$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft File: Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json) Hash identifier: lW+ALlX/dfX1lw+uD5Lu2CBaMsDzWNtZ5yjPwXmYhOU= Subject key identifier: 52:FF:D2:C8:3F:32:C3:60:FF:1A:A3:8F:B0:28:20:2C:54:27:75:06 Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06 Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft Manifest number: 023B Signing time: Fri 31 May 2024 04:36:49 +0000 Manifest this update: Fri 31 May 2024 04:36:48 +0000 Manifest next update: Fri 07 Jun 2024 04:36:48 +0000 Files and hashes: 1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: WRUtdZ2/20vD3UUSgyb+XUnKm8G4NJ6fxURPkr7pXqk=) 2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: lQI+FDVmwoNnrFBqPr06uC9Po++2p2Q/5lMnyqMNj28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 04:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06 Validity Not Before: May 31 04:36:48 2024 GMT Not After : Jun 7 04:36:48 2024 GMT Subject: CN=665953e0-19d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5c:8c:a9:7a:7f:3e:6e:1e:4c:76:1b:d1:f3: 4f:6d:78:8e:63:00:02:50:a1:8b:35:04:24:de:44: 29:85:d7:00:48:f3:6e:67:9d:d6:ef:e7:1c:31:a8: de:e5:95:14:5a:53:8b:a4:05:f1:6a:29:5f:b7:2f: 62:74:cf:3c:d5:61:e3:27:ee:f8:bd:40:d1:28:c2: 88:05:c2:ae:26:9f:76:8f:8a:cc:1f:f9:69:b0:af: a8:1b:e7:16:de:24:4c:06:53:82:e7:c7:60:ea:8f: 43:66:75:3a:3d:40:72:7d:59:b1:cf:8d:d7:dc:e2: d8:e9:8f:16:c5:c8:dc:51:6f:cd:8b:91:7d:4f:74: 42:8c:3a:58:f0:26:cb:88:e9:46:5b:56:f8:66:b8: 1d:a9:56:38:6a:80:ec:f5:cd:1f:9a:d1:6a:e2:c0: 1e:42:c1:d2:b0:18:b6:22:62:35:42:c2:de:09:cf: 1a:c2:9d:ca:54:a1:b6:13:b4:9d:06:bf:9c:91:68: fa:92:39:6b:ed:1e:31:5e:de:03:2d:0e:ae:26:2f: a9:3a:52:f0:c3:40:e5:2f:fa:ce:3b:21:65:c9:ba: 07:37:6c:da:91:d3:48:84:c0:e5:81:4f:08:03:ae: 76:d0:9a:62:4c:90:c0:7d:20:af:1a:74:78:7c:a6: a6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FF:D2:C8:3F:32:C3:60:FF:1A:A3:8F:B0:28:20:2C:54:27:75:06 X509v3 Authority Key Identifier: keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:48:40:c1:75:64:71:f3:4a:fb:08:76:eb:23:1b:55:d2:6d: ed:92:c9:47:1e:a9:8a:9c:ac:87:89:5e:12:a9:e1:6a:0e:f2: da:96:32:05:5f:54:2d:94:e6:da:13:2d:75:31:10:e0:d0:4e: ac:8b:00:a9:13:56:0d:90:d6:88:92:60:6d:cc:71:8e:c9:22: 90:c5:96:39:27:70:5a:45:30:c2:a8:69:b8:c0:0b:7c:06:66: da:cf:f0:e3:7e:67:68:c3:47:d6:ea:61:96:cc:36:12:03:b4: dd:b3:b4:cc:93:13:84:bd:65:3b:bf:f8:8c:94:c4:4e:a5:c8: 28:17:21:cd:ec:71:04:f2:f3:24:bb:d4:0d:a7:1a:e8:72:04: b1:2b:5d:dc:07:fd:76:54:cf:02:fa:fb:9d:4f:7d:77:18:6e: 01:65:a1:32:ae:23:3b:ac:b2:8a:a0:97:14:76:24:a5:0d:7e: ca:30:73:bc:9f:5a:a4:83:57:b3:9a:04:a5:04:cf:64:b0:13: 00:2f:78:d9:61:e5:9a:90:c2:36:28:e9:d9:36:6f:18:27:73: 94:e8:8d:c3:5e:f8:2c:18:ae:a6:dd:bf:13:da:a0:26:56:db: 62:bc:3d:87:91:ff:d0:52:1e:ab:ec:10:03:27:a9:dc:b0:3a: 1a:67:c0:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNTQxMTAvBgNVBAUTKDNFNjdEQkY3ODIyMDI4OTNGMUZCNUFGN0Q2RkMwOUQw MDE4RkRGMDYwHhcNMjQwNTMxMDQzNjQ4WhcNMjQwNjA3MDQzNjQ4WjAYMRYwFAYD VQQDEw02NjU5NTNlMC0xOWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1yMqXp/Pm4eTHYb0fNPbXiOYwACUKGLNQQk3kQphdcASPNuZ53W7+ccMaje 5ZUUWlOLpAXxailfty9idM881WHjJ+74vUDRKMKIBcKuJp92j4rMH/lpsK+oG+cW 3iRMBlOC58dg6o9DZnU6PUByfVmxz43X3OLY6Y8WxcjcUW/Ni5F9T3RCjDpY8CbL iOlGW1b4ZrgdqVY4aoDs9c0fmtFq4sAeQsHSsBi2ImI1QsLeCc8awp3KVKG2E7Sd Br+ckWj6kjlr7R4xXt4DLQ6uJi+pOlLww0DlL/rOOyFlyboHN2zakdNIhMDlgU8I A6520JpiTJDAfSCvGnR4fKamlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFL/0sg/ MsNg/xqjj7AoICxUJ3UGMB8GA1UdIwQYMBaAFD5n2/eCICiT8fta99b8CdABj98G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE1NC9EODhDRDlENkRD MzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tKUHgtMXIzMXZ3SjBBR1Az d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BtZmI5NElnS0pQeC0xcjMxdndKMEFHUDN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE1NC9EODhDRDlENkRDMzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tK UHgtMXIzMXZ3SjBBR1Azd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsSEDBdWRx80r7CHbrIxtV0m3tkslHHqmKnKyHiV4SqeFqDvLaljIF X1QtlObaEy11MRDg0E6siwCpE1YNkNaIkmBtzHGOySKQxZY5J3BaRTDCqGm4wAt8 Bmbaz/Djfmdow0fW6mGWzDYSA7Tds7TMkxOEvWU7v/iMlMROpcgoFyHN7HEE8vMk u9QNpxrocgSxK13cB/12VM8C+vudT313GG4BZaEyriM7rLKKoJcUdiSlDX7KMHO8 n1qkg1ezmgSlBM9ksBMAL3jZYeWakMI2KOnZNm8YJ3OU6I3DXvgsGK6m3b8T2qAm VttivD2Hkf/QUh6r7BADJ6ncsDoaZ8AG -----END CERTIFICATE-----Generated at Fri May 31 06:49:18 2024 by rpki-client on console-ams.rpki-client.org