$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json) Hash identifier: s12gJmOjX9L6cA4h5dFDrhjLI4zJp2JgDm/5tko5zVc= Subject key identifier: E9:BF:C2:5E:D7:AA:A1:CE:27:7F:2C:C3:9C:D2:18:24:64:0A:D1:9E Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Certificate serial: 0A54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft Manifest number: 0A4D Signing time: Thu 30 May 2024 20:52:10 +0000 Manifest this update: Thu 30 May 2024 20:52:10 +0000 Manifest next update: Thu 06 Jun 2024 20:52:10 +0000 Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: AuJPrivv2JsSLMgblhojbNePD1h8t8+LseozaIeMA+U=) 2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: 0iqs/HxuwqHawKwVtyf9NZs5o720KQbaDZmDxQoYfvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 20:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2644 (0xa54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Validity Not Before: May 30 20:52:10 2024 GMT Not After : Jun 6 20:52:10 2024 GMT Subject: CN=6658e6fa-8ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:75:94:e5:e3:e8:c9:01:36:a6:bc:13:a9:15: 99:a4:fb:92:fb:ec:d9:de:c8:c9:ca:72:0a:db:6d: 8e:3e:c3:aa:c2:7d:80:1e:a2:61:55:71:07:a9:94: f1:48:8f:db:08:81:69:21:78:3f:db:bf:a8:fd:7f: 88:26:75:29:cf:7c:07:47:ba:68:5a:8c:c2:56:58: 0c:89:c2:c9:f9:9e:2e:86:35:14:d0:fd:8d:53:b1: b0:2d:88:2f:36:c1:09:fa:d3:96:24:c3:e1:5d:76: 71:1c:a6:4c:3c:58:72:14:bf:30:ae:a1:06:38:37: e7:c4:ec:e2:7d:82:e9:85:6a:75:3f:6a:d3:3b:ee: 94:a0:28:72:34:a0:55:99:63:6d:00:47:16:50:75: d3:ad:dc:cc:2c:2c:be:cc:9f:c7:7c:4b:a9:5b:c3: 4e:f4:20:1e:8a:41:dd:a1:0b:b7:b1:f8:38:0d:c7: 6b:1b:a0:9b:c5:46:c8:5c:a5:9e:70:06:9b:b9:50: 9b:dd:48:48:13:c1:1d:9c:de:0c:c1:7f:e5:72:d2: 50:45:4c:e6:c0:b2:b8:33:44:48:97:7c:e1:11:2c: 25:64:36:ef:c9:1c:a0:3e:e4:f2:1b:17:09:5a:36: 56:87:5f:86:6b:6a:59:5a:f2:97:70:c0:98:23:48: a3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BF:C2:5E:D7:AA:A1:CE:27:7F:2C:C3:9C:D2:18:24:64:0A:D1:9E X509v3 Authority Key Identifier: keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:0c:56:8c:0a:fa:ab:60:7b:c1:9d:49:68:6a:9e:aa:15:c6: e1:63:37:dd:c2:f1:f3:32:e2:bf:ce:f7:59:e6:fb:dc:f1:38: fc:8e:63:5c:de:ef:6a:c9:a9:a7:a7:c8:dc:fa:5d:88:38:fd: 23:28:2c:2b:8d:c2:80:a4:cf:bb:3e:77:ad:c7:51:52:40:e8: fc:c2:f9:eb:4f:10:4a:48:db:e0:0a:2a:ab:95:ad:e9:2b:89: e9:37:89:6e:6e:d1:2b:c4:0e:50:ef:54:ca:f3:a5:44:50:a7: c7:8a:7a:62:f4:70:2e:b2:8a:e7:7f:ab:b7:b3:af:93:d7:2f: 9e:2a:78:93:b1:09:8d:a8:63:d6:3b:04:d1:7a:16:dd:30:81: 23:52:ca:ec:0d:9d:bd:69:d6:65:07:18:47:4e:d6:6e:eb:e6: 62:df:12:a5:70:d8:df:b3:5a:eb:8b:57:c6:e2:3b:88:07:e8: f6:2c:c5:60:2f:3f:00:eb:c7:36:28:54:b5:54:3a:e2:50:76: b5:88:06:4d:96:b1:bb:4d:a4:77:b9:f1:1a:f5:19:2f:68:49: 50:5c:5b:33:ca:27:75:68:af:6f:6a:b9:4d:f4:f0:d3:e9:0f: 89:3e:04:d2:91:c5:15:df:42:c3:67:6c:00:2b:b8:ca:de:ec: 60:b5:ec:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz NThGNTJGRUYwHhcNMjQwNTMwMjA1MjEwWhcNMjQwNjA2MjA1MjEwWjAYMRYwFAYD VQQDEw02NjU4ZTZmYS04ZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13WU5ePoyQE2prwTqRWZpPuS++zZ3sjJynIK222OPsOqwn2AHqJhVXEHqZTx SI/bCIFpIXg/27+o/X+IJnUpz3wHR7poWozCVlgMicLJ+Z4uhjUU0P2NU7GwLYgv NsEJ+tOWJMPhXXZxHKZMPFhyFL8wrqEGODfnxOzifYLphWp1P2rTO+6UoChyNKBV mWNtAEcWUHXTrdzMLCy+zJ/HfEupW8NO9CAeikHdoQu3sfg4DcdrG6CbxUbIXKWe cAabuVCb3UhIE8EdnN4MwX/lctJQRUzmwLK4M0RIl3zhESwlZDbvyRygPuTyGxcJ WjZWh1+Ga2pZWvKXcMCYI0ijrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOm/wl7X qqHOJ38sw5zSGCRkCtGeMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi9GOTk1MkE1QzQzMDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4 V1dWblM4QUNveE0xajFMLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgDFaMCvqrYHvBnUloap6qFcbhYzfdwvHzMuK/zvdZ5vvc8Tj8jmNc 3u9qyamnp8jc+l2IOP0jKCwrjcKApM+7Pnetx1FSQOj8wvnrTxBKSNvgCiqrla3p K4npN4lubtErxA5Q71TK86VEUKfHinpi9HAusornf6u3s6+T1y+eKniTsQmNqGPW OwTRehbdMIEjUsrsDZ29adZlBxhHTtZu6+Zi3xKlcNjfs1rri1fG4juIB+j2LMVg Lz8A68c2KFS1VDriUHa1iAZNlrG7TaR3ufEa9RkvaElQXFszyid1aK9varlN9PDT 6Q+JPgTSkcUV30LDZ2wAK7jK3uxgtexg -----END CERTIFICATE-----Generated at Thu May 30 21:37:29 2024 by rpki-client on console-fra.rpki-client.org