$ rpki-client -vvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft File: pjmEmL39gbnWUbUS4OnwRXr6TSg.mft (raw, json) Hash identifier: hvsFbnpMU10CU0Z3EZFGlWlaZ1zFPbKjLtUsN3qEguA= Subject key identifier: 70:06:7B:63:50:0D:1E:16:7D:A9:98:0B:A4:03:2A:12:66:AD:21:69 Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28 Certificate issuer: /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28 Certificate serial: 07CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft Manifest number: 07C6 Signing time: Sat 18 May 2024 22:01:43 +0000 Manifest this update: Sat 18 May 2024 22:01:42 +0000 Manifest next update: Sat 25 May 2024 22:01:42 +0000 Files and hashes: 1: pjmEmL39gbnWUbUS4OnwRXr6TSg.crl (hash: zFx5U4tU+Q1kLaVsC7V8pnbXkqUz+1NeGzvrLuszCdM=) 2: A211CBBEBF3911EABB1C5578C4F9AE02.roa (hash: 9wXMOm9fVh9YiiXGFKNsgIYR+u452tjlEUQ6Zp2HaJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1995 (0x7cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28 Validity Not Before: May 18 22:01:42 2024 GMT Not After : May 25 22:01:42 2024 GMT Subject: CN=66492547-4285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a1:90:c1:81:34:ec:03:63:04:d6:a9:8d:d8: df:72:a2:57:e2:a4:c0:db:8d:22:94:61:f6:ec:a1: 75:38:5c:86:3f:01:70:e8:76:70:df:95:05:c4:24: 4d:af:a2:41:db:14:77:c1:cb:5e:b5:bb:bf:f1:08: e3:f1:c1:7e:07:ae:b4:cd:65:66:fb:0e:3a:a9:22: 07:18:69:54:30:50:8c:91:60:b2:f6:6a:33:32:fa: ff:0b:94:e4:5b:06:c8:05:c2:38:36:95:5c:dc:d5: 38:5a:84:bb:b9:da:a8:ba:34:13:9f:0d:e1:ca:ec: 32:75:9c:c9:92:46:90:4e:2f:41:8c:f9:eb:db:79: 86:57:22:91:e6:64:65:ab:1d:e7:e6:c5:4d:5c:5d: b8:77:37:bc:a3:97:ca:d8:10:00:f5:cd:d7:d3:4a: 8e:ba:a3:3b:7b:3a:1c:8a:21:a3:23:01:de:8e:f5: 8b:98:09:48:48:cc:85:3c:4d:e9:c9:b4:65:e5:e7: e1:56:fd:19:2e:04:45:18:08:a7:19:04:b6:03:81: b1:70:b0:17:14:dc:8e:f7:09:7d:86:ec:ee:24:ea: b0:22:90:1e:6c:b8:ec:72:03:a5:97:3b:39:95:05: a7:a8:63:2d:76:a4:07:63:fa:58:d6:4a:dd:e9:ff: 2c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:06:7B:63:50:0D:1E:16:7D:A9:98:0B:A4:03:2A:12:66:AD:21:69 X509v3 Authority Key Identifier: keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:95:aa:49:ec:97:46:1d:ba:c7:1c:bc:53:42:d1:65:38:54: c6:67:10:0b:12:20:19:30:1e:a3:5f:bc:ca:c2:86:7a:ab:59: 60:f8:eb:d0:01:26:1d:ac:80:c3:0f:97:6a:12:dd:3b:3b:5e: 2e:8b:8e:e4:c0:f6:9d:c8:cf:eb:29:07:c4:55:2b:a8:4c:a1: 78:e2:46:b9:a0:7a:f0:41:29:8e:16:1b:38:a6:b9:9b:1c:51: 7c:17:08:e8:47:38:20:66:95:66:9f:77:98:1e:12:d4:46:ea: 2d:43:9c:44:cd:1b:57:77:02:d6:e3:de:24:9b:b6:f2:a7:61: 10:81:d7:3a:0d:10:25:85:ff:0a:23:8e:c2:75:25:9e:4b:68: ac:df:33:f2:c0:94:38:86:55:1c:cf:92:a5:2c:6e:4b:ae:bb: 3e:6d:23:4b:32:96:73:d2:40:67:d9:97:14:c4:b2:25:e5:06: 6c:b6:40:57:44:93:31:5b:eb:32:5e:b0:df:1f:84:09:12:05: db:e7:06:52:b4:6d:ff:92:fb:a8:9f:42:e7:ad:83:59:93:36: bc:d8:a4:59:64:e1:87:3e:73:0e:c4:9e:5c:68:01:ff:29:a0: cb:df:6a:46:6b:a4:b1:0b:1a:9b:cc:cd:c4:73:cc:27:bf:9d: 86:ba:c0:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMzM0MxMTAvBgNVBAUTKEE2Mzk4NDk4QkRGRDgxQjlENjUxQjUxMkUwRTlGMDQ1 N0FGQTREMjgwHhcNMjQwNTE4MjIwMTQyWhcNMjQwNTI1MjIwMTQyWjAYMRYwFAYD VQQDEw02NjQ5MjU0Ny00Mjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaGQwYE07ANjBNapjdjfcqJX4qTA240ilGH27KF1OFyGPwFw6HZw35UFxCRN r6JB2xR3wctetbu/8Qjj8cF+B660zWVm+w46qSIHGGlUMFCMkWCy9mozMvr/C5Tk WwbIBcI4NpVc3NU4WoS7udqoujQTnw3hyuwydZzJkkaQTi9BjPnr23mGVyKR5mRl qx3n5sVNXF24dze8o5fK2BAA9c3X00qOuqM7ezociiGjIwHejvWLmAlISMyFPE3p ybRl5efhVv0ZLgRFGAinGQS2A4GxcLAXFNyO9wl9huzuJOqwIpAebLjscgOllzs5 lQWnqGMtdqQHY/pY1krd6f8sIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAGe2NQ DR4WfamYC6QDKhJmrSFpMB8GA1UdIwQYMBaAFKY5hJi9/YG51lG1EuDp8EV6+k0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzMzQy85Qjc5QThGRUJG MzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdibldVYlVTNE9ud1JYcjZU U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BqbUVtTDM5Z2JuV1ViVVM0T253UlhyNlRTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzMzQy85Qjc5QThGRUJGMzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdi bldVYlVTNE9ud1JYcjZUU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtlapJ7JdGHbrHHLxTQtFlOFTGZxALEiAZMB6jX7zKwoZ6q1lg+OvQ ASYdrIDDD5dqEt07O14ui47kwPadyM/rKQfEVSuoTKF44ka5oHrwQSmOFhs4prmb HFF8FwjoRzggZpVmn3eYHhLURuotQ5xEzRtXdwLW494km7byp2EQgdc6DRAlhf8K I47CdSWeS2is3zPywJQ4hlUcz5KlLG5Lrrs+bSNLMpZz0kBn2ZcUxLIl5QZstkBX RJMxW+syXrDfH4QJEgXb5wZStG3/kvuon0LnrYNZkza82KRZZOGHPnMOxJ5caAH/ KaDL32pGa6SxCxqbzM3Ec8wnv52GusBE -----END CERTIFICATE-----Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org