$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft File: pTIumCBoFSdtwSYXlhk4_8bIhIo.mft (raw, json) Hash identifier: xzpanlxtMDRkJSwqB5I3PvFLgtTN/evXDeSSQYq+gUw= Subject key identifier: 34:CF:26:A1:74:34:79:0D:0D:EF:2C:1B:5D:23:4F:E9:E1:34:CE:E7 Authority key identifier: A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A Certificate issuer: /CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A Certificate serial: 06D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft Manifest number: 0D8F Signing time: Thu 30 May 2024 23:32:32 +0000 Manifest this update: Thu 30 May 2024 23:32:31 +0000 Manifest next update: Thu 06 Jun 2024 23:32:31 +0000 Files and hashes: 1: pTIumCBoFSdtwSYXlhk4_8bIhIo.crl (hash: pYaoBNb8TH5DLi9hDs7ahYKWvBCxP9OTjTcx66Afngc=) 2: F409CCBAAF7611EE85B8CF2DC4F9AE02.roa (hash: iMCCO68A+xFPuTceoqybbjqBZn+lCWKxuzNQ0n+JIxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 22:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1751 (0x6d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A Validity Not Before: May 30 23:32:31 2024 GMT Not After : Jun 6 23:32:31 2024 GMT Subject: CN=66590c90-7609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b2:db:c6:f9:9b:a7:39:be:57:2b:96:cd:c6: 58:8f:84:38:05:dd:b1:25:f8:62:dd:d0:7c:f6:1f: 77:33:d4:1f:ef:b7:02:9d:78:56:ad:f0:6c:61:9f: 5c:63:89:ec:0a:03:05:5f:55:97:47:30:d3:a1:a5: 04:e5:3a:77:50:96:f1:a5:26:9d:cc:c1:37:b1:97: 40:ef:8e:98:b4:75:dd:4a:85:c7:95:50:b4:1c:37: 6c:bb:c5:6a:f6:12:9e:9d:31:05:33:d0:fa:cc:5c: 42:86:bb:fa:38:62:83:d9:46:fd:d6:37:30:ec:bf: 8a:e0:5e:8b:77:af:da:9f:d7:04:f6:02:e3:23:24: 62:62:a7:a9:9f:3a:ec:bc:59:be:e5:7f:79:10:a0: d3:33:3b:ab:92:73:8d:45:b9:87:6c:f6:a4:05:d5: c4:79:28:4f:9e:97:aa:fe:83:3e:2a:db:8b:5c:40: b2:2e:82:99:95:97:d8:45:69:3f:71:85:81:ed:8f: 38:24:17:d3:98:bb:7f:52:27:bc:2b:06:02:d5:ab: 90:90:60:a1:5f:92:8d:93:b7:45:80:49:fb:df:08: 87:63:cc:35:01:c8:30:f6:53:33:a6:e2:c6:11:4b: 40:d9:69:dd:bf:05:61:3a:b1:e2:3c:9e:ce:df:8b: 6e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CF:26:A1:74:34:79:0D:0D:EF:2C:1B:5D:23:4F:E9:E1:34:CE:E7 X509v3 Authority Key Identifier: keyid:A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:cd:95:56:64:cc:01:8b:3b:9c:1f:bf:7d:36:aa:06:f8:31: 9c:14:a4:63:b0:5f:ba:72:17:bf:4e:7d:97:1b:6c:eb:b2:1e: c0:c0:eb:35:b0:a4:dd:7d:16:6b:6b:20:6c:f7:34:f1:93:c1: d2:e9:9a:ee:4e:9c:95:2a:1e:44:df:25:82:e6:e3:6e:73:15: 10:00:21:51:ba:aa:19:45:91:1c:59:94:56:a2:d0:d0:fe:03: 8f:1a:95:bd:93:48:ed:20:65:9a:3e:c1:81:ca:aa:91:20:00: 9c:52:3a:0b:5f:d9:85:8f:13:5e:91:47:59:19:17:31:70:fd: 52:f4:85:76:82:87:be:f5:ec:27:bf:e6:ac:9d:f7:d2:9a:13: fe:fb:bc:a6:f7:e3:ad:31:ee:3b:eb:e0:bb:d3:59:97:53:24: 1d:5e:78:c0:ba:27:0c:66:bf:86:1b:a3:f9:e3:54:93:2f:46: 40:b5:cd:1d:a1:da:f0:2d:6a:57:a8:42:ce:5d:b6:2f:1e:2a: 5f:f8:43:4b:44:1e:ad:25:f8:3b:a1:33:a2:55:f8:f3:71:30: 0c:57:82:1c:47:9e:4a:72:2a:24:54:c4:1a:b8:d4:d2:cd:aa: 60:63:05:1e:2f:bc:17:c9:1e:e3:ab:8a:16:ae:4b:f2:a8:8a: f7:78:36:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKEE1MzIyRTk4MjA2ODE1Mjc2REMxMjYxNzk2MTkzOEZG QzZDODg0OEEwHhcNMjQwNTMwMjMzMjMxWhcNMjQwNjA2MjMzMjMxWjAYMRYwFAYD VQQDEw02NjU5MGM5MC03NjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7Lbxvmbpzm+VyuWzcZYj4Q4Bd2xJfhi3dB89h93M9Qf77cCnXhWrfBsYZ9c Y4nsCgMFX1WXRzDToaUE5Tp3UJbxpSadzME3sZdA746YtHXdSoXHlVC0HDdsu8Vq 9hKenTEFM9D6zFxChrv6OGKD2Ub91jcw7L+K4F6Ld6/an9cE9gLjIyRiYqepnzrs vFm+5X95EKDTMzurknONRbmHbPakBdXEeShPnpeq/oM+KtuLXECyLoKZlZfYRWk/ cYWB7Y84JBfTmLt/Uie8KwYC1auQkGChX5KNk7dFgEn73wiHY8w1Acgw9lMzpuLG EUtA2WndvwVhOrHiPJ7O34tu6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTPJqF0 NHkNDe8sG10jT+nhNM7nMB8GA1UdIwQYMBaAFKUyLpggaBUnbcEmF5YZOP/GyISK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZTZHR3U1lYbGhrNF84Yklo SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUSXVtQ0JvRlNkdHdTWVhsaGs0XzhiSWhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZT ZHR3U1lYbGhrNF84YkloSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwzZVWZMwBizucH799NqoG+DGcFKRjsF+6che/Tn2XG2zrsh7AwOs1 sKTdfRZrayBs9zTxk8HS6ZruTpyVKh5E3yWC5uNucxUQACFRuqoZRZEcWZRWotDQ /gOPGpW9k0jtIGWaPsGByqqRIACcUjoLX9mFjxNekUdZGRcxcP1S9IV2goe+9ewn v+asnffSmhP++7ym9+OtMe476+C701mXUyQdXnjAuicMZr+GG6P541STL0ZAtc0d odrwLWpXqELOXbYvHipf+ENLRB6tJfg7oTOiVfjzcTAMV4IcR55KciokVMQauNTS zapgYwUeL7wXyR7jq4oWrkvyqIr3eDaA -----END CERTIFICATE-----Generated at Fri May 31 00:28:34 2024 by rpki-client on console-ams.rpki-client.org