$ rpki-client -vvf rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft File: psUEnf_CZCcfSnelrurkd9fu6vM.mft (raw, json) Hash identifier: eJiJXmtW3+jREfk13E6whrFppy2AjPjtaWyNPYtc1Vk= Subject key identifier: 91:D7:EA:04:EB:EF:FF:3A:45:E1:69:B3:BC:48:36:42:E8:0A:E2:35 Authority key identifier: A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3 Certificate issuer: /CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3 Certificate serial: 0926 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft Manifest number: 091C Signing time: Fri 31 May 2024 21:56:11 +0000 Manifest this update: Fri 31 May 2024 21:56:10 +0000 Manifest next update: Fri 07 Jun 2024 21:56:10 +0000 Files and hashes: 1: psUEnf_CZCcfSnelrurkd9fu6vM.crl (hash: qJ9ur569blM5o+PimSJjg1pVVvOFJzjRTQtfHZg3SB8=) 2: 800F1868BEB311EAAFE28B42C4F9AE02.roa (hash: nuUzxV/qcUas0lckiF8RCBcNTqQyRDE19LAWF1530Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2342 (0x926) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3 Validity Not Before: May 31 21:56:10 2024 GMT Not After : Jun 7 21:56:10 2024 GMT Subject: CN=665a477b-8fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:77:c5:9f:83:41:e9:11:bc:5c:b3:d7:24:ca: 41:77:fd:b6:72:47:cd:5e:e6:d8:67:96:c9:07:7e: 7a:a0:73:2d:32:98:01:c1:1f:06:62:e5:f1:41:e3: a1:ad:eb:10:1a:c3:11:b9:53:1c:26:33:6f:7a:9f: b3:9b:f6:72:b2:6a:8f:92:f0:1e:d2:d7:57:76:2c: f5:d3:c9:7e:4f:19:d8:60:0e:f6:32:fc:7a:4b:37: 0f:80:28:97:3e:ef:9e:95:51:f4:ac:80:40:6a:71: 38:00:69:02:d5:fa:b8:fa:54:ce:6e:63:61:6e:6b: 4e:f3:fa:ad:d7:53:df:0e:7f:93:dd:83:1d:b8:53: 79:31:30:bd:39:0b:a5:08:5d:53:bf:9d:ba:fe:f0: 76:fe:07:2e:85:c1:90:78:9b:8f:9f:f2:f0:b6:9f: 94:0d:2d:89:fb:d7:25:6b:c2:59:c7:2e:6d:40:9b: aa:23:67:fe:ea:a9:1d:55:71:dd:f7:01:8e:a9:df: e9:44:1c:30:96:2b:21:e5:3f:38:74:94:b1:ae:4e: ab:fc:d8:74:18:b4:95:48:cf:a9:f1:85:aa:01:8c: 85:a3:5e:44:5e:5c:5f:4b:7b:98:02:d6:79:77:9a: a5:54:17:30:82:1d:dc:5e:c4:df:a8:f8:7b:aa:de: d3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D7:EA:04:EB:EF:FF:3A:45:E1:69:B3:BC:48:36:42:E8:0A:E2:35 X509v3 Authority Key Identifier: keyid:A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:d5:a3:81:1e:8d:00:6d:2e:83:c7:13:50:d6:12:f1:af:98: 26:fd:5c:05:c9:ab:07:6f:c7:29:a6:59:01:ac:6e:83:16:31: c8:31:9b:c1:d8:75:66:de:c3:b4:63:4a:54:07:57:b8:16:22: 54:95:ab:74:59:ff:91:11:e3:df:3e:de:0c:91:65:f9:19:b3: 27:94:41:f0:83:c5:24:5b:a4:3b:7e:6e:75:aa:a1:2f:18:d2: 0c:2a:7a:40:63:26:36:ad:a1:75:48:fc:52:a4:38:54:5f:a7: 89:20:a8:6c:4a:ae:4e:a6:c9:d5:94:53:3c:b5:cf:5b:af:87: 59:3a:df:f0:59:6d:b8:ba:d8:85:cd:b2:2f:52:55:c9:93:ec: 92:e8:7d:9d:4c:ef:59:53:14:7f:86:50:43:8a:08:1f:01:76: 97:11:64:28:3f:ce:b1:34:1e:23:58:ef:cd:38:5c:8a:20:44: 7c:47:44:10:02:86:f3:29:d2:b6:4d:2b:6c:44:51:aa:2c:4e: 34:5e:45:d5:f2:79:40:83:cb:67:07:1f:ef:4b:53:dc:fb:fb: f6:e5:fc:37:ff:14:99:0c:06:27:e3:7f:e9:88:75:fe:9a:40: bd:a1:6d:74:3d:94:ab:78:00:c8:5c:32:e5:42:c3:14:5b:7c: 25:24:ea:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY4M0MxMTAvBgNVBAUTKEE2QzUwNDlERkZDMjY0MjcxRjRBNzdBNUFFRUFFNDc3 RDdFRUVBRjMwHhcNMjQwNTMxMjE1NjEwWhcNMjQwNjA3MjE1NjEwWjAYMRYwFAYD VQQDEw02NjVhNDc3Yi04ZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3fFn4NB6RG8XLPXJMpBd/22ckfNXubYZ5bJB356oHMtMpgBwR8GYuXxQeOh resQGsMRuVMcJjNvep+zm/ZysmqPkvAe0tdXdiz108l+TxnYYA72Mvx6SzcPgCiX Pu+elVH0rIBAanE4AGkC1fq4+lTObmNhbmtO8/qt11PfDn+T3YMduFN5MTC9OQul CF1Tv526/vB2/gcuhcGQeJuPn/Lwtp+UDS2J+9cla8JZxy5tQJuqI2f+6qkdVXHd 9wGOqd/pRBwwlish5T84dJSxrk6r/Nh0GLSVSM+p8YWqAYyFo15EXlxfS3uYAtZ5 d5qlVBcwgh3cXsTfqPh7qt7TWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHX6gTr 7/86ReFps7xINkLoCuI1MB8GA1UdIwQYMBaAFKbFBJ3/wmQnH0p3pa7q5HfX7urz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjgzQy9FMEI1ODAyRTgw N0IxMUVBODI0NDYxMjVDNEY5QUUwMi9wc1VFbmZfQ1pDY2ZTbmVscnVya2Q5ZnU2 dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzVUVuZl9DWkNjZlNuZWxydXJrZDlmdTZ2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjgzQy9FMEI1ODAyRTgwN0IxMUVBODI0NDYxMjVDNEY5QUUwMi9wc1VFbmZfQ1pD Y2ZTbmVscnVya2Q5ZnU2dk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDH1aOBHo0AbS6DxxNQ1hLxr5gm/VwFyasHb8cpplkBrG6DFjHIMZvB 2HVm3sO0Y0pUB1e4FiJUlat0Wf+REePfPt4MkWX5GbMnlEHwg8UkW6Q7fm51qqEv GNIMKnpAYyY2raF1SPxSpDhUX6eJIKhsSq5OpsnVlFM8tc9br4dZOt/wWW24utiF zbIvUlXJk+yS6H2dTO9ZUxR/hlBDiggfAXaXEWQoP86xNB4jWO/NOFyKIER8R0QQ AobzKdK2TStsRFGqLE40XkXV8nlAg8tnBx/vS1Pc+/v25fw3/xSZDAYn43/piHX+ mkC9oW10PZSreADIXDLlQsMUW3wlJOqK -----END CERTIFICATE-----Generated at Fri May 31 22:56:57 2024 by rpki-client on console-fra.rpki-client.org