$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft File: PbshszWLCF8IIbTcBqkanEXELLw.mft (raw, json) Hash identifier: p5HCGYVOG8vVm2DA+C2VD3ujCOPQyRxDwQeGED7lIMA= Subject key identifier: 40:44:F1:B2:59:5E:90:3C:B7:0F:21:1F:3C:2B:D6:1F:54:D6:5E:85 Authority key identifier: 3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC Certificate issuer: /CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft Manifest number: C5 Signing time: Sun 19 May 2024 06:17:19 +0000 Manifest this update: Sun 19 May 2024 06:17:18 +0000 Manifest next update: Sun 26 May 2024 06:17:18 +0000 Files and hashes: 1: PbshszWLCF8IIbTcBqkanEXELLw.crl (hash: pe7JDJiYQfourY86OckRIH+avoLPwlpw55IkXArBn/g=) 2: 0FFD0884E94C11EDB883CD14C4F9AE02.roa (hash: 4YTkIvynJ9nOrrUxdprSixi1+madWttV9gDLYZ8NR0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC Validity Not Before: May 19 06:17:18 2024 GMT Not After : May 26 06:17:18 2024 GMT Subject: CN=6649996f-c055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:c2:1a:44:e7:42:78:d1:5b:4f:1c:6c:e3: 4e:4b:b6:2c:7d:2a:29:ec:a8:f9:3e:8e:03:9a:e5: 9d:02:48:87:a7:47:29:ef:18:83:b3:72:e3:e9:ad: 4d:b4:ac:e2:c2:1c:f7:7d:9c:e4:02:b7:e1:12:7b: 27:35:8b:4f:76:21:5a:53:6b:12:14:f0:82:93:a2: 8b:a2:3a:40:98:33:44:cc:32:ac:1d:da:c2:47:94: fe:b6:78:c7:af:5d:d1:3c:d2:ac:1b:ae:f5:f5:cf: 1d:aa:5d:67:dc:24:c8:38:40:db:b5:ea:73:d2:28: 05:23:36:fe:ee:f0:27:fa:be:52:18:78:da:81:9e: 0e:8b:70:8d:98:90:4e:19:8c:ec:c8:e2:80:d0:b3: e4:ee:e4:e6:b2:2d:f7:be:72:cc:95:c5:65:c9:fb: 00:4a:7e:d2:a2:04:ef:1a:af:92:6e:80:34:45:14: 4a:f6:a5:ea:b0:a2:55:9e:ae:9c:ac:12:65:db:ae: 91:23:9c:19:db:54:b9:e3:8a:6d:23:69:52:84:e4: de:81:bf:50:16:8a:99:2a:da:f2:e8:82:fa:b5:31: 4f:7f:b7:dc:04:06:62:f5:68:04:f8:b4:97:51:3b: e2:f0:04:61:79:f0:a8:5e:41:71:65:e3:93:32:71: e9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:44:F1:B2:59:5E:90:3C:B7:0F:21:1F:3C:2B:D6:1F:54:D6:5E:85 X509v3 Authority Key Identifier: keyid:3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:06:42:6e:80:44:93:ce:d0:8a:9d:3e:22:a5:48:e2:4b:b4: 3e:2c:a5:5b:12:ac:48:67:c6:1e:42:aa:fd:61:1e:df:78:84: 4b:2c:e9:8a:f4:79:19:a0:4d:68:32:b7:13:79:e0:fc:33:ea: 09:ce:f6:a7:fc:d8:f2:94:6c:f3:cf:3c:ee:23:35:fb:46:33: 33:3d:66:78:f6:38:9c:e1:c8:08:33:34:7b:a6:10:f4:e7:4a: f4:1c:46:d5:3d:b0:86:45:84:f7:b5:cf:62:6b:1d:e6:2d:31: 6e:e7:ae:60:62:f9:b4:c9:de:91:3a:7c:fe:d5:4c:5f:40:3a: 80:3a:22:25:b6:69:1f:85:91:7b:86:1b:0b:2a:7b:f1:b2:72: 4f:b0:6f:87:d3:14:3b:6b:42:b5:56:74:eb:8b:9c:78:00:ae: 9d:2c:48:44:93:ae:86:4f:d2:5c:6f:aa:ff:1f:de:e2:e2:fe: 84:f2:0f:67:c6:f3:e7:35:9a:25:60:5e:e5:58:13:66:5d:cd: 3b:b7:24:64:c3:41:a3:a0:88:0f:72:c7:7d:f6:5f:ff:f3:d0: 47:a7:a5:b0:b0:db:56:99:9a:d3:55:04:a1:2a:52:a5:34:48: a0:51:a1:d8:11:95:8a:95:0c:3d:db:fc:11:50:0b:f5:d0:6c: 4c:73:e0:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCNUUxMTAvBgNVBAUTKDNEQkIyMUIzMzU4QjA4NUYwODIxQjREQzA2QTkxQTlD NDVDNDJDQkMwHhcNMjQwNTE5MDYxNzE4WhcNMjQwNTI2MDYxNzE4WjAYMRYwFAYD VQQDEw02NjQ5OTk2Zi1jMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwt3CGkTnQnjRW08cbONOS7YsfSop7Kj5Po4DmuWdAkiHp0cp7xiDs3Lj6a1N tKziwhz3fZzkArfhEnsnNYtPdiFaU2sSFPCCk6KLojpAmDNEzDKsHdrCR5T+tnjH r13RPNKsG6719c8dql1n3CTIOEDbtepz0igFIzb+7vAn+r5SGHjagZ4Oi3CNmJBO GYzsyOKA0LPk7uTmsi33vnLMlcVlyfsASn7SogTvGq+SboA0RRRK9qXqsKJVnq6c rBJl266RI5wZ21S544ptI2lShOTegb9QFoqZKtry6IL6tTFPf7fcBAZi9WgE+LSX UTvi8ARhefCoXkFxZeOTMnHpbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBE8bJZ XpA8tw8hHzwr1h9U1l6FMB8GA1UdIwQYMBaAFD27IbM1iwhfCCG03AapGpxFxCy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI1RS9GODcyM0ZFNEU5 NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENGOElJYlRjQnFrYW5FWEVM THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bic2hzeldMQ0Y4SUliVGNCcWthbkVYRUxMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI1RS9GODcyM0ZFNEU5NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENG OElJYlRjQnFrYW5FWEVMTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1BkJugESTztCKnT4ipUjiS7Q+LKVbEqxIZ8YeQqr9YR7feIRLLOmK 9HkZoE1oMrcTeeD8M+oJzvan/NjylGzzzzzuIzX7RjMzPWZ49jic4cgIMzR7phD0 50r0HEbVPbCGRYT3tc9iax3mLTFu565gYvm0yd6ROnz+1UxfQDqAOiIltmkfhZF7 hhsLKnvxsnJPsG+H0xQ7a0K1VnTri5x4AK6dLEhEk66GT9Jcb6r/H97i4v6E8g9n xvPnNZolYF7lWBNmXc07tyRkw0GjoIgPcsd99l//89BHp6WwsNtWmZrTVQShKlKl NEigUaHYEZWKlQw92/wRUAv10GxMc+CP -----END CERTIFICATE-----Generated at Sun May 19 07:40:42 2024 by rpki-client on console-fra.rpki-client.org