$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft File: pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json) Hash identifier: 7moJ+tJhFqhaXscor2AYsxGJR6vdB0oJCOhbBNnCe1U= Subject key identifier: DC:DD:9F:FA:7D:D2:27:2A:FB:A1:C4:1B:29:3C:2C:29:BC:E5:F3:4E Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 Certificate issuer: /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft Manifest number: 0483 Signing time: Fri 31 May 2024 02:11:23 +0000 Manifest this update: Fri 31 May 2024 02:11:22 +0000 Manifest next update: Fri 07 Jun 2024 02:11:22 +0000 Files and hashes: 1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: fuZDdt30+pqFyJLof/4JBaY1Ek+VIbYptjRtMh64oKI=) 2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: 7nJ+ZOkvTomcLacrU2HfPbU/loA6pHI5U2yYqZs8rpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Validity Not Before: May 31 02:11:22 2024 GMT Not After : Jun 7 02:11:22 2024 GMT Subject: CN=665931ca-ab77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:36:50:3f:49:d0:e6:fd:bb:8f:42:45:3c:11: e9:05:0b:d5:da:61:4d:af:1f:f0:3e:4f:8a:ef:3d: 87:5c:2f:c9:08:97:47:8b:3b:11:ee:43:01:48:ac: 2e:5d:43:27:92:8e:79:6f:8d:05:de:f2:f5:18:ac: 52:d0:b4:e3:72:31:58:c5:fb:97:41:85:ee:39:d9: eb:de:fd:80:3b:a0:17:9a:30:3f:fe:08:a0:6d:60: 17:00:4e:fa:fe:34:e1:b1:c1:e9:dc:0f:1d:6e:e3: 00:19:d0:7d:4d:e6:0f:0f:25:29:0a:bc:36:ad:79: 0d:cb:39:14:f5:1d:a1:f0:c6:2a:3f:42:5f:b8:31: b8:c4:a7:3c:5a:10:41:6b:d1:da:7b:bf:e2:a9:e7: 26:7a:5d:54:53:1a:b8:2d:4d:ae:bc:7b:41:03:62: b8:2f:40:f9:f9:54:70:2c:47:c4:84:d4:d5:ec:bd: 80:c5:dd:a6:ae:34:a6:51:15:5a:1f:d7:34:dd:2d: b9:9b:2b:fc:16:71:32:33:70:25:fb:b1:2d:8f:88: ee:77:9a:14:00:ca:f9:e1:a0:c5:c8:1b:b5:b9:18: fc:c1:9f:64:28:fa:48:92:69:5a:ad:12:e1:eb:ef: 02:45:82:b2:e9:e8:cf:24:b7:64:83:be:07:e3:95: 6d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DD:9F:FA:7D:D2:27:2A:FB:A1:C4:1B:29:3C:2C:29:BC:E5:F3:4E X509v3 Authority Key Identifier: keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:4d:8c:1f:c3:f8:db:47:df:71:8b:36:35:42:e9:f0:f1:b8: 48:71:9b:87:84:29:77:51:4a:a4:c9:e4:c3:a2:77:6e:2d:60: 8b:b7:fd:83:10:59:f1:03:37:c5:19:3f:17:b6:35:44:2f:ef: 71:d5:6d:88:6b:fd:00:50:a9:77:35:bd:fe:60:9f:a7:6c:52: 6d:91:dc:35:47:ea:0c:ba:b7:85:e1:37:cb:27:68:4b:bb:f6: 41:aa:19:67:eb:d0:53:7c:2d:3c:97:dd:89:31:09:00:a6:47: f6:0e:a9:3e:65:8d:49:84:8f:83:bd:70:bd:73:55:51:07:ea: ea:ba:15:1a:83:a4:59:99:78:20:fb:99:64:ae:a3:67:9a:7e: 84:fd:67:b5:28:32:eb:0f:e7:d8:9e:7e:fa:9d:60:b0:0a:a2: 01:c5:1a:ec:23:54:48:38:55:19:4e:1f:d7:c0:cd:54:5e:f1: 1c:f9:22:15:cc:f0:20:45:75:86:45:f1:fe:b0:24:89:3f:5a: f5:80:ea:3c:d8:96:93:99:87:03:07:43:8a:0f:51:ff:7c:62: 3e:64:f4:8a:d8:15:58:38:ba:58:ef:3c:d6:7f:08:64:e7:05: 61:5c:b7:e3:ce:27:88:87:e3:d8:56:73:12:44:f4:82:c7:38: c4:41:0a:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZENDAxMTAvBgNVBAUTKEE3MTAzRkQzM0Y2QzhBNjQ0OEZDNjM5NDBBQTk3RDkz RjgxRjgxMDUwHhcNMjQwNTMxMDIxMTIyWhcNMjQwNjA3MDIxMTIyWjAYMRYwFAYD VQQDEw02NjU5MzFjYS1hYjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDZQP0nQ5v27j0JFPBHpBQvV2mFNrx/wPk+K7z2HXC/JCJdHizsR7kMBSKwu XUMnko55b40F3vL1GKxS0LTjcjFYxfuXQYXuOdnr3v2AO6AXmjA//gigbWAXAE76 /jThscHp3A8dbuMAGdB9TeYPDyUpCrw2rXkNyzkU9R2h8MYqP0JfuDG4xKc8WhBB a9Hae7/iqecmel1UUxq4LU2uvHtBA2K4L0D5+VRwLEfEhNTV7L2Axd2mrjSmURVa H9c03S25myv8FnEyM3Al+7Etj4jud5oUAMr54aDFyBu1uRj8wZ9kKPpIkmlarRLh 6+8CRYKy6ejPJLdkg74H45VtWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzdn/p9 0icq+6HEGyk8LCm85fNOMB8GA1UdIwQYMBaAFKcQP9M/bIpkSPxjlAqpfZP4H4EF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkQ0MC8zQzYzMzNDNkYz RjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2ltUklfR09VQ3FsOWtfZ2Zn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B4QV8wejlzaW1SSV9HT1VDcWw5a19nZmdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkQ0MC8zQzYzMzNDNkYzRjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2lt UklfR09VQ3FsOWtfZ2ZnUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrTYwfw/jbR99xizY1Qunw8bhIcZuHhCl3UUqkyeTDonduLWCLt/2D EFnxAzfFGT8XtjVEL+9x1W2Ia/0AUKl3Nb3+YJ+nbFJtkdw1R+oMureF4TfLJ2hL u/ZBqhln69BTfC08l92JMQkApkf2Dqk+ZY1JhI+DvXC9c1VRB+rquhUag6RZmXgg +5lkrqNnmn6E/We1KDLrD+fYnn76nWCwCqIBxRrsI1RIOFUZTh/XwM1UXvEc+SIV zPAgRXWGRfH+sCSJP1r1gOo82JaTmYcDB0OKD1H/fGI+ZPSK2BVYOLpY7zzWfwhk 5wVhXLfjzieIh+PYVnMSRPSCxzjEQQoO -----END CERTIFICATE-----Generated at Fri May 31 03:14:55 2024 by rpki-client on console-ams.rpki-client.org