$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft File: PfacqYyxMelltbxKM_znG50156g.mft (raw, json) Hash identifier: qHiwRTpzv5yw+XAOP6Ywcs1CbIPtKdGimjY4jNuIBCE= Subject key identifier: 0E:FC:D2:4B:52:C2:06:7A:BB:D2:16:06:50:97:74:E3:1D:9F:6F:2C Authority key identifier: 3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8 Certificate issuer: /CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8 Certificate serial: 0693 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft Manifest number: 0687 Signing time: Sat 18 May 2024 23:24:02 +0000 Manifest this update: Sat 18 May 2024 23:24:01 +0000 Manifest next update: Sat 25 May 2024 23:24:01 +0000 Files and hashes: 1: PfacqYyxMelltbxKM_znG50156g.crl (hash: UIIZgbGY6V+CV5DIVw+nhbY5y4cy50QUeV6jsJU5n0o=) 2: CBBD0C44295B11EBB6592F7CC4F9AE02.roa (hash: GGSGud9e5EmVlzgztMbCedgUgSQWzW85b2I/rsdqDHw=) 3: 94A029162D2611EBBDB17E85C4F9AE02.roa (hash: 9A2vQ9Ly+pH+izujTFszD7amFIowjzNSnAN2Hq5Lt7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1683 (0x693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8 Validity Not Before: May 18 23:24:01 2024 GMT Not After : May 25 23:24:01 2024 GMT Subject: CN=66493892-3efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2d:cf:8c:df:3b:e6:8e:71:a3:a5:d5:72:42: f6:4d:14:3f:ee:9b:95:64:25:20:72:26:ce:ca:ed: 96:f8:93:66:f6:39:ff:0d:b6:c8:6c:42:87:1f:c2: fb:55:2b:fe:35:60:20:f6:a3:ec:5b:27:98:07:31: 28:88:2f:1e:d5:b9:f6:0c:8c:8f:b4:fa:76:fc:86: 41:e1:7a:1b:e1:42:b4:b8:b3:0e:b6:06:06:35:f3: 23:fa:ef:cb:6b:bf:cd:05:29:a9:64:13:2b:66:d8: 2a:84:6c:fc:cd:f1:65:bf:45:0f:d9:ed:c8:41:4d: 41:96:83:05:e2:42:ee:af:23:0c:4d:ec:65:b6:9b: d2:b3:12:fc:d1:e3:6f:6b:35:f0:b4:06:47:bf:0a: 85:f3:f2:42:f5:df:b9:13:2f:09:b0:c7:1e:b1:a9: 8b:d2:ad:b2:d5:dd:2f:8b:a2:04:1f:31:c5:12:a3: 38:fa:5a:92:85:8a:af:4f:0b:c0:7d:82:96:cc:ac: d8:ad:ec:aa:69:53:9b:5b:11:fc:99:56:ac:d9:90: ac:50:6c:07:67:81:87:07:19:fe:82:9e:74:7f:c1: 24:2b:ff:a7:6f:b7:ac:23:23:65:82:1c:02:6d:99: 6a:5c:c2:af:56:05:0b:02:f9:f2:02:18:ee:b6:b5: 53:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FC:D2:4B:52:C2:06:7A:BB:D2:16:06:50:97:74:E3:1D:9F:6F:2C X509v3 Authority Key Identifier: keyid:3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:d2:c0:eb:31:f1:6a:ac:cc:f9:ae:e2:05:b8:a2:3c:7d:d7: b1:86:0b:ec:bb:5b:e5:59:2e:a9:a1:db:06:63:c2:32:a7:d1: 23:cb:04:02:25:58:af:49:44:0c:25:58:b7:62:a6:ec:45:e0: ca:b9:f7:6a:21:a7:2b:b6:26:c9:d0:78:2a:cc:50:89:63:a9: 9b:a5:20:e3:79:a8:d5:0b:d5:6b:68:9b:24:b7:c2:5f:40:08: 2f:1a:84:99:10:17:bc:c8:c5:db:7e:dc:45:dc:13:87:29:6a: a1:27:9b:af:e9:43:40:69:26:32:0c:88:bf:e0:8d:45:4d:23: 61:95:48:11:c2:39:fb:94:41:c9:5e:89:58:c4:4c:7f:03:04: a5:5f:dd:64:53:c1:a7:42:76:da:f9:3e:2f:3e:79:70:c0:c2: d7:46:27:4a:c1:11:31:67:17:69:49:38:b0:04:a8:c7:8d:c0: 04:98:b5:6d:1d:cc:4a:94:ac:51:7a:0f:db:07:c5:b4:b7:46: db:00:fa:e6:31:5b:2c:fa:26:47:83:00:45:71:34:c8:02:02: ef:a0:d2:a1:51:c2:e0:40:77:79:8e:ff:1e:08:13:0d:4d:4a: 7a:5e:2c:08:03:1c:38:0c:57:57:78:c1:4f:78:2e:77:c2:b3: ad:33:11:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGMTMxMTAvBgNVBAUTKDNERjY5Q0E5OENCMTMxRTk2NUI1QkM0QTMzRkNFNzFC OUQzNUU3QTgwHhcNMjQwNTE4MjMyNDAxWhcNMjQwNTI1MjMyNDAxWjAYMRYwFAYD VQQDEw02NjQ5Mzg5Mi0zZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0i3PjN875o5xo6XVckL2TRQ/7puVZCUgcibOyu2W+JNm9jn/DbbIbEKHH8L7 VSv+NWAg9qPsWyeYBzEoiC8e1bn2DIyPtPp2/IZB4Xob4UK0uLMOtgYGNfMj+u/L a7/NBSmpZBMrZtgqhGz8zfFlv0UP2e3IQU1BloMF4kLuryMMTexltpvSsxL80eNv azXwtAZHvwqF8/JC9d+5Ey8JsMcesamL0q2y1d0vi6IEHzHFEqM4+lqShYqvTwvA fYKWzKzYreyqaVObWxH8mVas2ZCsUGwHZ4GHBxn+gp50f8EkK/+nb7esIyNlghwC bZlqXMKvVgULAvnyAhjutrVTOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA780ktS wgZ6u9IWBlCXdOMdn28sMB8GA1UdIwQYMBaAFD32nKmMsTHpZbW8SjP85xudNeeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUYxMy81Mzg3MzJGRTI5 NEMxMUVCQTZCRjZEMzFDNEY5QUUwMi9QZmFjcVl5eE1lbGx0YnhLTV96bkc1MDE1 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmYWNxWXl4TWVsbHRieEtNX3puRzUwMTU2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUYxMy81Mzg3MzJGRTI5NEMxMUVCQTZCRjZEMzFDNEY5QUUwMi9QZmFjcVl5eE1l bGx0YnhLTV96bkc1MDE1NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt0sDrMfFqrMz5ruIFuKI8fdexhgvsu1vlWS6podsGY8Iyp9EjywQC JVivSUQMJVi3YqbsReDKufdqIacrtibJ0HgqzFCJY6mbpSDjeajVC9VraJskt8Jf QAgvGoSZEBe8yMXbftxF3BOHKWqhJ5uv6UNAaSYyDIi/4I1FTSNhlUgRwjn7lEHJ XolYxEx/AwSlX91kU8GnQnba+T4vPnlwwMLXRidKwRExZxdpSTiwBKjHjcAEmLVt HcxKlKxReg/bB8W0t0bbAPrmMVss+iZHgwBFcTTIAgLvoNKhUcLgQHd5jv8eCBMN TUp6XiwIAxw4DFdXeMFPeC53wrOtMxET -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org