$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json) Hash identifier: ZC6wYuq0dWQ3Aw29W0h9IHaYMa7zIRRQlP7Wn2Yj4/A= Subject key identifier: 17:BB:E3:B5:64:9C:14:F0:06:3F:A6:4E:3F:51:02:B5:E8:D5:90:5C Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft Manifest number: 3A Signing time: Fri 17 May 2024 08:22:00 +0000 Manifest this update: Fri 17 May 2024 08:22:00 +0000 Manifest next update: Fri 24 May 2024 08:21:59 +0000 Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: VLfyelzRIuLKO99lNEppEJY7k12QwwTli4b8v5REs7Y=) 2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: 8WbiXS8+ZFODz9G5sLTWbcDZvIsuRKDlPl9hBYHN3xY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Validity Not Before: May 17 08:22:00 2024 GMT Not After : May 24 08:21:59 2024 GMT Subject: CN=664713a8-8a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3c:3d:30:e2:a5:59:05:bb:f2:56:cb:fc:47: 08:bf:c6:a1:54:1b:0d:6d:4f:2e:11:d6:83:b0:1a: 22:5e:a9:5e:0b:5a:4d:c7:6c:fb:ed:f6:60:3d:f6: 87:1a:c2:78:d7:c2:b5:7e:15:67:e8:6c:9d:70:18: cf:68:51:31:ea:60:06:5a:cb:5d:8f:9f:b2:e2:ff: 64:bd:ad:19:d1:d8:ae:e1:15:55:ea:42:4f:49:a6: 77:c1:79:01:9a:ac:fb:17:6e:28:55:0e:e8:b2:ad: 20:97:c3:d0:60:d2:2b:ec:9f:8a:37:4d:a2:0f:72: 4a:b5:e0:2f:81:a7:9b:69:56:57:49:ac:db:86:37: f1:c1:cb:8d:df:b1:0f:cb:c8:8e:6d:2a:e6:b8:5f: ac:cc:7c:05:6d:c7:2d:e9:97:17:40:ab:be:bb:2c: 41:28:4a:b2:78:8f:33:c0:02:6d:47:73:f4:fb:ae: 38:72:00:c6:fa:51:24:8b:25:b2:c6:35:fa:84:4e: 9a:75:a5:c9:76:f5:e1:89:47:b3:b4:23:d8:fb:5b: 3f:0f:df:a7:51:7b:4c:90:4d:ac:e0:c5:3a:c4:80: 02:c7:4e:4e:fe:e4:ca:63:87:44:61:ab:31:bd:b4: e6:d8:ef:51:b1:6a:4c:39:2d:a4:c5:95:63:56:22: 4a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BB:E3:B5:64:9C:14:F0:06:3F:A6:4E:3F:51:02:B5:E8:D5:90:5C X509v3 Authority Key Identifier: keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:d7:34:83:bc:87:06:2f:3c:b4:ed:22:bd:1b:34:22:be:ca: c3:29:e1:56:ef:df:cb:0a:ff:cb:ca:4d:4e:27:93:14:bd:cb: 5b:cd:e2:58:44:ba:14:6a:93:f2:f9:da:98:2a:1a:6e:9f:a7: 77:66:8a:ff:b4:07:f7:ed:a1:14:b7:19:8e:2a:5a:77:d6:3c: 14:2f:04:7f:b3:5e:f4:ee:74:b7:62:16:57:31:fd:6b:86:b2: 02:d6:f6:d1:c6:31:fc:05:2f:a7:ff:40:40:cc:f2:74:fb:a1: 0c:2d:7f:bb:e2:b6:c3:ad:4f:5a:39:ba:67:8b:4d:d1:36:36: ed:16:00:25:d5:f4:1f:f1:0b:4c:88:fd:85:3b:24:13:74:26: 24:e3:e6:a8:89:be:e4:4b:b7:22:d6:2a:87:72:04:9f:b5:f0: 60:7b:ba:ba:70:15:98:46:e2:ba:83:39:46:a9:24:4a:c0:6d: 10:c7:0c:6e:54:94:41:0a:24:ea:d3:68:33:fa:39:00:e8:c2: 66:2a:05:f0:be:d4:92:b4:4e:26:07:94:23:eb:94:fd:1b:14: c5:57:10:97:73:05:0c:0d:da:75:1b:72:ef:b3:66:a2:f2:53: d3:d8:ea:4b:37:bd:e4:0d:97:6b:fd:a6:88:57:8f:fe:f1:5a: d9:3d:0e:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUYzMTExMC8GA1UEBRMoRENEQTA2OUUzRUZGODk1NkMwMTU3MjgxNkE3MDIzNTE5 NUYwNjcyNTAeFw0yNDA1MTcwODIyMDBaFw0yNDA1MjQwODIxNTlaMBgxFjAUBgNV BAMTDTY2NDcxM2E4LThhMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjPD0w4qVZBbvyVsv8Rwi/xqFUGw1tTy4R1oOwGiJeqV4LWk3HbPvt9mA99oca wnjXwrV+FWfobJ1wGM9oUTHqYAZay12Pn7Li/2S9rRnR2K7hFVXqQk9JpnfBeQGa rPsXbihVDuiyrSCXw9Bg0ivsn4o3TaIPckq14C+Bp5tpVldJrNuGN/HBy43fsQ/L yI5tKua4X6zMfAVtxy3plxdAq767LEEoSrJ4jzPAAm1Hc/T7rjhyAMb6USSLJbLG NfqETpp1pcl29eGJR7O0I9j7Wz8P36dRe0yQTazgxTrEgALHTk7+5Mpjh0RhqzG9 tObY71Gxakw5LaTFlWNWIko3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF7vjtWSc FPAGP6ZOP1ECtejVkFwwHwYDVR0jBBgwFoAU3NoGnj7/iVbAFXKBanAjUZXwZyUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5RjMxLzA5MkQyNTE2QkU2 MjExRUU4QzM3Q0IzQkM0RjlBRTAyLzNOb0duajdfaVZiQUZYS0JhbkFqVVpYd1p5 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM05vR25qN19pVmJBRlhLQmFuQWpVWlh3WnlVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 RjMxLzA5MkQyNTE2QkU2MjExRUU4QzM3Q0IzQkM0RjlBRTAyLzNOb0duajdfaVZi QUZYS0JhbkFqVVpYd1p5VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJHXNIO8hwYvPLTtIr0bNCK+ysMp4Vbv38sK/8vKTU4nkxS9y1vN4lhE uhRqk/L52pgqGm6fp3dmiv+0B/ftoRS3GY4qWnfWPBQvBH+zXvTudLdiFlcx/WuG sgLW9tHGMfwFL6f/QEDM8nT7oQwtf7vitsOtT1o5umeLTdE2Nu0WACXV9B/xC0yI /YU7JBN0JiTj5qiJvuRLtyLWKodyBJ+18GB7urpwFZhG4rqDOUapJErAbRDHDG5U lEEKJOrTaDP6OQDowmYqBfC+1JK0TiYHlCPrlP0bFMVXEJdzBQwN2nUbcu+zZqLy U9PY6ks3veQNl2v9pohXj/7xWtk9Dp0= -----END CERTIFICATE-----Generated at Fri May 17 08:52:54 2024 by rpki-client on console-ams.rpki-client.org