$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json) Hash identifier: r3cynytwFBVbVUVy0ZbaEF6ziPD/JnsQGv3O7eKzKKw= Subject key identifier: A4:50:65:83:95:AD:0D:05:5A:D3:E4:BE:6D:00:CB:5D:7D:CB:3E:95 Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Certificate serial: 038A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft Manifest number: 0387 Signing time: Sun 05 May 2024 02:48:26 +0000 Manifest this update: Sun 05 May 2024 02:48:26 +0000 Manifest next update: Sun 12 May 2024 02:48:26 +0000 Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: uLscaKp6aUA2VTuT+hTrtHL5IrdsED9bmvGhuQCptBA=) 2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: MaYbbHtjpLS1xFLxKLibRDfvViTN5yjw7d1U+zaG5ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Validity Not Before: May 5 02:48:26 2024 GMT Not After : May 12 02:48:26 2024 GMT Subject: CN=6636f37a-8049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:76:20:db:13:54:31:50:28:05:1a:88:83:a3: 5b:b1:4d:de:ed:35:b6:35:56:95:c9:20:54:82:b4: a5:c3:63:38:ac:c7:05:91:b4:8e:a3:c1:85:96:e4: 92:e5:3d:25:9b:d8:43:3b:3b:69:18:34:a5:f5:35: 0f:15:fd:ea:85:fb:9b:4a:4c:f1:b7:af:b7:d4:0e: a4:13:a7:5f:35:76:7f:f0:c2:ce:17:22:15:d7:c5: f2:10:22:90:72:66:e7:fd:64:87:ca:af:63:ee:cb: 17:cc:39:6f:0c:f6:5c:1a:29:eb:74:76:c5:47:82: b1:f7:19:c7:67:e1:ac:55:23:34:a8:27:e7:92:9c: c1:b8:7e:cb:ae:b0:48:1c:80:c6:a3:5f:74:21:d0: 55:52:ad:a6:82:86:3b:49:8b:8b:83:a7:5e:b9:73: 5f:e0:a2:a9:6d:d5:25:78:7e:a9:87:52:7b:4c:62: d5:2a:29:74:97:03:85:ab:4d:cb:f1:76:05:63:d5: 6d:ce:2c:f0:6f:61:e2:8e:36:c7:99:ab:50:ef:05: 06:bc:77:aa:84:b4:13:fb:a9:98:3a:f7:1c:ed:2a: 7e:10:99:e3:7f:4c:9e:55:96:3e:af:c0:33:e6:60: 0e:46:6c:ab:70:ed:e2:a2:31:ca:c8:70:90:2c:4f: ed:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:50:65:83:95:AD:0D:05:5A:D3:E4:BE:6D:00:CB:5D:7D:CB:3E:95 X509v3 Authority Key Identifier: keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:72:f1:9f:db:94:2d:86:98:f1:1c:79:9d:a6:33:3b:5f:8a: 4e:a1:22:93:ba:a2:22:20:f6:5e:32:d6:3a:69:7e:fb:c8:7b: 06:5e:54:00:67:49:88:28:bc:00:e2:e5:c8:04:45:c5:20:26: 0c:90:6d:60:3a:c9:7a:d7:4e:4e:4e:c0:86:cb:bf:a3:5e:55: d4:a8:c4:38:82:24:03:ec:7e:ea:0f:ae:78:a9:9a:1b:47:21: 2e:94:ee:f5:44:74:ea:a5:bc:b1:47:0f:2e:e0:aa:f5:08:d2: f9:1f:a3:d0:c2:f7:03:cd:91:24:f8:d8:ed:5b:f2:94:43:6d: 69:01:e0:8e:9f:87:1d:2d:06:b0:17:e9:14:76:23:70:a7:55: 49:2b:93:91:8c:23:5e:ef:08:cb:da:d2:13:bb:de:01:94:28: 63:24:76:f8:06:b0:22:ce:25:40:11:f0:f9:98:b1:c8:ce:cb: 86:96:83:e4:8b:6c:bd:30:74:3e:64:95:be:95:7d:27:79:03: b9:cf:99:05:0a:ac:9a:64:37:b1:22:83:ab:c7:cc:f9:c6:5c: 61:b5:c6:72:e7:fa:8a:a4:ad:c7:13:23:2e:97:06:cf:6c:e5: 05:b5:28:dc:77:17:e7:da:f4:5f:a7:29:50:97:49:52:5f:dd: 66:0e:c4:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE QjY4OEZFNTMwHhcNMjQwNTA1MDI0ODI2WhcNMjQwNTEyMDI0ODI2WjAYMRYwFAYD VQQDEw02NjM2ZjM3YS04MDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXYg2xNUMVAoBRqIg6NbsU3e7TW2NVaVySBUgrSlw2M4rMcFkbSOo8GFluSS 5T0lm9hDOztpGDSl9TUPFf3qhfubSkzxt6+31A6kE6dfNXZ/8MLOFyIV18XyECKQ cmbn/WSHyq9j7ssXzDlvDPZcGinrdHbFR4Kx9xnHZ+GsVSM0qCfnkpzBuH7LrrBI HIDGo190IdBVUq2mgoY7SYuLg6deuXNf4KKpbdUleH6ph1J7TGLVKil0lwOFq03L 8XYFY9Vtzizwb2HijjbHmatQ7wUGvHeqhLQT+6mYOvcc7Sp+EJnjf0yeVZY+r8Az 5mAORmyrcO3iojHKyHCQLE/ttQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRQZYOV rQ0FWtPkvm0Ay119yz6VMB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2 NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlBOS81MjU0ODZCODU2NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdF b0lrakZwVFBnNG5iYUlfbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNcvGf25QthpjxHHmdpjM7X4pOoSKTuqIiIPZeMtY6aX77yHsGXlQA Z0mIKLwA4uXIBEXFICYMkG1gOsl6105OTsCGy7+jXlXUqMQ4giQD7H7qD654qZob RyEulO71RHTqpbyxRw8u4Kr1CNL5H6PQwvcDzZEk+NjtW/KUQ21pAeCOn4cdLQaw F+kUdiNwp1VJK5ORjCNe7wjL2tITu94BlChjJHb4BrAiziVAEfD5mLHIzsuGloPk i2y9MHQ+ZJW+lX0neQO5z5kFCqyaZDexIoOrx8z5xlxhtcZy5/qKpK3HEyMulwbP bOUFtSjcdxfn2vRfpylQl0lSX91mDsTb -----END CERTIFICATE-----Generated at Sun May 5 03:52:21 2024 by rpki-client on console-ams.rpki-client.org