$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft File: pXN62XE221PCG287HU13Hc1XMTo.mft (raw, json) Hash identifier: wdrraUcsY8aIrJUs5ZAsNVZBxgbTTjv7Mxvb/jcJ2fQ= Subject key identifier: 9F:37:10:D6:A3:AF:F3:69:A2:8B:6D:22:CA:C1:D3:5B:F8:2B:73:D1 Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A Certificate issuer: /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft Manifest number: 031F Signing time: Fri 31 May 2024 03:43:37 +0000 Manifest this update: Fri 31 May 2024 03:43:36 +0000 Manifest next update: Fri 07 Jun 2024 03:43:36 +0000 Files and hashes: 1: pXN62XE221PCG287HU13Hc1XMTo.crl (hash: b5TjgCwvsWay/wEJcP8C/xD3HYJnqpBGkswbKMlX8dg=) 2: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (hash: u1WeU6UvrDy6/RJHPgJAeQ1takFO569N+KLvPiXwEw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Validity Not Before: May 31 03:43:36 2024 GMT Not After : Jun 7 03:43:36 2024 GMT Subject: CN=66594769-b28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9e:e2:3b:d4:b3:56:81:d2:d6:27:ec:be:7a: 99:ab:6e:00:cd:35:4e:75:c6:e1:30:e1:eb:4d:07: 02:f8:7f:5f:78:37:2d:09:bd:8f:72:a3:94:ac:f7: c6:6f:25:03:72:ea:30:1b:b2:04:8f:5e:d0:c8:c4: 24:9e:dd:85:2b:fc:11:ed:e3:64:d3:9d:10:12:f0: 50:6c:e1:49:3b:0f:8d:e9:e1:3d:13:4b:b4:e7:d7: 08:96:47:9c:ba:bf:a8:7d:2c:b5:07:0e:d1:9e:e2: f3:c6:61:11:21:a7:f6:4a:5c:19:fd:e1:8a:0c:18: cc:19:42:e9:3e:62:f8:40:ae:18:3f:e6:08:fb:46: dd:fc:53:1f:51:17:54:f6:40:c3:c9:44:16:45:e7: a9:7f:a0:63:18:6c:65:5b:60:d0:e6:35:b3:ac:30: cf:1b:68:bc:be:bf:e0:fa:24:33:7a:18:29:91:17: 58:32:21:b0:8a:57:85:1c:78:93:ca:3f:6c:df:f7: c9:56:f7:b0:13:d8:ec:de:a6:9f:ff:65:2d:98:2f: fc:93:13:c1:9e:83:a7:9d:29:f3:14:15:69:84:5c: 6c:62:69:93:34:3d:67:cc:86:2e:39:36:17:6b:4b: 9b:4f:11:8d:19:09:42:13:35:54:b8:03:02:33:14: 5d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:37:10:D6:A3:AF:F3:69:A2:8B:6D:22:CA:C1:D3:5B:F8:2B:73:D1 X509v3 Authority Key Identifier: keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c7:6e:ce:92:90:5a:94:c6:78:69:d3:26:95:26:87:82:80: a0:ef:9d:31:fa:2c:47:d2:31:a3:a4:f8:98:50:c7:65:59:65: 00:83:0a:a2:35:05:3f:9d:71:13:ea:d9:4c:ba:f6:91:38:16: a7:82:70:6e:36:5e:d8:01:ce:80:5c:1e:99:77:3d:21:cf:b6: 4e:13:ce:11:5c:40:7e:71:e2:9d:91:98:c7:e5:b1:29:95:6d: 43:0c:35:db:9d:ce:51:ce:34:76:51:d6:24:22:83:ab:2d:6e: 8f:1f:07:84:07:1a:38:b1:f4:5c:ab:bc:23:be:63:d0:ff:83: 87:4e:07:a2:ac:3a:0c:62:91:30:9c:47:3b:9e:f8:8d:47:1e: 21:1a:2d:3c:a9:36:ee:03:fd:a6:68:32:b3:f7:fe:0f:ce:f0: 76:29:db:a0:b3:8a:a4:8a:f7:87:d5:9e:29:24:21:4f:82:73: 58:d2:35:93:44:f1:1d:bd:3d:76:1f:ba:ee:08:b3:06:27:cb: df:d9:07:d9:3e:fd:78:f8:3d:c9:51:dd:cc:64:66:1a:1f:f2: e9:ed:0e:e9:15:44:80:e4:e2:e5:56:e2:30:c0:57:e0:ff:86: 24:41:61:4e:1a:b2:df:6d:9d:fe:7c:bf:c9:81:48:c1:3e:11: 19:09:70:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZGMzMxMTAvBgNVBAUTKEE1NzM3QUQ5NzEzNkRCNTNDMjFCNkYzQjFENEQ3NzFE Q0Q1NzMxM0EwHhcNMjQwNTMxMDM0MzM2WhcNMjQwNjA3MDM0MzM2WjAYMRYwFAYD VQQDEw02NjU5NDc2OS1iMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwp7iO9SzVoHS1ifsvnqZq24AzTVOdcbhMOHrTQcC+H9feDctCb2PcqOUrPfG byUDcuowG7IEj17QyMQknt2FK/wR7eNk050QEvBQbOFJOw+N6eE9E0u059cIlkec ur+ofSy1Bw7RnuLzxmERIaf2SlwZ/eGKDBjMGULpPmL4QK4YP+YI+0bd/FMfURdU 9kDDyUQWReepf6BjGGxlW2DQ5jWzrDDPG2i8vr/g+iQzehgpkRdYMiGwileFHHiT yj9s3/fJVvewE9js3qaf/2UtmC/8kxPBnoOnnSnzFBVphFxsYmmTND1nzIYuOTYX a0ubTxGNGQlCEzVUuAMCMxRd5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ83ENaj r/NpoottIsrB01v4K3PRMB8GA1UdIwQYMBaAFKVzetlxNttTwhtvOx1Ndx3NVzE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkYzMy9CMTY1QkI4QTg1 MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIxUENHMjg3SFUxM0hjMVhN VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYTjYyWEUyMjFQQ0cyODdIVTEzSGMxWE1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkYzMy9CMTY1QkI4QTg1MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIx UENHMjg3SFUxM0hjMVhNVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfx27OkpBalMZ4adMmlSaHgoCg750x+ixH0jGjpPiYUMdlWWUAgwqi NQU/nXET6tlMuvaROBangnBuNl7YAc6AXB6Zdz0hz7ZOE84RXEB+ceKdkZjH5bEp lW1DDDXbnc5RzjR2UdYkIoOrLW6PHweEBxo4sfRcq7wjvmPQ/4OHTgeirDoMYpEw nEc7nviNRx4hGi08qTbuA/2maDKz9/4PzvB2Kdugs4qkiveH1Z4pJCFPgnNY0jWT RPEdvT12H7ruCLMGJ8vf2QfZPv14+D3JUd3MZGYaH/Lp7Q7pFUSA5OLlVuIwwFfg /4YkQWFOGrLfbZ3+fL/JgUjBPhEZCXDt -----END CERTIFICATE-----Generated at Fri May 31 04:53:57 2024 by rpki-client on console-fra.rpki-client.org