$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: PRjHUhz5LGP2N8u2j8O2RtcWLyOipcQOEhwVTnJRAbo= Subject key identifier: 8C:B0:A5:87:9A:92:2F:39:D6:9D:86:6A:EF:12:E4:13:EB:43:D8:87 Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0B7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0B7A Signing time: Tue 30 Apr 2024 19:39:14 +0000 Manifest this update: Tue 30 Apr 2024 19:39:13 +0000 Manifest next update: Tue 07 May 2024 19:39:13 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: EAWqjBzPFCMW26zOX9rq4LQxVxXPnPzpzghNaXG7lCY=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: DsvVVTAja1HxBFFoPVI14G+L8aNSXctmjV2ADcNrbXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2943 (0xb7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Apr 30 19:39:13 2024 GMT Not After : May 7 19:39:13 2024 GMT Subject: CN=663148e2-785d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c3:1e:7c:08:46:08:b4:c6:3a:22:71:92:c8: e8:32:90:03:08:9f:52:05:93:d9:2d:f8:cc:2f:a9: cd:ce:df:dc:42:fe:ce:8b:43:1d:a2:21:5a:d3:be: 5d:ee:c1:71:1a:05:d3:f1:08:3a:d2:11:d4:d5:e4: 5f:06:73:c2:2c:22:af:6e:f0:7b:87:df:ce:b0:be: 4a:f5:47:6b:9c:22:6d:3f:d6:e2:be:bb:b4:50:c8: d3:cc:e7:20:90:5f:f4:22:0d:06:94:ff:73:b3:1a: 80:0d:20:09:14:9a:90:71:f7:b6:29:fa:b6:11:4d: cb:5b:f0:8e:9a:1b:7a:d3:21:86:75:33:70:a5:84: ae:a0:9f:c8:fd:68:1c:e0:5d:a6:af:2a:f3:15:2c: e5:31:04:d6:d6:28:eb:26:c0:d7:e9:d3:dc:ee:bc: a0:5e:bb:85:9d:9f:85:51:ac:4b:93:7d:96:69:18: 00:f8:f0:59:c2:fd:a7:ad:22:6f:11:d0:58:ce:a0: 22:9f:1c:3c:07:04:b2:0e:0d:48:21:b4:f0:16:cb: a5:94:f3:c5:41:99:2d:36:6f:ad:f9:99:3d:6e:68: 43:d7:41:b4:0b:00:e2:10:50:f5:72:6f:4b:53:2e: 34:f9:5d:4a:21:8d:bb:f0:96:f3:8d:cf:81:c0:b8: c4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B0:A5:87:9A:92:2F:39:D6:9D:86:6A:EF:12:E4:13:EB:43:D8:87 X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ee:5f:ee:04:1c:41:49:8e:ff:bd:cb:58:06:bf:a7:17:11: f7:54:f8:27:3f:f5:a5:51:2d:82:09:48:7b:d0:dd:3c:3b:73: 6f:ae:25:f8:dd:06:e1:a5:25:ae:18:22:e5:dc:23:b8:ff:48: 0a:2f:a8:4a:1d:37:8e:47:8b:b2:ac:5f:95:00:07:02:ed:5b: 81:72:2c:88:b5:e6:07:45:0a:72:4e:cc:2a:19:61:7f:74:2a: df:c4:0c:f9:0c:15:64:29:b8:ea:55:21:a4:cc:ba:ce:f7:a7: 37:bb:83:2d:c1:6e:00:6e:a0:90:a7:9c:93:b6:70:06:6f:2b: c1:60:27:56:49:18:a1:0f:a5:40:ba:9d:34:90:69:e8:c6:8f: 01:68:23:7b:26:03:8c:4a:fe:e4:81:1f:cb:b8:9f:d5:8b:41: 17:8b:1e:78:db:9f:65:c7:e3:68:9f:1a:ba:2f:9d:b6:ce:1f: e0:48:1e:c8:9e:f6:0c:8a:fc:b5:bf:23:aa:39:55:fe:7b:34: eb:75:3a:cc:5f:d1:bd:3f:04:b6:b9:a7:9b:a6:6c:c3:8c:d4: 36:ea:69:0f:50:af:1c:f8:a8:6b:43:31:96:a7:ea:51:fe:ef: 5c:66:2e:3e:0b:09:d0:8f:eb:a8:79:14:a2:c9:88:8b:5c:7b: 3c:56:8e:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjQwNDMwMTkzOTEzWhcNMjQwNTA3MTkzOTEzWjAYMRYwFAYD VQQDEw02NjMxNDhlMi03ODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA88MefAhGCLTGOiJxksjoMpADCJ9SBZPZLfjML6nNzt/cQv7Oi0MdoiFa075d 7sFxGgXT8Qg60hHU1eRfBnPCLCKvbvB7h9/OsL5K9UdrnCJtP9bivru0UMjTzOcg kF/0Ig0GlP9zsxqADSAJFJqQcfe2Kfq2EU3LW/COmht60yGGdTNwpYSuoJ/I/Wgc 4F2mryrzFSzlMQTW1ijrJsDX6dPc7rygXruFnZ+FUaxLk32WaRgA+PBZwv2nrSJv EdBYzqAinxw8BwSyDg1IIbTwFsullPPFQZktNm+t+Zk9bmhD10G0CwDiEFD1cm9L Uy40+V1KIY278Jbzjc+BwLjEQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIywpYea ki851p2Gau8S5BPrQ9iHMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB47l/uBBxBSY7/vctYBr+nFxH3VPgnP/WlUS2CCUh70N08O3NvriX4 3QbhpSWuGCLl3CO4/0gKL6hKHTeOR4uyrF+VAAcC7VuBciyIteYHRQpyTswqGWF/ dCrfxAz5DBVkKbjqVSGkzLrO96c3u4MtwW4AbqCQp5yTtnAGbyvBYCdWSRihD6VA up00kGnoxo8BaCN7JgOMSv7kgR/LuJ/Vi0EXix54259lx+Nonxq6L522zh/gSB7I nvYMivy1vyOqOVX+ezTrdTrMX9G9PwS2uaebpmzDjNQ26mkPUK8c+KhrQzGWp+pR /u9cZi4+CwnQj+uoeRSiyYiLXHs8Vo5p -----END CERTIFICATE-----Generated at Tue Apr 30 21:59:04 2024 by rpki-client on console-ams.rpki-client.org