$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAF9/E61E7D5CE90011EAB59F6971C4F9AE02/3r0oU3qS6xPagPeYhK77f1FpqHk.mft File: 3r0oU3qS6xPagPeYhK77f1FpqHk.mft (raw, json) Hash identifier: MtMcLJcGJ1F/WLSfN7nV6hbQU3/px/2I54oa/8Ny2NU= Subject key identifier: D3:3F:D0:5E:C3:7E:40:2F:54:DA:A8:FC:95:37:87:46:17:6E:B6:54 Authority key identifier: DE:BD:28:53:7A:92:EB:13:DA:80:F7:98:84:AE:FB:7F:51:69:A8:79 Certificate issuer: /CN=A91EEAF9/serialNumber=DEBD28537A92EB13DA80F79884AEFB7F5169A879 Certificate serial: 0730 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3r0oU3qS6xPagPeYhK77f1FpqHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEAF9/E61E7D5CE90011EAB59F6971C4F9AE02/3r0oU3qS6xPagPeYhK77f1FpqHk.mft Manifest number: 0721 Signing time: Sat 04 May 2024 22:40:41 +0000 Manifest this update: Sat 04 May 2024 22:40:41 +0000 Manifest next update: Sat 11 May 2024 22:40:40 +0000 Files and hashes: 1: 3r0oU3qS6xPagPeYhK77f1FpqHk.crl (hash: +Q0TLz5Kmx7Uupbrni8KwDJ2FlvovqPp0kzIR9VXxSE=) 2: 589708D0E90211EA90508273C4F9AE02.roa (hash: ulwnaJUqgqYhcMqKXCZ3V35jJQ/Q2GnHGtkw1iJ1xfk=) 3: 57F6CEF6E90211EA90508273C4F9AE02.roa (hash: 4MPn228qeCmaCUawXu73fAIrfe9xyRU0ytinuJC8HQ4=) 4: 57787F4CE90211EA90508273C4F9AE02.roa (hash: uPzmKNatWWQkNp8x+zlq+NQrlZ/SAL+Q1qeZRNXxNP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEAF9/E61E7D5CE90011EAB59F6971C4F9AE02/3r0oU3qS6xPagPeYhK77f1FpqHk.crl rsync://rpki.apnic.net/member_repository/A91EEAF9/E61E7D5CE90011EAB59F6971C4F9AE02/3r0oU3qS6xPagPeYhK77f1FpqHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3r0oU3qS6xPagPeYhK77f1FpqHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1840 (0x730) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEAF9/serialNumber=DEBD28537A92EB13DA80F79884AEFB7F5169A879 Validity Not Before: May 4 22:40:41 2024 GMT Not After : May 11 22:40:40 2024 GMT Subject: CN=6636b969-824e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:78:a7:fe:8f:78:d2:b9:ea:cd:06:72:43: 4b:d1:fa:de:98:70:4e:ae:7f:e3:f1:6c:0a:b8:f6: 12:ae:ee:f4:3a:e6:8b:d4:4e:f9:71:0c:de:d3:40: 0e:42:b2:67:b9:5d:d7:51:90:81:f7:e8:24:84:ba: 57:c6:95:ae:96:88:8d:a9:07:0a:9e:49:77:5a:4b: 29:7e:17:ba:be:64:6e:3b:20:06:39:c6:26:03:0f: 75:50:d2:46:4b:a9:c6:67:8a:dc:7c:5a:f9:1c:20: e1:26:e0:56:77:75:ed:b4:0d:35:07:d3:c3:29:f6: 64:de:63:01:19:60:d3:3d:e8:05:ae:28:3c:41:99: fb:f2:dc:c1:63:45:0c:73:36:38:6b:45:6d:05:47: 11:b6:30:6b:a9:92:bc:03:c4:f8:6c:60:b3:e3:0c: 2d:5c:1e:93:f3:52:25:c8:c1:8d:1a:31:1a:12:1e: 27:48:47:4d:9b:67:87:9f:d6:55:22:e0:50:b1:3d: 7d:fc:4b:35:0a:35:b3:c1:84:05:9d:11:f9:4e:3f: a4:f8:41:e0:73:ec:5a:78:b7:a4:29:c6:03:c3:eb: 3a:67:ca:ca:91:1a:e3:47:14:45:dc:53:af:5c:0b: 5d:a0:9b:e7:d0:6e:ce:24:66:df:8d:9f:fe:db:46: 13:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3F:D0:5E:C3:7E:40:2F:54:DA:A8:FC:95:37:87:46:17:6E:B6:54 X509v3 Authority Key Identifier: keyid:DE:BD:28:53:7A:92:EB:13:DA:80:F7:98:84:AE:FB:7F:51:69:A8:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEAF9/E61E7D5CE90011EAB59F6971C4F9AE02/3r0oU3qS6xPagPeYhK77f1FpqHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3r0oU3qS6xPagPeYhK77f1FpqHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAF9/E61E7D5CE90011EAB59F6971C4F9AE02/3r0oU3qS6xPagPeYhK77f1FpqHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:57:8a:f3:78:2d:06:c4:2b:81:60:e5:c0:89:36:2b:e7:03: 6c:cd:6c:6b:4d:f6:3a:e1:b8:b7:96:5a:ff:72:a2:ea:6d:ff: 5b:76:69:45:e1:1c:f0:54:cf:13:91:04:53:50:3a:93:e1:bb: da:20:1b:a4:d2:bc:a6:e7:33:e8:f9:12:c0:e5:42:10:a0:d1: 8d:a7:48:3a:c4:59:45:6f:4e:7a:b5:02:e2:e4:a9:5c:d2:85: b5:ee:b4:07:78:7a:3b:7a:8d:8c:ca:57:84:e5:52:a5:f4:ba: 10:b7:c4:fe:97:66:65:fe:87:42:6d:40:9c:c2:7a:96:21:bb: 5c:ee:b5:83:72:1c:46:34:80:dc:cb:5e:5f:4b:08:25:7f:e3: 13:d0:25:e8:22:23:2d:6c:99:47:5a:65:2d:08:3a:35:d0:2d: 50:eb:33:7b:1b:94:c3:5c:d2:40:5a:54:c8:5f:02:ab:cd:04: 3a:65:4e:49:d4:11:da:c9:f5:58:d5:1b:77:ed:8d:46:6b:95: 3f:88:58:c4:91:c6:f4:58:bb:bd:bd:f9:a5:c0:dd:61:26:17: 65:54:a7:07:4d:aa:a4:fe:e2:a3:71:5b:b2:1a:6f:11:b3:16: 63:cd:68:17:c6:5c:86:61:44:60:4c:b3:6e:01:d2:3c:ca:59: 75:dc:31:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBRjkxMTAvBgNVBAUTKERFQkQyODUzN0E5MkVCMTNEQTgwRjc5ODg0QUVGQjdG NTE2OUE4NzkwHhcNMjQwNTA0MjI0MDQxWhcNMjQwNTExMjI0MDQwWjAYMRYwFAYD VQQDEw02NjM2Yjk2OS04MjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuR4p/6PeNK56s0GckNL0fremHBOrn/j8WwKuPYSru70OuaL1E75cQze00AO QrJnuV3XUZCB9+gkhLpXxpWuloiNqQcKnkl3Wkspfhe6vmRuOyAGOcYmAw91UNJG S6nGZ4rcfFr5HCDhJuBWd3XttA01B9PDKfZk3mMBGWDTPegFrig8QZn78tzBY0UM czY4a0VtBUcRtjBrqZK8A8T4bGCz4wwtXB6T81IlyMGNGjEaEh4nSEdNm2eHn9ZV IuBQsT19/Es1CjWzwYQFnRH5Tj+k+EHgc+xaeLekKcYDw+s6Z8rKkRrjRxRF3FOv XAtdoJvn0G7OJGbfjZ/+20YTLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNM/0F7D fkAvVNqo/JU3h0YXbrZUMB8GA1UdIwQYMBaAFN69KFN6kusT2oD3mISu+39Raah5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUFGOS9FNjFFN0Q1Q0U5 MDAxMUVBQjU5RjY5NzFDNEY5QUUwMi8zcjBvVTNxUzZ4UGFnUGVZaEs3N2YxRnBx SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNyMG9VM3FTNnhQYWdQZVloSzc3ZjFGcHFIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUFGOS9FNjFFN0Q1Q0U5MDAxMUVBQjU5RjY5NzFDNEY5QUUwMi8zcjBvVTNxUzZ4 UGFnUGVZaEs3N2YxRnBxSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATV4rzeC0GxCuBYOXAiTYr5wNszWxrTfY64bi3llr/cqLqbf9bdmlF 4RzwVM8TkQRTUDqT4bvaIBuk0rym5zPo+RLA5UIQoNGNp0g6xFlFb056tQLi5Klc 0oW17rQHeHo7eo2MyleE5VKl9LoQt8T+l2Zl/odCbUCcwnqWIbtc7rWDchxGNIDc y15fSwglf+MT0CXoIiMtbJlHWmUtCDo10C1Q6zN7G5TDXNJAWlTIXwKrzQQ6ZU5J 1BHayfVY1Rt37Y1Ga5U/iFjEkcb0WLu9vfmlwN1hJhdlVKcHTaqk/uKjcVuyGm8R sxZjzWgXxlyGYURgTLNuAdI8yll13DFc -----END CERTIFICATE-----Generated at Sun May 5 00:12:35 2024 by rpki-client on console-fra.rpki-client.org