$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json) Hash identifier: l74TZfzGdJS/9rOCFVnVtagt2x5q0i0lB0s5GTdOtAo= Subject key identifier: 65:16:6B:F9:F0:4A:0C:B1:8B:AD:10:0B:EA:1F:4E:4D:C4:F1:B9:DB Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft Manifest number: A0 Signing time: Fri 17 May 2024 06:52:36 +0000 Manifest this update: Fri 17 May 2024 06:52:35 +0000 Manifest next update: Fri 24 May 2024 06:52:35 +0000 Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: W9dMmL2/ZOS4nxAkKZTe/XZS/NWYD0dxOZcPUKxCyRY=) 2: 6E45741220D311EEA8C2555FC4F9AE02.roa (hash: J+rDzr+vjp0VJz7tXqm2SF1EgyCLwt0eK+k1BbH3VK0=) 3: D7FC7B4C217A11EE8C2D2243C4F9AE02.roa (hash: lSpMkh86EhKjCYjkeuFiE9j4XZ7HscXF7PRFeYcpx+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Validity Not Before: May 17 06:52:35 2024 GMT Not After : May 24 06:52:35 2024 GMT Subject: CN=6646feb3-c10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:65:48:a7:16:ff:38:ac:45:93:7c:c1:ab: 49:d8:4b:85:6f:08:31:a1:d9:36:3a:c6:70:39:33: f4:85:92:04:30:16:ce:bc:ff:8f:72:12:ef:dd:8e: 61:eb:93:57:f9:8e:dc:07:ea:d5:16:eb:a7:32:80: 9e:f3:38:1d:35:70:bf:51:22:e5:4f:10:bd:f7:65: 6d:37:17:6b:21:2c:c8:60:30:fd:04:96:94:c1:f0: b2:b1:13:67:35:48:cb:20:40:7f:ad:7d:b0:c1:94: 5e:0a:4d:be:60:30:44:f2:62:1b:14:3e:ef:cd:bc: 5c:82:23:b0:58:60:20:c8:fc:09:94:00:39:24:63: 9e:d5:79:73:d3:8c:46:eb:e1:a7:58:46:5d:64:98: aa:03:08:56:4f:95:dc:a2:31:f7:c7:56:3d:0c:35: 65:4c:1a:99:f3:37:eb:af:66:9f:c5:e3:b2:e6:b9: 79:01:fb:77:ac:c5:75:5c:c5:4f:35:e3:db:1c:01: e8:fb:9e:33:b9:7f:7d:7e:58:b9:00:85:bd:b9:e4: 67:b5:b8:88:a0:18:44:6a:41:84:11:8c:05:b1:5c: f9:1c:ef:43:c0:8c:b8:38:0e:3d:c8:de:a4:ea:d9: c1:9c:d8:4b:c3:75:85:fe:36:37:62:69:24:a7:69: 9a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:16:6B:F9:F0:4A:0C:B1:8B:AD:10:0B:EA:1F:4E:4D:C4:F1:B9:DB X509v3 Authority Key Identifier: keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:07:4d:44:48:54:a5:ad:0a:3a:40:5f:03:d6:82:59:2b:8c: 5d:6a:58:8d:4d:63:47:41:c9:f2:ee:f9:e3:e4:9b:e0:7b:ea: b9:9a:be:41:5f:69:52:20:2b:04:c9:6d:3a:2d:85:e8:46:b3: 82:ab:92:3e:6e:26:c1:44:4e:60:e1:98:49:9a:48:7b:b1:60: 05:d8:ca:d6:d3:03:e8:fd:ed:87:0c:1a:c0:e5:01:4d:43:93: 9e:42:00:55:62:f9:ec:57:31:55:d9:69:e8:46:e9:48:df:d6: ba:3a:db:cf:e7:93:0d:96:b8:41:48:66:f0:af:87:2a:5d:93: 42:6f:ec:6d:68:e3:fb:20:8c:80:45:5d:1a:f3:ad:fd:81:91: 74:13:75:0e:f0:d5:b0:58:e5:d0:11:de:ac:d3:b7:e7:48:79: bb:53:1e:0f:d5:32:24:d2:d8:65:a9:a8:79:48:63:18:15:b5: 70:2b:04:59:64:da:67:41:f0:ad:1f:fb:f9:a8:43:a4:c2:85: d2:24:d5:77:d2:9a:e5:ac:93:bc:42:af:9f:a6:55:dd:f3:dd: 42:be:a1:8b:af:a3:cc:d6:18:86:3a:3c:a6:3a:d9:a6:b1:bc: 39:c2:0a:41:18:7d:97:1e:2b:31:34:b4:a4:b1:53:c9:e7:e0: ac:52:aa:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDNDIxMTAvBgNVBAUTKDgzNzlENzQ3Rjc0QTU1RURDNzNBMEUwNDIxQzc5QjVF QzBFNERFNzYwHhcNMjQwNTE3MDY1MjM1WhcNMjQwNTI0MDY1MjM1WjAYMRYwFAYD VQQDEw02NjQ2ZmViMy1jMTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte5lSKcW/zisRZN8watJ2EuFbwgxodk2OsZwOTP0hZIEMBbOvP+PchLv3Y5h 65NX+Y7cB+rVFuunMoCe8zgdNXC/USLlTxC992VtNxdrISzIYDD9BJaUwfCysRNn NUjLIEB/rX2wwZReCk2+YDBE8mIbFD7vzbxcgiOwWGAgyPwJlAA5JGOe1Xlz04xG 6+GnWEZdZJiqAwhWT5XcojH3x1Y9DDVlTBqZ8zfrr2afxeOy5rl5Aft3rMV1XMVP NePbHAHo+54zuX99fli5AIW9ueRntbiIoBhEakGEEYwFsVz5HO9DwIy4OA49yN6k 6tnBnNhLw3WF/jY3Ymkkp2mapQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUWa/nw Sgyxi60QC+ofTk3E8bnbMB8GA1UdIwQYMBaAFIN510f3SlXtxzoOBCHHm17A5N52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM0Mi8yNEE2NUVCRTIw RDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1ZlM0hPZzRFSWNlYlhzRGsz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czblhSX2RLVmUzSE9nNEVJY2ViWHNEazNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM0Mi8yNEE2NUVCRTIwRDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1Zl M0hPZzRFSWNlYlhzRGszblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjB01ESFSlrQo6QF8D1oJZK4xdaliNTWNHQcny7vnj5Jvge+q5mr5B X2lSICsEyW06LYXoRrOCq5I+bibBRE5g4ZhJmkh7sWAF2MrW0wPo/e2HDBrA5QFN Q5OeQgBVYvnsVzFV2WnoRulI39a6OtvP55MNlrhBSGbwr4cqXZNCb+xtaOP7IIyA RV0a8639gZF0E3UO8NWwWOXQEd6s07fnSHm7Ux4P1TIk0thlqah5SGMYFbVwKwRZ ZNpnQfCtH/v5qEOkwoXSJNV30prlrJO8Qq+fplXd891CvqGLr6PM1hiGOjymOtmm sbw5wgpBGH2XHisxNLSksVPJ5+CsUqon -----END CERTIFICATE-----Generated at Fri May 17 08:13:55 2024 by rpki-client on console-fra.rpki-client.org