$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft File: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json) Hash identifier: C71EC0GkZYRlMxSdTTAW1biRLZvLWfLej4S2WytA/so= Subject key identifier: 5B:27:8F:62:DF:48:68:D8:B5:33:1F:82:20:36:14:BB:3D:42:1B:C7 Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Certificate serial: 0972 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft Manifest number: 096C Signing time: Tue 30 Apr 2024 21:21:06 +0000 Manifest this update: Tue 30 Apr 2024 21:21:06 +0000 Manifest next update: Tue 07 May 2024 21:21:06 +0000 Files and hashes: 1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: RDXAVmGFlKJEEYpDTvlTPYwkTY6UHSq0vVPOQ8YUGfs=) 2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: OJuUeP3/MhnZuj46uoZjHhNgvQX9+E3YIgo5c+femP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2418 (0x972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Validity Not Before: Apr 30 21:21:06 2024 GMT Not After : May 7 21:21:06 2024 GMT Subject: CN=663160c2-4d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:d4:6d:3f:a9:6b:bc:9a:92:8d:f0:86:88: 97:e2:e4:1a:55:60:31:7e:bf:2b:e0:f1:e2:d8:0f: 9b:ef:f3:7f:81:23:13:11:55:c7:2e:3f:1f:90:f3: da:9b:2e:6b:d3:53:0d:0d:66:5c:ea:dd:7c:4d:c1: a9:fb:4c:4a:dd:80:cd:9d:cb:89:a3:4d:db:28:88: fe:46:e9:a4:e5:27:c6:22:78:6b:77:b3:71:61:65: 6a:13:72:ea:81:68:ea:07:62:4f:39:44:ca:1d:db: 0b:d8:23:22:4b:81:d1:20:69:10:e8:b6:97:f7:e9: 94:61:87:2f:7d:22:0b:9e:36:13:dd:95:6f:43:45: 15:94:a2:c5:c4:d5:33:a2:69:50:15:52:f4:f1:2a: 64:70:19:03:8c:5f:56:42:1d:83:28:97:fa:93:e0: f1:c9:e5:9f:a6:12:ae:cd:ed:01:00:2e:04:46:42: eb:c1:3f:5d:0e:33:a5:1d:79:ea:b1:66:73:03:84: 5c:a4:bd:0e:bd:fa:ba:e2:62:65:54:c4:a9:59:95: 73:c3:60:87:97:26:89:ad:9e:6d:8a:81:7e:00:c3: 13:e2:c7:3a:24:68:eb:f2:d0:99:b7:ea:97:65:c5: 7e:5c:d8:44:96:9e:ca:8a:f9:25:36:f0:f4:68:53: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:27:8F:62:DF:48:68:D8:B5:33:1F:82:20:36:14:BB:3D:42:1B:C7 X509v3 Authority Key Identifier: keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b6:7c:cd:62:ea:24:40:be:0d:24:31:d9:a1:32:61:27:8a: d6:9f:5e:d1:40:59:ee:b5:09:20:3c:63:71:49:ab:5c:97:dc: f7:b9:38:23:3d:95:59:03:4a:86:ee:6e:09:cb:6a:4f:15:bb: 74:65:e8:c6:f2:48:54:5b:2a:1e:ad:6f:a0:de:ff:16:84:15: a1:ea:3e:dc:8d:8b:e6:3a:68:6d:07:83:39:70:91:e0:b3:c4: 6b:2f:4d:0a:5d:ec:3e:3c:87:9a:e9:d8:4e:da:0f:c7:23:8e: ac:e9:cf:8f:14:1e:d3:81:07:51:3f:07:16:cc:99:0c:46:80: d2:f9:5e:1a:44:47:e6:64:e2:ec:59:83:ca:90:9e:02:fc:c6: 1a:a2:8e:45:3d:16:c4:b9:f7:53:de:9f:68:22:c2:de:2d:c0: 99:d8:bb:25:80:ea:cd:15:7c:3e:ae:27:22:b7:7b:a0:09:05: 04:61:9d:6e:ce:ee:a7:26:f4:06:3d:7f:02:a9:cd:b9:87:56: 0b:44:b9:2c:57:20:f2:0e:9f:53:2e:0b:32:2a:bd:c4:0d:3e: 29:b3:d2:dc:4c:e5:ea:90:0c:16:e2:0c:bf:c2:e6:e3:13:d4: b8:fa:77:1f:c6:d7:65:51:08:42:7f:61:63:39:ba:9d:21:d8: 55:bb:8d:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2QkUxMTAvBgNVBAUTKEREMTE4QkJCMzQ5RjJDOUI0MEREOUJCNzFBNUI2MUM2 NEJEQjNFMTEwHhcNMjQwNDMwMjEyMTA2WhcNMjQwNTA3MjEyMTA2WjAYMRYwFAYD VQQDEw02NjMxNjBjMi00ZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyX/UbT+pa7yako3whoiX4uQaVWAxfr8r4PHi2A+b7/N/gSMTEVXHLj8fkPPa my5r01MNDWZc6t18TcGp+0xK3YDNncuJo03bKIj+Rumk5SfGInhrd7NxYWVqE3Lq gWjqB2JPOUTKHdsL2CMiS4HRIGkQ6LaX9+mUYYcvfSILnjYT3ZVvQ0UVlKLFxNUz omlQFVL08SpkcBkDjF9WQh2DKJf6k+DxyeWfphKuze0BAC4ERkLrwT9dDjOlHXnq sWZzA4RcpL0Ovfq64mJlVMSpWZVzw2CHlyaJrZ5tioF+AMMT4sc6JGjr8tCZt+qX ZcV+XNhElp7KivklNvD0aFPIiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsnj2Lf SGjYtTMfgiA2FLs9QhvHMB8GA1UdIwQYMBaAFN0Ri7s0nyybQN2btxpbYcZL2z4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZCRS80NEMyOUUwRTZC NzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxKdEEzWnUzR2x0aHhrdmJQ aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNSR0x1elNmTEp0QTNadTNHbHRoeGt2YlBoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZCRS80NEMyOUUwRTZCNzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxK dEEzWnUzR2x0aHhrdmJQaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAntnzNYuokQL4NJDHZoTJhJ4rWn17RQFnutQkgPGNxSatcl9z3uTgj PZVZA0qG7m4Jy2pPFbt0ZejG8khUWyoerW+g3v8WhBWh6j7cjYvmOmhtB4M5cJHg s8RrL00KXew+PIea6dhO2g/HI46s6c+PFB7TgQdRPwcWzJkMRoDS+V4aREfmZOLs WYPKkJ4C/MYaoo5FPRbEufdT3p9oIsLeLcCZ2LslgOrNFXw+ricit3ugCQUEYZ1u zu6nJvQGPX8Cqc25h1YLRLksVyDyDp9TLgsyKr3EDT4ps9LcTOXqkAwW4gy/wubj E9S4+ncfxtdlUQhCf2FjObqdIdhVu43G -----END CERTIFICATE-----Generated at Tue Apr 30 21:59:07 2024 by rpki-client on console-ams.rpki-client.org