$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft File: f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft (raw, json) Hash identifier: 3DHvgCHOApWEwqChuBMtgaEMrSv8BJFl3OPDSLoce/0= Subject key identifier: 26:F6:6E:DB:87:47:14:CA:6A:A6:9B:25:8B:24:8A:0B:ED:99:2C:5A Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D Certificate issuer: /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D Certificate serial: 0529 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft Manifest number: 0522 Signing time: Sun 19 May 2024 01:01:43 +0000 Manifest this update: Sun 19 May 2024 01:01:43 +0000 Manifest next update: Sun 26 May 2024 01:01:43 +0000 Files and hashes: 1: f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl (hash: HqPdk9n6kGY1bk0jz4pevfufpL6SUbkDOU9XOWGws0s=) 2: 99BB0B14A16311EE85DF497CC4F9AE02.roa (hash: 5Xc9/jAyPbFuKwxDaojvdU6UZPRQGKoIWV+FcNcu1/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1321 (0x529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D Validity Not Before: May 19 01:01:43 2024 GMT Not After : May 26 01:01:43 2024 GMT Subject: CN=66494f77-003f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ad:c9:81:ab:fb:44:75:79:fd:a0:00:99:de: 1f:b5:b0:07:70:01:d3:a3:5d:67:9f:a0:10:f2:15: dc:4f:3c:1d:63:0a:fa:28:fb:0f:44:1b:df:20:bb: 0f:75:0c:03:70:cc:d3:fe:b4:7d:a3:fc:87:22:3f: d4:98:a1:3b:83:82:be:f7:1c:fb:d2:4d:4f:b0:13: 12:39:b3:32:4d:a3:3f:00:cb:1c:6a:ac:57:28:10: 19:52:ca:12:96:bf:dc:9f:92:42:c9:86:49:7b:fe: ce:95:79:39:d1:51:88:09:29:7c:4c:68:6e:31:fd: 74:00:ca:75:4f:4d:41:a0:39:6f:d3:53:fd:4d:bb: ba:63:8c:4a:04:74:0a:7a:c6:36:b4:c5:b4:51:54: 74:c8:7d:de:59:9d:1e:bf:4b:c4:fb:70:90:a2:0f: 11:15:ff:73:4d:64:58:9c:18:a2:39:ae:ff:fb:21: b7:6f:c5:af:82:2b:74:61:8b:15:d6:7a:28:3d:79: bf:66:a6:f4:76:15:2c:54:01:4b:70:b7:83:48:e8: c4:4e:3f:36:4a:fc:f8:5a:45:07:83:db:f9:27:ed: cb:20:1a:2b:19:33:af:09:ab:93:fb:66:5c:ad:45: 01:40:b5:c2:e0:a3:ab:74:cd:d2:a3:fb:a5:78:8e: a9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F6:6E:DB:87:47:14:CA:6A:A6:9B:25:8B:24:8A:0B:ED:99:2C:5A X509v3 Authority Key Identifier: keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:76:3a:03:9c:e0:44:1f:e5:a3:8e:11:5b:ca:ee:33:4b:27: ce:6c:22:ca:a2:da:65:ae:46:b8:79:fd:c2:2b:fa:81:6e:9a: c0:a6:f0:fa:d1:1a:0a:22:e7:6a:02:f5:2f:cf:df:4d:b7:e2: be:06:a4:f8:b9:de:58:3c:95:1c:34:8a:9f:e5:37:26:60:5b: 9b:89:f1:72:e5:e6:8c:e0:50:6f:78:7a:6a:e6:80:f3:7a:a2: 2f:32:62:11:7f:7b:f8:9b:13:a6:53:95:18:d7:96:e9:2b:73: 23:83:d3:46:be:02:52:67:f4:a2:a5:2c:c2:54:72:13:58:69: b9:c6:9d:74:88:43:5a:5e:28:6b:8b:84:bf:c4:22:63:5c:87: 0e:62:da:69:99:8d:c4:af:20:86:ef:ca:6e:4c:f3:7e:1a:7d: 6c:bf:21:72:a5:9e:0f:74:dc:59:5f:d4:54:58:46:70:8b:3c: d0:cb:df:b6:c3:08:33:58:38:67:bd:9b:8b:8b:db:62:bc:5e: 26:76:70:d9:c8:9e:9a:2f:24:90:13:15:f9:e0:d9:7c:28:ed: c3:82:de:d3:a9:27:09:9a:e9:ff:8a:17:68:4d:8f:3a:59:94: 86:fa:43:f2:04:8b:a7:63:da:fc:2f:76:0c:9f:be:96:e7:c6: d7:c6:d2:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBM0YxMTAvBgNVBAUTKDdGRjNFQTlBQzA4MzI1MUY1RDMwQjAxRDA1NkJDQkNE RTFBN0VFMkQwHhcNMjQwNTE5MDEwMTQzWhcNMjQwNTI2MDEwMTQzWjAYMRYwFAYD VQQDEw02NjQ5NGY3Ny0wMDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtq3Jgav7RHV5/aAAmd4ftbAHcAHTo11nn6AQ8hXcTzwdYwr6KPsPRBvfILsP dQwDcMzT/rR9o/yHIj/UmKE7g4K+9xz70k1PsBMSObMyTaM/AMscaqxXKBAZUsoS lr/cn5JCyYZJe/7OlXk50VGICSl8TGhuMf10AMp1T01BoDlv01P9Tbu6Y4xKBHQK esY2tMW0UVR0yH3eWZ0ev0vE+3CQog8RFf9zTWRYnBiiOa7/+yG3b8Wvgit0YYsV 1nooPXm/Zqb0dhUsVAFLcLeDSOjETj82Svz4WkUHg9v5J+3LIBorGTOvCauT+2Zc rUUBQLXC4KOrdM3So/uleI6p3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCb2btuH RxTKaqabJYskigvtmSxaMB8GA1UdIwQYMBaAFH/z6prAgyUfXTCwHQVry83hp+4t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REEzRi8wNEZGODlEOEI2 Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpSOWRNTEFkQld2THplR243 aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfUHFtc0NESlI5ZE1MQWRCV3ZMemVHbjdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REEzRi8wNEZGODlEOEI2Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpS OWRNTEFkQld2THplR243aTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEdjoDnOBEH+WjjhFbyu4zSyfObCLKotplrka4ef3CK/qBbprApvD6 0RoKIudqAvUvz99Nt+K+BqT4ud5YPJUcNIqf5TcmYFubifFy5eaM4FBveHpq5oDz eqIvMmIRf3v4mxOmU5UY15bpK3Mjg9NGvgJSZ/SipSzCVHITWGm5xp10iENaXihr i4S/xCJjXIcOYtppmY3EryCG78puTPN+Gn1svyFypZ4PdNxZX9RUWEZwizzQy9+2 wwgzWDhnvZuLi9tivF4mdnDZyJ6aLySQExX54Nl8KO3Dgt7TqScJmun/ihdoTY86 WZSG+kPyBIunY9r8L3YMn76W58bXxtIJ -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org