$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft File: pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json) Hash identifier: I4PUMEKv9hqWL8TaaGhWO5wpb8VP6W5y8NqI8QmqQ70= Subject key identifier: 67:FB:2A:C2:61:7C:52:FA:3A:87:99:D6:CE:4E:6C:9D:EF:76:AB:00 Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF Certificate issuer: /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft Manifest number: 2B Signing time: Sun 19 May 2024 08:27:55 +0000 Manifest this update: Sun 19 May 2024 08:27:54 +0000 Manifest next update: Sun 26 May 2024 08:27:54 +0000 Files and hashes: 1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: xcCCxp+KUruou/AgvBxE/WQZynl1joPMVGx0LVoZiMA=) 2: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: LhQg3v+DKEuqfQ1guUzcTe46O/GbPPONw8o80pMgN8E=) 3: EF260118D54211EEA18A7234C4F9AE02.roa (hash: 2TNI2Bme8Dtnxp1P56AVS7vS8btEgm8hcjowYVLO74I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF Validity Not Before: May 19 08:27:54 2024 GMT Not After : May 26 08:27:54 2024 GMT Subject: CN=6649b80a-aaa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:56:66:ea:d7:99:10:4f:0f:fc:e7:6d:1c:8b: 6b:d5:d8:83:7b:17:d0:bc:a0:4e:5c:18:a4:c5:27: 27:ce:10:b9:e5:f3:96:3a:e9:7e:0a:96:77:8e:77: 67:e6:1d:7c:bc:a5:4f:63:87:7d:60:87:cb:4f:7a: d6:ce:ff:91:5a:4d:89:36:8d:64:1d:dc:4f:7e:4a: f9:bf:52:47:88:a8:d6:bc:75:c7:8a:02:4d:61:ac: 6f:82:aa:4c:a6:17:9e:1c:36:0d:bb:3d:f3:8b:d7: 5f:84:5a:af:9b:00:bb:01:79:e8:9c:bd:df:71:48: 6e:ac:b5:fc:21:6d:22:d3:1a:87:ec:28:54:4c:85: 0f:54:50:34:8a:54:b1:16:b4:0a:ad:73:b5:cd:07: 4d:c7:da:7f:cd:d5:39:84:f1:ff:5a:00:fb:7e:fb: 7d:85:9f:b9:bd:c9:75:dd:2d:a5:69:5b:99:b0:8e: 2a:1a:ac:e8:1b:84:28:01:88:5b:29:dd:04:82:c5: 90:17:37:d1:e7:45:fb:e2:a3:88:e7:00:24:cd:4d: 76:98:4b:d2:1d:fc:ab:e7:73:26:59:da:bc:4a:5c: 6e:cf:6a:86:00:f2:50:a5:32:55:23:a6:9e:3b:57: f9:25:ac:14:90:e3:70:e3:99:b1:ad:99:6e:1e:a5: 28:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FB:2A:C2:61:7C:52:FA:3A:87:99:D6:CE:4E:6C:9D:EF:76:AB:00 X509v3 Authority Key Identifier: keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:c4:c1:8b:15:44:74:35:b4:c0:0a:7d:40:96:ce:17:c2:38: 3a:53:43:75:ec:a4:55:78:3e:c4:af:0d:c9:ec:b3:02:33:94: 58:fb:97:ab:b6:61:8b:94:90:cc:b9:1d:51:ab:c7:c0:54:c3: 2c:55:d8:03:fb:b3:b5:5a:34:70:4b:6c:87:c8:fb:f5:b1:0e: 2a:79:d9:fd:96:99:8a:e1:57:05:52:6a:96:26:61:2f:0c:09: 30:5d:17:e7:7c:04:69:f9:bd:1e:43:50:00:6b:f9:17:e2:5f: c1:b6:88:ca:44:38:47:bf:4a:0b:98:3b:65:82:15:9b:05:f3: c6:ee:43:a3:9d:a1:9d:c5:88:20:11:25:a9:20:ab:b6:fa:9b: 29:c2:fe:c7:7d:5d:95:f6:ab:e0:ba:87:0c:51:5e:fd:55:fa: f7:68:d8:57:3d:c1:8a:49:a7:05:f8:a5:fb:74:da:54:80:a5: fd:52:5e:dd:5c:45:29:9e:25:9e:38:53:5d:65:ec:a8:cf:65: b4:47:cc:53:8f:03:1d:4b:21:f2:79:3d:36:df:6e:55:85:55: 3f:c2:4a:d1:dc:44:93:f3:c2:31:b5:2c:7e:db:61:54:22:9f: aa:a4:a6:d7:fa:ac:2a:83:bc:08:40:69:85:93:41:10:41:7b: 4e:e3:b5:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MjAxMDExMC8GA1UEBRMoQTYwOUE5NEU2QTIxMDFCQUY5NUM4QzJGNTVDRUM0MTc5 MjVCRUZDRjAeFw0yNDA1MTkwODI3NTRaFw0yNDA1MjYwODI3NTRaMBgxFjAUBgNV BAMTDTY2NDliODBhLWFhYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfVmbq15kQTw/8520ci2vV2IN7F9C8oE5cGKTFJyfOELnl85Y66X4KlneOd2fm HXy8pU9jh31gh8tPetbO/5FaTYk2jWQd3E9+Svm/UkeIqNa8dceKAk1hrG+Cqkym F54cNg27PfOL11+EWq+bALsBeeicvd9xSG6stfwhbSLTGofsKFRMhQ9UUDSKVLEW tAqtc7XNB03H2n/N1TmE8f9aAPt++32Fn7m9yXXdLaVpW5mwjioarOgbhCgBiFsp 3QSCxZAXN9HnRfvio4jnACTNTXaYS9Id/KvncyZZ2rxKXG7PaoYA8lClMlUjpp47 V/klrBSQ43DjmbGtmW4epSjHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ/sqwmF8 Uvo6h5nWzk5sne92qwAwHwYDVR0jBBgwFoAUpgmpTmohAbr5XIwvVc7EF5Jb788w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyMDEwL0VBMDIxQTk0RDUz RjExRUVBOEQ2MjQwRkM0RjlBRTAyL3BnbXBUbW9oQWJyNVhJd3ZWYzdFRjVKYjc4 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGdtcFRtb2hBYnI1WEl3dlZjN0VGNUpiNzg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy MDEwL0VBMDIxQTk0RDUzRjExRUVBOEQ2MjQwRkM0RjlBRTAyL3BnbXBUbW9oQWJy NVhJd3ZWYzdFRjVKYjc4OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAADEwYsVRHQ1tMAKfUCWzhfCODpTQ3XspFV4PsSvDcnsswIzlFj7l6u2 YYuUkMy5HVGrx8BUwyxV2AP7s7VaNHBLbIfI+/WxDip52f2WmYrhVwVSapYmYS8M CTBdF+d8BGn5vR5DUABr+RfiX8G2iMpEOEe/SguYO2WCFZsF88buQ6OdoZ3FiCAR Jakgq7b6mynC/sd9XZX2q+C6hwxRXv1V+vdo2Fc9wYpJpwX4pft02lSApf1SXt1c RSmeJZ44U11l7KjPZbRHzFOPAx1LIfJ5PTbfblWFVT/CStHcRJPzwjG1LH7bYVQi n6qkptf6rCqDvAhAaYWTQRBBe07jtYQ= -----END CERTIFICATE-----Generated at Sun May 19 09:04:12 2024 by rpki-client on console-fra.rpki-client.org