$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json) Hash identifier: bgtT1lFz1AHbXcfXw6DcfP5W9XL4NkTdAl8h4fIu2GA= Subject key identifier: 04:D6:B5:56:D5:D2:F6:9A:74:F6:22:79:21:99:5D:C8:96:C5:77:2F Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft Manifest number: 0186 Signing time: Fri 31 May 2024 05:24:54 +0000 Manifest this update: Fri 31 May 2024 05:24:54 +0000 Manifest next update: Fri 07 Jun 2024 05:24:54 +0000 Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: dZnyrkNRKxlyhuDxgBt4cSdsHHYAh3dQ4r6pX6o25IU=) 2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: pHBuxlD5xQVDJjXkIBgfM6YV4nu0ZIEhZDtze/Saq+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Validity Not Before: May 31 05:24:54 2024 GMT Not After : Jun 7 05:24:54 2024 GMT Subject: CN=66595f26-b14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:51:d7:62:8d:12:12:d2:22:15:d6:88:af:9a: 45:3b:21:32:3a:3b:bd:fc:e7:10:89:a9:7f:1b:58: bb:cd:b5:b9:f8:4e:7d:ad:06:8f:c8:26:1b:a5:f0: 22:be:7b:28:74:16:66:69:bf:3a:a9:af:c3:53:d3: 89:6d:26:7a:44:32:2c:ce:b2:fd:aa:96:a0:f4:c5: 3e:17:85:9e:35:d5:cf:7a:96:5a:4a:fe:d4:88:b1: 8d:5e:6e:c4:be:3e:53:06:d6:10:98:7c:3e:94:11: 45:66:bd:8f:28:41:6f:05:7b:10:67:e3:44:31:0f: 99:c1:0f:90:78:ab:20:da:e0:2f:a4:74:1b:0f:91: 4f:75:8f:15:6b:3c:17:50:8f:e1:76:98:e7:2c:a8: 9c:63:89:e4:e1:35:ab:47:02:85:69:17:35:e0:a9: 44:c0:2a:ed:c1:8a:55:23:b4:c9:80:b8:a3:2c:3d: e4:44:32:a6:46:b4:34:5b:f0:ac:dc:cb:5f:12:27: ab:f2:1a:a5:f6:11:0d:46:22:a6:62:ae:f8:78:0d: ec:1c:3b:2d:42:72:1c:4f:ae:23:d6:42:76:5f:97: f4:7e:19:83:70:b9:8e:e0:90:62:4b:6b:52:8d:4c: f9:40:6a:49:23:27:ae:87:d6:28:d2:e8:18:d9:0a: 5c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D6:B5:56:D5:D2:F6:9A:74:F6:22:79:21:99:5D:C8:96:C5:77:2F X509v3 Authority Key Identifier: keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3b:0a:05:a7:76:97:fb:e9:fc:32:d1:e3:33:76:b1:de:d9: 83:0d:f3:fa:30:4b:40:d6:06:81:fb:69:84:34:a6:10:25:66: 5f:df:f7:62:ef:04:12:09:6e:59:9e:3a:3f:45:7b:25:da:d8: 6e:7c:7e:87:93:ab:da:b6:b9:d3:41:22:c8:a5:94:df:bd:2f: 48:58:ae:b5:2d:30:f3:55:71:64:b1:34:95:98:63:ae:d7:f6: d1:6a:d5:01:86:b1:43:dc:ea:da:e1:59:eb:48:50:c4:9c:bf: 07:f5:1e:eb:e9:53:49:e1:5c:e9:c4:d1:68:03:0a:21:95:06: f4:a6:1e:2a:a9:d5:70:8a:da:a2:6e:5d:58:23:ec:03:9f:bb: 5c:d5:ee:6b:00:4d:8b:c3:3e:cb:e7:fb:34:73:a3:b9:4a:e4: e2:e1:54:b3:03:50:1d:be:0f:78:f5:b7:f4:0b:fc:c4:02:d7: 9d:35:a6:5f:eb:6c:ba:a8:46:b9:ab:0f:b2:ed:16:5d:9a:22: 8d:ce:70:66:e9:01:ee:e6:a0:7a:bb:a0:2e:06:6c:33:04:cc: d2:a8:b2:58:ec:db:e4:3e:57:29:fb:d1:ef:3f:05:a2:bb:6c: d6:69:55:7c:2f:19:d8:15:27:cc:f1:83:65:d4:7f:13:0a:7d: 39:0a:4b:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3 RDk4Q0Q2OTQwHhcNMjQwNTMxMDUyNDU0WhcNMjQwNjA3MDUyNDU0WjAYMRYwFAYD VQQDEw02NjU5NWYyNi1iMTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VHXYo0SEtIiFdaIr5pFOyEyOju9/OcQial/G1i7zbW5+E59rQaPyCYbpfAi vnsodBZmab86qa/DU9OJbSZ6RDIszrL9qpag9MU+F4WeNdXPepZaSv7UiLGNXm7E vj5TBtYQmHw+lBFFZr2PKEFvBXsQZ+NEMQ+ZwQ+QeKsg2uAvpHQbD5FPdY8VazwX UI/hdpjnLKicY4nk4TWrRwKFaRc14KlEwCrtwYpVI7TJgLijLD3kRDKmRrQ0W/Cs 3MtfEier8hql9hENRiKmYq74eA3sHDstQnIcT64j1kJ2X5f0fhmDcLmO4JBiS2tS jUz5QGpJIyeuh9Yo0ugY2QpcaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATWtVbV 0vaadPYieSGZXciWxXcvMB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0 MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2 Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/OwoFp3aX++n8MtHjM3ax3tmDDfP6MEtA1gaB+2mENKYQJWZf3/di 7wQSCW5Znjo/RXsl2thufH6Hk6vatrnTQSLIpZTfvS9IWK61LTDzVXFksTSVmGOu 1/bRatUBhrFD3Ora4VnrSFDEnL8H9R7r6VNJ4VzpxNFoAwohlQb0ph4qqdVwitqi bl1YI+wDn7tc1e5rAE2Lwz7L5/s0c6O5SuTi4VSzA1Advg949bf0C/zEAtedNaZf 62y6qEa5qw+y7RZdmiKNznBm6QHu5qB6u6AuBmwzBMzSqLJY7NvkPlcp+9HvPwWi u2zWaVV8LxnYFSfM8YNl1H8TCn05CktC -----END CERTIFICATE-----Generated at Fri May 31 05:53:51 2024 by rpki-client on console-fra.rpki-client.org