$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft File: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json) Hash identifier: vpTzco29aHPTJchL2NviiG7v69VnH0ljXDb9mSjRKX4= Subject key identifier: 35:A2:F2:3C:B4:C5:F0:3A:B8:F0:AF:01:68:42:07:FA:E5:01:C1:E3 Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft Manifest number: 013C Signing time: Wed 29 May 2024 05:29:38 +0000 Manifest this update: Wed 29 May 2024 05:29:37 +0000 Manifest next update: Wed 05 Jun 2024 05:29:37 +0000 Files and hashes: 1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: mkOSydf7a84AUO90hLYOxuLmbzl8kRTiDJ4TZF9hf1k=) 2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: +n0AtuT6Jdla2/49nbRpW9RkyQDKQaYh3sVDv0xviWc=) 3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: xI0GnyvN5cK5+FijAC55cRTHb9/XhLz8klCv+xpDf+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 05:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Validity Not Before: May 29 05:29:37 2024 GMT Not After : Jun 5 05:29:37 2024 GMT Subject: CN=6656bd42-b55d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:ed:06:27:b7:c9:83:31:9d:bc:f3:f6:ff: bd:e6:88:79:ee:47:52:c8:21:3f:cd:15:5a:51:be: 24:72:1f:50:6f:a8:25:fe:b6:c0:96:d4:d1:e2:3b: f2:55:6a:48:2e:77:57:41:00:ad:e1:fd:4a:60:df: b0:ad:6b:3d:0c:84:d4:af:f6:a8:d3:09:ae:c7:86: 43:aa:25:3b:c7:1c:50:b3:af:64:20:98:10:9b:5c: a5:c4:ea:12:9b:29:05:a1:16:0d:9c:e1:d8:aa:01: 87:cf:21:9e:f3:6d:f2:e3:d4:f5:ef:73:4a:a4:ff: 6c:72:3f:e0:b0:e7:b3:94:97:fa:16:bb:00:e2:61: d2:89:51:2f:9d:3b:3c:74:f7:30:c7:8a:c3:d7:bc: e9:ae:43:12:8f:02:91:9a:a8:f0:36:74:44:1b:ed: 01:15:65:c2:a9:7c:05:14:c4:11:d0:76:37:1f:e2: 47:29:fe:e7:07:3f:d9:48:57:5e:da:cd:a1:d3:fd: 5e:a9:fc:60:35:4e:2c:c7:b9:fd:cc:a2:80:d4:5f: 33:9c:78:bb:66:33:dd:6d:f0:de:4b:cf:d8:a9:4d: 74:1b:05:55:7b:1b:f6:ea:96:6d:ce:11:0e:f0:d6: b4:78:d4:9a:b1:9f:ee:27:f7:4b:3f:fa:71:0b:3a: b7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A2:F2:3C:B4:C5:F0:3A:B8:F0:AF:01:68:42:07:FA:E5:01:C1:E3 X509v3 Authority Key Identifier: keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:0c:b1:c5:c0:b4:f7:94:30:af:b6:14:2d:8b:df:e8:7a:9d: be:fb:be:3d:b7:4d:81:f8:24:a0:4b:55:29:43:2e:43:73:6f: 21:da:60:41:34:77:a9:fe:35:04:72:8c:02:46:60:ef:5c:32: 9a:75:f1:54:e9:16:3e:90:65:0a:97:b2:2e:8f:04:3b:a2:43: 83:ae:be:1c:07:22:69:54:ef:59:1b:4b:c4:84:9a:34:dd:39: 24:60:1f:1f:a3:73:f3:39:d9:17:d7:53:2f:b4:c9:c0:44:9a: 5e:b6:e5:66:e5:b9:d1:00:74:8d:84:12:47:bb:f7:ad:d1:c8: 06:4d:1a:b0:5a:ab:af:c5:9b:5b:20:e6:79:da:50:a1:42:92: bf:3e:2f:b6:b7:3f:26:ea:32:f6:6d:97:46:be:7a:4d:57:51: d2:7e:5e:14:9a:bf:94:d0:b2:a7:02:5d:bf:e1:06:d3:8e:6e: 1f:b3:c7:bb:e1:9b:7f:2d:69:fe:b0:e8:c4:6d:d3:54:65:9c: e6:13:79:13:ff:b4:30:3f:71:96:e3:d7:f5:e1:c0:c2:4b:f1: fe:6d:a1:1b:46:cc:aa:95:cc:e0:27:e3:e7:aa:93:58:65:9d: 97:b1:74:51:b0:e2:c6:ca:b4:03:f5:d2:06:79:cb:f3:a8:29: 64:66:f7:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD OTRDQkM1QkEwHhcNMjQwNTI5MDUyOTM3WhcNMjQwNjA1MDUyOTM3WjAYMRYwFAYD VQQDEw02NjU2YmQ0Mi1iNTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkztBie3yYMxnbzz9v+95oh57kdSyCE/zRVaUb4kch9Qb6gl/rbAltTR4jvy VWpILndXQQCt4f1KYN+wrWs9DITUr/ao0wmux4ZDqiU7xxxQs69kIJgQm1ylxOoS mykFoRYNnOHYqgGHzyGe823y49T173NKpP9scj/gsOezlJf6FrsA4mHSiVEvnTs8 dPcwx4rD17zprkMSjwKRmqjwNnREG+0BFWXCqXwFFMQR0HY3H+JHKf7nBz/ZSFde 2s2h0/1eqfxgNU4sx7n9zKKA1F8znHi7ZjPdbfDeS8/YqU10GwVVexv26pZtzhEO 8Na0eNSasZ/uJ/dLP/pxCzq3PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWi8jy0 xfA6uPCvAWhCB/rlAcHjMB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9FNDJDQkM0QzQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJ VjR1ZVIwcnJnTEhKVEx4Ym8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQDLHFwLT3lDCvthQti9/oep2++749t02B+CSgS1UpQy5Dc28h2mBB NHep/jUEcowCRmDvXDKadfFU6RY+kGUKl7IujwQ7okODrr4cByJpVO9ZG0vEhJo0 3TkkYB8fo3PzOdkX11MvtMnARJpetuVm5bnRAHSNhBJHu/et0cgGTRqwWquvxZtb IOZ52lChQpK/Pi+2tz8m6jL2bZdGvnpNV1HSfl4Umr+U0LKnAl2/4QbTjm4fs8e7 4Zt/LWn+sOjEbdNUZZzmE3kT/7QwP3GW49f14cDCS/H+baEbRsyqlczgJ+PnqpNY ZZ2XsXRRsOLGyrQD9dIGecvzqClkZvdB -----END CERTIFICATE-----Generated at Wed May 29 06:01:36 2024 by rpki-client on console-fra.rpki-client.org