$ rpki-client -vvf rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft File: PTTx6lntsIbxczTVmekxDXH-B0Q.mft (raw, json) Hash identifier: skVCjHsCIQRSYhnCsO6xToG8mlE6eMiJMqaqRAICO4o= Subject key identifier: 33:3A:04:5F:D3:1D:BA:9A:33:8D:5D:21:F7:28:81:26:7A:D7:BD:E7 Authority key identifier: 3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 Certificate issuer: /CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Certificate serial: 0DB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft Manifest number: 0D9E Signing time: Sat 18 May 2024 18:31:48 +0000 Manifest this update: Sat 18 May 2024 18:31:48 +0000 Manifest next update: Sat 25 May 2024 18:31:48 +0000 Files and hashes: 1: PTTx6lntsIbxczTVmekxDXH-B0Q.crl (hash: IhSK+ZDYC5TlSHM+JMIFLxzyEc5gwEF5lw/eFR2QQCw=) 2: 3D69458C9E2111E9BCDFAE69C4F9AE02.roa (hash: JgAzd4b/Exw3WmYoicyj95VsDOgmvLq+AR0pC67cCiA=) 3: A152FA389E2211E99CA85B6CC4F9AE02.roa (hash: l0ylgCDZO+lWci1SHyFWiAvCy7GcuDTqjNekg+93CcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3507 (0xdb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Validity Not Before: May 18 18:31:48 2024 GMT Not After : May 25 18:31:48 2024 GMT Subject: CN=6648f414-2577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d7:f6:26:8c:dc:72:89:9d:aa:d9:6a:d8:18: 9a:4b:e2:5a:7b:39:74:1f:25:9e:d2:17:b2:b4:80: ce:28:b3:c4:0d:7f:c0:24:09:af:ae:b9:09:75:6b: 81:2a:4c:70:6c:0f:53:1c:c8:14:10:81:75:04:35: d0:bb:4d:f8:7a:90:92:0c:f8:03:c1:65:b0:a9:40: 22:3c:14:54:6a:5f:92:fa:56:0a:49:e8:3b:7a:fb: b8:30:09:bd:5c:f2:fa:9b:ed:74:d3:ac:32:b6:6a: 5a:74:a6:94:b8:72:a6:2c:d1:13:f1:57:39:2b:64: 09:9f:53:6f:a4:bd:95:e9:2f:52:f3:61:c8:e8:a4: 74:b6:10:2e:50:b8:4e:0a:3e:d3:81:71:5b:24:6e: ba:a5:96:38:57:b4:8b:62:90:4a:12:b3:af:f7:89: de:5c:22:38:bc:3f:81:66:d1:52:5b:ae:42:05:50: 73:a1:07:7b:11:6b:31:1a:ff:4b:5a:a9:69:f6:8d: d8:16:66:3f:18:5e:8d:3a:94:98:d3:e6:a6:b3:a2: 13:c3:cb:23:23:14:0b:53:ab:e6:94:71:9b:e7:3e: e5:39:b3:fc:4e:7d:74:6e:7e:4c:9c:e1:3a:78:09: 74:34:3d:ec:ef:14:08:2d:cc:4e:e8:f3:40:d6:ab: 3e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3A:04:5F:D3:1D:BA:9A:33:8D:5D:21:F7:28:81:26:7A:D7:BD:E7 X509v3 Authority Key Identifier: keyid:3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:7d:3f:7c:65:4e:e3:b0:e7:dc:80:61:1f:b5:69:44:54:71: 9e:a0:6d:87:5c:ad:bf:e8:8f:81:2d:eb:73:1b:d2:4e:ee:70: a8:22:d4:90:51:fc:3d:55:58:cf:69:14:8b:64:d0:d4:a1:65: 84:e0:e8:ed:c3:d1:d1:5e:92:14:d8:68:78:75:e6:6f:cb:88: 99:dd:c5:8a:c5:ac:36:dc:1e:ee:87:a1:2a:65:59:48:ab:ef: 5b:15:5f:df:02:7f:31:47:b2:bb:cc:6a:3c:6a:0c:a7:a1:cc: 65:66:8b:c1:15:d1:4a:3a:d4:50:14:d6:bf:13:c6:2e:0c:08: 5c:75:44:ad:c8:28:9d:ef:42:82:0d:00:8e:70:cf:59:3d:0e: b1:aa:26:1b:31:eb:49:d1:9d:d0:b5:1f:91:c9:a4:d3:d9:0f: 54:ff:0b:b0:15:49:12:57:c0:61:67:d7:7c:69:9e:7c:79:6f: 16:a1:be:71:b9:4a:f2:27:d1:f0:30:dd:8d:97:ce:af:3d:3f: b6:88:ab:40:28:3d:9c:f1:da:bd:e1:2f:87:ed:f2:11:2d:57: f1:51:84:b7:c8:7d:83:a2:5c:42:08:cb:f3:47:b9:2c:4f:bf: df:b8:c0:08:f7:a8:f2:d3:06:6a:5d:d3:96:f6:64:ca:0a:86: 2a:5d:0a:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VBRTYxMTAvBgNVBAUTKDNEMzRGMUVBNTlFREIwODZGMTczMzRENTk5RTkzMTBE NzFGRTA3NDQwHhcNMjQwNTE4MTgzMTQ4WhcNMjQwNTI1MTgzMTQ4WjAYMRYwFAYD VQQDEw02NjQ4ZjQxNC0yNTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNf2Jozccomdqtlq2BiaS+Jaezl0HyWe0heytIDOKLPEDX/AJAmvrrkJdWuB KkxwbA9THMgUEIF1BDXQu034epCSDPgDwWWwqUAiPBRUal+S+lYKSeg7evu4MAm9 XPL6m+1006wytmpadKaUuHKmLNET8Vc5K2QJn1NvpL2V6S9S82HI6KR0thAuULhO Cj7TgXFbJG66pZY4V7SLYpBKErOv94neXCI4vD+BZtFSW65CBVBzoQd7EWsxGv9L Wqlp9o3YFmY/GF6NOpSY0+ams6ITw8sjIxQLU6vmlHGb5z7lObP8Tn10bn5MnOE6 eAl0ND3s7xQILcxO6PNA1qs+0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDM6BF/T HbqaM41dIfcogSZ6173nMB8GA1UdIwQYMBaAFD008epZ7bCG8XM01ZnpMQ1x/gdE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUFFNi83QkMyOTMyNjlC RjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJYnhjelRWbWVreERYSC1C MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUVHg2bG50c0lieGN6VFZtZWt4RFhILUIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUFFNi83QkMyOTMyNjlCRjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJ YnhjelRWbWVreERYSC1CMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIfT98ZU7jsOfcgGEftWlEVHGeoG2HXK2/6I+BLetzG9JO7nCoItSQ Ufw9VVjPaRSLZNDUoWWE4Ojtw9HRXpIU2Gh4deZvy4iZ3cWKxaw23B7uh6EqZVlI q+9bFV/fAn8xR7K7zGo8agynocxlZovBFdFKOtRQFNa/E8YuDAhcdUStyCid70KC DQCOcM9ZPQ6xqiYbMetJ0Z3QtR+RyaTT2Q9U/wuwFUkSV8BhZ9d8aZ58eW8Wob5x uUryJ9HwMN2Nl86vPT+2iKtAKD2c8dq94S+H7fIRLVfxUYS3yH2DolxCCMvzR7ks T7/fuMAI96jy0wZqXdOW9mTKCoYqXQpU -----END CERTIFICATE-----Generated at Sat May 18 19:21:03 2024 by rpki-client on console-fra.rpki-client.org