$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft File: peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json) Hash identifier: 4rS0nB6KDz2SNIYz3oUW1eYRl4gH8bcgXvkrRMtLFDE= Subject key identifier: 41:31:8E:63:94:00:2A:F1:EA:AA:F0:D0:64:AF:A8:24:12:21:07:1C Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A Certificate issuer: /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft Manifest number: 011E Signing time: Sun 19 May 2024 05:10:46 +0000 Manifest this update: Sun 19 May 2024 05:10:45 +0000 Manifest next update: Sun 26 May 2024 05:10:45 +0000 Files and hashes: 1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: SwmbKSlhBOFn3tLP5G3oPFWTsx7w8ARxdkWucCmZEYA=) 2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: wX4x7oM1mrdnNZS/h1UzVVC+/MIzmiu9MISDolryeIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A Validity Not Before: May 19 05:10:45 2024 GMT Not After : May 26 05:10:45 2024 GMT Subject: CN=664989d6-6f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:4b:6e:e4:8e:47:c7:47:51:7d:64:7b:52: 99:6d:69:92:2b:0f:53:8c:07:cd:7a:1d:2d:76:79: b4:1c:4f:1c:4c:82:fd:43:8a:cb:1b:b1:78:8e:e9: c1:cf:9b:69:8b:b6:a1:71:72:9d:77:dd:00:70:14: 67:34:38:8a:4b:e0:84:d3:d9:81:3b:fa:97:b3:2b: c2:41:17:ab:1a:a1:cc:f6:16:12:95:72:e5:e6:90: 7a:0f:0d:08:93:0d:5d:60:69:56:99:2e:0a:da:31: bd:81:82:2e:93:d4:75:45:61:38:5a:25:0a:6c:28: 1f:8e:de:8e:d8:b9:25:4d:7b:76:3f:ab:9c:d4:a8: 9b:17:d6:43:8c:4e:80:da:b3:12:7c:17:ae:c1:cb: 67:53:bc:05:e4:58:b9:6a:ae:d7:8f:da:e4:50:03: 5d:f0:45:2c:56:e3:ff:c0:87:c9:16:80:86:95:ee: f0:50:90:37:bc:75:a6:17:25:f0:36:f6:4d:b4:32: 91:6a:d4:a5:ed:0a:0c:a6:64:fe:39:2e:78:e6:fe: 39:76:9f:57:d8:b2:b9:ca:f2:3b:34:4d:82:82:67: ce:12:ca:ae:0b:48:31:81:03:4b:22:62:91:93:ff: b7:bd:62:ab:be:66:85:c3:aa:c4:01:7f:70:62:9a: 64:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:31:8E:63:94:00:2A:F1:EA:AA:F0:D0:64:AF:A8:24:12:21:07:1C X509v3 Authority Key Identifier: keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5f:87:1b:f3:9d:5b:4e:fe:8f:59:f3:45:2e:85:ee:66:bf: b7:86:f5:de:e9:59:f7:fa:f3:61:5b:72:2a:53:f8:d0:80:94: e1:9a:e1:0d:40:5c:cc:9d:ac:73:66:f6:ea:f3:28:98:e0:f3: e5:b6:d7:72:90:9d:fb:c2:d2:c9:8e:63:b6:13:48:e7:77:4a: 1f:07:02:70:2d:c8:79:bf:67:d7:cd:5b:84:16:69:d1:50:e8: ba:cd:e2:b2:e7:e7:0a:68:8e:ed:f0:2c:4b:36:29:fb:3a:13: 09:c0:56:d4:ca:0f:fb:47:cd:03:8b:75:79:15:ab:0d:f5:e0: 8c:83:1a:87:a2:f0:b3:84:5e:96:72:0e:39:12:6d:fb:62:a8: bd:56:f8:1f:e3:96:9d:20:6e:d6:18:ed:af:3d:c8:b2:e5:ab: c6:7f:7d:7b:ca:ce:ba:2d:70:e4:29:56:37:93:22:7c:dc:4a: 01:fa:de:0f:a0:f2:b8:af:87:0a:d5:4f:2b:49:21:fb:8c:dd: 64:14:7a:aa:42:99:e3:2a:1a:78:99:d5:53:b2:a6:44:47:48: 5c:e9:8c:0e:bd:d9:ee:91:4c:7b:82:24:a9:6e:47:7a:2b:ab: 7e:37:2f:65:39:9c:ab:8b:77:e0:3d:4e:f7:70:52:1f:bf:16: 00:f6:45:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0RDAxMTAvBgNVBAUTKEE1RTZGNUM3NEJCQ0VCNDAwOUM1NUVFQTY4OTcwMzQ5 OTcxRkY2M0EwHhcNMjQwNTE5MDUxMDQ1WhcNMjQwNTI2MDUxMDQ1WjAYMRYwFAYD VQQDEw02NjQ5ODlkNi02Zjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYFLbuSOR8dHUX1ke1KZbWmSKw9TjAfNeh0tdnm0HE8cTIL9Q4rLG7F4junB z5tpi7ahcXKdd90AcBRnNDiKS+CE09mBO/qXsyvCQRerGqHM9hYSlXLl5pB6Dw0I kw1dYGlWmS4K2jG9gYIuk9R1RWE4WiUKbCgfjt6O2LklTXt2P6uc1KibF9ZDjE6A 2rMSfBeuwctnU7wF5Fi5aq7Xj9rkUANd8EUsVuP/wIfJFoCGle7wUJA3vHWmFyXw NvZNtDKRatSl7QoMpmT+OS545v45dp9X2LK5yvI7NE2CgmfOEsquC0gxgQNLImKR k/+3vWKrvmaFw6rEAX9wYppk1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEExjmOU ACrx6qrw0GSvqCQSIQccMB8GA1UdIwQYMBaAFKXm9cdLvOtACcVe6miXA0mXH/Y6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EMzE0MkRCODVF OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9wZWIxeDB1ODYwQUp4VjdxYUpjRFNaY2Y5 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BlYjF4MHU4NjBBSnhWN3FhSmNEU1pjZjlqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODREMC9EMzE0MkRCODVFOEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9wZWIxeDB1ODYw QUp4VjdxYUpjRFNaY2Y5am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/X4cb851bTv6PWfNFLoXuZr+3hvXe6Vn3+vNhW3IqU/jQgJThmuEN QFzMnaxzZvbq8yiY4PPlttdykJ37wtLJjmO2E0jnd0ofBwJwLch5v2fXzVuEFmnR UOi6zeKy5+cKaI7t8CxLNin7OhMJwFbUyg/7R80Di3V5FasN9eCMgxqHovCzhF6W cg45Em37Yqi9Vvgf45adIG7WGO2vPciy5avGf317ys66LXDkKVY3kyJ83EoB+t4P oPK4r4cK1U8rSSH7jN1kFHqqQpnjKhp4mdVTsqZER0hc6YwOvdnukUx7giSpbkd6 K6t+Ny9lOZyri3fgPU73cFIfvxYA9kWH -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org