$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft File: pnlJEZesgi4NGBlxE3pGfSfCsCw.mft (raw, json) Hash identifier: Jach5phNJ/t58djJEfvwOljRcAK0D3A3N710m3ElzBA= Subject key identifier: 73:66:38:9A:1B:3F:2B:AF:FD:55:A3:26:21:B6:FE:5A:8D:BB:A2:93 Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C Certificate issuer: /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C Certificate serial: 1090 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft Manifest number: 107E Signing time: Sat 18 May 2024 17:56:55 +0000 Manifest this update: Sat 18 May 2024 17:56:55 +0000 Manifest next update: Sat 25 May 2024 17:56:55 +0000 Files and hashes: 1: pnlJEZesgi4NGBlxE3pGfSfCsCw.crl (hash: SQrejDobfszoAjYzxBUrfqzvmKy5WT4qd90cak9fOs0=) 2: DB4085480A3A11E999FA296FC4F9AE02.roa (hash: s6StiCR5DCzwNmNvLgsiRqyR3A6yRHiF6Y/AMGs7i1s=) 3: 041E1E420A3811E9BE336267C4F9AE02.roa (hash: 7/o8dLXtEHuwF70/iEtn6vcn0kuxe3RVG3Z0CClsXd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4240 (0x1090) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C Validity Not Before: May 18 17:56:55 2024 GMT Not After : May 25 17:56:55 2024 GMT Subject: CN=6648ebe7-4d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:30:41:5a:40:b8:b4:c9:fe:70:31:50:e4:07: e9:1a:43:55:88:06:4a:39:b8:37:34:f2:f1:55:9b: 0e:e7:e7:39:9d:7d:df:43:69:b0:09:b4:40:18:c2: e4:d8:6f:82:6a:ef:f1:13:0b:cd:33:95:67:a0:d8: 4b:d9:06:79:52:d3:6b:0c:43:75:cf:6e:06:22:0a: 89:7b:e1:06:99:42:7a:46:56:4d:c2:84:1e:d7:00: 91:17:63:cf:1f:5e:ef:4b:de:b4:80:d8:35:92:ef: 88:75:04:67:db:5e:46:83:2a:a3:95:66:a8:dc:35: 16:1d:3b:21:3a:22:b4:54:53:2f:f9:6b:e1:20:aa: 27:5b:da:97:a7:5f:99:6b:d0:c9:39:33:87:f4:33: b2:db:ea:3c:db:b7:06:8d:92:97:3f:56:e4:0d:06: 43:69:c6:2d:61:e1:bb:dc:e3:95:da:56:88:ad:11: 21:ff:8c:4a:1e:74:4c:8b:40:1f:3d:a8:64:64:3b: 52:7a:dd:38:96:1f:6c:7d:00:f0:c4:5e:70:5f:5c: 6d:82:be:bd:77:68:50:7a:9a:19:4c:2b:02:7c:e7: 70:d1:5b:fa:54:ae:92:0b:6c:e1:e5:5b:98:e2:ad: ce:c6:33:2a:df:41:3c:06:a4:ef:89:85:0f:27:66: 5f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:66:38:9A:1B:3F:2B:AF:FD:55:A3:26:21:B6:FE:5A:8D:BB:A2:93 X509v3 Authority Key Identifier: keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:34:c8:75:86:2a:93:4d:1d:4c:9d:35:d2:fa:c9:d3:e2:eb: 19:e4:a8:61:1b:d4:3a:1c:db:a2:98:e1:32:2c:48:9b:3b:29: 36:0f:a4:8e:cf:b3:8d:88:22:9f:fa:0f:91:21:24:c8:3e:82: 42:19:af:20:2d:68:5a:e5:a8:d3:63:90:f7:34:86:95:e6:05: 22:8a:47:c3:c9:53:8e:bb:4e:2f:30:a6:7c:28:af:e2:3b:f5: c8:74:f7:3d:1b:cf:bf:91:7d:4d:e2:ac:ac:cc:ba:e7:05:b8: 44:2e:51:f0:84:8b:1a:88:5e:12:3d:e0:5f:05:a1:ee:35:4c: b2:d4:43:05:2a:28:2e:46:d4:3f:d6:d5:45:61:ec:aa:97:19: d2:ca:fe:1e:40:20:43:25:38:90:d1:ed:a7:9f:e8:e9:58:c7: fd:a9:2d:43:f4:e3:5c:a2:ba:86:23:67:e4:64:c1:6b:38:cf: 05:3d:7f:86:8d:9a:be:e3:70:ee:84:62:6b:68:71:0c:98:e4: eb:a2:fb:8c:5b:ea:f9:fb:6d:8c:9a:8b:c5:98:07:cd:74:5f: 80:37:38:c7:da:3e:17:ec:cc:ca:53:49:4e:4a:2e:90:41:5c: 6c:46:f9:75:4b:01:e3:d2:00:9c:e8:d6:a6:11:6a:1d:a2:59: e9:af:4e:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwRjExMTAvBgNVBAUTKEE2Nzk0OTExOTdBQzgyMkUwRDE4MTk3MTEzN0E0NjdE MjdDMkIwMkMwHhcNMjQwNTE4MTc1NjU1WhcNMjQwNTI1MTc1NjU1WjAYMRYwFAYD VQQDEw02NjQ4ZWJlNy00ZDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jBBWkC4tMn+cDFQ5AfpGkNViAZKObg3NPLxVZsO5+c5nX3fQ2mwCbRAGMLk 2G+Cau/xEwvNM5VnoNhL2QZ5UtNrDEN1z24GIgqJe+EGmUJ6RlZNwoQe1wCRF2PP H17vS960gNg1ku+IdQRn215GgyqjlWao3DUWHTshOiK0VFMv+WvhIKonW9qXp1+Z a9DJOTOH9DOy2+o827cGjZKXP1bkDQZDacYtYeG73OOV2laIrREh/4xKHnRMi0Af PahkZDtSet04lh9sfQDwxF5wX1xtgr69d2hQepoZTCsCfOdw0Vv6VK6SC2zh5VuY 4q3OxjMq30E8BqTviYUPJ2ZfBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNmOJob Pyuv/VWjJiG2/lqNu6KTMB8GA1UdIwQYMBaAFKZ5SRGXrIIuDRgZcRN6Rn0nwrAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBGMS80MEIxM0JDMDBB MzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dpNE5HQmx4RTNwR2ZTZkNz Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BubEpFWmVzZ2k0TkdCbHhFM3BHZlNmQ3NDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBGMS80MEIxM0JDMDBBMzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dp NE5HQmx4RTNwR2ZTZkNzQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBENMh1hiqTTR1MnTXS+snT4usZ5KhhG9Q6HNuimOEyLEibOyk2D6SO z7ONiCKf+g+RISTIPoJCGa8gLWha5ajTY5D3NIaV5gUiikfDyVOOu04vMKZ8KK/i O/XIdPc9G8+/kX1N4qyszLrnBbhELlHwhIsaiF4SPeBfBaHuNUyy1EMFKiguRtQ/ 1tVFYeyqlxnSyv4eQCBDJTiQ0e2nn+jpWMf9qS1D9ONcorqGI2fkZMFrOM8FPX+G jZq+43DuhGJraHEMmOTrovuMW+r5+22MmovFmAfNdF+ANzjH2j4X7MzKU0lOSi6Q QVxsRvl1SwHj0gCc6NamEWodolnpr073 -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org