$ rpki-client -vvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft File: pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft (raw, json) Hash identifier: 2Zd8UECDXFm34Ig1EeyPfHUhDiLBzgVO1bVkSU4T8sA= Subject key identifier: AD:D2:53:F1:AC:5C:8E:B4:99:42:0F:24:36:E0:01:27:0C:56:91:96 Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3 Certificate issuer: /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft Manifest number: 93 Signing time: Fri 31 May 2024 07:51:46 +0000 Manifest this update: Fri 31 May 2024 07:51:45 +0000 Manifest next update: Fri 07 Jun 2024 07:51:45 +0000 Files and hashes: 1: pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl (hash: 5DBc3L+nA33J71YXHLynA4LmHIN7r4xYgxgcREritIw=) 2: 5A233B60424611EE9C25DD48C4F9AE02.roa (hash: fKYGNefresdzFDDl2tWhCprVxSYE1AN94xDv7ol7pWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3 Validity Not Before: May 31 07:51:45 2024 GMT Not After : Jun 7 07:51:45 2024 GMT Subject: CN=66598191-3b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:37:f3:28:2a:8f:12:94:dd:a2:1b:89:ee:cf: 2b:c7:6e:9a:80:92:07:01:6d:78:5c:b5:33:fd:08: 82:ad:b2:8b:48:c2:cb:cf:27:be:2a:d1:61:fa:27: 3f:23:08:e1:a9:37:8a:1e:07:f7:12:52:58:97:6a: 8a:dc:7b:7c:b5:89:cb:67:e3:6a:e8:2a:45:ef:8e: 5a:1a:3b:d7:ca:65:15:8e:6e:b3:5f:32:fc:70:d4: eb:43:18:a7:27:86:f3:df:1c:0f:29:a0:a6:8e:dc: 57:93:da:7b:d5:20:cd:0c:e7:5b:af:ba:67:d5:fa: 47:1e:4b:0b:9b:cd:83:c3:33:d1:84:02:24:79:ab: b3:16:da:09:17:f0:e4:b5:ed:20:7f:40:53:98:4b: 95:d3:0a:c5:9b:82:a2:31:a7:29:1a:ca:83:7d:6b: 0c:5c:33:9d:8d:5a:73:a0:a3:27:05:e3:4f:78:14: 4c:9b:c5:a8:e5:24:f4:77:ef:24:9b:7d:3a:20:32: 65:3a:f1:0c:65:b1:fd:8d:d2:2b:fb:95:13:49:47: 88:d3:96:95:70:2b:d1:96:6f:47:c6:e3:6e:0c:aa: 86:0e:0b:fa:a3:b0:ed:55:81:42:1e:53:48:ab:71: 3e:b8:10:b7:a7:ef:82:6c:c7:85:9a:9e:9f:c5:05: ee:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D2:53:F1:AC:5C:8E:B4:99:42:0F:24:36:E0:01:27:0C:56:91:96 X509v3 Authority Key Identifier: keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:aa:5a:7d:ea:22:95:f7:66:f5:1f:7c:d3:8e:9c:b6:71:11: 3c:12:67:79:ba:c2:58:42:5c:2d:c4:41:5d:e6:21:f3:a4:26: 3b:87:69:7a:af:90:ba:f7:5a:dc:81:c7:43:91:0b:67:ef:a8: 21:e9:75:be:41:1c:b2:c0:6f:e7:e4:33:42:0c:32:6e:d0:fd: 41:65:81:47:d9:72:00:01:87:3d:80:23:bc:f4:6a:ec:63:c5: 35:1a:8a:4f:d3:bb:e7:d9:41:55:1d:84:2a:4c:17:9e:b6:0b: 64:47:a3:a5:27:5d:cf:4a:54:b2:73:66:ff:47:45:a6:5e:65: d7:b9:93:3d:ba:5c:3b:75:84:d2:d4:8a:9a:f4:f5:4b:0a:6c: 96:7b:93:37:3b:e3:18:62:94:d7:b8:c1:ef:85:28:a3:03:cf: 77:24:5b:9c:76:16:b3:dd:2a:a8:04:4f:e0:b4:a6:31:52:5c: f0:f7:3d:03:ad:3d:fe:be:a1:3d:83:01:9e:39:4d:ab:16:2c: 5b:e6:ff:7d:3a:80:1c:a6:30:9d:9c:76:8d:57:32:ca:ce:7f: 52:47:d3:5f:fe:0b:7a:1e:28:51:13:05:be:d6:50:42:94:66: ac:81:b3:00:6f:29:5a:a7:58:6e:b8:e4:8c:ed:07:60:2d:e4: cb:03:12:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE3NjMxMTAvBgNVBAUTKEE1NUQzRkY4QTg1QkUxMDNCNTgzNzUwRDc3OTQzRjQ3 Qzk3NkY1QjMwHhcNMjQwNTMxMDc1MTQ1WhcNMjQwNjA3MDc1MTQ1WjAYMRYwFAYD VQQDEw02NjU5ODE5MS0zYjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjfzKCqPEpTdohuJ7s8rx26agJIHAW14XLUz/QiCrbKLSMLLzye+KtFh+ic/ IwjhqTeKHgf3ElJYl2qK3Ht8tYnLZ+Nq6CpF745aGjvXymUVjm6zXzL8cNTrQxin J4bz3xwPKaCmjtxXk9p71SDNDOdbr7pn1fpHHksLm82DwzPRhAIkeauzFtoJF/Dk te0gf0BTmEuV0wrFm4KiMacpGsqDfWsMXDOdjVpzoKMnBeNPeBRMm8Wo5ST0d+8k m306IDJlOvEMZbH9jdIr+5UTSUeI05aVcCvRlm9HxuNuDKqGDgv6o7DtVYFCHlNI q3E+uBC3p++CbMeFmp6fxQXurwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3SU/Gs XI60mUIPJDbgAScMVpGWMB8GA1UdIwQYMBaAFKVdP/ioW+EDtYN1DXeUP0fJdvWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTc2My83MUY3OUMxQzQy NDIxMUVFQTdGMkNBMTJDNEY5QUUwMi9wVjBfLUtoYjRRTzFnM1VOZDVRX1I4bDI5 Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BWMF8tS2hiNFFPMWczVU5kNVFfUjhsMjliTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTc2My83MUY3OUMxQzQyNDIxMUVFQTdGMkNBMTJDNEY5QUUwMi9wVjBfLUtoYjRR TzFnM1VOZDVRX1I4bDI5Yk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6qlp96iKV92b1H3zTjpy2cRE8Emd5usJYQlwtxEFd5iHzpCY7h2l6 r5C691rcgcdDkQtn76gh6XW+QRyywG/n5DNCDDJu0P1BZYFH2XIAAYc9gCO89Grs Y8U1GopP07vn2UFVHYQqTBeetgtkR6OlJ13PSlSyc2b/R0WmXmXXuZM9ulw7dYTS 1Iqa9PVLCmyWe5M3O+MYYpTXuMHvhSijA893JFucdhaz3SqoBE/gtKYxUlzw9z0D rT3+vqE9gwGeOU2rFixb5v99OoAcpjCdnHaNVzLKzn9SR9Nf/gt6HihREwW+1lBC lGasgbMAbylap1huuOSM7QdgLeTLAxIA -----END CERTIFICATE-----Generated at Fri May 31 08:38:31 2024 by rpki-client on console-fra.rpki-client.org