$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft File: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json) Hash identifier: iWKw047yckwUShR+NR22VsvGfI+nFhP8GK5wbvhbfbA= Subject key identifier: C5:12:B1:E9:6E:83:28:6D:72:45:74:D7:C8:52:74:C6:10:A0:BF:04 Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Certificate serial: 026C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft Manifest number: 0268 Signing time: Fri 03 May 2024 03:55:14 +0000 Manifest this update: Fri 03 May 2024 03:55:14 +0000 Manifest next update: Fri 10 May 2024 03:55:14 +0000 Files and hashes: 1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: Y6XM1zBR1Opj6AC8/Kfm/nGmV85WXBrJiAR4WGutCKA=) 2: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: /TI2F7MhQO30jGBDRivp/6wrla+2ORDXa1rFRJnY540=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Validity Not Before: May 3 03:55:14 2024 GMT Not After : May 10 03:55:14 2024 GMT Subject: CN=66346022-2c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7b:58:d8:4d:9d:d9:5c:95:84:8e:6e:ad:15: 10:2b:11:09:00:38:e4:50:c3:23:2a:63:b1:1d:f0: 51:81:0e:14:d5:36:27:89:4a:65:d9:7c:72:bf:f9: 4e:8f:47:0e:34:50:49:44:a2:27:7f:3b:7a:5f:56: 19:42:55:ce:2d:ea:86:b0:db:16:86:6c:98:1b:d1: cd:e2:50:ac:b5:e0:0c:ca:7f:4b:b0:c0:9d:22:15: 54:2a:58:7c:af:87:19:6a:c2:06:9f:b5:32:e7:c5: 4e:d6:46:77:3d:8d:4d:9d:44:4f:8b:00:8b:74:a0: 96:6e:85:e1:6a:cc:50:26:7b:38:07:52:6c:fd:b2: cf:0d:f4:e9:bd:f5:fc:15:ee:04:1e:53:bc:d3:ba: 4a:2e:d7:b0:04:84:d5:f7:89:52:5b:42:c6:70:fa: 43:c5:2c:bd:ab:2c:e2:bb:3e:bc:83:8f:49:3f:6d: 08:9e:78:f9:d0:f2:0e:f7:6a:64:da:c5:28:40:48: 3b:69:fc:44:38:e4:ca:c0:35:b2:c1:69:39:eb:f2: ac:f0:4d:bb:5c:36:77:71:13:ea:45:8a:5e:4c:bc: 33:c8:99:6b:5b:22:c7:86:04:d5:e4:7c:bb:10:50: 6a:2f:27:dd:f8:c3:d3:d7:03:5e:21:b8:c9:96:32: 9a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:12:B1:E9:6E:83:28:6D:72:45:74:D7:C8:52:74:C6:10:A0:BF:04 X509v3 Authority Key Identifier: keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:e0:8b:b7:04:d4:6f:41:df:f1:37:f1:1d:3c:cb:0e:78:0d: ef:a8:d2:ce:88:da:04:09:95:1a:f9:ae:d4:4d:93:91:fe:d3: 4c:ee:26:8e:70:0c:60:95:8e:6b:c6:bf:3e:d0:4f:74:04:e0: 4e:30:83:fc:9d:7b:39:1d:9e:90:dc:7c:6c:c4:a2:8b:33:a1: ce:df:31:95:7f:5a:7f:10:60:02:db:2e:30:34:71:35:9f:37: f4:a7:85:48:ea:36:6a:ab:5b:c1:31:7d:99:79:4b:a3:e7:60: c3:6e:87:6d:2a:d0:81:0b:3e:53:e2:86:3f:92:46:16:f7:3c: 8c:b2:72:e1:f7:45:88:47:1f:82:8e:c4:4d:9b:e0:b4:66:05: fe:05:c4:b9:d6:f6:50:57:12:09:c9:23:7a:5a:70:69:e4:76: f8:e7:1e:46:ed:58:33:ad:9d:a2:ba:00:38:30:a6:e7:88:e8: 8b:9c:f7:68:9b:a7:cb:79:e0:0d:5e:ab:4d:3f:df:9c:56:3b: 2e:35:da:ee:ad:96:f5:d1:ba:ed:66:94:a1:47:f3:f3:f8:b4: f5:c1:9c:71:3d:df:17:78:e2:d0:a5:6c:74:37:7d:1a:29:fe: 53:bd:6e:ce:d8:d2:e8:92:73:e8:0b:27:ce:5b:b9:b4:de:6d: c4:6f:21:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZEQjMxMTAvBgNVBAUTKDAzNzI0NkQ1MTRCODIzNDBFREUwNjI4OUJGMUJDOEM0 NTlEQkZDRTUwHhcNMjQwNTAzMDM1NTE0WhcNMjQwNTEwMDM1NTE0WjAYMRYwFAYD VQQDEw02NjM0NjAyMi0yYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3tY2E2d2VyVhI5urRUQKxEJADjkUMMjKmOxHfBRgQ4U1TYniUpl2Xxyv/lO j0cONFBJRKInfzt6X1YZQlXOLeqGsNsWhmyYG9HN4lCsteAMyn9LsMCdIhVUKlh8 r4cZasIGn7Uy58VO1kZ3PY1NnURPiwCLdKCWboXhasxQJns4B1Js/bLPDfTpvfX8 Fe4EHlO807pKLtewBITV94lSW0LGcPpDxSy9qyziuz68g49JP20Innj50PIO92pk 2sUoQEg7afxEOOTKwDWywWk56/Ks8E27XDZ3cRPqRYpeTLwzyJlrWyLHhgTV5Hy7 EFBqLyfd+MPT1wNeIbjJljKa2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUSselu gyhtckV018hSdMYQoL8EMB8GA1UdIwQYMBaAFANyRtUUuCNA7eBiib8byMRZ2/zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkRCMy81M0FBMUJENEM2 MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkwRHQ0R0tKdnh2SXhGbmJf T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzSkcxUlM0STBEdDRHS0p2eHZJeEZuYl9PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkRCMy81M0FBMUJENEM2MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkw RHQ0R0tKdnh2SXhGbmJfT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl4Iu3BNRvQd/xN/EdPMsOeA3vqNLOiNoECZUa+a7UTZOR/tNM7iaO cAxglY5rxr8+0E90BOBOMIP8nXs5HZ6Q3HxsxKKLM6HO3zGVf1p/EGAC2y4wNHE1 nzf0p4VI6jZqq1vBMX2ZeUuj52DDbodtKtCBCz5T4oY/kkYW9zyMsnLh90WIRx+C jsRNm+C0ZgX+BcS51vZQVxIJySN6WnBp5Hb45x5G7VgzrZ2iugA4MKbniOiLnPdo m6fLeeANXqtNP9+cVjsuNdrurZb10brtZpShR/Pz+LT1wZxxPd8XeOLQpWx0N30a Kf5TvW7O2NLoknPoCyfOW7m03m3EbyGe -----END CERTIFICATE-----Generated at Fri May 3 04:45:29 2024 by rpki-client on console-fra.rpki-client.org