$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1AE/AD29E698DF2011EEAA104D15C4F9AE02/3R4ZrhJDI6QZfFocR7mPhO2yQlo.mft File: 3R4ZrhJDI6QZfFocR7mPhO2yQlo.mft (raw, json) Hash identifier: +AtjrCFPrSQBw/eIcRyFHQ4dtdTL107v33NdoFm3Cw4= Subject key identifier: 8F:57:30:64:7B:AB:E1:99:C4:A9:41:CB:D5:FB:F1:5C:94:D9:16:3C Authority key identifier: DD:1E:19:AE:12:43:23:A4:19:7C:5A:1C:47:B9:8F:84:ED:B2:42:5A Certificate issuer: /CN=A91DF1AE/serialNumber=DD1E19AE124323A4197C5A1C47B98F84EDB2425A Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3R4ZrhJDI6QZfFocR7mPhO2yQlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1AE/AD29E698DF2011EEAA104D15C4F9AE02/3R4ZrhJDI6QZfFocR7mPhO2yQlo.mft Manifest number: 24 Signing time: Fri 17 May 2024 08:40:48 +0000 Manifest this update: Fri 17 May 2024 08:40:48 +0000 Manifest next update: Fri 24 May 2024 08:40:48 +0000 Files and hashes: 1: 3R4ZrhJDI6QZfFocR7mPhO2yQlo.crl (hash: t06x1mvANtx617OvAITCzSNvgNkA2VaXsPcgt4Njkqw=) 2: 03E6331ADF2111EE808F5016C4F9AE02.roa (hash: /LEauKgNszQhHaV6kp+dm++8aB4s4kAPA+0yYh2du+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF1AE/AD29E698DF2011EEAA104D15C4F9AE02/3R4ZrhJDI6QZfFocR7mPhO2yQlo.crl rsync://rpki.apnic.net/member_repository/A91DF1AE/AD29E698DF2011EEAA104D15C4F9AE02/3R4ZrhJDI6QZfFocR7mPhO2yQlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3R4ZrhJDI6QZfFocR7mPhO2yQlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF1AE/serialNumber=DD1E19AE124323A4197C5A1C47B98F84EDB2425A Validity Not Before: May 17 08:40:48 2024 GMT Not After : May 24 08:40:48 2024 GMT Subject: CN=66471810-06da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:30:bf:12:10:a7:98:73:6f:d4:78:35:44:3d: 6f:bb:4e:37:9a:fe:e2:fe:d2:2a:b8:05:a1:8c:ce: a8:1c:a7:dc:83:0f:80:54:7e:8e:2a:10:d7:88:ce: 9a:80:75:d6:4a:3a:26:42:eb:48:32:18:55:f1:7a: 63:d8:9e:8a:43:97:27:c4:c3:08:6c:f2:e1:82:0a: 87:32:51:bc:0f:51:e1:27:6d:4b:f4:74:c0:2d:42: 15:c7:17:d7:c2:26:31:84:ab:d8:41:43:61:62:2a: 63:84:a7:05:81:0c:e9:49:14:df:02:95:70:a0:24: 61:96:3c:da:98:96:8e:14:6a:05:00:6f:49:8a:19: 8a:98:38:00:fe:18:fe:be:97:ce:58:2e:7f:04:23: ad:d4:74:66:64:de:dd:48:df:69:b0:9c:ef:23:3b: 23:69:ab:8d:20:a9:d6:a1:46:30:fe:bf:c8:4b:dd: c9:97:ab:48:d6:e2:56:8c:1a:bd:00:5c:a8:2b:af: 65:d2:05:c0:40:94:d9:e8:5f:63:e9:81:fa:62:94: 41:ec:93:29:6a:16:e7:d3:42:28:87:0f:9b:af:03: e8:97:10:07:c2:c1:59:5b:b3:d9:3b:52:65:3c:37: bf:17:83:c4:d1:9e:cf:32:d6:8e:06:c1:eb:a1:37: f0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:57:30:64:7B:AB:E1:99:C4:A9:41:CB:D5:FB:F1:5C:94:D9:16:3C X509v3 Authority Key Identifier: keyid:DD:1E:19:AE:12:43:23:A4:19:7C:5A:1C:47:B9:8F:84:ED:B2:42:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF1AE/AD29E698DF2011EEAA104D15C4F9AE02/3R4ZrhJDI6QZfFocR7mPhO2yQlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3R4ZrhJDI6QZfFocR7mPhO2yQlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1AE/AD29E698DF2011EEAA104D15C4F9AE02/3R4ZrhJDI6QZfFocR7mPhO2yQlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c5:79:b0:54:7d:f4:5d:71:69:9f:24:75:6e:75:bb:cf:7e: 3f:14:ef:ac:f0:22:dc:b5:a5:7b:65:be:6f:ce:10:24:8e:f7: e8:7c:38:1d:11:11:50:96:1b:72:9f:b3:cb:d9:c9:e4:56:9d: dd:6f:f7:42:7e:e2:c6:50:71:17:d9:5d:74:1f:34:fb:7b:0c: 4e:22:13:bd:3d:2b:f6:94:87:7c:e7:f5:1b:f5:ff:5e:c0:bf: b4:e9:fd:37:b9:5f:fa:22:14:a9:76:f3:40:11:68:8c:e2:4a: 75:31:ff:27:90:5b:32:a2:ef:73:bc:b9:5a:3e:07:43:4a:3c: bd:b5:1f:fb:29:b2:54:b8:23:0f:d2:d8:39:28:d0:aa:77:22: e9:9a:c9:62:5e:6a:e8:ed:30:18:f8:23:5d:d9:72:d5:f6:c7: 1a:5b:4f:8e:ec:a9:36:5e:66:fb:91:de:c5:de:bd:2c:73:b8: d5:96:ba:a9:35:b0:4e:41:f8:fe:4c:68:09:24:2d:b6:08:f5: d1:67:4f:3d:ea:ec:0f:85:92:48:31:af:c6:a1:21:93:1c:1d: 0c:d0:0b:7f:6b:52:c3:e7:51:e1:99:91:0a:6a:15:09:50:9b: 6a:a8:bf:74:ae:3c:35:b3:3d:41:50:07:00:2c:75:9e:45:a0: cd:6c:6b:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjFBRTExMC8GA1UEBRMoREQxRTE5QUUxMjQzMjNBNDE5N0M1QTFDNDdCOThGODRF REIyNDI1QTAeFw0yNDA1MTcwODQwNDhaFw0yNDA1MjQwODQwNDhaMBgxFjAUBgNV BAMTDTY2NDcxODEwLTA2ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVML8SEKeYc2/UeDVEPW+7Tjea/uL+0iq4BaGMzqgcp9yDD4BUfo4qENeIzpqA ddZKOiZC60gyGFXxemPYnopDlyfEwwhs8uGCCocyUbwPUeEnbUv0dMAtQhXHF9fC JjGEq9hBQ2FiKmOEpwWBDOlJFN8ClXCgJGGWPNqYlo4UagUAb0mKGYqYOAD+GP6+ l85YLn8EI63UdGZk3t1I32mwnO8jOyNpq40gqdahRjD+v8hL3cmXq0jW4laMGr0A XKgrr2XSBcBAlNnoX2PpgfpilEHskylqFufTQiiHD5uvA+iXEAfCwVlbs9k7UmU8 N78Xg8TRns8y1o4GweuhN/D9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj1cwZHur 4ZnEqUHL1fvxXJTZFjwwHwYDVR0jBBgwFoAU3R4ZrhJDI6QZfFocR7mPhO2yQlow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMUFFL0FEMjlFNjk4REYy MDExRUVBQTEwNEQxNUM0RjlBRTAyLzNSNFpyaEpESTZRWmZGb2NSN21QaE8yeVFs by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM1I0WnJoSkRJNlFaZkZvY1I3bVBoTzJ5UWxvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MUFFL0FEMjlFNjk4REYyMDExRUVBQTEwNEQxNUM0RjlBRTAyLzNSNFpyaEpESTZR WmZGb2NSN21QaE8yeVFsby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACnFebBUffRdcWmfJHVudbvPfj8U76zwIty1pXtlvm/OECSO9+h8OB0R EVCWG3Kfs8vZyeRWnd1v90J+4sZQcRfZXXQfNPt7DE4iE709K/aUh3zn9Rv1/17A v7Tp/Te5X/oiFKl280ARaIziSnUx/yeQWzKi73O8uVo+B0NKPL21H/spslS4Iw/S 2Dko0Kp3IumayWJeaujtMBj4I13ZctX2xxpbT47sqTZeZvuR3sXevSxzuNWWuqk1 sE5B+P5MaAkkLbYI9dFnTz3q7A+Fkkgxr8ahIZMcHQzQC39rUsPnUeGZkQpqFQlQ m2qov3SuPDWzPUFQBwAsdZ5FoM1sa5c= -----END CERTIFICATE-----Generated at Fri May 17 10:59:15 2024 by rpki-client on console-ams.rpki-client.org