$ rpki-client -vvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft File: PNcVUq-qATj5pk4BYO7wYJYGUyM.mft (raw, json) Hash identifier: h+zuMqP7/h+xwnKesQzr3J/wXbGbteJVbvn2wn2+6qg= Subject key identifier: DC:DC:93:2D:B3:93:CF:CA:C5:C0:02:0E:E4:4E:8F:1F:8E:36:21:BA Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23 Certificate issuer: /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft Manifest number: 62 Signing time: Sun 19 May 2024 07:39:53 +0000 Manifest this update: Sun 19 May 2024 07:39:52 +0000 Manifest next update: Sun 26 May 2024 07:39:52 +0000 Files and hashes: 1: PNcVUq-qATj5pk4BYO7wYJYGUyM.crl (hash: vqNGkcOunhPwtUISsvr/p9c4HX6hG6s8kGPzYzpNPsM=) 2: 4F7CFB9A82B711EE997EB92AC4F9AE02.roa (hash: TJ34Wyoap/5yzhKFKcWfCR4OzCGqCkt7A3M9uL0mJ3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323 Validity Not Before: May 19 07:39:52 2024 GMT Not After : May 26 07:39:52 2024 GMT Subject: CN=6649acc8-4254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:85:33:bc:e3:20:9b:b2:41:8c:1a:0f:ad: 91:fa:5e:33:97:00:1b:84:e3:f1:0d:6e:e0:6c:a4: 1e:7f:fb:f1:33:d0:72:2a:50:1b:bc:95:30:1f:61: 03:d6:e6:a9:1f:fd:5c:12:9e:70:94:a5:d2:07:60: 49:7f:d0:41:11:ad:0a:a1:36:bc:1b:e0:b9:fc:79: 19:3a:10:6c:74:02:19:5b:4e:23:72:dc:4c:e8:32: d7:f1:26:b5:54:5c:03:3d:fa:b1:20:37:44:84:56: 2c:b4:c4:8b:da:26:bd:b8:31:cd:a1:3e:c6:11:66: f0:0a:09:9a:16:7a:8d:b1:25:c7:89:e3:1a:af:cb: d4:94:e9:bf:9c:c4:16:a2:8a:2c:0e:ec:d6:31:f1: 2b:49:f3:33:fd:e9:c9:29:ed:9e:e7:5a:bb:4e:0d: 85:03:bb:b8:9c:a5:d8:d9:51:20:69:a5:c6:9a:9e: b1:9f:51:f1:a4:96:48:09:9b:a5:1a:fd:b8:b8:b3: 47:f3:98:34:20:ee:ca:bc:f6:af:5b:8d:d3:50:83: b8:e7:a9:78:a6:90:1d:50:c7:eb:06:81:2c:b0:aa: a9:fe:e3:12:08:a4:54:1e:a5:65:b5:46:97:90:e3: b9:7d:70:3d:fd:bf:cc:48:5b:47:2b:0f:10:f4:a1: 10:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DC:93:2D:B3:93:CF:CA:C5:C0:02:0E:E4:4E:8F:1F:8E:36:21:BA X509v3 Authority Key Identifier: keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a4:d7:1e:29:3d:d6:5f:83:25:67:66:4c:9a:7c:72:0e:03: 49:61:35:1c:ae:db:f2:d7:ed:87:af:77:9a:c3:07:ee:14:06: 9f:ff:67:54:e8:a3:19:da:d0:af:90:0c:0f:d2:9e:fd:20:42: 16:6e:b6:81:4d:8c:bc:24:5f:1c:3f:d1:e4:b9:7f:d0:28:27: 07:b5:87:1e:db:cd:6a:bd:68:ee:2f:99:45:ab:16:0b:7c:3b: 35:fd:2d:d6:1a:ce:84:be:26:2c:8c:c7:99:fd:88:dd:ea:bb: 9f:d7:ab:c8:ed:cb:02:ad:e7:a2:cb:f4:ef:6b:fb:bc:f9:34: 01:08:d0:95:6e:41:4e:3d:5e:3e:59:fe:8e:42:67:ae:6e:39: 59:af:d5:dc:69:22:aa:11:0a:8e:f2:99:d4:1f:8d:d3:2e:cf: 59:7e:8a:f9:4f:49:12:0c:75:49:85:6f:88:1c:22:7b:0d:c6: b2:c8:a6:7d:29:ba:37:6a:2d:1e:41:3c:6c:25:2f:80:86:ca: 6c:57:4e:f3:d9:b7:03:4f:56:b1:44:69:8d:bc:06:84:ab:91: 37:26:6e:79:60:3d:f9:a3:56:3a:24:fb:97:09:a8:fb:3a:f3: 19:81:67:6b:c8:a2:bf:f2:10:66:4c:5a:8e:a3:ec:9e:1b:33: 1b:2c:d8:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkNFMTExMC8GA1UEBRMoM0NENzE1NTJBRkFBMDEzOEY5QTY0RTAxNjBFRUYwNjA5 NjA2NTMyMzAeFw0yNDA1MTkwNzM5NTJaFw0yNDA1MjYwNzM5NTJaMBgxFjAUBgNV BAMTDTY2NDlhY2M4LTQyNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEUoUzvOMgm7JBjBoPrZH6XjOXABuE4/ENbuBspB5/+/Ez0HIqUBu8lTAfYQPW 5qkf/VwSnnCUpdIHYEl/0EERrQqhNrwb4Ln8eRk6EGx0AhlbTiNy3EzoMtfxJrVU XAM9+rEgN0SEViy0xIvaJr24Mc2hPsYRZvAKCZoWeo2xJceJ4xqvy9SU6b+cxBai iiwO7NYx8StJ8zP96ckp7Z7nWrtODYUDu7icpdjZUSBppcaanrGfUfGklkgJm6Ua /bi4s0fzmDQg7sq89q9bjdNQg7jnqXimkB1Qx+sGgSywqqn+4xIIpFQepWW1RpeQ 47l9cD39v8xIW0crDxD0oRDtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3NyTLbOT z8rFwAIO5E6PH442IbowHwYDVR0jBBgwFoAUPNcVUq+qATj5pk4BYO7wYJYGUyMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2Q0UxL0U4ODFFOEVDODJC NjExRUU5QkZDMDYxREM0RjlBRTAyL1BOY1ZVcS1xQVRqNXBrNEJZTzd3WUpZR1V5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUE5jVlVxLXFBVGo1cGs0QllPN3dZSllHVXlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 Q0UxL0U4ODFFOEVDODJCNjExRUU5QkZDMDYxREM0RjlBRTAyL1BOY1ZVcS1xQVRq NXBrNEJZTzd3WUpZR1V5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABGk1x4pPdZfgyVnZkyafHIOA0lhNRyu2/LX7Yevd5rDB+4UBp//Z1To oxna0K+QDA/Snv0gQhZutoFNjLwkXxw/0eS5f9AoJwe1hx7bzWq9aO4vmUWrFgt8 OzX9LdYazoS+JiyMx5n9iN3qu5/Xq8jtywKt56LL9O9r+7z5NAEI0JVuQU49Xj5Z /o5CZ65uOVmv1dxpIqoRCo7ymdQfjdMuz1l+ivlPSRIMdUmFb4gcInsNxrLIpn0p ujdqLR5BPGwlL4CGymxXTvPZtwNPVrFEaY28BoSrkTcmbnlgPfmjVjok+5cJqPs6 8xmBZ2vIor/yEGZMWo6j7J4bMxss2Hg= -----END CERTIFICATE-----Generated at Sun May 19 08:25:05 2024 by rpki-client on console-ams.rpki-client.org