$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: xEcodgqiA2PIQ6HXjG5xXPfq2SaYLFj5scR6trpRqvI= Subject key identifier: 9C:95:DF:8E:DA:8B:68:17:67:AA:5B:45:14:5A:FF:59:F7:1B:79:DC Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 49 Signing time: Sun 19 May 2024 08:07:11 +0000 Manifest this update: Sun 19 May 2024 08:07:10 +0000 Manifest next update: Sun 26 May 2024 08:07:10 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: k0UR+uYAVBDHVfMxhun6GpfeT0uNSpWpEtLc6bRVTOg=) 2: 78321A66068D11EF92608943C4F9AE02.roa (hash: blVnz565/hVxOKVO1xLhYGke1dIuGSft6BcnljQwFaw=) 3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: mLl/OI3EV7/JM4Fr1G9RnDxTwZqnfUJgsg+LaOLb7Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: May 19 08:07:10 2024 GMT Not After : May 26 08:07:10 2024 GMT Subject: CN=6649b32e-acd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9c:6e:3f:fc:a7:ff:a5:ac:63:63:bd:bc:7f: f3:f9:0b:5e:d2:bf:d9:c9:50:9f:49:32:99:1e:96: 74:1c:8c:65:a0:64:d0:ad:2d:ce:67:07:81:22:ae: 6c:98:57:6f:87:c5:67:5a:01:85:57:db:15:a3:14: e5:36:f9:ff:49:a1:07:47:df:43:e3:01:02:aa:14: 1a:b4:cd:d3:6e:bf:6e:71:38:d3:37:ea:e7:5c:31: bb:8b:b5:1a:b0:48:6f:97:68:c2:66:d1:07:a3:48: be:fd:e1:5f:cc:44:1e:4d:c9:d5:cf:9e:bf:27:c2: 07:76:58:42:20:57:c1:7a:a0:95:12:14:0c:bd:51: 64:e9:fc:21:aa:29:80:b7:4b:d2:3c:3e:88:b5:29: e3:4a:1b:09:16:60:f3:ae:b7:ef:5e:42:8f:10:15: 97:94:84:59:cd:aa:41:9d:35:0e:c0:e0:c9:a5:ce: 42:4c:00:75:b6:86:ce:19:b2:06:81:7f:37:b9:d8: bf:f1:b7:2b:4f:39:53:df:5c:35:82:40:6d:e3:e4: 38:00:12:c0:c4:cb:9f:35:bc:54:05:f0:50:c1:1f: 89:3c:c2:4c:e2:71:ba:7e:7c:ed:54:93:c8:b6:ab: e0:66:d7:4d:91:d8:3d:ca:e0:de:79:3d:48:61:5c: 3b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:95:DF:8E:DA:8B:68:17:67:AA:5B:45:14:5A:FF:59:F7:1B:79:DC X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2d:56:b5:a0:d1:06:ee:f9:56:c2:8b:fa:3d:17:0b:a2:3a: 8e:0f:49:e5:aa:ae:ca:bc:17:d7:e5:87:15:25:42:dd:cf:29: 96:d5:b5:6e:e7:82:21:c3:be:cc:00:8f:38:77:dd:46:8b:02: 02:96:37:9c:5b:f0:38:aa:70:44:ad:4e:ad:8a:e3:61:3b:9b: d3:20:d6:65:0e:34:2b:a3:e2:5b:f8:31:d3:6d:af:26:2f:d8: 9d:ec:10:ba:36:bc:c3:d1:c1:21:53:2c:a5:d1:92:45:54:df: f0:d4:d9:82:24:ef:ba:c8:da:d3:6e:39:2f:bb:77:2c:5c:67: f2:52:79:d6:08:50:50:99:15:79:68:6c:92:b5:ef:8a:69:06: 0a:6c:dd:43:34:02:34:d9:40:e1:8f:2d:3a:4a:27:4e:8e:17: 50:fe:0f:b8:c2:5a:83:cb:0a:72:ff:9c:4d:39:8d:23:44:6d: 9c:d0:26:80:fa:a6:ac:50:3a:22:51:19:eb:9c:a8:8f:5b:2d: d4:1d:e3:fa:82:9b:fd:a3:10:37:08:48:50:dc:e0:b6:46:e0: f9:d3:d8:f7:ec:26:44:14:53:4f:c7:fb:51:f1:78:51:7e:8c: 54:1a:9b:75:a6:64:45:f3:86:3a:06:37:9b:db:eb:11:bd:3e: 87:44:db:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MkJEMzExMC8GA1UEBRMoM0Q3RkVBQ0I2MzNBNkI4MjkzMjNCMUU5OTQ0RDRBRjk4 REREQTM3MjAeFw0yNDA1MTkwODA3MTBaFw0yNDA1MjYwODA3MTBaMBgxFjAUBgNV BAMTDTY2NDliMzJlLWFjZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1nG4//Kf/paxjY728f/P5C17Sv9nJUJ9JMpkelnQcjGWgZNCtLc5nB4EirmyY V2+HxWdaAYVX2xWjFOU2+f9JoQdH30PjAQKqFBq0zdNuv25xONM36udcMbuLtRqw SG+XaMJm0QejSL794V/MRB5NydXPnr8nwgd2WEIgV8F6oJUSFAy9UWTp/CGqKYC3 S9I8Poi1KeNKGwkWYPOut+9eQo8QFZeUhFnNqkGdNQ7A4MmlzkJMAHW2hs4ZsgaB fze52L/xtytPOVPfXDWCQG3j5DgAEsDEy581vFQF8FDBH4k8wkzicbp+fO1Uk8i2 q+Bm102R2D3K4N55PUhhXDuPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnJXfjtqL aBdnqltFFFr/WfcbedwwHwYDVR0jBBgwFoAUPX/qy2M6a4KTI7HplE1K+Y3do3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyQkQzLzY0QkZGMTRFQjNG NzExRUU5MkE0NzcxN0M0RjlBRTAyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8z SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFhfcXkyTTZhNEtUSTdIcGxFMUstWTNkbzNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy QkQzLzY0QkZGMTRFQjNGNzExRUU5MkE0NzcxN0M0RjlBRTAyL1BYX3F5Mk02YTRL VEk3SHBsRTFLLVkzZG8zSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ4tVrWg0Qbu+VbCi/o9FwuiOo4PSeWqrsq8F9flhxUlQt3PKZbVtW7n giHDvswAjzh33UaLAgKWN5xb8DiqcEStTq2K42E7m9Mg1mUONCuj4lv4MdNtryYv 2J3sELo2vMPRwSFTLKXRkkVU3/DU2YIk77rI2tNuOS+7dyxcZ/JSedYIUFCZFXlo bJK174ppBgps3UM0AjTZQOGPLTpKJ06OF1D+D7jCWoPLCnL/nE05jSNEbZzQJoD6 pqxQOiJRGeucqI9bLdQd4/qCm/2jEDcISFDc4LZG4PnT2PfsJkQUU0/H+1HxeFF+ jFQam3WmZEXzhjoGN5vb6xG9PodE2+c= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org