$ rpki-client -vvf rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft File: PcXSlD7UrPqSa3dnapi-yLPJea4.mft (raw, json) Hash identifier: 1rLS+4QmbNfljEWn4AvvVagn1xYYGyPCv5VZUC931UI= Subject key identifier: 81:36:F4:F5:F3:59:7B:66:4F:CB:6E:E6:C2:B6:EC:AA:CC:5F:91:18 Authority key identifier: 3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE Certificate issuer: /CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE Certificate serial: 06AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft Manifest number: 06A7 Signing time: Sat 18 May 2024 23:14:26 +0000 Manifest this update: Sat 18 May 2024 23:14:26 +0000 Manifest next update: Sat 25 May 2024 23:14:26 +0000 Files and hashes: 1: PcXSlD7UrPqSa3dnapi-yLPJea4.crl (hash: EdZO2n5ASxufqMkSbCfb5mS14nspNXp/okBT9sXQ8Kc=) 2: 499DE3FC1C1611EB8BD35065C4F9AE02.roa (hash: yZHf3tOWc+sxyzq57J+zRtrh1h68qCw13SKQG5RmD88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1710 (0x6ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE Validity Not Before: May 18 23:14:26 2024 GMT Not After : May 25 23:14:26 2024 GMT Subject: CN=66493652-9ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b3:e4:80:6c:ba:a6:c5:d1:89:ae:5a:cf:9e: f9:a9:db:26:1d:a5:a5:04:04:cb:b5:2a:9a:2b:59: bb:54:be:8a:b7:ef:5b:ed:15:7e:2b:e2:0f:f2:d4: 10:16:84:e7:e5:1f:f2:6f:e6:61:51:f2:87:f6:06: 23:67:cf:b1:88:ce:20:be:1a:3f:88:df:49:dd:97: a6:f1:eb:1a:14:2c:6e:43:74:fa:ef:34:c8:bf:87: 02:3b:64:37:16:c5:ce:06:34:46:88:9d:3f:c4:a9: a4:e5:c9:d6:5f:fb:4f:e4:0d:36:28:a4:4d:d7:f2: 43:f2:51:2c:40:43:5e:22:b9:bf:29:b2:b9:c7:50: fa:ca:7e:9c:64:6e:ab:03:6a:18:c3:74:f9:36:5a: be:62:ec:65:0a:01:65:a1:e7:30:f6:b6:3c:33:a6: 36:53:11:46:bd:61:30:1d:ae:d8:56:3d:1a:f7:b1: 32:92:0e:42:e2:ba:15:88:c8:5e:a5:15:0a:51:e2: 7f:54:c5:58:65:76:16:c0:f7:97:6b:ec:fd:e0:a2: b3:95:74:83:69:18:7a:40:68:b4:02:cb:cf:9a:94: f3:7b:41:a7:a8:dc:51:23:3d:df:18:4a:15:d2:f1: 1a:60:40:0c:b9:1c:6a:76:e8:e8:8d:80:71:5b:7e: 55:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:36:F4:F5:F3:59:7B:66:4F:CB:6E:E6:C2:B6:EC:AA:CC:5F:91:18 X509v3 Authority Key Identifier: keyid:3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:be:00:6f:18:51:31:6d:92:c7:e8:f6:d4:cb:f7:35:f7:59: 25:d1:f9:43:50:66:d2:40:30:19:86:a3:4e:c1:13:6a:2c:60: 7c:ab:e6:df:59:c4:af:d3:a8:86:e0:39:66:46:7b:fe:01:cd: ab:2e:1e:7d:8c:d1:c4:a9:88:ed:10:89:8d:5a:18:bf:a5:f2: 00:cc:d3:67:56:12:18:2d:24:c2:0a:14:79:f5:c9:11:4b:44: 3f:f6:da:08:53:6d:6b:0d:a2:79:26:02:30:58:50:e0:b6:a9: 00:12:1c:75:3c:30:f6:71:85:39:94:7c:c4:17:e7:fc:09:84: 24:21:67:57:4b:e8:ef:ea:82:14:b9:cd:33:97:66:35:fe:e8: 8f:cb:72:41:8e:15:8b:ab:98:30:32:70:e9:9d:8d:c6:07:1b: a5:13:54:95:98:cc:29:cd:73:68:35:53:fe:9f:51:bf:7f:8e: e0:ac:01:10:86:83:87:fb:78:90:c7:50:41:40:4e:b5:03:71: 4c:d2:4c:62:f7:dd:be:a5:04:ed:1b:cd:85:ca:ab:f0:4b:40: 77:b1:4a:f5:c7:76:49:3c:ce:f7:d7:ae:66:48:1a:1c:3e:4f: e5:93:a1:a7:ce:81:c9:c9:03:8b:e9:b2:86:c7:7e:d2:cb:02: e0:a3:c3:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFGOEUxMTAvBgNVBAUTKDNEQzVEMjk0M0VENEFDRkE5MjZCNzc2NzZBOThCRUM4 QjNDOTc5QUUwHhcNMjQwNTE4MjMxNDI2WhcNMjQwNTI1MjMxNDI2WjAYMRYwFAYD VQQDEw02NjQ5MzY1Mi05ZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rPkgGy6psXRia5az575qdsmHaWlBATLtSqaK1m7VL6Kt+9b7RV+K+IP8tQQ FoTn5R/yb+ZhUfKH9gYjZ8+xiM4gvho/iN9J3Zem8esaFCxuQ3T67zTIv4cCO2Q3 FsXOBjRGiJ0/xKmk5cnWX/tP5A02KKRN1/JD8lEsQENeIrm/KbK5x1D6yn6cZG6r A2oYw3T5Nlq+YuxlCgFloecw9rY8M6Y2UxFGvWEwHa7YVj0a97Eykg5C4roViMhe pRUKUeJ/VMVYZXYWwPeXa+z94KKzlXSDaRh6QGi0AsvPmpTze0GnqNxRIz3fGEoV 0vEaYEAMuRxqdujojYBxW35VfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIE29PXz WXtmT8tu5sK27KrMX5EYMB8GA1UdIwQYMBaAFD3F0pQ+1Kz6kmt3Z2qYvsizyXmu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUY4RS9EOTRBNzU5NDFD MTQxMUVCQjAzNkRDNjNDNEY5QUUwMi9QY1hTbEQ3VXJQcVNhM2RuYXBpLXlMUEpl YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BjWFNsRDdVclBxU2EzZG5hcGkteUxQSmVhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUY4RS9EOTRBNzU5NDFDMTQxMUVCQjAzNkRDNjNDNEY5QUUwMi9QY1hTbEQ3VXJQ cVNhM2RuYXBpLXlMUEplYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQvgBvGFExbZLH6PbUy/c191kl0flDUGbSQDAZhqNOwRNqLGB8q+bf WcSv06iG4DlmRnv+Ac2rLh59jNHEqYjtEImNWhi/pfIAzNNnVhIYLSTCChR59ckR S0Q/9toIU21rDaJ5JgIwWFDgtqkAEhx1PDD2cYU5lHzEF+f8CYQkIWdXS+jv6oIU uc0zl2Y1/uiPy3JBjhWLq5gwMnDpnY3GBxulE1SVmMwpzXNoNVP+n1G/f47grAEQ hoOH+3iQx1BBQE61A3FM0kxi992+pQTtG82FyqvwS0B3sUr1x3ZJPM73165mSBoc Pk/lk6GnzoHJyQOL6bKGx37SywLgo8Nq -----END CERTIFICATE-----Generated at Sun May 19 00:30:16 2024 by rpki-client on console-ams.rpki-client.org