$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft File: PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json) Hash identifier: hnFmO8fgFX2L7fEJmCK8lvijmI8lkfoCWT4DcDMiX54= Subject key identifier: 07:7D:8B:9A:5E:65:96:89:30:7F:5F:D9:C7:DE:26:6B:B6:AF:4F:07 Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 Certificate issuer: /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft Manifest number: 45 Signing time: Sun 19 May 2024 08:05:10 +0000 Manifest this update: Sun 19 May 2024 08:05:10 +0000 Manifest next update: Sun 26 May 2024 08:05:10 +0000 Files and hashes: 1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: lrXvTyM/fg6WlDr0A3t957nGGYJKrb1JcGG6rsyQtAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Validity Not Before: May 19 08:05:10 2024 GMT Not After : May 26 08:05:10 2024 GMT Subject: CN=6649b2b6-1836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:02:1b:0d:d8:3c:c3:03:69:d4:82:a8:08:42: 8d:00:db:f2:b8:06:24:ce:fe:b7:c9:d2:a1:f4:cf: 30:25:c9:97:52:ed:1d:f4:49:6f:b5:2d:e5:b7:8b: 74:f9:e7:d9:71:ef:66:64:79:d1:9a:95:81:e2:b3: 53:72:15:2c:6a:2c:af:2b:07:a9:8a:ee:6d:a1:71: 0b:6e:07:fd:67:5a:3d:b7:70:52:1d:b7:31:2b:4e: 3c:f1:da:b4:de:b7:2d:48:f9:7a:0c:68:31:20:fb: 8f:19:7f:b7:8b:b2:75:06:cc:3d:2c:e1:90:22:01: 9b:f1:2a:8d:41:b0:17:d8:fa:94:8a:c5:51:95:3b: 6f:3c:a3:a0:3a:4f:2c:f6:99:74:4c:fa:7e:8d:8c: 79:20:96:4a:90:1b:f5:86:46:73:2e:94:1f:ed:b0: a0:21:3b:2c:ad:a3:4f:59:c8:63:ea:f5:3c:8d:ae: 7b:a8:41:16:c1:46:5a:bc:2b:3d:6f:3a:44:30:a6: b9:41:5b:2c:29:ab:51:12:eb:5f:ee:c1:df:22:b9: 79:86:df:60:b2:3b:a8:20:7f:0a:15:ea:70:bf:67: db:3f:ab:29:f3:41:84:4e:58:22:55:d3:f6:75:31: a6:39:da:34:a5:c2:22:22:4f:44:b9:6b:3d:d1:cf: e5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7D:8B:9A:5E:65:96:89:30:7F:5F:D9:C7:DE:26:6B:B6:AF:4F:07 X509v3 Authority Key Identifier: keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:3e:1e:84:25:81:b4:5f:f6:92:a8:98:cc:73:1d:08:f8:c6: 48:0a:54:96:cd:fc:97:c7:ed:98:31:f2:92:8c:be:a2:51:b8: 6e:d1:98:68:3b:d8:2e:eb:3d:7e:bf:76:82:6f:02:fc:c4:5f: 3d:41:c7:72:26:b7:cb:07:60:e8:16:ec:b5:8f:ee:ee:c2:2b: d7:02:60:82:8b:48:16:d8:98:56:af:eb:0c:84:61:fe:85:33: 25:1b:b0:e6:3d:c5:62:4c:11:12:f7:fe:2a:63:96:f0:0c:78: 4d:72:bb:28:33:59:1c:ed:fb:e1:dd:c0:7a:5f:12:9a:9d:1c: 96:a1:9e:cf:d4:bd:2d:eb:98:e2:eb:d2:d7:3d:37:26:63:24: ae:46:7d:e6:cc:1d:a0:b5:4c:f4:4c:8b:09:72:ce:42:ba:7f: 45:f4:78:f5:de:34:73:8c:4c:88:e1:a9:27:7f:6a:12:fb:f1: 9e:2c:f9:5d:36:04:ff:ff:07:75:ff:49:d7:30:98:d4:74:aa: 4c:ff:5f:2b:93:05:f7:91:d4:8d:d9:ef:d0:71:37:9a:19:20: 59:01:ac:25:a5:98:25:02:b3:d9:41:b3:a1:8b:14:38:80:dc: e4:73:de:5f:46:5d:dd:63:a8:7b:08:91:bc:66:bf:3a:15:0c: cc:b2:27:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTMyMjExMC8GA1UEBRMoM0U2QUEwMDM4RkRENDY2OUM5MEYxODgzODIzOEI3RTQx MDJEREMxOTAeFw0yNDA1MTkwODA1MTBaFw0yNDA1MjYwODA1MTBaMBgxFjAUBgNV BAMTDTY2NDliMmI2LTE4MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrAhsN2DzDA2nUgqgIQo0A2/K4BiTO/rfJ0qH0zzAlyZdS7R30SW+1LeW3i3T5 59lx72ZkedGalYHis1NyFSxqLK8rB6mK7m2hcQtuB/1nWj23cFIdtzErTjzx2rTe ty1I+XoMaDEg+48Zf7eLsnUGzD0s4ZAiAZvxKo1BsBfY+pSKxVGVO288o6A6Tyz2 mXRM+n6NjHkglkqQG/WGRnMulB/tsKAhOyyto09ZyGPq9TyNrnuoQRbBRlq8Kz1v OkQwprlBWywpq1ES61/uwd8iuXmG32CyO6ggfwoV6nC/Z9s/qynzQYROWCJV0/Z1 MaY52jSlwiIiT0S5az3Rz+WLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB32Lml5l lokwf1/Zx94ma7avTwcwHwYDVR0jBBgwFoAUPmqgA4/dRmnJDxiDgji35BAt3Bkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxMzIyLzRGNDBENjcwQjA1 MTExRUU4Q0REQjE2MUM0RjlBRTAyL1BtcWdBNF9kUm1uSkR4aURnamkzNUJBdDNC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUG1xZ0E0X2RSbW5KRHhpRGdqaTM1QkF0M0JrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx MzIyLzRGNDBENjcwQjA1MTExRUU4Q0REQjE2MUM0RjlBRTAyL1BtcWdBNF9kUm1u SkR4aURnamkzNUJBdDNCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABM+HoQlgbRf9pKomMxzHQj4xkgKVJbN/JfH7Zgx8pKMvqJRuG7RmGg7 2C7rPX6/doJvAvzEXz1Bx3Imt8sHYOgW7LWP7u7CK9cCYIKLSBbYmFav6wyEYf6F MyUbsOY9xWJMERL3/ipjlvAMeE1yuygzWRzt++HdwHpfEpqdHJahns/UvS3rmOLr 0tc9NyZjJK5GfebMHaC1TPRMiwlyzkK6f0X0ePXeNHOMTIjhqSd/ahL78Z4s+V02 BP//B3X/SdcwmNR0qkz/XyuTBfeR1I3Z79BxN5oZIFkBrCWlmCUCs9lBs6GLFDiA 3ORz3l9GXd1jqHsIkbxmvzoVDMyyJ8g= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org