 2b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:78:CD:7C:9C:BD:88:3F:FA:F4:80:F7:2A:6D:54:03:35:9B:E6:51 X509v3 Authority Key Identifier: keyid:DC:91:84:B0:4A:53:C7:A1:72:F7:CD:26:25:5E:B5:D8:03:E3:47:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:36:8b:ae:de:7f:fc:68:c1:b4:9c:63:af:c1:44:d8:b6:f2: 0e:91:f2:4f:62:ec:f9:18:eb:75:21:89:41:25:ca:31:f5:27: 2f:16:f0:b6:24:cc:89:46:29:03:6c:d7:11:18:ef:01:67:05: a5:48:d9:85:9d:1d:5d:da:81:ec:01:7f:88:bd:67:a0:a9:af: 38:2f:cd:36:56:72:73:cf:a4:2f:39:76:0a:01:b3:2e:a7:e0: 3c:9c:30:b7:ed:f7:09:e1:a0:ed:17:c1:c9:55:d9:4e:9d:bd: ea:2d:77:4e:0e:38:74:6d:ba:69:63:5d:3e:58:88:7d:4e:a9: 89:43:b7:90:3a:5b:04:a0:14:f0:b2:7c:53:e4:a0:b3:f3:26: 70:b6:35:6e:23:dd:1f:3d:c0:4c:24:ce:da:f4:54:ee:2f:25: 8d:1b:e9:4d:ea:3c:4d:80:4a:1d:52:dc:85:92:36:5d:e3:7a: 6e:15:53:7e:14:9a:26:6d:73:fa:c3:18:41:0e:97:82:a6:c1: 81:52:59:13:f7:ae:b6:40:8a:d3:7e:9d:2b:ef:8b:e9:9e:1b: 1c:2e:8f:33:d3:a7:81:1f:d8:77:c8:1f:ea:fe:e9:1b:98:09: 05:90:dc:b8:55:eb:1a:67:fb:bf:c2:72:fc:e5:ef:81:05:86: 11:2a:b8:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxMEIxMTAvBgNVBAUTKERDOTE4NEIwNEE1M0M3QTE3MkY3Q0QyNjI1NUVCNUQ4 MDNFMzQ3MDUwHhcNMjQwNDI3MDAwNDQzWhcNMjQwNTA0MDAwNDQzWjAYMRYwFAYD VQQDEw02NjJjNDExYi0xNjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0u/9CmFlMLBrOnVUb0y2oYnZBSifcqA4jMETWf4dvwB+G/wu08m13Hpy0dW+ UQGxQav1Q9PvRvOAEtMLrV/AULgmgOrO7iRAplpvfBUSNjO83NkTuDrz42ozfnPB lwhXeLPYII+wApUmDDGC1VTCX4GWXKCmG3qI7Mj0r231WuG4X//CtMo+SE5x5+Rm M+0TjrZSRPT8mfOr6AFow72GLvjcPBe4UH18ngSXNOrjE+IcNglnB7GatOhyCW2T P0s/1commmhajV1fpgos+C/Ri/OYGNFCTVHOKqACrujeGoHT/Gia+LjA/ETFvzgG PeDYa1su3Y8HqIImChNlfhsr0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJ4zXyc vYg/+vSA9yptVAM1m+ZRMB8GA1UdIwQYMBaAFNyRhLBKU8ehcvfNJiVetdgD40cF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTEwQi82MjNEMUUwNjZG ODUxMUVCQUM1QUM5NkNDNEY5QUUwMi8zSkdFc0VwVHg2Rnk5ODBtSlY2MTJBUGpS d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKR0VzRXBUeDZGeTk4MG1KVjYxMkFQalJ3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTEwQi82MjNEMUUwNjZGODUxMUVCQUM1QUM5NkNDNEY5QUUwMi8zSkdFc0VwVHg2 Rnk5ODBtSlY2MTJBUGpSd1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtNouu3n/8aMG0nGOvwUTYtvIOkfJPYuz5GOt1IYlBJcox9ScvFvC2 JMyJRikDbNcRGO8BZwWlSNmFnR1d2oHsAX+IvWegqa84L802VnJzz6QvOXYKAbMu p+A8nDC37fcJ4aDtF8HJVdlOnb3qLXdODjh0bbppY10+WIh9TqmJQ7eQOlsEoBTw snxT5KCz8yZwtjVuI90fPcBMJM7a9FTuLyWNG+lN6jxNgEodUtyFkjZd43puFVN+ FJombXP6wxhBDpeCpsGBUlkT9662QIrTfp0r74vpnhscLo8z06eBH9h3yB/q/ukb mAkFkNy4VesaZ/u/wnL85e+BBYYRKrip -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:57 2024 by rpki-client on console-ams.rpki-client.org