$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft File: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft (raw, json) Hash identifier: SuG6FcLBhLUvOWFDsUstSGGRKJtpTFG5m7EIPuJf0jA= Subject key identifier: 7A:49:F9:47:35:B9:C7:7F:62:E0:06:AC:93:62:D5:2A:BE:49:31:3C Authority key identifier: DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E Certificate issuer: /CN=A91DC4E1/serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E Certificate serial: 1A9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft Manifest number: 1A7E Signing time: Tue 28 May 2024 16:49:53 +0000 Manifest this update: Tue 28 May 2024 16:49:53 +0000 Manifest next update: Tue 04 Jun 2024 16:49:53 +0000 Files and hashes: 1: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl (hash: 9KRLDnKm8pfG624LisJPPNX09ojZSp/h/eJXIFz7SEE=) 2: D129428E25DF11E7AC03C03EC4F9AE02.roa (hash: ynwGG0zQPee7d/WWj4UfcSNuuY3z6zRAMBpddvVXj/U=) 3: 20772F82207611E7AD8F8459C4F9AE02.roa (hash: Pb6kM9WouPrp2XawpESgoX55xTNZIYJEDsvGscWBa08=) 4: 920126A625F011E7AB40BB69C4F9AE02.roa (hash: 0hZ3+OpFZYBUYKTlpJLUadJMlerF9D86c90f8Z02T0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 16:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6813 (0x1a9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC4E1/serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E Validity Not Before: May 28 16:49:53 2024 GMT Not After : Jun 4 16:49:53 2024 GMT Subject: CN=66560b31-dcec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1c:82:e1:17:e9:77:6d:4c:ee:9d:01:61:7a: e0:d6:2d:ca:8c:54:d5:6e:23:b2:1b:6a:dc:be:c7: db:71:eb:23:eb:fa:ab:f9:df:da:4a:92:6d:2c:86: 4c:da:e3:30:09:e8:16:f3:e9:86:da:42:e3:06:b2: 3a:1b:9a:45:c7:77:df:7a:95:57:d8:88:b4:70:7d: e5:62:02:f2:63:87:d6:d7:6d:9d:73:6c:10:a9:85: 17:62:90:ff:5c:30:3a:c7:59:fe:77:1c:39:8d:06: 50:09:46:c0:85:4d:81:ea:fc:3d:4a:22:f1:03:18: 34:3c:ac:79:65:f2:d9:2a:9c:f3:48:8e:49:9d:45: 6f:0f:c7:39:18:9f:16:74:2e:b7:74:e2:15:5f:e8: 19:5f:8b:5e:3d:44:f0:f4:b9:fd:d1:76:a5:1c:6b: 7c:cd:a0:54:23:79:61:74:99:ea:a2:3b:41:7a:5b: 2f:f9:5e:79:92:90:f0:f6:cb:19:cd:d5:23:16:c6: fd:5f:5e:d7:8d:8f:97:e0:06:f0:5c:54:35:d5:fd: 3f:35:05:39:23:e4:43:a3:2c:e2:33:7f:04:5e:d5: 95:83:5a:4a:53:28:78:9c:5f:d2:24:71:88:3d:38: 7f:47:6f:34:b9:6a:52:52:a6:4e:4c:c9:c3:e2:41: 63:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:49:F9:47:35:B9:C7:7F:62:E0:06:AC:93:62:D5:2A:BE:49:31:3C X509v3 Authority Key Identifier: keyid:DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:3b:da:33:9a:f6:84:43:ec:3c:8c:e1:de:9c:db:f4:ff:50: 82:e0:6c:3f:96:86:8d:e0:b5:ea:17:34:c8:8e:1e:57:cb:e6: 2f:4c:72:34:06:55:fa:e6:76:28:21:34:25:a1:38:05:ca:16: 47:cd:bc:c1:32:7f:29:1d:05:40:f9:cd:b8:59:48:8e:b7:2c: 11:c4:70:96:cf:59:d8:f4:5c:db:eb:d5:13:2d:08:73:b4:11: 53:f8:91:14:1f:30:9b:ba:3f:71:4a:9b:ee:4d:05:99:1c:75: 29:04:57:9d:fd:23:02:96:d9:09:83:bd:b5:3b:93:83:c9:20: 0d:3a:d2:51:59:93:68:16:c3:bb:b7:f2:56:10:d0:71:39:cf: 41:47:ab:4f:3f:b1:47:0a:2d:62:d5:98:6a:3f:1c:f3:72:d7: f5:7d:55:c5:b5:44:70:a3:d7:c7:c4:30:19:7c:e6:e9:88:6c: 3b:87:04:1c:44:5a:13:63:d0:3e:26:a2:7b:7d:b8:ea:10:17: 15:27:69:7d:08:1e:74:c7:0d:1e:7e:4f:8f:8e:d7:4f:56:fb: 50:14:1a:3f:aa:2e:6f:62:41:ab:63:62:08:da:7f:ee:1a:69: df:d7:db:1d:24:6a:78:57:6c:50:1f:80:df:4b:ba:c3:8d:cc: 05:d3:a3:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0RTExMTAvBgNVBAUTKERDMUIzOUI1NEY2MDg5MUFDNzc4QTkzMTZENzFCMEJF ODAwNjM5NkUwHhcNMjQwNTI4MTY0OTUzWhcNMjQwNjA0MTY0OTUzWjAYMRYwFAYD VQQDEw02NjU2MGIzMS1kY2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6xyC4Rfpd21M7p0BYXrg1i3KjFTVbiOyG2rcvsfbcesj6/qr+d/aSpJtLIZM 2uMwCegW8+mG2kLjBrI6G5pFx3ffepVX2Ii0cH3lYgLyY4fW122dc2wQqYUXYpD/ XDA6x1n+dxw5jQZQCUbAhU2B6vw9SiLxAxg0PKx5ZfLZKpzzSI5JnUVvD8c5GJ8W dC63dOIVX+gZX4tePUTw9Ln90XalHGt8zaBUI3lhdJnqojtBelsv+V55kpDw9ssZ zdUjFsb9X17XjY+X4AbwXFQ11f0/NQU5I+RDoyziM38EXtWVg1pKUyh4nF/SJHGI PTh/R280uWpSUqZOTMnD4kFjzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpJ+Uc1 ucd/YuAGrJNi1Sq+STE8MB8GA1UdIwQYMBaAFNwbObVPYIkax3ipMW1xsL6ABjlu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzRFMS8yMDA0RjE0NDE2 MDExMUU3QThBQzIyNURDNEY5QUUwMi8zQnM1dFU5Z2lSckhlS2t4YlhHd3ZvQUdP VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCczV0VTlnaVJySGVLa3hiWEd3dm9BR09XNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzRFMS8yMDA0RjE0NDE2MDExMUU3QThBQzIyNURDNEY5QUUwMi8zQnM1dFU5Z2lS ckhlS2t4YlhHd3ZvQUdPVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASO9ozmvaEQ+w8jOHenNv0/1CC4Gw/loaN4LXqFzTIjh5Xy+YvTHI0 BlX65nYoITQloTgFyhZHzbzBMn8pHQVA+c24WUiOtywRxHCWz1nY9Fzb69UTLQhz tBFT+JEUHzCbuj9xSpvuTQWZHHUpBFed/SMCltkJg721O5ODySANOtJRWZNoFsO7 t/JWENBxOc9BR6tPP7FHCi1i1ZhqPxzzctf1fVXFtURwo9fHxDAZfObpiGw7hwQc RFoTY9A+JqJ7fbjqEBcVJ2l9CB50xw0efk+PjtdPVvtQFBo/qi5vYkGrY2II2n/u Gmnf19sdJGp4V2xQH4DfS7rDjcwF06NP -----END CERTIFICATE-----Generated at Tue May 28 17:51:20 2024 by rpki-client on console-fra.rpki-client.org