$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json) Hash identifier: bpY5avGZocpGsT42rlQZTIznVsWlrYmAroBZObvaNbQ= Subject key identifier: B0:33:15:CC:06:3F:3C:7E:5C:9D:7E:3E:4D:BB:49:83:FC:59:F0:6E Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Certificate serial: 03BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft Manifest number: 03BC Signing time: Sun 19 May 2024 02:27:28 +0000 Manifest this update: Sun 19 May 2024 02:27:27 +0000 Manifest next update: Sun 26 May 2024 02:27:27 +0000 Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: yDbL0eZxCrF94Tmnhsg1yCAum4iukyKlhnbRfD+XBM4=) 2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: sZ/qkXfI/QzEcHuKAB37EgGIS5JG5BT8rX82KQYJSHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Validity Not Before: May 19 02:27:27 2024 GMT Not After : May 26 02:27:27 2024 GMT Subject: CN=6649638f-7f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:64:66:b9:8d:7e:2c:6a:fc:e6:89:70:03:61: f4:62:f3:cf:2c:da:6d:05:5a:4b:f7:06:ef:78:f1: 31:e5:7d:5d:d0:4c:e8:55:70:27:0c:66:dc:70:b9: 98:8e:0a:7b:8a:94:92:45:a6:df:db:ea:a1:9c:f1: 3b:90:47:df:a8:70:7f:78:20:ac:63:9f:5d:80:68: e6:fb:7d:99:f2:24:96:ba:de:1c:2f:37:1e:3d:02: 28:dd:09:d1:fb:cb:e9:60:79:f0:f4:be:52:d3:3d: 99:40:d1:95:02:26:7a:c8:2b:a9:22:72:1b:54:f5: 11:d8:bd:da:b4:fd:1c:9f:59:3b:d7:f5:a8:b2:6c: 85:a5:f2:b3:fb:56:c4:63:2f:f8:e9:97:62:33:a0: 97:36:41:03:69:ab:0f:a2:6a:fd:29:e0:37:16:7c: 27:e1:a7:8d:36:96:a8:2c:43:38:4f:24:db:95:f9: d4:cd:7a:11:82:68:ce:ea:88:bf:fd:21:00:e4:61: 37:9c:5c:83:64:24:87:a1:94:de:40:f6:e2:f3:11: 44:c0:00:83:6b:3b:b2:a2:0d:f3:3c:3b:f2:80:7f: cc:1a:a5:78:bf:9e:9c:b5:28:6a:6b:72:67:53:33: 21:e7:b6:9b:41:9d:cb:1b:f3:04:eb:ce:a5:cc:db: 61:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:33:15:CC:06:3F:3C:7E:5C:9D:7E:3E:4D:BB:49:83:FC:59:F0:6E X509v3 Authority Key Identifier: keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:5c:8b:65:e2:20:59:7f:16:45:c8:e3:f5:0b:ae:a4:95:a7: 91:3c:2e:2c:75:71:7b:f0:6c:5c:74:e9:36:f0:7c:7b:51:b9: cb:f8:6b:38:79:1a:20:9a:66:49:3c:99:40:cd:15:94:30:d6: 92:3e:f7:ff:f7:f2:11:2f:22:1c:06:9d:fa:5f:0e:f0:72:61: 44:a6:1d:0c:af:7f:43:41:58:d6:53:cc:83:51:3a:59:e5:0e: 02:df:ad:66:f8:06:35:89:8b:3f:e1:e0:13:33:1a:74:b3:d6: a5:22:2e:ab:88:de:ff:5f:da:a5:2e:a5:06:af:a5:45:ac:4c: d8:82:94:43:9f:d8:ac:e2:c8:25:25:68:39:0f:28:5a:50:22: 98:e4:5f:78:46:5a:ef:f7:ad:c6:9d:70:c1:a3:40:a0:d5:69: f2:bf:90:1f:bb:ea:35:28:60:99:71:58:03:2e:c7:16:c6:3a: 53:49:18:c5:94:0f:ed:18:84:5a:0d:5f:4a:4e:40:c0:85:1f: 45:62:73:64:ac:24:73:6a:a7:17:77:bd:50:a6:39:b7:4f:40: 1a:7a:c4:11:2a:df:2c:30:62:fd:9b:d3:8c:d3:17:a8:70:80: 86:ca:13:ac:4c:0f:08:64:56:1d:19:26:ec:05:8c:91:f0:1e: ec:6b:14:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4 MjE4NTI1MTkwHhcNMjQwNTE5MDIyNzI3WhcNMjQwNTI2MDIyNzI3WjAYMRYwFAYD VQQDEw02NjQ5NjM4Zi03ZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7mRmuY1+LGr85olwA2H0YvPPLNptBVpL9wbvePEx5X1d0EzoVXAnDGbccLmY jgp7ipSSRabf2+qhnPE7kEffqHB/eCCsY59dgGjm+32Z8iSWut4cLzcePQIo3QnR +8vpYHnw9L5S0z2ZQNGVAiZ6yCupInIbVPUR2L3atP0cn1k71/WosmyFpfKz+1bE Yy/46ZdiM6CXNkEDaasPomr9KeA3Fnwn4aeNNpaoLEM4TyTblfnUzXoRgmjO6oi/ /SEA5GE3nFyDZCSHoZTeQPbi8xFEwACDazuyog3zPDvygH/MGqV4v56ctShqa3Jn UzMh57abQZ3LG/ME686lzNthmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAzFcwG Pzx+XJ1+Pk27SYP8WfBuMB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQXItl4iBZfxZFyOP1C66klaeRPC4sdXF78GxcdOk28Hx7UbnL+Gs4 eRogmmZJPJlAzRWUMNaSPvf/9/IRLyIcBp36Xw7wcmFEph0Mr39DQVjWU8yDUTpZ 5Q4C361m+AY1iYs/4eATMxp0s9alIi6riN7/X9qlLqUGr6VFrEzYgpRDn9is4sgl JWg5DyhaUCKY5F94Rlrv963GnXDBo0Cg1Wnyv5Afu+o1KGCZcVgDLscWxjpTSRjF lA/tGIRaDV9KTkDAhR9FYnNkrCRzaqcXd71Qpjm3T0AaesQRKt8sMGL9m9OM0xeo cICGyhOsTA8IZFYdGSbsBYyR8B7saxSx -----END CERTIFICATE-----Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org