$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft File: plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json) Hash identifier: gsJ7o7IYV+hEmE7nJScLrw2z0ApLzx6IWDW6iClYVyY= Subject key identifier: B2:4E:14:D9:CB:D5:08:E9:E0:49:AB:4A:3A:2D:F8:A8:01:C4:13:56 Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D Certificate issuer: /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Certificate serial: 275D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft Manifest number: 2759 Signing time: Sat 18 May 2024 15:53:55 +0000 Manifest this update: Sat 18 May 2024 15:53:55 +0000 Manifest next update: Sat 25 May 2024 15:53:55 +0000 Files and hashes: 1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: TAA2dVpNGmwjBXChYNgHuWWpfRyG44FdwB75mmtKZPM=) 2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: kQP/i0TgDmmtOwE7aHIlHdoy8Fb2ZdFNn27ehLkF3FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10077 (0x275d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Validity Not Before: May 18 15:53:55 2024 GMT Not After : May 25 15:53:55 2024 GMT Subject: CN=6648cf13-cb0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:4e:fc:93:b2:83:2f:5c:48:d4:d2:e7:1b: bb:42:d1:35:9f:d8:54:94:34:c1:c9:6b:95:24:e9: 2f:e3:b1:eb:a0:12:fc:79:10:b7:5c:9c:26:67:a8: 91:8c:3d:de:1f:5a:0b:83:6e:d0:43:05:bc:1a:ec: 2c:ae:8d:8e:01:32:e8:8a:98:0d:c0:c1:38:1e:f7: 9f:bd:0d:0f:5c:64:6d:b8:52:92:af:d2:df:45:35: b3:5b:26:15:49:ea:fe:dc:59:3f:8c:68:89:aa:e8: 2c:b7:bb:1c:a3:e8:07:fe:8b:99:57:9b:9e:17:b7: 32:6d:6e:80:76:ca:9f:49:d2:2a:a0:ef:bd:91:2d: 0a:1f:33:a7:88:b0:a3:c6:7a:27:7c:48:d2:82:61: b3:3e:eb:57:38:67:d4:35:78:06:73:33:7a:bb:37: 62:1f:a2:ff:c7:5f:55:7c:bb:41:ca:f4:b5:01:1f: f1:92:7b:5f:4d:f4:52:c9:0a:f9:21:32:70:29:46: 9a:39:b4:67:59:0d:04:93:20:09:db:26:e4:45:8c: 2f:7a:1c:45:85:96:b5:b5:6b:01:10:73:92:82:08: bd:11:dd:10:ce:d0:22:f3:24:bd:d7:1b:09:2c:15: b0:b3:9b:12:94:7c:87:50:8b:b1:02:9e:2a:61:21: af:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4E:14:D9:CB:D5:08:E9:E0:49:AB:4A:3A:2D:F8:A8:01:C4:13:56 X509v3 Authority Key Identifier: keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:44:1e:3a:60:4e:b4:fb:30:ea:cb:ee:a5:f1:72:9b:72:f6: c9:58:43:ad:be:77:30:7c:b5:28:c6:e4:2f:01:78:19:e3:39: 2c:1e:c4:ab:52:ec:e1:ff:ee:85:ed:5e:f6:cb:83:d5:4f:4a: ed:4f:26:19:d2:b3:ae:60:23:36:cf:5b:a2:44:2b:e2:57:ea: 25:da:cf:86:ec:28:4b:32:15:d0:08:c3:f2:3c:a0:dc:0f:44: 5f:41:64:19:91:6c:f0:15:e6:07:7a:51:d6:42:51:b3:4f:a0: c2:d0:a6:b4:af:e1:ec:cb:91:fd:88:6e:9d:53:0a:ee:a5:30: 09:2e:ac:49:b9:da:6e:b0:4c:bf:b8:4e:74:db:55:75:51:6e: df:76:dc:1e:57:29:09:f3:7d:2d:e4:9a:2a:9e:29:4f:f8:30: e9:ab:e0:67:01:b8:90:9e:9b:b0:46:0a:70:19:b7:ed:eb:52: 24:ac:6a:ac:31:1c:2b:d8:c8:87:de:f6:7a:33:f4:99:fd:39: da:ec:ee:f2:d6:38:52:c1:19:e8:b8:c6:12:98:54:3c:83:7e: 5a:24:05:84:58:87:9f:74:d6:b2:c3:38:50:63:a3:54:de:8d: 9a:41:a3:91:ea:bc:c0:31:6e:32:53:85:f4:2f:56:be:08:16: d5:d5:b3:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKEE2NTZGNjBEM0YxMTY0MUE1NzFCRDFGRkFEMjQ2MERE NDU3NjMzMkQwHhcNMjQwNTE4MTU1MzU1WhcNMjQwNTI1MTU1MzU1WjAYMRYwFAYD VQQDEw02NjQ4Y2YxMy1jYjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtC5O/JOygy9cSNTS5xu7QtE1n9hUlDTByWuVJOkv47HroBL8eRC3XJwmZ6iR jD3eH1oLg27QQwW8Guwsro2OATLoipgNwME4HvefvQ0PXGRtuFKSr9LfRTWzWyYV Ser+3Fk/jGiJqugst7sco+gH/ouZV5ueF7cybW6AdsqfSdIqoO+9kS0KHzOniLCj xnonfEjSgmGzPutXOGfUNXgGczN6uzdiH6L/x19VfLtByvS1AR/xkntfTfRSyQr5 ITJwKUaaObRnWQ0EkyAJ2ybkRYwvehxFhZa1tWsBEHOSggi9Ed0QztAi8yS91xsJ LBWws5sSlHyHUIuxAp4qYSGvgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJOFNnL 1Qjp4EmrSjot+KgBxBNWMB8GA1UdIwQYMBaAFKZW9g0/EWQaVxvR/60kYN1FdjMt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9FQzg3MEI4NjhG MkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpCcFhHOUhfclNSZzNVVjJN eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BsYjJEVDhSWkJwWEc5SF9yU1JnM1VWMk15MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9FQzg3MEI4NjhGMkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpC cFhHOUhfclNSZzNVVjJNeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJRB46YE60+zDqy+6l8XKbcvbJWEOtvncwfLUoxuQvAXgZ4zksHsSr Uuzh/+6F7V72y4PVT0rtTyYZ0rOuYCM2z1uiRCviV+ol2s+G7ChLMhXQCMPyPKDc D0RfQWQZkWzwFeYHelHWQlGzT6DC0Ka0r+Hsy5H9iG6dUwrupTAJLqxJudpusEy/ uE5021V1UW7fdtweVykJ830t5JoqnilP+DDpq+BnAbiQnpuwRgpwGbft61IkrGqs MRwr2MiH3vZ6M/SZ/Tna7O7y1jhSwRnouMYSmFQ8g35aJAWEWIefdNaywzhQY6NU 3o2aQaOR6rzAMW4yU4X0L1a+CBbV1bMe -----END CERTIFICATE-----Generated at Sat May 18 16:20:15 2024 by rpki-client on console-fra.rpki-client.org