$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft File: I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft (raw, json) Hash identifier: T86jgR3KQ3l0Fn8dg3vR+vtOImFvNJm8w7g7zofsONw= Subject key identifier: 9C:FE:16:07:CF:DD:A4:11:D1:F8:86:DB:71:CA:68:CF:A7:10:21:EA Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15 Certificate issuer: /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft Manifest number: 015A Signing time: Sat 25 May 2024 05:04:56 +0000 Manifest this update: Sat 25 May 2024 05:04:56 +0000 Manifest next update: Sat 01 Jun 2024 05:04:56 +0000 Files and hashes: 1: I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl (hash: cICmXtjWOaSoWUIOnbvA6hrwar8vfo99JpPsSUOK+yM=) 2: 623705DA339111ED9249064BC4F9AE02.roa (hash: oE8Ftzk8b1pgimy4jf77z4BKi4j6G1jlmkYSbgOmtg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615 Validity Not Before: May 25 05:04:56 2024 GMT Not After : Jun 1 05:04:56 2024 GMT Subject: CN=66517178-073b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:85:79:24:2d:3c:6b:be:53:bd:bf:c5:a9:8e: 97:e7:dc:92:3e:08:1f:e6:84:f8:15:26:b8:2a:bc: 03:a9:c4:64:f7:2f:7f:be:e9:8b:62:a5:0f:d6:61: f3:4c:85:ef:f8:4b:53:d5:08:91:4a:1b:fc:10:c3: 51:c6:80:ba:a1:0f:3f:10:0e:7b:b9:9e:37:75:d2: 71:0f:be:90:9b:ba:87:a7:2f:23:ea:a0:d8:65:10: 9c:b4:2a:5d:b1:4c:c8:e0:01:c0:33:1a:e0:9e:51: ca:b3:23:df:23:bb:a1:04:0d:ab:1c:db:d6:a3:4c: d2:87:96:18:16:b3:10:2d:d7:4a:6c:85:c5:56:09: cf:00:e0:57:cc:6f:cb:da:f1:01:6a:95:3c:9e:39: 63:8e:65:c3:7c:7a:0d:9c:8d:73:51:56:e9:47:64: 65:69:67:9c:aa:47:c8:91:8b:de:64:16:f3:b9:a9: 2e:3c:37:d1:53:51:86:47:aa:3a:e7:34:d2:98:ed: e3:7b:8f:41:2f:00:ed:d4:79:fd:e2:2f:22:30:68: 1a:8f:d4:13:eb:31:6d:da:78:08:56:58:8d:2d:d9: f4:ab:fe:f3:9c:5b:2b:14:db:d1:92:d4:1e:a5:f9: 2e:db:72:a5:d6:2a:fb:09:ae:65:31:ce:08:6e:11: 2b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FE:16:07:CF:DD:A4:11:D1:F8:86:DB:71:CA:68:CF:A7:10:21:EA X509v3 Authority Key Identifier: keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:3b:e8:c3:25:47:74:1d:66:8a:68:8a:f2:e3:f3:e2:1a:52: 0b:d3:65:5b:ac:75:70:2c:10:0f:33:46:33:d2:55:f8:a9:17: fa:47:e7:d0:85:45:ad:b1:8f:d8:65:78:cf:67:04:f4:84:7e: 05:7f:54:0f:d0:8e:ce:75:f2:ae:7c:e0:95:3d:0f:db:48:b1: 35:01:a8:bc:fc:07:f4:57:1a:14:6e:b1:40:df:7d:58:94:95: 13:67:12:88:76:df:8c:a1:07:2f:fb:f7:08:b8:ff:85:3f:c0: 4f:16:59:7d:27:88:6f:87:cb:07:dd:5d:f6:b4:e7:db:d2:c6: 19:de:ad:72:f0:e2:6c:2c:e4:18:ef:1b:e4:cc:e1:a0:f0:43: 06:47:c4:de:2d:e1:a4:90:7a:36:aa:32:e6:70:92:c5:a4:2b: 06:22:e0:a0:ba:eb:c2:2e:9d:83:63:a2:8d:29:23:7d:63:83: 10:e0:8f:ac:b2:8a:b2:2f:9b:7d:cb:6b:b1:2b:02:bd:32:0c: 8b:3b:6e:5f:19:a1:26:c6:3f:5d:d9:b1:ba:24:44:32:44:43: 62:22:af:09:ac:e1:43:6b:b2:e7:4e:84:93:54:75:ee:66:97: f0:3e:9f:0c:90:be:bf:95:8f:f9:e9:d2:f0:8f:56:60:e9:94: 09:c3:d6:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTUxMTAvBgNVBAUTKDIzRURFQjc0RkQyMzQwRTQ3RjAxQkM4QkY3ODQzQjc2 OTFEQzA2MTUwHhcNMjQwNTI1MDUwNDU2WhcNMjQwNjAxMDUwNDU2WjAYMRYwFAYD VQQDEw02NjUxNzE3OC0wNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoV5JC08a75Tvb/FqY6X59ySPggf5oT4FSa4KrwDqcRk9y9/vumLYqUP1mHz TIXv+EtT1QiRShv8EMNRxoC6oQ8/EA57uZ43ddJxD76Qm7qHpy8j6qDYZRCctCpd sUzI4AHAMxrgnlHKsyPfI7uhBA2rHNvWo0zSh5YYFrMQLddKbIXFVgnPAOBXzG/L 2vEBapU8njljjmXDfHoNnI1zUVbpR2RlaWecqkfIkYveZBbzuakuPDfRU1GGR6o6 5zTSmO3je49BLwDt1Hn94i8iMGgaj9QT6zFt2ngIVliNLdn0q/7znFsrFNvRktQe pfku23Kl1ir7Ca5lMc4IbhErXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJz+FgfP 3aQR0fiG23HKaM+nECHqMB8GA1UdIwQYMBaAFCPt63T9I0DkfwG8i/eEO3aR3AYV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFNS9GNUUzNEU2NDMz OEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFPUl9BYnlMOTRRN2RwSGNC aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktM3JkUDBqUU9SX0FieUw5NFE3ZHBIY0JoVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFNS9GNUUzNEU2NDMzOEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFP Ul9BYnlMOTRRN2RwSGNCaFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+O+jDJUd0HWaKaIry4/PiGlIL02VbrHVwLBAPM0Yz0lX4qRf6R+fQ hUWtsY/YZXjPZwT0hH4Ff1QP0I7OdfKufOCVPQ/bSLE1Aai8/Af0VxoUbrFA331Y lJUTZxKIdt+MoQcv+/cIuP+FP8BPFll9J4hvh8sH3V32tOfb0sYZ3q1y8OJsLOQY 7xvkzOGg8EMGR8TeLeGkkHo2qjLmcJLFpCsGIuCguuvCLp2DY6KNKSN9Y4MQ4I+s soqyL5t9y2uxKwK9MgyLO25fGaEmxj9d2bG6JEQyRENiIq8JrOFDa7LnToSTVHXu ZpfwPp8MkL6/lY/56dLwj1Zg6ZQJw9Ye -----END CERTIFICATE-----Generated at Sat May 25 05:50:40 2024 by rpki-client on console-fra.rpki-client.org