$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft File: 1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json) Hash identifier: BvMVAcObbIHIwZcF7F9hkQ9B9bWsU6riN7cQs9Vs+Tw= Subject key identifier: 4A:80:1D:06:24:5D:DC:3B:3E:D0:0D:59:49:4B:F1:92:97:A0:C3:08 Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 3438 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft Manifest number: 33FE Signing time: Sat 18 May 2024 14:24:20 +0000 Manifest this update: Sat 18 May 2024 14:24:20 +0000 Manifest next update: Sat 25 May 2024 14:24:20 +0000 Files and hashes: 1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: AYmWOoGc1f/HjbYOx+DkbZbbRFbzxOSKE0NoxEr37B4=) 2: 6480462C1F5511EC999E640AC4F9AE02.roa (hash: FGOl/G+64uwQtPqszdubijBBc16NQ5r432NkvWyIy/g=) 3: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: fr8jc0OjrSAvapdmv6mLZQKQ3e4BFRuPxTXrBFPpD+4=) 4: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: c0rx5XUzdJvRjRHOltYTr7X2WQMdZ/lTKL0Od4UdmIA=) 5: F669E30EB64511EC89F8CB43C4F9AE02.roa (hash: 92DcIObdK1A5WMu0qqghPkZ1XrxR9jXChVphqdw6eQg=) 6: 13D46804A47B11E9867CBF58C4F9AE02.roa (hash: dfzoXKpGZSWk6RNHscqU4qOUiyyKtbFuRpR7IJztr3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13368 (0x3438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: May 18 14:24:20 2024 GMT Not After : May 25 14:24:20 2024 GMT Subject: CN=6648ba14-019e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a7:b0:32:44:df:a6:ed:b6:9b:f9:9f:69:6a: da:11:de:8f:a8:95:00:a3:8f:44:ec:a8:94:4b:30: b6:b9:60:35:21:8f:97:c0:7c:06:7f:a8:a0:08:34: be:2d:72:91:0f:24:b5:3f:9a:0a:92:ac:ad:71:c6: 5f:35:e3:b1:ba:10:5f:27:cf:e7:4c:1e:9d:67:dd: e8:92:c8:fe:e4:e0:9f:91:75:d9:c3:79:98:99:05: 45:bf:68:fc:b9:a2:da:97:b0:83:01:e4:c3:f4:b4: 65:66:ba:0f:62:84:8a:fb:62:24:41:ea:31:e9:29: 9e:aa:f5:63:16:3e:f5:be:7b:18:c1:d0:eb:ff:c5: 9e:b7:cc:72:17:68:26:03:e5:ad:ba:21:1e:e4:30: a4:b1:4e:03:cd:fc:84:10:b2:46:a6:f0:40:14:5e: 4a:44:80:d8:bf:9c:18:9c:f8:59:2e:68:1c:0b:91: 39:16:5a:3a:5c:c7:26:5d:7e:53:8e:a3:f2:b3:10: 3c:c4:d9:16:7a:5d:51:06:01:5a:18:96:9b:a6:4b: 58:c3:6d:ab:ce:3e:26:28:45:67:75:ba:9f:85:8c: 4b:2d:ea:54:83:86:9d:6d:5f:ac:06:a3:be:ad:87: 5b:cb:36:da:4e:47:31:4b:fe:18:df:ff:e0:bc:9f: c3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:80:1D:06:24:5D:DC:3B:3E:D0:0D:59:49:4B:F1:92:97:A0:C3:08 X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cd:d3:57:17:c6:05:7b:7f:d8:48:11:66:9f:3e:58:f5:09: a0:98:f6:24:86:ab:b7:ce:19:61:4e:82:99:f7:fc:52:8e:a9: 39:4e:5d:d9:1b:14:4f:51:2b:22:43:32:ed:7d:d2:9d:de:95: bf:a5:9a:2f:18:18:c7:49:a9:80:bb:f7:f4:89:9c:b8:7a:bb: d5:a1:7b:d3:bb:3a:2c:da:fc:e9:69:4b:63:b3:d7:db:eb:88: 87:4d:e5:71:0c:dc:8e:d4:00:71:70:0b:73:df:7a:7f:2d:d3: 4a:9a:d6:c0:00:1c:31:53:fd:d0:fb:49:a8:1e:d4:e8:b3:39: 1d:ce:8b:b8:18:78:eb:18:d5:8b:ca:47:5c:0f:47:6e:98:06: b7:5d:93:57:a9:51:cf:80:da:a0:d5:98:3e:a8:4c:a2:b0:5c: 30:fe:42:30:74:75:54:86:2e:7c:32:dc:b7:f2:ef:4c:df:db: 64:c2:36:9d:89:29:cb:8f:17:69:41:ae:fe:31:ad:10:2c:69: 73:93:29:42:8c:ff:e3:c3:6d:f6:ac:a2:b4:b3:fc:b8:7a:4a: ce:50:6a:43:98:18:09:3e:39:b0:0e:41:be:8a:e6:64:80:3f: 2b:06:49:eb:33:cd:29:a3:3b:96:2b:1f:59:95:7f:9d:eb:a0: 61:1e:1b:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjQwNTE4MTQyNDIwWhcNMjQwNTI1MTQyNDIwWjAYMRYwFAYD VQQDEw02NjQ4YmExNC0wMTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKewMkTfpu22m/mfaWraEd6PqJUAo49E7KiUSzC2uWA1IY+XwHwGf6igCDS+ LXKRDyS1P5oKkqytccZfNeOxuhBfJ8/nTB6dZ93oksj+5OCfkXXZw3mYmQVFv2j8 uaLal7CDAeTD9LRlZroPYoSK+2IkQeox6SmeqvVjFj71vnsYwdDr/8Wet8xyF2gm A+WtuiEe5DCksU4DzfyEELJGpvBAFF5KRIDYv5wYnPhZLmgcC5E5Flo6XMcmXX5T jqPysxA8xNkWel1RBgFaGJabpktYw22rzj4mKEVndbqfhYxLLepUg4adbV+sBqO+ rYdbyzbaTkcxS/4Y3//gvJ/DEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqAHQYk Xdw7PtANWUlL8ZKXoMMIMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAezdNXF8YFe3/YSBFmnz5Y9QmgmPYkhqu3zhlhToKZ9/xSjqk5Tl3Z GxRPUSsiQzLtfdKd3pW/pZovGBjHSamAu/f0iZy4ervVoXvTuzos2vzpaUtjs9fb 64iHTeVxDNyO1ABxcAtz33p/LdNKmtbAABwxU/3Q+0moHtToszkdzou4GHjrGNWL ykdcD0dumAa3XZNXqVHPgNqg1Zg+qEyisFww/kIwdHVUhi58Mty38u9M39tkwjad iSnLjxdpQa7+Ma0QLGlzkylCjP/jw232rKK0s/y4ekrOUGpDmBgJPjmwDkG+iuZk gD8rBknrM80pozuWKx9ZlX+d66BhHhs9 -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org