$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft File: PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json) Hash identifier: aVVgU4Gkwr8C5/fYKudmlhnXHWai0YOS6/ChxDsiA+Q= Subject key identifier: 92:E6:3B:47:DD:B6:15:4B:58:A7:75:A9:1E:EC:48:57:D5:53:40:66 Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE Certificate issuer: /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Certificate serial: 06F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft Manifest number: 06EE Signing time: Sat 18 May 2024 22:46:37 +0000 Manifest this update: Sat 18 May 2024 22:46:36 +0000 Manifest next update: Sat 25 May 2024 22:46:36 +0000 Files and hashes: 1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: wDt/v/1EgXNT5TDVb8uHS42hZJP+FCa309BEhm5/ogo=) 2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: shD1tJt4HPy3jOKupomkCVdCCSH27mhNKEdGk9N1jYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1780 (0x6f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Validity Not Before: May 18 22:46:36 2024 GMT Not After : May 25 22:46:36 2024 GMT Subject: CN=66492fcd-f90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4c:61:ad:57:ec:31:64:12:83:7b:ef:eb:8a: 30:bd:ee:c9:50:72:be:21:fa:ce:90:86:7b:6c:02: ee:01:10:db:69:a7:b7:b6:81:9e:6b:34:bf:3b:da: 7f:ea:a9:a6:a5:3a:5c:25:6b:bc:49:2c:28:73:df: 89:a6:f2:15:5c:7f:e3:e5:4c:fb:71:24:cb:6a:84: 6c:60:dc:15:b5:a9:5c:d7:5f:f2:df:75:2f:d0:99: 6c:ac:e8:07:b7:9e:22:c0:f3:d6:3d:60:bb:a1:21: 5c:fc:0f:c3:30:b4:90:b1:aa:cb:77:71:a2:b7:d5: fb:59:0a:b4:fd:53:02:63:af:a4:e9:90:2d:4d:77: 10:5f:f4:c6:ce:9c:37:78:a9:75:8f:4f:4d:3f:57: a3:0b:a0:dd:54:11:e1:c1:5f:f9:a6:27:92:20:2c: e6:32:84:4f:5e:07:89:71:0d:91:87:1a:08:5a:6d: 7d:c4:31:b6:88:3e:e7:15:89:d4:13:91:74:d8:90: 3f:3e:39:8e:8b:5d:40:ba:40:dc:ee:7b:f6:50:e9: e2:bc:d1:c9:f0:6d:33:48:10:c2:8d:85:3f:87:fd: e6:07:ec:18:03:fe:29:46:fe:0c:68:aa:84:63:7b: 64:44:27:87:d3:fb:19:db:65:c0:4a:e8:ac:90:09: eb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E6:3B:47:DD:B6:15:4B:58:A7:75:A9:1E:EC:48:57:D5:53:40:66 X509v3 Authority Key Identifier: keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:f9:5d:5c:6e:12:9d:00:20:33:96:1a:a7:92:8f:2e:52:87: d2:2c:0c:37:f5:65:6b:06:0a:f8:1f:17:8d:35:4b:36:e0:0b: 1c:7d:14:ce:c4:db:13:e2:e3:da:b6:b3:d1:8b:ef:bf:ab:9f: ee:40:93:ad:b0:32:d6:4e:18:70:85:9f:a4:7e:56:89:3a:91: 3d:38:25:f9:ea:1f:a3:3b:c1:11:2b:7a:ba:7e:21:1a:74:67: 00:a5:d4:db:df:1a:e5:dd:10:ac:ef:84:3e:d9:5c:9b:9a:2c: 1f:5d:25:83:d7:16:e2:ff:76:9b:23:d1:93:67:ba:05:80:a9: 31:02:1b:db:17:f5:d4:85:97:b8:0c:9a:28:3e:88:c0:de:53: 99:70:28:00:50:04:05:89:02:34:ea:46:22:a6:40:7f:ed:9d: 9a:15:90:9c:a0:37:08:24:74:a3:f5:06:25:3c:bf:c8:5a:78: 0d:13:ff:a5:ce:e9:27:90:95:9d:de:ad:4f:ce:ad:e5:0f:b6: 29:a5:47:f1:b1:0d:f7:3d:06:96:dc:5d:b9:b3:77:56:69:0c: 08:59:58:5c:7e:c7:e7:18:1b:d4:a1:e8:97:8f:21:67:08:c0: 16:cb:d3:88:65:86:43:92:92:d2:eb:99:47:47:ef:33:86:05: f5:97:be:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxNEUxMTAvBgNVBAUTKDNDQ0Q1RjI4QTg3OUVGQkRCRDNFNTVGNEMyQkNGMjhE NkNERDVBRUUwHhcNMjQwNTE4MjI0NjM2WhcNMjQwNTI1MjI0NjM2WjAYMRYwFAYD VQQDEw02NjQ5MmZjZC1mOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40xhrVfsMWQSg3vv64owve7JUHK+IfrOkIZ7bALuARDbaae3toGeazS/O9p/ 6qmmpTpcJWu8SSwoc9+JpvIVXH/j5Uz7cSTLaoRsYNwVtalc11/y33Uv0JlsrOgH t54iwPPWPWC7oSFc/A/DMLSQsarLd3Git9X7WQq0/VMCY6+k6ZAtTXcQX/TGzpw3 eKl1j09NP1ejC6DdVBHhwV/5pieSICzmMoRPXgeJcQ2RhxoIWm19xDG2iD7nFYnU E5F02JA/PjmOi11AukDc7nv2UOnivNHJ8G0zSBDCjYU/h/3mB+wYA/4pRv4MaKqE Y3tkRCeH0/sZ22XASuiskAnr0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLmO0fd thVLWKd1qR7sSFfVU0BmMB8GA1UdIwQYMBaAFDzNXyioee+9vT5V9MK88o1s3Vru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE0RS84N0Y2ODQ4Q0ZG ODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3MjlQbFgwd3J6eWpXemRX dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNMWZLS2g1NzcyOVBsWDB3cnp5ald6ZFd1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjE0RS84N0Y2ODQ4Q0ZGODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3 MjlQbFgwd3J6eWpXemRXdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT+V1cbhKdACAzlhqnko8uUofSLAw39WVrBgr4HxeNNUs24AscfRTO xNsT4uPatrPRi++/q5/uQJOtsDLWThhwhZ+kflaJOpE9OCX56h+jO8ERK3q6fiEa dGcApdTb3xrl3RCs74Q+2VybmiwfXSWD1xbi/3abI9GTZ7oFgKkxAhvbF/XUhZe4 DJooPojA3lOZcCgAUAQFiQI06kYipkB/7Z2aFZCcoDcIJHSj9QYlPL/IWngNE/+l zuknkJWd3q1Pzq3lD7YppUfxsQ33PQaW3F25s3dWaQwIWVhcfsfnGBvUoeiXjyFn CMAWy9OIZYZDkpLS65lHR+8zhgX1l77T -----END CERTIFICATE-----Generated at Sun May 19 00:30:14 2024 by rpki-client on console-ams.rpki-client.org