$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft File: pBhnIpZRYlTNTMrUSSUeGdG26V0.mft (raw, json) Hash identifier: 9pHyCNtNiwSOlfLPaFpRryiInHSQIoQN4GR48sa0XjA= Subject key identifier: 3F:E8:24:A9:A8:9B:AB:26:40:1B:DA:8D:8D:92:4D:12:07:A1:DA:B9 Authority key identifier: A4:18:67:22:96:51:62:54:CD:4C:CA:D4:49:25:1E:19:D1:B6:E9:5D Certificate issuer: /CN=A913FE3D/serialNumber=A418672296516254CD4CCAD449251E19D1B6E95D Certificate serial: 04A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft Manifest number: 04A2 Signing time: Sun 19 May 2024 01:33:25 +0000 Manifest this update: Sun 19 May 2024 01:33:24 +0000 Manifest next update: Sun 26 May 2024 01:33:24 +0000 Files and hashes: 1: pBhnIpZRYlTNTMrUSSUeGdG26V0.crl (hash: wz2xbIw3ytXnKl5y0NMmZwU0RQXlh2kWEZopJ1xFkLk=) 2: 679A6FA4E53A11EB8197AD70C4F9AE02.roa (hash: /7XPGV9y4JP2f7sWVqZgTq9njwreZGcpJpiqynxB6Zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.crl rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FE3D/serialNumber=A418672296516254CD4CCAD449251E19D1B6E95D Validity Not Before: May 19 01:33:24 2024 GMT Not After : May 26 01:33:24 2024 GMT Subject: CN=664956e4-aece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:c4:76:e2:08:03:0e:17:3b:33:95:ef:d5: db:d9:15:b3:62:97:ac:2d:ef:5b:52:08:57:e2:08: f7:06:2b:b4:1b:11:fc:49:dd:04:2f:e7:7e:26:89: a6:5b:bd:35:29:ab:de:70:25:04:db:c5:df:be:8b: 7f:79:a9:2c:4c:b4:69:10:29:97:70:c1:f6:7b:db: 1a:da:70:eb:2b:6f:ce:60:c7:37:06:5e:96:05:a5: 6f:59:08:da:79:1b:ae:89:95:b9:28:67:f4:79:aa: 90:ea:92:28:d8:df:8a:dd:4b:fb:ab:db:08:02:03: 35:67:d3:4b:95:5a:1a:d3:41:3f:67:00:84:62:e0: d3:a9:4b:1f:ec:8f:aa:4e:72:11:5d:6e:99:be:66: 96:f0:61:c9:51:3c:16:06:3d:69:8a:dc:7c:86:4e: fb:00:1d:8c:d6:f8:45:8f:33:6c:ac:90:fe:d3:45: 78:0f:7f:a8:60:11:25:d3:a1:dc:92:7a:2b:ff:4c: 77:4d:d5:a0:bf:14:0b:a3:14:4d:37:e6:66:fa:77: 4c:ca:32:9e:36:67:60:a6:63:30:b8:50:9b:4f:58: 70:8c:ad:d5:60:3d:57:a8:2f:4f:65:96:54:43:b6: 41:6a:29:60:8a:8c:46:83:d8:3d:17:4f:a7:d1:90: 36:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E8:24:A9:A8:9B:AB:26:40:1B:DA:8D:8D:92:4D:12:07:A1:DA:B9 X509v3 Authority Key Identifier: keyid:A4:18:67:22:96:51:62:54:CD:4C:CA:D4:49:25:1E:19:D1:B6:E9:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:d3:53:ba:0b:dd:f7:26:14:1c:bb:f9:3d:13:9a:bf:2e:72: c2:e2:67:f0:1a:0b:70:7a:0b:00:86:69:91:4d:66:0e:eb:1a: e4:95:9e:a8:f5:56:6b:c1:33:c9:0f:dc:87:00:b5:f6:8c:54: d7:26:7d:49:91:28:21:ad:9b:fd:96:fc:00:9a:d7:69:1f:8b: 2a:fa:81:1d:f6:9d:fe:f8:d4:68:3b:93:ee:f5:a2:00:37:af: 21:30:db:c0:1d:7a:d3:4b:fb:89:6d:0f:70:14:d2:9a:7b:c5: 01:02:8c:ca:97:02:75:bc:70:cd:c0:2f:ed:c1:bc:94:42:66: 15:79:7e:fb:6e:e9:75:0c:3e:1a:87:a8:26:f2:63:04:9a:3c: 5c:b9:97:dc:65:56:db:fa:2f:23:f4:49:78:48:cc:23:f3:06: ab:6a:45:88:a3:07:a7:4e:3d:6a:02:db:56:d3:da:86:21:82: e8:b9:db:c7:da:15:76:26:5d:e5:fc:2c:78:37:5c:01:61:04: 31:f8:2c:a0:0a:00:18:00:d6:68:2c:c3:5d:40:6e:7a:11:14: 42:c8:2b:01:0a:04:f1:38:01:d3:a2:d6:8b:c1:f4:ca:73:f8: dd:13:89:d5:a5:6d:22:62:b6:cd:c4:82:ca:bb:f2:2d:9b:58: 34:97:df:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZFM0QxMTAvBgNVBAUTKEE0MTg2NzIyOTY1MTYyNTRDRDRDQ0FENDQ5MjUxRTE5 RDFCNkU5NUQwHhcNMjQwNTE5MDEzMzI0WhcNMjQwNTI2MDEzMzI0WjAYMRYwFAYD VQQDEw02NjQ5NTZlNC1hZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvu3EduIIAw4XOzOV79Xb2RWzYpesLe9bUghX4gj3Biu0GxH8Sd0EL+d+Jomm W701KavecCUE28Xfvot/eaksTLRpECmXcMH2e9sa2nDrK2/OYMc3Bl6WBaVvWQja eRuuiZW5KGf0eaqQ6pIo2N+K3Uv7q9sIAgM1Z9NLlVoa00E/ZwCEYuDTqUsf7I+q TnIRXW6ZvmaW8GHJUTwWBj1pitx8hk77AB2M1vhFjzNsrJD+00V4D3+oYBEl06Hc knor/0x3TdWgvxQLoxRNN+Zm+ndMyjKeNmdgpmMwuFCbT1hwjK3VYD1XqC9PZZZU Q7ZBailgioxGg9g9F0+n0ZA2MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/oJKmo m6smQBvajY2STRIHodq5MB8GA1UdIwQYMBaAFKQYZyKWUWJUzUzK1EklHhnRtuld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkUzRC84MUU2NTRCQ0U1 MzYxMUVCQjk4MDMyNkFDNEY5QUUwMi9wQmhuSXBaUllsVE5UTXJVU1NVZUdkRzI2 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BCaG5JcFpSWWxUTlRNclVTU1VlR2RHMjZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkUzRC84MUU2NTRCQ0U1MzYxMUVCQjk4MDMyNkFDNEY5QUUwMi9wQmhuSXBaUlls VE5UTXJVU1NVZUdkRzI2VjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh01O6C933JhQcu/k9E5q/LnLC4mfwGgtwegsAhmmRTWYO6xrklZ6o 9VZrwTPJD9yHALX2jFTXJn1JkSghrZv9lvwAmtdpH4sq+oEd9p3++NRoO5Pu9aIA N68hMNvAHXrTS/uJbQ9wFNKae8UBAozKlwJ1vHDNwC/twbyUQmYVeX77bul1DD4a h6gm8mMEmjxcuZfcZVbb+i8j9El4SMwj8warakWIowenTj1qAttW09qGIYLoudvH 2hV2Jl3l/Cx4N1wBYQQx+CygCgAYANZoLMNdQG56ERRCyCsBCgTxOAHTotaLwfTK c/jdE4nVpW0iYrbNxILKu/Itm1g0l9/B -----END CERTIFICATE-----Generated at Sun May 19 02:59:06 2024 by rpki-client on console-ams.rpki-client.org