$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft File: PLw5Tr9aIgmw6yx0fD_wBratGds.mft (raw, json) Hash identifier: 7WQmNphoJ93HRLJFVWg/jFqJ8p/E7xuf1IYmH8JETgg= Subject key identifier: 4B:5A:81:E4:6A:41:8C:D7:48:36:C6:3A:42:1A:E0:79:DC:85:14:C1 Authority key identifier: 3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB Certificate issuer: /CN=A91B8E1F/serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft Manifest number: A3 Signing time: Fri 31 May 2024 07:35:55 +0000 Manifest this update: Fri 31 May 2024 07:35:55 +0000 Manifest next update: Fri 07 Jun 2024 07:35:55 +0000 Files and hashes: 1: PLw5Tr9aIgmw6yx0fD_wBratGds.crl (hash: gII4w2yuqnHlUPXMlEogPQMdsd/2WzCPYidT6973zK4=) 2: 98B1A08E256211EEB175EF31C4F9AE02.roa (hash: N70eLsG02B2BGwfmJV5uRw1PEf+XtzqxkTETI6ESL0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E1F/serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB Validity Not Before: May 31 07:35:55 2024 GMT Not After : Jun 7 07:35:55 2024 GMT Subject: CN=66597ddb-b158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:eb:e9:0f:98:03:9f:6b:fe:d0:e8:19:14: 3e:86:d2:85:72:be:80:50:fd:04:88:07:12:93:a1: f3:ac:9c:80:29:1c:1e:ab:0e:bf:95:99:07:33:37: f8:11:8b:2f:5f:03:1f:b2:bc:8a:af:3f:94:75:9b: bc:b5:8c:b5:f8:35:be:5b:b0:f3:66:28:43:3b:a2: 2f:2a:19:95:32:78:e7:98:d5:c9:da:be:86:9e:4a: c3:6e:75:45:9e:6e:a7:36:88:12:46:71:d4:fa:f9: 19:07:e5:85:24:64:82:7a:48:f1:c2:ad:b1:cf:6d: ac:40:05:2d:cd:b5:1d:c3:42:08:24:c8:63:d5:e1: e2:b2:93:33:af:3d:fb:a1:e6:98:28:16:32:d2:7f: d3:1c:1e:6a:a8:48:db:2d:65:0a:56:d4:1e:0b:79: 25:d3:4c:91:b6:75:ba:1c:b5:3a:45:9b:55:6d:fb: c2:60:62:eb:1e:50:22:7e:f2:af:69:67:63:b7:2f: 45:85:df:4f:ce:54:d6:45:4d:73:79:1b:68:73:b5: 41:f4:bb:b3:65:c1:36:0b:da:59:1e:2f:42:a8:21: 67:28:8d:c8:7a:4b:04:fe:7f:c6:cb:bb:33:24:a2: 74:00:e5:79:ec:e5:08:4c:43:0e:16:16:91:38:01: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5A:81:E4:6A:41:8C:D7:48:36:C6:3A:42:1A:E0:79:DC:85:14:C1 X509v3 Authority Key Identifier: keyid:3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:f1:8c:4d:1d:be:58:ee:f4:1e:33:5f:6b:b7:6b:ad:c1:e9: ac:c1:63:7c:92:8c:37:0e:9a:e5:ef:e3:e6:14:61:66:51:52: 62:1b:d8:51:01:31:d6:69:cc:2f:a3:1d:23:73:87:c4:d4:de: 6b:a6:ac:01:d1:22:c0:f2:9f:81:bc:d5:59:6a:4f:ea:97:55: 73:0e:fe:3c:fb:0d:44:36:d8:d0:ac:2f:0d:5d:24:df:63:ac: 35:05:f8:93:64:e7:0d:21:0d:a8:e1:2a:19:ed:04:24:29:e5: dc:e8:8a:2e:7b:d7:83:25:63:62:15:a7:47:bc:ea:4b:e2:0a: a3:cd:c9:e6:a2:24:d9:01:b4:10:7e:13:5a:03:8b:0f:39:7d: 5c:64:b2:c0:70:98:d5:3e:79:7b:1a:d9:48:79:27:d3:da:20: 43:5a:3d:e6:e8:ab:ef:e7:74:49:a1:3e:92:49:f2:9c:4c:ad: 19:6c:70:36:f4:ba:b2:79:35:b9:bf:3f:f9:f7:25:88:77:ec: f8:a9:1e:34:c6:7b:08:f6:2e:79:73:51:93:2a:60:76:b5:2d: 86:4d:92:b1:35:56:6f:50:3c:61:e7:aa:56:ac:02:25:e8:1f: a9:7d:c6:4e:b7:0c:d9:30:e3:c2:97:0e:ec:52:2c:67:b1:0a: f0:bf:4a:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFMUYxMTAvBgNVBAUTKDNDQkMzOTRFQkY1QTIyMDlCMEVCMkM3NDdDM0ZGMDA2 QjZBRDE5REIwHhcNMjQwNTMxMDczNTU1WhcNMjQwNjA3MDczNTU1WjAYMRYwFAYD VQQDEw02NjU5N2RkYi1iMTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9vr6Q+YA59r/tDoGRQ+htKFcr6AUP0EiAcSk6HzrJyAKRweqw6/lZkHMzf4 EYsvXwMfsryKrz+UdZu8tYy1+DW+W7DzZihDO6IvKhmVMnjnmNXJ2r6GnkrDbnVF nm6nNogSRnHU+vkZB+WFJGSCekjxwq2xz22sQAUtzbUdw0IIJMhj1eHispMzrz37 oeaYKBYy0n/THB5qqEjbLWUKVtQeC3kl00yRtnW6HLU6RZtVbfvCYGLrHlAifvKv aWdjty9Fhd9PzlTWRU1zeRtoc7VB9LuzZcE2C9pZHi9CqCFnKI3IeksE/n/Gy7sz JKJ0AOV57OUITEMOFhaROAEaNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtageRq QYzXSDbGOkIa4HnchRTBMB8GA1UdIwQYMBaAFDy8OU6/WiIJsOssdHw/8Aa2rRnb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEUxRi8xNjkyRDQ4ODI1 NjIxMUVFODEyMjJFMzFDNEY5QUUwMi9QTHc1VHI5YUlnbXc2eXgwZkRfd0JyYXRH ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BMdzVUcjlhSWdtdzZ5eDBmRF93QnJhdEdkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEUxRi8xNjkyRDQ4ODI1NjIxMUVFODEyMjJFMzFDNEY5QUUwMi9QTHc1VHI5YUln bXc2eXgwZkRfd0JyYXRHZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp8YxNHb5Y7vQeM19rt2utwemswWN8kow3Dprl7+PmFGFmUVJiG9hR ATHWacwvox0jc4fE1N5rpqwB0SLA8p+BvNVZak/ql1VzDv48+w1ENtjQrC8NXSTf Y6w1BfiTZOcNIQ2o4SoZ7QQkKeXc6Ioue9eDJWNiFadHvOpL4gqjzcnmoiTZAbQQ fhNaA4sPOX1cZLLAcJjVPnl7GtlIeSfT2iBDWj3m6Kvv53RJoT6SSfKcTK0ZbHA2 9LqyeTW5vz/59yWId+z4qR40xnsI9i55c1GTKmB2tS2GTZKxNVZvUDxh56pWrAIl 6B+pfcZOtwzZMOPClw7sUixnsQrwv0oq -----END CERTIFICATE-----Generated at Fri May 31 08:39:00 2024 by rpki-client on console-fra.rpki-client.org