$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.mft File: 3tdhLc0WClbGF4QCXEspBELPNb4.mft (raw, json) Hash identifier: +vBI4WxA0Vmj3iSX8PBiLhBpFY90aA0gcyrYwsIQS4s= Subject key identifier: 2F:BF:67:EC:EE:3B:0A:2C:89:C9:6E:BA:3E:9A:B9:59:39:0C:5E:57 Authority key identifier: DE:D7:61:2D:CD:16:0A:56:C6:17:84:02:5C:4B:29:04:42:CF:35:BE Certificate issuer: /CN=A91EC8F7/serialNumber=DED7612DCD160A56C61784025C4B290442CF35BE Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3tdhLc0WClbGF4QCXEspBELPNb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.mft Manifest number: 49 Signing time: Fri 17 May 2024 08:12:40 +0000 Manifest this update: Fri 17 May 2024 08:12:39 +0000 Manifest next update: Fri 24 May 2024 08:12:39 +0000 Files and hashes: 1: 3tdhLc0WClbGF4QCXEspBELPNb4.crl (hash: qQCQW6bM/Pk6xGovCG91Lax2Y471S4O7n7poygngdMk=) 2: B852EAA6C2A611EEB2AC4B6BC4F9AE02.roa (hash: G78kkQMQwJwIO1vnO9r2EC+O4Tv2Ybnavk65VnjZqR8=) 3: 859BA8EECDAC11EE9AB36F18C4F9AE02.roa (hash: 0v2TnpmxyumfaVdNd5PWBzt9E5sY5/dt3hfLp8BVYLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.crl rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3tdhLc0WClbGF4QCXEspBELPNb4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC8F7/serialNumber=DED7612DCD160A56C61784025C4B290442CF35BE Validity Not Before: May 17 08:12:39 2024 GMT Not After : May 24 08:12:39 2024 GMT Subject: CN=66471178-4a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:53:32:2f:70:0e:0c:53:43:65:fc:49:4c: 95:82:4c:f9:5a:96:79:64:a9:5f:0c:1b:a7:cd:01: 54:00:c3:40:16:f3:51:34:45:2d:d7:72:6b:e1:8c: 1b:4e:c0:fc:cf:12:12:be:55:37:ec:70:7e:41:99: 94:0b:99:43:31:4b:ca:cc:ac:27:59:48:fe:f7:24: 5f:e3:a9:ee:4b:ff:7e:6b:54:a1:65:57:83:80:e5: aa:92:d7:4f:27:87:d0:f8:ba:1c:10:06:6d:ae:3b: 1b:3f:e3:cb:b3:70:99:b0:c7:39:41:a0:94:6f:79: 5d:47:23:84:ab:2f:c4:b5:38:03:91:59:24:7a:7d: 20:d1:98:3a:27:76:7d:e9:7d:52:29:ad:26:f1:83: ac:94:16:3b:3c:d8:65:fe:a3:81:c0:d2:fb:23:7d: de:ad:44:06:5f:f6:39:c6:cd:e5:b5:de:f6:0f:7d: 7c:5b:94:0e:5c:10:58:00:21:59:f1:c3:ef:01:ff: 48:26:d7:ac:27:30:03:86:af:ce:12:84:f9:d9:0a: a9:ec:d6:55:ab:23:a2:19:11:2f:d0:e6:7f:cd:0d: 2d:23:fa:0a:6d:7d:22:2b:52:64:5b:7b:bc:f9:f7: fa:f5:b1:99:a5:d6:f5:31:c7:35:f8:23:0e:d8:14: 71:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BF:67:EC:EE:3B:0A:2C:89:C9:6E:BA:3E:9A:B9:59:39:0C:5E:57 X509v3 Authority Key Identifier: keyid:DE:D7:61:2D:CD:16:0A:56:C6:17:84:02:5C:4B:29:04:42:CF:35:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3tdhLc0WClbGF4QCXEspBELPNb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9b:ea:60:e9:8e:a6:c8:17:b4:9b:20:35:6e:1f:8c:3c:47: 5c:d7:11:62:e4:19:c7:97:14:70:69:4d:54:76:68:8d:e5:5d: 6c:bc:46:94:5a:6d:52:08:12:ec:35:1e:54:2a:78:ef:80:7f: df:cc:51:da:44:ce:a9:7d:d1:9f:4e:72:0e:4f:2b:29:24:a0: f2:32:cd:ea:94:f3:3f:49:08:8b:3d:d2:e0:12:08:14:7c:90: 35:cb:b1:e2:d0:f7:0c:e4:ac:fa:72:cc:50:a5:4b:4e:8e:b6: 86:76:d3:74:9d:6b:a0:9d:e3:ec:cd:bd:ed:b0:50:41:53:71: 39:34:2a:d0:e9:11:05:57:cd:aa:af:c9:11:f0:ef:03:bf:cc: 42:3a:20:67:3f:91:50:57:cb:39:d9:54:dd:39:58:c0:c6:d6: 80:f5:3f:e5:98:50:7c:fb:9b:4f:65:fb:ac:fa:75:01:89:e1: 0b:6a:fd:d3:91:ef:18:43:f7:3a:8b:72:62:8b:e1:30:62:82: b0:91:b9:68:7e:83:20:c0:d2:4b:7d:31:ba:f1:b7:14:5a:ba: 2d:74:f2:d0:1c:ad:da:00:d2:c2:8f:36:c6:b1:a1:82:67:28: 6f:7f:6e:bf:41:fe:9c:bf:1a:6c:66:7c:3d:23:fc:92:bf:68: bd:95:f6:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzhGNzExMC8GA1UEBRMoREVENzYxMkRDRDE2MEE1NkM2MTc4NDAyNUM0QjI5MDQ0 MkNGMzVCRTAeFw0yNDA1MTcwODEyMzlaFw0yNDA1MjQwODEyMzlaMBgxFjAUBgNV BAMTDTY2NDcxMTc4LTRhNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCps1MyL3AODFNDZfxJTJWCTPlalnlkqV8MG6fNAVQAw0AW81E0RS3XcmvhjBtO wPzPEhK+VTfscH5BmZQLmUMxS8rMrCdZSP73JF/jqe5L/35rVKFlV4OA5aqS108n h9D4uhwQBm2uOxs/48uzcJmwxzlBoJRveV1HI4SrL8S1OAORWSR6fSDRmDondn3p fVIprSbxg6yUFjs82GX+o4HA0vsjfd6tRAZf9jnGzeW13vYPfXxblA5cEFgAIVnx w+8B/0gm16wnMAOGr84ShPnZCqns1lWrI6IZES/Q5n/NDS0j+gptfSIrUmRbe7z5 9/r1sZml1vUxxzX4Iw7YFHHVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL79n7O47 CiyJyW66Ppq5WTkMXlcwHwYDVR0jBBgwFoAU3tdhLc0WClbGF4QCXEspBELPNb4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDOEY3Lzc3ODZFNTdFQjJB NTExRUU5MERFQTIyMEM0RjlBRTAyLzN0ZGhMYzBXQ2xiR0Y0UUNYRXNwQkVMUE5i NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM3RkaExjMFdDbGJHRjRRQ1hFc3BCRUxQTmI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD OEY3Lzc3ODZFNTdFQjJBNTExRUU5MERFQTIyMEM0RjlBRTAyLzN0ZGhMYzBXQ2xi R0Y0UUNYRXNwQkVMUE5iNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAqb6mDpjqbIF7SbIDVuH4w8R1zXEWLkGceXFHBpTVR2aI3lXWy8RpRa bVIIEuw1HlQqeO+Af9/MUdpEzql90Z9Ocg5PKykkoPIyzeqU8z9JCIs90uASCBR8 kDXLseLQ9wzkrPpyzFClS06OtoZ203Sda6Cd4+zNve2wUEFTcTk0KtDpEQVXzaqv yRHw7wO/zEI6IGc/kVBXyznZVN05WMDG1oD1P+WYUHz7m09l+6z6dQGJ4Qtq/dOR 7xhD9zqLcmKL4TBigrCRuWh+gyDA0kt9MbrxtxRaui108tAcrdoA0sKPNsaxoYJn KG9/br9B/py/GmxmfD0j/JK/aL2V9tw= -----END CERTIFICATE-----Generated at Fri May 17 08:52:56 2024 by rpki-client on console-ams.rpki-client.org