$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json) Hash identifier: LwPVEWutQWRjkENMjbhJ3d4jDlhvNzappi9QTiJOip8= Subject key identifier: 17:27:B4:FE:24:33:E9:45:3F:C7:9E:B8:77:0F:30:21:72:E9:52:BF Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft Manifest number: 2C Signing time: Sun 19 May 2024 08:26:52 +0000 Manifest this update: Sun 19 May 2024 08:26:51 +0000 Manifest next update: Sun 26 May 2024 08:26:51 +0000 Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: Co5Y+uW4YG/mHtNVlPX95Fb+S2i3yDsuwfottXc1I0Q=) 2: 6DC4EA46D4D711EE89EF955BC4F9AE02.roa (hash: TFvuT2j7xhOQ9DnXd5Wz8L9B2PIED3NsSBdgGGNvbjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Validity Not Before: May 19 08:26:51 2024 GMT Not After : May 26 08:26:51 2024 GMT Subject: CN=6649b7cb-5274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:89:d9:49:ba:52:75:4d:ad:22:54:9b:55: 2e:bd:52:b9:0c:f6:31:9a:fa:e2:42:6c:46:c8:cd: 5b:ea:ad:0a:6a:3b:87:ff:51:9c:2c:9d:3c:81:31: 0c:cb:1c:84:cf:eb:cc:cc:73:56:32:43:f5:04:89: cc:cf:75:3b:31:8d:0b:0a:30:15:b9:cb:5c:ba:4e: 95:3a:0d:fd:99:f4:25:f3:ae:1a:92:22:9d:af:e4: 76:60:7c:9e:87:d5:7f:e9:d5:f9:e2:4e:f5:60:99: 08:7e:a7:a6:95:29:1c:61:23:09:45:be:42:e5:4a: c7:cf:be:67:bc:de:2d:53:d3:59:73:28:76:9a:d3: 33:a5:cb:df:23:66:94:01:09:f2:eb:d5:f1:96:a4: 84:b0:bc:47:bb:1f:45:00:51:8e:71:88:41:f8:21: 90:c2:c6:14:cd:e2:cf:4c:c8:2b:41:ce:80:2a:36: 97:be:bd:b9:fa:d4:7b:ac:6c:bf:e7:77:82:e7:11: 3f:c6:0b:28:25:3c:bc:3e:36:ab:d4:75:b3:77:f5: 56:35:f7:02:58:ff:45:f6:4d:36:c3:cc:ef:2b:e1: bf:93:91:f5:a7:d4:22:98:2e:eb:ab:6d:71:10:83: 19:30:2f:be:31:33:30:0e:b7:3c:5d:e3:80:9d:da: 13:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:27:B4:FE:24:33:E9:45:3F:C7:9E:B8:77:0F:30:21:72:E9:52:BF X509v3 Authority Key Identifier: keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:05:6a:fe:fd:f8:b8:82:3a:de:d1:ca:d2:6a:09:76:8b:17: 22:ca:7e:f6:33:17:be:5e:c9:3f:a0:47:e1:48:dd:d1:ad:98: 55:ff:ce:df:59:39:5e:97:40:a7:17:af:11:2f:14:7c:bc:d0: a1:a1:d1:31:60:99:0d:a0:47:2e:12:a5:d5:28:9a:6a:d0:95: 08:ec:cc:31:b0:82:6e:61:71:6d:ef:19:77:0b:06:18:a3:45: b6:ad:25:ab:57:f7:67:50:d8:3a:af:aa:76:e7:4b:0e:ac:d6: 3e:8c:ff:71:2b:46:c7:47:4f:c6:74:39:8b:d0:b5:75:39:cc: 88:76:0d:10:10:88:d2:61:9b:11:78:97:18:e1:be:2e:00:c2: 09:51:9a:84:d8:6d:5c:99:b0:57:8a:52:71:4f:9e:5c:f5:b3: 81:55:ee:6b:7e:ab:92:0d:c9:5a:f5:85:87:a0:0e:62:04:2a: 79:ce:75:73:e5:b9:ae:58:35:59:82:c9:f4:1a:ff:0b:cf:e9: a8:37:34:f4:97:78:b0:27:43:d5:15:aa:ad:76:9e:cd:82:73: 24:05:99:82:2f:d3:eb:65:93:74:36:f7:67:bf:5b:d5:43:60: a2:9a:93:09:87:3f:e8:db:c9:87:cf:0e:04:7b:89:20:01:f1: 62:90:78:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MEQ3MjExMC8GA1UEBRMoQTU0Q0I3NzQyQUFCQ0Y0RTU4RTVENEMxRjNCOUQxMkRB RDkxQjQwNjAeFw0yNDA1MTkwODI2NTFaFw0yNDA1MjYwODI2NTFaMBgxFjAUBgNV BAMTDTY2NDliN2NiLTUyNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4aInZSbpSdU2tIlSbVS69UrkM9jGa+uJCbEbIzVvqrQpqO4f/UZwsnTyBMQzL HITP68zMc1YyQ/UEiczPdTsxjQsKMBW5y1y6TpU6Df2Z9CXzrhqSIp2v5HZgfJ6H 1X/p1fniTvVgmQh+p6aVKRxhIwlFvkLlSsfPvme83i1T01lzKHaa0zOly98jZpQB CfLr1fGWpISwvEe7H0UAUY5xiEH4IZDCxhTN4s9MyCtBzoAqNpe+vbn61HusbL/n d4LnET/GCyglPLw+NqvUdbN39VY19wJY/0X2TTbDzO8r4b+TkfWn1CKYLuurbXEQ gxkwL74xMzAOtzxd44Cd2hOpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFye0/iQz 6UU/x564dw8wIXLpUr8wHwYDVR0jBBgwFoAUpUy3dCqrz05Y5dTB87nRLa2RtAYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwRDcyLzZBQzk4OUYwRDQ4 MjExRUU4N0Q1RDcyNEM0RjlBRTAyL3BVeTNkQ3FyejA1WTVkVEI4N25STGEyUnRB WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcFV5M2RDcXJ6MDVZNWRUQjg3blJMYTJSdEFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw RDcyLzZBQzk4OUYwRDQ4MjExRUU4N0Q1RDcyNEM0RjlBRTAyL3BVeTNkQ3FyejA1 WTVkVEI4N25STGEyUnRBWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG0Fav79+LiCOt7RytJqCXaLFyLKfvYzF75eyT+gR+FI3dGtmFX/zt9Z OV6XQKcXrxEvFHy80KGh0TFgmQ2gRy4SpdUommrQlQjszDGwgm5hcW3vGXcLBhij RbatJatX92dQ2DqvqnbnSw6s1j6M/3ErRsdHT8Z0OYvQtXU5zIh2DRAQiNJhmxF4 lxjhvi4AwglRmoTYbVyZsFeKUnFPnlz1s4FV7mt+q5INyVr1hYegDmIEKnnOdXPl ua5YNVmCyfQa/wvP6ag3NPSXeLAnQ9UVqq12ns2CcyQFmYIv0+tlk3Q292e/W9VD YKKakwmHP+jbyYfPDgR7iSAB8WKQeLk= -----END CERTIFICATE-----Generated at Sun May 19 09:32:17 2024 by rpki-client on console-ams.rpki-client.org