$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft File: pibNzbdx6WVebpGhxy0S-1fRxOg.mft (raw, json) Hash identifier: qRyCDRizJX7oAXnrCh4+CKjj+c2ZUXsOinVKf9WswRM= Subject key identifier: 38:8B:41:7F:9D:B2:A0:6B:26:90:EC:B4:B8:82:9E:2B:3A:6C:B7:93 Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 Certificate issuer: /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Certificate serial: 03D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft Manifest number: 03D2 Signing time: Sun 19 May 2024 02:23:58 +0000 Manifest this update: Sun 19 May 2024 02:23:57 +0000 Manifest next update: Sun 26 May 2024 02:23:57 +0000 Files and hashes: 1: pibNzbdx6WVebpGhxy0S-1fRxOg.crl (hash: lFtWzwoYsVTnUGy2dlErcpsj66v7pmy4KfRc5HzMCiA=) 2: CB56435E3C5311EC81D0DB48C4F9AE02.roa (hash: GcZ/jVmf3aFj/tEn6isaoQpB/Anp8WQjarqO/s3Uu4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Validity Not Before: May 19 02:23:57 2024 GMT Not After : May 26 02:23:57 2024 GMT Subject: CN=664962be-86f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:35:00:b5:58:70:4a:98:35:86:b4:98:7e:ca: a0:02:77:0a:a7:0f:99:b5:49:fa:e6:d3:05:0c:44: 06:93:c2:3e:b2:79:56:b2:3a:31:9a:ac:3f:5d:4b: 5a:20:e9:17:73:75:8e:f9:80:6f:54:3d:fd:11:ce: cb:b1:c8:e1:f2:28:62:17:96:ca:9a:f8:62:10:9a: 4c:05:f5:c5:d4:5f:42:d7:01:9e:38:fb:f2:a7:89: a0:de:9a:16:20:cf:a2:41:e7:5e:ee:33:b7:f1:bc: 73:84:fb:39:31:a5:3b:b5:b9:2a:ed:b7:10:96:35: 93:3b:36:01:c3:85:e4:85:b5:3d:cb:08:1b:c2:27: 3b:21:35:a3:c7:0f:fc:2b:8e:90:80:6a:7b:ba:6d: 1f:ac:0f:f0:47:a8:a7:b9:76:30:19:36:b8:03:e7: 97:40:70:97:b2:03:73:1c:ce:f7:3a:37:61:9a:36: c8:c5:09:72:68:a6:69:83:f7:27:7b:aa:b5:9d:e8: 92:05:f1:f2:f6:e3:45:57:7e:fc:f1:bc:2d:92:d1: 63:71:5e:b6:8b:48:62:4a:24:57:26:27:e7:d4:c6: a9:8c:93:4c:42:57:db:23:25:a6:8e:ce:76:a0:f9: aa:37:4f:40:57:17:1a:70:fb:3e:af:ec:ea:d6:e3: 84:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8B:41:7F:9D:B2:A0:6B:26:90:EC:B4:B8:82:9E:2B:3A:6C:B7:93 X509v3 Authority Key Identifier: keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:bd:9d:0f:80:21:7b:d6:68:ad:c3:5c:11:cd:ea:21:2f:70: ce:48:37:ae:43:71:5d:ee:bb:cd:b2:b0:0f:55:0f:db:34:23: 43:1f:e2:f4:ad:69:d4:ff:31:e9:1e:f4:ed:38:e3:1e:13:b1: 28:a5:ac:2e:ae:44:6a:d8:d6:60:4f:a4:74:2e:45:c8:ef:78: b7:b2:b9:66:66:82:82:0a:fc:f7:41:b9:5a:a0:f3:8d:81:39: 03:82:68:c8:a7:31:00:ef:81:f3:2e:4c:0a:b0:d2:24:c5:37: f6:56:75:a4:91:16:74:63:2d:e4:50:69:f7:23:91:9f:5d:fe: f7:4f:61:73:05:26:fc:e4:1c:9a:b3:83:f5:ee:4b:15:c6:0a: 25:08:55:e4:3e:81:dc:0d:4c:bb:1b:73:c7:13:79:49:df:78: fd:57:1e:c8:b5:05:9c:5b:62:be:97:66:b0:56:83:b7:c7:f5: d0:73:85:78:b9:ca:70:94:ca:e0:37:29:a5:5a:5d:27:12:60: be:bf:87:58:ae:cd:a3:cf:51:72:32:7e:21:3e:43:75:e5:1b: 8a:ce:e5:ba:ef:26:70:0c:b1:e8:7d:f8:aa:3c:3d:c7:d7:57: 65:3d:c7:7f:d2:58:74:7b:46:38:fb:b6:a9:5c:1e:06:ca:05: e0:0d:aa:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3QjExMTAvBgNVBAUTKEE2MjZDRENEQjc3MUU5NjU1RTZFOTFBMUM3MkQxMkZC NTdEMUM0RTgwHhcNMjQwNTE5MDIyMzU3WhcNMjQwNTI2MDIyMzU3WjAYMRYwFAYD VQQDEw02NjQ5NjJiZS04NmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TUAtVhwSpg1hrSYfsqgAncKpw+ZtUn65tMFDEQGk8I+snlWsjoxmqw/XUta IOkXc3WO+YBvVD39Ec7Lscjh8ihiF5bKmvhiEJpMBfXF1F9C1wGeOPvyp4mg3poW IM+iQede7jO38bxzhPs5MaU7tbkq7bcQljWTOzYBw4XkhbU9ywgbwic7ITWjxw/8 K46QgGp7um0frA/wR6inuXYwGTa4A+eXQHCXsgNzHM73OjdhmjbIxQlyaKZpg/cn e6q1neiSBfHy9uNFV3788bwtktFjcV62i0hiSiRXJifn1MapjJNMQlfbIyWmjs52 oPmqN09AVxcacPs+r+zq1uOE2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiLQX+d sqBrJpDstLiCnis6bLeTMB8GA1UdIwQYMBaAFKYmzc23cellXm6RocctEvtX0cTo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdCMS9BMEY0ODBCNjND NEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZXVmVicEdoeHkwUy0xZlJ4 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpYk56YmR4NldWZWJwR2h4eTBTLTFmUnhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdCMS9BMEY0ODBCNjNDNEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZX VmVicEdoeHkwUy0xZlJ4T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcvZ0PgCF71mitw1wRzeohL3DOSDeuQ3Fd7rvNsrAPVQ/bNCNDH+L0 rWnU/zHpHvTtOOMeE7EopawurkRq2NZgT6R0LkXI73i3srlmZoKCCvz3QblaoPON gTkDgmjIpzEA74HzLkwKsNIkxTf2VnWkkRZ0Yy3kUGn3I5GfXf73T2FzBSb85Bya s4P17ksVxgolCFXkPoHcDUy7G3PHE3lJ33j9Vx7ItQWcW2K+l2awVoO3x/XQc4V4 ucpwlMrgNymlWl0nEmC+v4dYrs2jz1FyMn4hPkN15RuKzuW67yZwDLHoffiqPD3H 11dlPcd/0lh0e0Y4+7apXB4GygXgDapx -----END CERTIFICATE-----Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org