$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft File: _3cE5KczP2k3LZ8zQfjQAstKwM8.mft (raw, json) Hash identifier: LL/X2kavNZIW8i1dYwvykk4Om4HrtIWMpGeiMRXT0xs= Subject key identifier: 7A:46:C7:E8:20:6C:3E:AF:BE:2F:56:EE:20:67:D3:71:7C:88:0D:D1 Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF Certificate issuer: /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Certificate serial: 1C5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft Manifest number: 1C49 Signing time: Sat 18 May 2024 16:34:56 +0000 Manifest this update: Sat 18 May 2024 16:34:56 +0000 Manifest next update: Sat 25 May 2024 16:34:56 +0000 Files and hashes: 1: _3cE5KczP2k3LZ8zQfjQAstKwM8.crl (hash: GbAvCLlY4vkiIm1YgBI9Th1WxOVckO+rGXMfcWrXGzw=) 2: F2E707C4CB2D11E6B15E0480C4F9AE02.roa (hash: f9qgypovRby+DWYPfOeSCdkmWD4hVzcNJZsrQ+vRMZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7260 (0x1c5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Validity Not Before: May 18 16:34:56 2024 GMT Not After : May 25 16:34:56 2024 GMT Subject: CN=6648d8b0-b6b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:bf:f2:4c:49:6d:fe:b0:66:47:bc:56:0e: 88:84:f6:9b:d5:b1:c0:5f:89:5a:d9:d2:ba:ab:8f: f2:c6:9c:c1:27:4f:ba:b4:d2:40:ff:92:09:0b:82: b0:34:61:4a:89:01:d8:d6:ae:41:44:36:d1:30:c8: 54:0a:0e:1e:cc:56:75:9b:cd:4f:b8:0e:82:43:e1: 4e:43:0b:70:11:72:8d:22:9c:73:61:7e:89:d1:e3: f8:30:49:8f:71:7b:41:a0:af:71:db:1d:82:55:41: 79:b0:00:1f:a1:e0:d9:b8:1a:f9:bf:54:3d:10:5d: e9:b8:b0:58:49:16:89:50:f3:e3:4e:24:a0:7b:12: 51:38:52:e2:97:19:e0:cf:08:71:eb:c5:28:f9:f3: 36:21:c5:28:29:d5:be:31:ed:77:9e:8c:7b:6f:0d: b0:5c:5a:c9:17:13:70:f1:88:44:49:94:e2:4c:8a: 9f:97:69:ad:04:e0:ec:ee:a3:e7:e8:eb:fc:51:bf: 3c:ad:b8:cc:a2:00:27:bd:cd:69:4d:91:00:0a:ec: e1:26:af:21:3a:6a:ac:6b:ec:88:58:4f:ad:34:da: 18:c9:94:8a:11:4d:9d:28:3b:bb:ff:27:de:7a:b6: f1:ac:fb:0f:f7:6b:21:08:ca:18:13:a0:97:53:6a: 36:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:46:C7:E8:20:6C:3E:AF:BE:2F:56:EE:20:67:D3:71:7C:88:0D:D1 X509v3 Authority Key Identifier: keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:df:45:77:10:0c:e4:bc:00:e9:a0:62:e5:c3:fa:41:24:85: 71:a5:b4:6e:c6:62:98:2a:15:ad:d6:d5:63:7d:51:5e:40:35: 13:62:a8:3c:62:49:05:c7:1e:d0:da:9e:96:d5:c6:85:6e:64: 4d:b6:1d:66:0a:9c:cd:fc:b3:ab:0d:dd:4c:f9:83:8d:6a:d6: 84:cb:96:70:15:21:8a:21:30:07:0a:12:ed:47:b1:ff:91:d0: 08:58:95:b1:5b:bd:38:eb:f1:b8:70:70:19:48:61:98:3f:04: 5a:e6:e8:79:d3:b4:91:38:1c:5b:88:db:55:af:b4:c6:9f:7a: bf:58:17:32:2f:75:41:f4:9e:22:59:bd:e2:1a:ee:2e:85:d8: 98:45:d7:ef:67:9e:bd:2f:8a:a3:2c:41:c3:d5:62:f8:b4:55: 17:24:9a:27:88:83:eb:91:1b:24:5b:8b:15:fb:0f:f5:ef:92: 30:79:5d:23:48:8c:c4:aa:ac:4b:eb:77:52:c6:bb:f9:4d:ad: e7:da:b6:d8:03:a4:d2:cf:3e:53:6d:a8:27:13:79:01:5b:fa: 1e:a2:d8:2a:84:b4:24:4a:94:6b:04:94:4a:69:28:a3:9b:76: 52:44:09:66:3e:6f:ad:2e:86:06:da:78:78:21:12:c6:94:c3: 70:b1:7d:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5MkQxMTAvBgNVBAUTKEZGNzcwNEU0QTczMzNGNjkzNzJEOUYzMzQxRjhEMDAy Q0I0QUMwQ0YwHhcNMjQwNTE4MTYzNDU2WhcNMjQwNTI1MTYzNDU2WjAYMRYwFAYD VQQDEw02NjQ4ZDhiMC1iNmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvR+/8kxJbf6wZke8Vg6IhPab1bHAX4la2dK6q4/yxpzBJ0+6tNJA/5IJC4Kw NGFKiQHY1q5BRDbRMMhUCg4ezFZ1m81PuA6CQ+FOQwtwEXKNIpxzYX6J0eP4MEmP cXtBoK9x2x2CVUF5sAAfoeDZuBr5v1Q9EF3puLBYSRaJUPPjTiSgexJROFLilxng zwhx68Uo+fM2IcUoKdW+Me13nox7bw2wXFrJFxNw8YhESZTiTIqfl2mtBODs7qPn 6Ov8Ub88rbjMogAnvc1pTZEACuzhJq8hOmqsa+yIWE+tNNoYyZSKEU2dKDu7/yfe erbxrPsP92shCMoYE6CXU2o2cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpGx+gg bD6vvi9W7iBn03F8iA3RMB8GA1UdIwQYMBaAFP93BOSnMz9pNy2fM0H40ALLSsDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTkyRC85MTMzMjlGNEJC QTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAyazNMWjh6UWZqUUFzdEt3 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zY0U1S2N6UDJrM0xaOHpRZmpRQXN0S3dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTkyRC85MTMzMjlGNEJCQTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAy azNMWjh6UWZqUUFzdEt3TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU30V3EAzkvADpoGLlw/pBJIVxpbRuxmKYKhWt1tVjfVFeQDUTYqg8 YkkFxx7Q2p6W1caFbmRNth1mCpzN/LOrDd1M+YONataEy5ZwFSGKITAHChLtR7H/ kdAIWJWxW7046/G4cHAZSGGYPwRa5uh507SROBxbiNtVr7TGn3q/WBcyL3VB9J4i Wb3iGu4uhdiYRdfvZ569L4qjLEHD1WL4tFUXJJoniIPrkRskW4sV+w/175IweV0j SIzEqqxL63dSxrv5Ta3n2rbYA6TSzz5TbagnE3kBW/oeotgqhLQkSpRrBJRKaSij m3ZSRAlmPm+tLoYG2nh4IRLGlMNwsX3G -----END CERTIFICATE-----Generated at Sat May 18 17:20:34 2024 by rpki-client on console-ams.rpki-client.org