$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft File: PdeY67rvfndLLyx3rvsipM171oY.mft (raw, json) Hash identifier: FBhozb8/TFTnyeY/CTKMY3uGtp9kBLRpE/j8+kTf8Qo= Subject key identifier: 05:91:21:91:DD:9A:D9:D0:8F:35:F7:E2:23:06:5D:BF:DC:C9:0A:25 Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86 Certificate issuer: /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686 Certificate serial: 063A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft Manifest number: 0630 Signing time: Sat 18 May 2024 23:44:38 +0000 Manifest this update: Sat 18 May 2024 23:44:37 +0000 Manifest next update: Sat 25 May 2024 23:44:37 +0000 Files and hashes: 1: PdeY67rvfndLLyx3rvsipM171oY.crl (hash: 6Y37oVy0YEAjYf1Tln56ZAYA4CL/B1IO8+MnqsB9mmM=) 2: 23D40B5049BC11EB98F78F66C4F9AE02.roa (hash: kpB95K4qHI4l0tvIJAO0uC6IfH9Xie8cZdzl8Ew5UCk=) 3: 246D53F049BC11EB98F78F66C4F9AE02.roa (hash: xY1WqwDewRwzlD4qXf5hbGAS9KLjfg4UZ9/Wz9PDhEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686 Validity Not Before: May 18 23:44:37 2024 GMT Not After : May 25 23:44:37 2024 GMT Subject: CN=66493d66-66b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e3:e1:f5:f0:22:59:af:d5:22:9c:a0:5c:21: 70:a5:f7:34:a7:61:f6:d9:0f:07:92:9f:7b:94:e7: b6:02:d9:93:19:fb:ac:4e:bc:05:b1:e7:aa:fc:b8: cb:f1:aa:7b:24:24:6a:aa:11:45:54:48:6c:48:e5: 50:34:9e:32:ba:86:db:1b:bf:d7:ef:35:e8:e1:f3: 4a:89:32:f9:e8:d6:ef:1f:fa:9a:d5:7a:c1:90:78: 97:75:f7:43:0a:30:15:75:ca:97:ff:5b:09:73:59: 88:f2:89:0b:1e:96:4e:7f:6c:86:e0:5a:b0:c0:aa: d4:9b:7a:cc:49:28:4e:cb:c0:82:32:d0:b9:c8:11: 43:e4:6e:a7:ee:fc:8d:62:b1:aa:37:38:9b:03:08: 9b:90:fe:86:db:8e:3c:11:6f:a6:29:8c:2f:6e:c9: 24:45:fb:83:72:d8:5b:d9:e5:db:fe:ea:e5:99:22: 65:c1:5c:b7:f4:bf:fc:f2:b0:86:c7:3b:70:09:07: e1:60:0a:92:be:98:37:73:d3:cc:13:28:14:a3:ed: 3e:10:6a:b3:3a:b0:f3:41:58:d4:28:94:7d:fd:77: 14:c8:0c:9a:de:a3:f0:a4:33:b5:63:f2:60:e5:24: 93:c3:a8:ae:ac:39:d1:76:49:30:8c:79:d9:35:1e: e0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:91:21:91:DD:9A:D9:D0:8F:35:F7:E2:23:06:5D:BF:DC:C9:0A:25 X509v3 Authority Key Identifier: keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:49:e9:79:63:0f:c8:d9:4c:6d:6d:b0:46:ec:e6:fa:04:6e: 8c:5e:cf:26:eb:ad:5e:52:fc:ee:b5:f3:61:a9:6b:e3:cb:0a: e7:0a:d7:c8:76:58:32:e8:4f:f2:4b:09:c9:35:60:3c:f9:3b: 31:87:76:9a:24:a3:97:dd:d5:0d:27:89:03:d5:1f:3f:73:d7: 3b:16:12:ef:18:18:6e:3e:38:4b:a2:4d:9a:65:93:30:8d:0d: c3:92:63:f4:a2:55:45:9c:0b:fa:54:ec:9a:2e:1d:a7:6e:10: dd:23:32:d7:58:19:9f:bd:c1:32:17:31:7b:05:00:80:9f:e4: 2b:1a:57:61:22:ed:6c:ec:b0:a7:0e:85:32:ad:e3:db:bb:0f: c4:ef:d3:1f:f3:d3:89:fe:c0:8c:68:f3:dc:41:0c:36:67:8a: 99:d3:54:21:cf:70:ac:e6:f3:ad:e5:db:19:7d:37:b4:bc:ce: b4:0b:76:25:be:5d:40:b6:5e:4c:20:7d:ae:c0:28:fa:62:2b: 7d:ed:0b:a6:1e:a9:f6:80:c4:70:5f:ac:be:5b:85:ac:d3:0b: d9:e7:54:a7:ad:a0:58:5f:2d:9f:07:da:a4:c3:c3:21:cf:1f: 0c:e3:88:34:62:ce:92:71:bd:7d:5c:da:a9:93:d2:6b:97:59: d7:c1:f3:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMwQUUxMTAvBgNVBAUTKDNERDc5OEVCQkFFRjdFNzc0QjJGMkM3N0FFRkIyMkE0 Q0Q3QkQ2ODYwHhcNMjQwNTE4MjM0NDM3WhcNMjQwNTI1MjM0NDM3WjAYMRYwFAYD VQQDEw02NjQ5M2Q2Ni02NmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+Ph9fAiWa/VIpygXCFwpfc0p2H22Q8Hkp97lOe2AtmTGfusTrwFseeq/LjL 8ap7JCRqqhFFVEhsSOVQNJ4yuobbG7/X7zXo4fNKiTL56NbvH/qa1XrBkHiXdfdD CjAVdcqX/1sJc1mI8okLHpZOf2yG4FqwwKrUm3rMSShOy8CCMtC5yBFD5G6n7vyN YrGqNzibAwibkP6G2448EW+mKYwvbskkRfuDcthb2eXb/urlmSJlwVy39L/88rCG xztwCQfhYAqSvpg3c9PMEygUo+0+EGqzOrDzQVjUKJR9/XcUyAya3qPwpDO1Y/Jg 5SSTw6iurDnRdkkwjHnZNR7gPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWRIZHd mtnQjzX34iMGXb/cyQolMB8GA1UdIwQYMBaAFD3XmOu67353Sy8sd677IqTNe9aG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzBBRS8wMUYwMDU5QTQ5 QkExMUVCOUMxMUQ0NjNDNEY5QUUwMi9QZGVZNjdydmZuZExMeXgzcnZzaXBNMTcx b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BkZVk2N3J2Zm5kTEx5eDNydnNpcE0xNzFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzBBRS8wMUYwMDU5QTQ5QkExMUVCOUMxMUQ0NjNDNEY5QUUwMi9QZGVZNjdydmZu ZExMeXgzcnZzaXBNMTcxb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgSel5Yw/I2UxtbbBG7Ob6BG6MXs8m661eUvzutfNhqWvjywrnCtfI dlgy6E/ySwnJNWA8+Tsxh3aaJKOX3dUNJ4kD1R8/c9c7FhLvGBhuPjhLok2aZZMw jQ3DkmP0olVFnAv6VOyaLh2nbhDdIzLXWBmfvcEyFzF7BQCAn+QrGldhIu1s7LCn DoUyrePbuw/E79Mf89OJ/sCMaPPcQQw2Z4qZ01Qhz3Cs5vOt5dsZfTe0vM60C3Yl vl1Atl5MIH2uwCj6Yit97QumHqn2gMRwX6y+W4Ws0wvZ51SnraBYXy2fB9qkw8Mh zx8M44g0Ys6Scb19XNqpk9Jrl1nXwfNx -----END CERTIFICATE-----Generated at Sun May 19 00:30:19 2024 by rpki-client on console-ams.rpki-client.org