$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft File: pFVIOEAp8fN2pyJjKU0GWujJRCI.mft (raw, json) Hash identifier: BZk9cufxmx+dJtkUiyM6PHccS9GLJupPuBLuaaYUC0g= Subject key identifier: 9B:17:5C:AE:46:FC:8C:DA:47:1E:03:D9:F3:EE:87:66:C7:AB:58:45 Authority key identifier: A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 Certificate issuer: /CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422 Certificate serial: 058A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft Manifest number: 0589 Signing time: Sat 18 May 2024 17:29:24 +0000 Manifest this update: Sat 18 May 2024 17:29:23 +0000 Manifest next update: Sat 25 May 2024 17:29:23 +0000 Files and hashes: 1: pFVIOEAp8fN2pyJjKU0GWujJRCI.crl (hash: PvX8GQgxIidsy4V6ykHQl7AOnpzzPQ1fKqIUHoTVExo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1418 (0x58a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422 Validity Not Before: May 18 17:29:23 2024 GMT Not After : May 25 17:29:23 2024 GMT Subject: CN=6648e574-c1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:99:2b:6d:f2:0c:c8:3c:a7:49:d1:74:d1:e1: 52:ee:5a:13:86:1f:54:43:8a:fa:78:6a:37:18:14: fc:77:af:d5:ce:cb:13:51:9f:db:30:35:7c:32:23: 63:51:57:00:e0:b4:e2:93:8b:0e:87:b2:5a:5f:fe: 8a:30:1d:3c:c1:32:6c:8e:d6:5c:71:53:bb:d5:4b: 9c:34:44:95:ae:ed:91:1d:ba:b0:bf:da:7f:64:cd: 84:e7:f5:e2:7e:a7:d0:97:f2:8b:ac:0f:fd:0c:c6: 1c:e8:0d:22:da:99:73:bd:b1:e6:de:a7:ed:be:8f: c9:3a:90:52:aa:23:a1:8a:78:da:05:1d:88:64:f4: ff:3a:bb:60:3c:10:db:57:1a:fc:81:1a:e5:a1:be: e4:d0:7f:0c:6f:d8:7e:68:83:46:a3:a4:04:bd:78: 94:42:22:ec:66:59:f8:a9:d4:39:cb:0a:d2:de:0a: 70:73:ec:9c:b8:be:fd:69:81:3f:bc:e5:39:9a:47: 6f:97:4a:14:5e:68:23:a6:7c:20:71:29:1d:43:4b: 84:fc:8e:54:89:98:15:a5:34:82:b7:71:aa:18:4c: af:02:f1:f6:c2:12:92:70:bc:d1:f8:cd:20:83:58: 72:cd:1d:16:b6:7c:ad:ec:9e:f2:a7:45:0c:67:d7: cb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:17:5C:AE:46:FC:8C:DA:47:1E:03:D9:F3:EE:87:66:C7:AB:58:45 X509v3 Authority Key Identifier: keyid:A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:8f:69:03:82:68:3d:2c:7e:b9:59:6d:6e:e3:ac:54:8f:77: f3:a5:3f:f0:a5:f6:7c:51:59:8d:48:08:d9:d1:95:00:db:7e: d9:63:bb:11:fe:22:8b:10:7f:0f:61:8e:1b:de:35:df:f9:00: c3:5f:57:1d:9d:5c:2c:f3:08:f0:0b:57:47:78:fc:d9:cb:0e: 32:5d:e0:0b:94:0c:38:91:d1:29:77:3f:83:ae:7f:9b:d3:4b: 56:4c:99:37:1b:02:09:82:aa:f2:82:ec:56:40:0a:4f:30:57: 37:9e:75:09:c9:be:cb:c6:23:a1:00:b0:1a:7b:e7:5e:b8:18: 45:16:78:5f:97:01:bf:41:42:70:d5:51:59:94:b2:45:e9:10: 6c:44:a5:3a:cc:d5:a2:ba:1f:34:79:11:02:90:bb:c0:35:f6: 11:cf:90:4c:23:43:50:6f:ce:50:6c:4a:3d:99:cd:ab:bb:4c: cb:7e:bb:1b:9f:97:d7:af:ee:3b:56:85:87:7e:16:12:23:98: 54:70:c4:2e:35:eb:ad:0f:d5:a4:7e:06:cc:d2:7b:b0:ba:e0: 72:0a:0a:c3:d3:b3:63:bb:68:26:cc:f7:66:94:5f:59:41:04: 62:88:dd:20:aa:2d:2f:09:89:8a:70:24:1a:ca:dd:54:44:cb: 54:cb:6d:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEE0NTU0ODM4NDAyOUYxRjM3NkE3MjI2MzI5NEQwNjVB RThDOTQ0MjIwHhcNMjQwNTE4MTcyOTIzWhcNMjQwNTI1MTcyOTIzWjAYMRYwFAYD VQQDEw02NjQ4ZTU3NC1jMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JkrbfIMyDynSdF00eFS7loThh9UQ4r6eGo3GBT8d6/VzssTUZ/bMDV8MiNj UVcA4LTik4sOh7JaX/6KMB08wTJsjtZccVO71UucNESVru2RHbqwv9p/ZM2E5/Xi fqfQl/KLrA/9DMYc6A0i2plzvbHm3qftvo/JOpBSqiOhinjaBR2IZPT/OrtgPBDb Vxr8gRrlob7k0H8Mb9h+aINGo6QEvXiUQiLsZln4qdQ5ywrS3gpwc+ycuL79aYE/ vOU5mkdvl0oUXmgjpnwgcSkdQ0uE/I5UiZgVpTSCt3GqGEyvAvH2whKScLzR+M0g g1hyzR0Wtnyt7J7yp0UMZ9fLjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsXXK5G /IzaRx4D2fPuh2bHq1hFMB8GA1UdIwQYMBaAFKRVSDhAKfHzdqciYylNBlroyUQi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8xOEE4MUVGMDhE MkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhmTjJweUpqS1UwR1d1akpS Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BGVklPRUFwOGZOMnB5SmpLVTBHV3VqSlJDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8xOEE4MUVGMDhEMkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhm TjJweUpqS1UwR1d1akpSQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0j2kDgmg9LH65WW1u46xUj3fzpT/wpfZ8UVmNSAjZ0ZUA237ZY7sR /iKLEH8PYY4b3jXf+QDDX1cdnVws8wjwC1dHePzZyw4yXeALlAw4kdEpdz+Drn+b 00tWTJk3GwIJgqryguxWQApPMFc3nnUJyb7LxiOhALAae+deuBhFFnhflwG/QUJw 1VFZlLJF6RBsRKU6zNWiuh80eRECkLvANfYRz5BMI0NQb85QbEo9mc2ru0zLfrsb n5fXr+47VoWHfhYSI5hUcMQuNeutD9WkfgbM0nuwuuByCgrD07Nju2gmzPdmlF9Z QQRiiN0gqi0vCYmKcCQayt1URMtUy222 -----END CERTIFICATE-----Generated at Sat May 18 18:12:31 2024 by rpki-client on console-fra.rpki-client.org