$ rpki-client -vvf rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft File: PB_di6MB3OPbPwvMJchpTOG83H0.mft (raw, json) Hash identifier: 4xomUNTT7n3jpsblL1RRGvZt8RNIoB1mkA8Jvlypw48= Subject key identifier: 92:91:53:9C:41:62:C0:87:68:1B:C8:79:F0:CD:F6:AA:4A:99:9D:8C Authority key identifier: 3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D Certificate issuer: /CN=A91A08FD/serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D Certificate serial: 0CBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft Manifest number: 0CB3 Signing time: Sat 18 May 2024 18:48:42 +0000 Manifest this update: Sat 18 May 2024 18:48:41 +0000 Manifest next update: Sat 25 May 2024 18:48:41 +0000 Files and hashes: 1: PB_di6MB3OPbPwvMJchpTOG83H0.crl (hash: NTgb+qbVmDnW7WTF2lhMVNTxAteFA4Sf4UGlVnGOy5I=) 2: 3802A98EC8AC11E9877DCE2FC4F9AE02.roa (hash: jEmOSnx0C7+ZNDNn2Ph7IaxYFIlJl2cis+I60FPMGYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A08FD/serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D Validity Not Before: May 18 18:48:41 2024 GMT Not After : May 25 18:48:41 2024 GMT Subject: CN=6648f809-f503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:60:a8:7c:c1:bd:ba:52:34:06:37:de:79:6b: e3:19:62:e0:ca:3f:7b:ee:5c:75:83:1e:97:29:79: c0:82:5b:e2:27:ba:62:b2:14:29:1c:c7:be:fa:6d: a6:e5:11:59:28:ad:11:2c:06:29:82:db:e0:9d:0a: 30:9e:52:5f:46:a4:ee:12:6c:d4:a3:96:57:3a:62: 71:8b:5f:6c:a0:d7:ca:d2:58:20:bd:26:84:80:aa: 4d:3b:95:06:e9:01:33:f7:ae:8e:b4:be:0f:88:55: 34:eb:94:77:a9:12:4e:35:dc:79:8b:82:03:da:0b: 52:c7:59:18:89:c1:33:75:8e:03:6d:3b:8f:6b:63: 95:76:b3:9a:d5:ed:2a:9d:de:01:7a:5d:b7:81:28: 3c:da:43:9d:e8:a6:4a:d6:22:92:2e:d8:59:d0:79: 20:42:47:3d:1a:6e:7b:52:75:cd:15:d1:d4:72:68: 86:5f:b2:69:d7:55:c3:6d:40:94:a9:91:3e:69:98: d1:48:f2:9e:12:4e:33:32:34:5b:d9:cb:c0:b7:f5: 55:64:38:56:28:91:f1:4e:93:6a:e8:22:c5:51:73: 26:18:41:b7:b1:22:ca:76:1b:b6:dd:01:e7:e5:99: ce:e6:8f:31:00:ea:f7:ea:42:cd:4c:5a:48:57:79: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:91:53:9C:41:62:C0:87:68:1B:C8:79:F0:CD:F6:AA:4A:99:9D:8C X509v3 Authority Key Identifier: keyid:3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:93:94:70:8a:2a:d1:be:de:c8:8f:eb:7d:19:d8:64:74:63: c2:8a:04:eb:e7:71:ba:41:ff:e0:49:49:0a:c5:85:23:60:28: 01:b4:c5:ca:a1:09:7f:c8:85:fe:59:2f:b4:64:c5:99:cc:82: 3f:6d:06:cd:31:9c:42:a8:c0:2b:dd:cf:eb:ae:8b:e7:39:59: c2:34:43:55:f0:6a:77:ea:11:b6:f9:5f:42:3c:f0:03:6c:fc: 89:e0:07:01:9b:f7:43:6d:fc:52:e5:da:66:dc:f6:db:99:44: 58:96:a5:d1:62:b7:75:e8:13:a2:ee:6b:5e:3c:6a:bc:05:0d: b5:db:a2:26:46:78:06:c2:3d:7d:0b:9a:a4:a4:08:bc:3f:30: ab:1d:cd:87:46:46:cf:9a:d4:8f:4c:6d:8f:f9:46:88:01:81: f1:49:a2:bb:d0:c3:5f:53:e2:c8:7b:df:10:80:33:98:d2:f9: e8:17:57:36:96:70:73:6a:4e:fa:54:7a:20:0f:e2:01:b5:19: 15:42:de:b6:91:c1:9f:70:24:89:d2:bb:e5:dd:78:a2:cc:8a: 59:b1:45:6b:8f:32:cb:b8:69:0f:38:88:ab:3c:5f:fe:78:d5: 94:27:f9:96:fd:db:6d:9a:fe:87:c7:6a:c2:4e:dd:b8:7a:ad: 23:87:f2:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4RkQxMTAvBgNVBAUTKDNDMUZERDhCQTMwMURDRTNEQjNGMEJDQzI1Qzg2OTRD RTFCQ0RDN0QwHhcNMjQwNTE4MTg0ODQxWhcNMjQwNTI1MTg0ODQxWjAYMRYwFAYD VQQDEw02NjQ4ZjgwOS1mNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2CofMG9ulI0BjfeeWvjGWLgyj977lx1gx6XKXnAglviJ7pishQpHMe++m2m 5RFZKK0RLAYpgtvgnQownlJfRqTuEmzUo5ZXOmJxi19soNfK0lggvSaEgKpNO5UG 6QEz966OtL4PiFU065R3qRJONdx5i4ID2gtSx1kYicEzdY4DbTuPa2OVdrOa1e0q nd4Bel23gSg82kOd6KZK1iKSLthZ0HkgQkc9Gm57UnXNFdHUcmiGX7Jp11XDbUCU qZE+aZjRSPKeEk4zMjRb2cvAt/VVZDhWKJHxTpNq6CLFUXMmGEG3sSLKdhu23QHn 5ZnO5o8xAOr36kLNTFpIV3ndowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKRU5xB YsCHaBvIefDN9qpKmZ2MMB8GA1UdIwQYMBaAFDwf3YujAdzj2z8LzCXIaUzhvNx9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDhGRC85RjQyRUFEOEM4 QUIxMUU5ODI5RDI4MkZDNEY5QUUwMi9QQl9kaTZNQjNPUGJQd3ZNSmNocFRPRzgz SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCX2RpNk1CM09QYlB3dk1KY2hwVE9HODNIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDhGRC85RjQyRUFEOEM4QUIxMUU5ODI5RDI4MkZDNEY5QUUwMi9QQl9kaTZNQjNP UGJQd3ZNSmNocFRPRzgzSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWk5RwiirRvt7Ij+t9GdhkdGPCigTr53G6Qf/gSUkKxYUjYCgBtMXK oQl/yIX+WS+0ZMWZzII/bQbNMZxCqMAr3c/rrovnOVnCNENV8Gp36hG2+V9CPPAD bPyJ4AcBm/dDbfxS5dpm3PbbmURYlqXRYrd16BOi7mtePGq8BQ2126ImRngGwj19 C5qkpAi8PzCrHc2HRkbPmtSPTG2P+UaIAYHxSaK70MNfU+LIe98QgDOY0vnoF1c2 lnBzak76VHogD+IBtRkVQt62kcGfcCSJ0rvl3XiizIpZsUVrjzLLuGkPOIirPF/+ eNWUJ/mW/dttmv6Hx2rCTt24eq0jh/LM -----END CERTIFICATE-----Generated at Sat May 18 19:21:04 2024 by rpki-client on console-fra.rpki-client.org