$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft File: PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft (raw, json) Hash identifier: xzxHqVusHWQRIRJ74gAwFyuqlH0HGDG2GQLk4SpfcPQ= Subject key identifier: DE:52:41:EC:AF:13:25:40:CD:03:9E:77:E1:92:B2:01:D8:3D:CD:EB Authority key identifier: 3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 Certificate issuer: /CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Certificate serial: 128C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft Manifest number: 1282 Signing time: Sat 18 May 2024 17:38:09 +0000 Manifest this update: Sat 18 May 2024 17:38:08 +0000 Manifest next update: Sat 25 May 2024 17:38:08 +0000 Files and hashes: 1: PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl (hash: dl4H1cLyS91D3uJZsVV/Imyblv8xkK++nSeJoXDvsvU=) 2: 2789A9EEE38B11EBB246E13FC4F9AE02.roa (hash: vl7ru7jGeXouITslQ3P7oElUqX5fMm8OE7sy4pQtZjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4748 (0x128c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Validity Not Before: May 18 17:38:08 2024 GMT Not After : May 25 17:38:08 2024 GMT Subject: CN=6648e780-321b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:7b:0f:9c:d1:3d:a7:02:76:68:01:da:2e:10: 6a:2e:e0:97:f0:80:08:6a:a5:eb:9f:75:fb:de:2d: 5c:6c:8d:09:14:0d:2f:19:19:dc:eb:5e:01:69:ba: b0:ea:5f:4f:08:c1:7c:30:85:9c:3b:59:65:d1:74: b7:39:36:30:65:0b:50:b9:67:0f:1b:8a:e7:22:69: c5:2a:46:09:ed:44:aa:d6:28:e9:6a:22:f6:cc:e1: bb:59:a5:03:20:40:ee:e9:42:5a:ea:02:48:fb:c3: d9:97:28:0f:08:e8:6c:bc:e6:e7:14:f2:cd:0c:22: 7c:75:0a:b9:e2:ff:8f:f0:89:71:0e:ef:cb:6d:d5: d4:42:4a:d7:9d:c5:6e:69:be:9a:2c:fd:38:fb:c9: 18:2f:08:6f:40:0c:07:7c:ae:3f:02:80:1d:05:da: 13:c7:49:80:7d:9c:32:3a:8b:55:7a:62:1f:7c:06: a6:78:4f:ae:41:0f:6c:02:af:7e:8f:6f:96:1c:4c: 3b:8e:c4:2c:eb:88:64:da:f9:dd:d5:23:ee:a6:c7: 72:57:4b:6d:01:2c:33:5b:03:0d:b6:ee:5e:20:ce: 11:1e:2e:89:eb:46:94:9c:b8:92:02:57:c4:57:de: 32:42:12:9b:e2:b4:c8:1f:b8:0e:ea:ba:20:e1:c9: 11:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:52:41:EC:AF:13:25:40:CD:03:9E:77:E1:92:B2:01:D8:3D:CD:EB X509v3 Authority Key Identifier: keyid:3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:1d:43:55:b1:f4:c1:6d:55:aa:83:a6:b5:45:44:10:8a:57: e4:fd:d6:bb:3e:41:50:95:f3:04:b7:03:f1:75:2b:3d:4b:aa: 87:5f:eb:05:44:ec:d3:84:3c:bb:27:82:f2:29:c7:28:69:28: 13:b1:a4:52:23:66:7b:1b:94:ac:3c:8b:17:db:8f:fd:20:dd: a5:6f:fc:74:5e:65:4e:19:77:89:e8:9f:f5:7e:b3:f6:6a:68: 7e:59:de:a7:8e:4f:01:94:81:83:f2:ab:58:c1:b6:0c:e6:5e: e8:4d:21:55:a0:49:8b:6b:68:9b:7e:1e:bc:11:33:0e:19:a9: 35:0e:ca:f6:bf:2f:21:44:ae:91:7a:50:91:d6:5f:8f:79:cd: b0:fd:12:d1:fd:11:ca:3a:1e:e9:f3:a6:45:59:57:d8:84:ef: 66:9c:94:da:bf:8c:d1:b5:90:70:75:b3:90:87:47:e6:11:c8: 74:a0:16:2c:0c:7a:a5:ad:12:98:a1:e4:b3:74:8b:fb:46:b7: b1:63:5a:23:66:69:23:87:67:87:b7:0a:bb:f9:4f:6d:3e:d6: 30:75:bd:c0:cf:7d:9e:be:c5:83:bf:2c:e5:a1:80:35:9e:ed: cf:bd:c1:d5:39:ec:8a:11:1f:fa:ca:74:0d:e7:d9:fd:f0:6c: 9a:61:d0:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkyRkUxMTAvBgNVBAUTKDNENDNFREZFNjRGNjE0RTExMzA2QTg3RjFFRjI0RjI4 MkU3RTM3MTQwHhcNMjQwNTE4MTczODA4WhcNMjQwNTI1MTczODA4WjAYMRYwFAYD VQQDEw02NjQ4ZTc4MC0zMjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+XsPnNE9pwJ2aAHaLhBqLuCX8IAIaqXrn3X73i1cbI0JFA0vGRnc614Babqw 6l9PCMF8MIWcO1ll0XS3OTYwZQtQuWcPG4rnImnFKkYJ7USq1ijpaiL2zOG7WaUD IEDu6UJa6gJI+8PZlygPCOhsvObnFPLNDCJ8dQq54v+P8IlxDu/LbdXUQkrXncVu ab6aLP04+8kYLwhvQAwHfK4/AoAdBdoTx0mAfZwyOotVemIffAameE+uQQ9sAq9+ j2+WHEw7jsQs64hk2vnd1SPupsdyV0ttASwzWwMNtu5eIM4RHi6J60aUnLiSAlfE V94yQhKb4rTIH7gO6rog4ckRAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5SQeyv EyVAzQOed+GSsgHYPc3rMB8GA1UdIwQYMBaAFD1D7f5k9hThEwaofx7yTygufjcU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJGRS83MTgxN0Y2Q0E1 QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZPRVRCcWhfSHZKUEtDNS1O eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVUHRfbVQyRk9FVEJxaF9IdkpQS0M1LU54US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTJGRS83MTgxN0Y2Q0E1QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZP RVRCcWhfSHZKUEtDNS1OeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFHUNVsfTBbVWqg6a1RUQQilfk/da7PkFQlfMEtwPxdSs9S6qHX+sF ROzThDy7J4LyKccoaSgTsaRSI2Z7G5SsPIsX24/9IN2lb/x0XmVOGXeJ6J/1frP2 amh+Wd6njk8BlIGD8qtYwbYM5l7oTSFVoEmLa2ibfh68ETMOGak1Dsr2vy8hRK6R elCR1l+Pec2w/RLR/RHKOh7p86ZFWVfYhO9mnJTav4zRtZBwdbOQh0fmEch0oBYs DHqlrRKYoeSzdIv7RrexY1ojZmkjh2eHtwq7+U9tPtYwdb3Az32evsWDvyzloYA1 nu3PvcHVOeyKER/6ynQN59n98GyaYdDx -----END CERTIFICATE-----Generated at Sat May 18 18:12:33 2024 by rpki-client on console-fra.rpki-client.org