$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft File: PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json) Hash identifier: LawXMIWNc0I0cfO9xJLZyt4WqEGn+6afiNH6yVUskFs= Subject key identifier: AD:94:FF:F2:63:A5:C6:15:7D:79:D9:DE:53:23:F1:53:47:ED:74:50 Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Certificate serial: 0AB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft Manifest number: 0AA9 Signing time: Sat 18 May 2024 20:09:06 +0000 Manifest this update: Sat 18 May 2024 20:09:05 +0000 Manifest next update: Sat 25 May 2024 20:09:05 +0000 Files and hashes: 1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: LZ9jMjqCsvxJ5u+nLVRMjys+XV+p/PP7f2rXTaZOsHk=) 2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: UpiX7Cqqtl0g5R+6w/YacrFNgDs2XRQxBgBI8gsoR+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2736 (0xab0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Validity Not Before: May 18 20:09:05 2024 GMT Not After : May 25 20:09:05 2024 GMT Subject: CN=66490ae1-3533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9c:d2:96:17:1f:08:0e:61:f0:18:57:62:d9: 45:fb:cd:9c:ef:bc:b9:5d:fa:32:6a:0b:ab:34:c0: 54:c8:2d:e2:e7:9d:e8:c6:96:3a:13:e2:8a:cd:dc: 19:c1:98:05:5d:34:8d:6d:e9:af:0b:02:8b:13:48: eb:eb:3e:1e:2d:bf:08:12:05:17:7a:4d:77:f0:b0: ee:71:84:59:42:81:52:fc:46:13:b7:56:6f:5d:b6: 79:01:08:1e:0f:73:31:78:96:e7:77:0b:03:5f:e3: 1f:ae:b6:3e:43:80:9c:b0:70:d2:d9:4e:4b:c0:77: b2:4c:6a:c0:ae:d4:38:0d:b0:bb:fe:75:74:42:87: 42:c7:2d:02:7d:82:36:80:4e:ac:59:d0:b8:71:74: 71:e4:23:0d:ef:20:de:fe:fc:47:de:da:69:9b:81: df:2a:a0:ea:df:0b:a0:c4:12:91:dc:a7:b5:c2:93: 9c:90:28:5e:b3:1e:2a:9c:2c:1e:95:70:8d:37:91: db:d9:ee:15:8e:3e:e1:99:bf:31:79:ea:1d:41:37: 03:7a:32:db:45:34:55:ef:2e:f1:66:07:cd:fb:ff: f0:95:76:4e:0e:2f:5e:2b:f4:be:38:b2:3b:64:81: 48:29:8d:68:a1:e2:7b:ae:7b:f2:b4:bb:18:6c:97: fb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:94:FF:F2:63:A5:C6:15:7D:79:D9:DE:53:23:F1:53:47:ED:74:50 X509v3 Authority Key Identifier: keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:70:e8:d0:df:63:df:b7:f9:b7:d3:c0:c7:11:52:0a:64:b2: f5:8d:55:f6:80:77:fb:6b:ba:6d:ed:9f:e7:b5:26:22:a4:ee: b5:0a:48:8e:c8:38:77:0d:54:a3:85:c4:ed:3c:38:59:90:9d: 87:a3:60:ea:c5:73:33:ee:53:26:e2:51:97:c3:a8:8a:1f:2f: df:a1:69:f5:3f:4e:d9:c8:a3:b4:a9:e9:41:29:06:6a:f9:57: 22:b1:f6:ae:55:17:b7:00:7e:2f:9d:51:f5:db:92:b8:6b:7d: 29:be:3f:ee:79:ef:d5:26:eb:ea:d8:e7:b9:bc:85:44:2c:39: e1:fe:ac:e0:72:d7:8f:68:64:20:14:ce:69:a0:d7:31:fe:e7: dd:91:aa:39:a7:71:bb:ed:b5:63:ac:6f:fc:88:f7:46:72:5c: 2b:e1:f0:2a:a5:a7:ea:c7:22:48:a2:17:26:cf:7d:0d:f0:45: 50:2a:af:36:90:61:f1:14:08:5e:7e:6a:e4:5f:56:a9:3d:3f: 17:3f:a9:6a:ad:46:16:ef:71:a9:cf:d6:b0:11:1b:6d:37:35: 22:a8:e5:fe:6f:3b:14:b0:fa:9c:76:a5:b4:63:63:0f:b8:46: 34:bb:e4:51:8d:be:a9:22:48:7e:dc:47:4a:84:f6:1a:43:77: be:c4:06:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxNEIxMTAvBgNVBAUTKDNEQkNDQkJFN0JFOTE2Qzk2RUVBRUNEOThCRjVENTNF MUMzOTBFQTEwHhcNMjQwNTE4MjAwOTA1WhcNMjQwNTI1MjAwOTA1WjAYMRYwFAYD VQQDEw02NjQ5MGFlMS0zNTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JzSlhcfCA5h8BhXYtlF+82c77y5XfoyagurNMBUyC3i553oxpY6E+KKzdwZ wZgFXTSNbemvCwKLE0jr6z4eLb8IEgUXek138LDucYRZQoFS/EYTt1ZvXbZ5AQge D3MxeJbndwsDX+MfrrY+Q4CcsHDS2U5LwHeyTGrArtQ4DbC7/nV0QodCxy0CfYI2 gE6sWdC4cXRx5CMN7yDe/vxH3tppm4HfKqDq3wugxBKR3Ke1wpOckChesx4qnCwe lXCNN5Hb2e4Vjj7hmb8xeeodQTcDejLbRTRV7y7xZgfN+//wlXZODi9eK/S+OLI7 ZIFIKY1ooeJ7rnvytLsYbJf7XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2U//Jj pcYVfXnZ3lMj8VNH7XRQMB8GA1UdIwQYMBaAFD28y7576RbJburs2Yv11T4cOQ6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjE0Qi9GMkE0OTI0RTJG NzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZzbHU2dXpaaV9YVlBodzVE cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Biekx2bnZwRnNsdTZ1elppX1hWUGh3NURxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjE0Qi9GMkE0OTI0RTJGNzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZz bHU2dXpaaV9YVlBodzVEcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFcOjQ32Pft/m308DHEVIKZLL1jVX2gHf7a7pt7Z/ntSYipO61CkiO yDh3DVSjhcTtPDhZkJ2Ho2DqxXMz7lMm4lGXw6iKHy/foWn1P07ZyKO0qelBKQZq +VcisfauVRe3AH4vnVH125K4a30pvj/uee/VJuvq2Oe5vIVELDnh/qzgctePaGQg FM5poNcx/ufdkao5p3G77bVjrG/8iPdGclwr4fAqpafqxyJIohcmz30N8EVQKq82 kGHxFAhefmrkX1apPT8XP6lqrUYW73Gpz9awERttNzUiqOX+bzsUsPqcdqW0Y2MP uEY0u+RRjb6pIkh+3EdKhPYaQ3e+xAbw -----END CERTIFICATE-----Generated at Sat May 18 20:48:17 2024 by rpki-client on console-fra.rpki-client.org