$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft File: PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json) Hash identifier: sW8pzbq8e1uHe3QwHDl8o0lHMJIr4DD2rgbLMlseMDE= Subject key identifier: 30:E3:06:BF:3A:91:75:63:81:76:86:27:6A:31:D1:C2:E0:37:37:7A Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 Certificate issuer: /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft Manifest number: EE Signing time: Sun 19 May 2024 05:55:28 +0000 Manifest this update: Sun 19 May 2024 05:55:28 +0000 Manifest next update: Sun 26 May 2024 05:55:28 +0000 Files and hashes: 1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: M1LVi3lBDnfhNFfVpl6USswWytQLxMplfDb24QN+n9w=) 2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: SXnWNfTC9vuEnxWX/nt/qOR6dl/eGcQ4vRTb1i6hIAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Validity Not Before: May 19 05:55:28 2024 GMT Not After : May 26 05:55:28 2024 GMT Subject: CN=66499450-83a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:69:05:eb:45:79:c8:8c:2b:c8:f9:f5:1e: 4e:09:55:32:33:c0:17:02:c1:1a:59:cc:ba:84:0d: 9e:51:da:cc:24:e8:b7:7d:ea:1f:66:1c:ca:37:64: 27:4d:4e:4e:5c:9c:d5:d9:7c:5d:7f:52:8c:a4:bd: d6:76:a0:41:f7:fc:38:9d:97:ca:9e:9f:92:45:d8: 95:76:4a:5b:e0:15:36:77:23:39:64:62:ee:de:70: 28:f0:1a:c8:2b:43:ef:9e:ec:f4:c2:32:03:d3:ee: c6:3e:53:d3:94:e1:82:ba:6c:8d:7c:a5:13:02:22: 61:30:ca:20:68:a3:cf:55:0c:43:45:ec:cc:c7:17: 3c:bf:8b:19:96:e6:74:ab:1a:a7:25:1a:6f:b2:83: fb:ac:f7:46:18:f0:37:9a:4f:db:d5:ce:c5:d0:87: e2:6c:7f:5f:91:fd:5d:b6:3a:97:5f:b2:61:33:9f: fe:93:65:20:fd:14:bb:1f:99:c7:5d:75:db:00:05: 42:91:bb:d6:d8:98:45:af:f5:24:9d:d8:a5:d7:83: 13:4b:67:e9:a1:39:7d:04:91:5b:f7:a6:fb:ff:e6: 09:15:3b:4e:19:8f:a4:fd:f7:ec:29:07:cc:02:56: 1f:e4:2b:6f:32:a9:50:56:82:31:78:fc:b2:ce:6b: 2e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E3:06:BF:3A:91:75:63:81:76:86:27:6A:31:D1:C2:E0:37:37:7A X509v3 Authority Key Identifier: keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:0f:6a:a5:c9:27:a4:46:23:40:3c:06:18:3c:e0:79:5d:78: 36:42:a6:b3:4a:ab:c4:c2:c3:31:3a:28:5f:50:76:31:d9:d1: 80:38:de:89:b8:ac:7d:a3:17:94:2e:3a:a4:52:36:d7:41:7c: a8:31:3d:a8:ad:e1:f3:8d:91:43:aa:26:de:e7:70:01:13:05: 29:5f:98:97:cd:46:f6:9a:5f:f6:2c:d5:ad:f9:5e:9b:60:f4: df:8c:05:12:c0:25:51:dc:0d:28:44:12:98:ca:52:36:0a:7d: aa:f1:9c:e5:34:49:43:5a:05:50:fe:15:61:fa:4d:3a:38:c6: e9:a2:9a:fe:37:e1:dc:dd:6f:ad:f9:2f:49:ac:dc:40:d3:0c: 03:9e:c7:f6:e1:a7:58:57:91:3a:f9:57:6e:8c:5c:70:4d:89: 4c:7d:0d:ba:9b:1f:97:4c:d4:96:84:b2:37:59:df:26:b8:34: 2a:eb:10:71:d7:d9:55:92:57:e2:aa:6c:f3:48:1b:24:02:ca: 91:bc:46:6b:ca:3e:eb:4b:df:d5:04:02:9d:a3:f6:6e:96:fb: e4:22:c4:4c:6d:73:84:fd:0f:b7:c1:d2:24:6b:0c:df:12:c8: 32:85:b8:d3:3b:71:d0:d8:c0:b9:a0:bf:16:b2:58:f4:7c:be: fa:c1:b0:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyRTExMTAvBgNVBAUTKDNDNjUxNTI0QjRGOTFBMzUwRDFFQ0ZCQkE2NkNBQkQx QjQ4RkI3QzUwHhcNMjQwNTE5MDU1NTI4WhcNMjQwNTI2MDU1NTI4WjAYMRYwFAYD VQQDEw02NjQ5OTQ1MC04M2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQ1pBetFeciMK8j59R5OCVUyM8AXAsEaWcy6hA2eUdrMJOi3feofZhzKN2Qn TU5OXJzV2Xxdf1KMpL3WdqBB9/w4nZfKnp+SRdiVdkpb4BU2dyM5ZGLu3nAo8BrI K0Pvnuz0wjID0+7GPlPTlOGCumyNfKUTAiJhMMogaKPPVQxDRezMxxc8v4sZluZ0 qxqnJRpvsoP7rPdGGPA3mk/b1c7F0IfibH9fkf1dtjqXX7JhM5/+k2Ug/RS7H5nH XXXbAAVCkbvW2JhFr/Ukndil14MTS2fpoTl9BJFb96b7/+YJFTtOGY+k/ffsKQfM AlYf5CtvMqlQVoIxePyyzmsuRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDjBr86 kXVjgXaGJ2ox0cLgNzd6MB8GA1UdIwQYMBaAFDxlFSS0+Ro1DR7Pu6Zsq9G0j7fF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJFMS9EQTg2QjYxNkJB NkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdqVU5Icy03cG15cjBiU1B0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHVVZKTFQ1R2pVTkhzLTdwbXlyMGJTUHQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJFMS9EQTg2QjYxNkJBNkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdq VU5Icy03cG15cjBiU1B0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0D2qlySekRiNAPAYYPOB5XXg2QqazSqvEwsMxOihfUHYx2dGAON6J uKx9oxeULjqkUjbXQXyoMT2oreHzjZFDqibe53ABEwUpX5iXzUb2ml/2LNWt+V6b YPTfjAUSwCVR3A0oRBKYylI2Cn2q8ZzlNElDWgVQ/hVh+k06OMbpopr+N+Hc3W+t +S9JrNxA0wwDnsf24adYV5E6+VdujFxwTYlMfQ26mx+XTNSWhLI3Wd8muDQq6xBx 19lVklfiqmzzSBskAsqRvEZryj7rS9/VBAKdo/ZulvvkIsRMbXOE/Q+3wdIkawzf EsgyhbjTO3HQ2MC5oL8Wslj0fL76wbCK -----END CERTIFICATE-----Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org