$ rpki-client -vvf rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft File: PtImrpJ_g5gXgFRs42LzNp7bJLM.mft (raw, json) Hash identifier: Gq0ZhiZV32JnpBvPNFfOoLPPdfJNUMjsP94tCP2L5CE= Subject key identifier: 3E:F5:5A:A6:49:21:75:2F:1B:66:41:34:17:2A:D6:1E:DD:42:8F:A2 Authority key identifier: 3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3 Certificate issuer: /CN=A91B92DC/serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft Manifest number: 010F Signing time: Sat 01 Jun 2024 06:45:12 +0000 Manifest this update: Sat 01 Jun 2024 06:45:12 +0000 Manifest next update: Sat 08 Jun 2024 06:45:11 +0000 Files and hashes: 1: PtImrpJ_g5gXgFRs42LzNp7bJLM.crl (hash: IQgLAok4RCe3Q5SjhijfRnJqgndFIFfbnE7vxV+SwsU=) 2: 3CD61DC8812D11ED9C04940EC4F9AE02.roa (hash: KGzyU0JmNRpSEh3RZsymjWSRCp0B3u4avxebKxFQa0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 06:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B92DC/serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3 Validity Not Before: Jun 1 06:45:12 2024 GMT Not After : Jun 8 06:45:11 2024 GMT Subject: CN=665ac378-40ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:20:c4:30:ba:cd:25:e3:73:79:12:4f:d1:d1: 6f:48:2f:b3:3e:6c:50:6e:5f:e0:38:18:ad:ea:8a: 2f:e2:b1:f4:ba:88:80:6b:15:d6:af:b5:86:d9:14: 2b:98:19:8f:f4:13:f6:a1:c3:81:a2:d1:ff:d7:0d: 6e:f2:89:26:06:0f:73:fb:f8:26:ba:52:fd:91:53: 31:2e:a4:c0:1a:42:d5:41:f4:e0:38:72:33:1e:a1: 35:3d:f9:82:bf:0c:fd:be:1d:88:a5:53:72:de:b2: a3:30:1f:a6:18:ab:f6:05:9c:53:80:0b:3e:61:a3: 14:55:39:ff:cf:c1:90:3d:61:7e:91:78:52:33:7f: 80:f8:b8:28:3f:1e:31:42:35:28:1e:ef:b3:a7:65: fa:7c:91:46:a4:c8:3f:e0:e4:20:df:f2:4f:00:4e: 52:02:84:06:9c:1a:03:6e:24:51:08:3a:b3:e6:31: a2:00:a7:c6:04:c9:72:9a:66:f5:2b:da:9e:df:66: b7:29:1e:04:40:0c:fe:28:7e:d4:5c:c6:45:ca:ba: ed:4e:72:fe:dc:3f:4b:c4:a4:1e:69:97:03:e7:26: 65:87:7f:c2:ad:90:7b:5d:09:43:c7:8e:b5:af:2c: dc:59:50:d8:f5:a1:d9:d5:dd:7c:b1:50:7c:a1:d6: 97:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F5:5A:A6:49:21:75:2F:1B:66:41:34:17:2A:D6:1E:DD:42:8F:A2 X509v3 Authority Key Identifier: keyid:3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:07:1b:7c:6d:00:e2:45:ad:18:61:ec:66:f3:80:f8:2c:e1: d5:3d:04:5a:a6:4f:15:27:25:68:d4:a0:05:02:ea:ff:32:a3: ff:ee:1b:cd:57:cd:91:fe:74:76:ae:89:64:ac:83:ca:12:cd: 4b:26:ed:b2:bc:52:d7:c3:83:b8:3a:7e:3e:00:85:ad:64:0a: 3d:c5:61:c2:ed:f5:c5:90:56:65:d4:bc:58:b6:c0:bf:be:44: 42:93:3d:f1:a1:9a:0a:90:d3:f4:14:8f:ed:97:8a:71:6b:f9: 21:a0:33:f4:67:58:a7:79:0f:fb:95:56:6f:b4:ea:6f:39:94: c5:7b:54:86:c8:f6:a7:90:c1:c1:1a:55:cf:3d:b0:1a:73:db: 3a:c6:87:0f:6e:3b:3d:ae:a1:7f:f5:4d:e7:f8:4b:63:30:fe: 32:72:79:53:d9:a9:c5:68:2e:ff:67:74:e3:79:d0:a7:8c:9c: b9:e4:74:97:1a:e4:4a:72:c9:45:50:c4:13:b0:7b:54:7e:cf: ed:c3:12:04:1c:ad:e8:ca:4d:e6:ac:77:51:68:33:83:e8:5e: 11:23:94:a2:20:f2:a6:49:39:06:eb:ae:c0:6a:fc:76:e9:65: 24:f6:5a:d9:3c:f6:85:11:dc:b1:fe:5e:b7:33:8c:c1:30:20: e4:22:16:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyREMxMTAvBgNVBAUTKDNFRDIyNkFFOTI3RjgzOTgxNzgwNTQ2Q0UzNjJGMzM2 OUVEQjI0QjMwHhcNMjQwNjAxMDY0NTEyWhcNMjQwNjA4MDY0NTExWjAYMRYwFAYD VQQDEw02NjVhYzM3OC00MGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yDEMLrNJeNzeRJP0dFvSC+zPmxQbl/gOBit6oov4rH0uoiAaxXWr7WG2RQr mBmP9BP2ocOBotH/1w1u8okmBg9z+/gmulL9kVMxLqTAGkLVQfTgOHIzHqE1PfmC vwz9vh2IpVNy3rKjMB+mGKv2BZxTgAs+YaMUVTn/z8GQPWF+kXhSM3+A+LgoPx4x QjUoHu+zp2X6fJFGpMg/4OQg3/JPAE5SAoQGnBoDbiRRCDqz5jGiAKfGBMlymmb1 K9qe32a3KR4EQAz+KH7UXMZFyrrtTnL+3D9LxKQeaZcD5yZlh3/CrZB7XQlDx461 ryzcWVDY9aHZ1d18sVB8odaXgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD71WqZJ IXUvG2ZBNBcq1h7dQo+iMB8GA1UdIwQYMBaAFD7SJq6Sf4OYF4BUbONi8zae2ySz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTJEQy81NjMyODdGNjgx MjkxMUVEQTVCMTUwNzNDNEY5QUUwMi9QdEltcnBKX2c1Z1hnRlJzNDJMek5wN2JK TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B0SW1ycEpfZzVnWGdGUnM0Mkx6TnA3YkpMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTJEQy81NjMyODdGNjgxMjkxMUVEQTVCMTUwNzNDNEY5QUUwMi9QdEltcnBKX2c1 Z1hnRlJzNDJMek5wN2JKTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUBxt8bQDiRa0YYexm84D4LOHVPQRapk8VJyVo1KAFAur/MqP/7hvN V82R/nR2rolkrIPKEs1LJu2yvFLXw4O4On4+AIWtZAo9xWHC7fXFkFZl1LxYtsC/ vkRCkz3xoZoKkNP0FI/tl4pxa/khoDP0Z1ineQ/7lVZvtOpvOZTFe1SGyPankMHB GlXPPbAac9s6xocPbjs9rqF/9U3n+EtjMP4ycnlT2anFaC7/Z3TjedCnjJy55HSX GuRKcslFUMQTsHtUfs/twxIEHK3oyk3mrHdRaDOD6F4RI5SiIPKmSTkG667Aavx2 6WUk9lrZPPaFEdyx/l63M4zBMCDkIhbW -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:37 2024 by rpki-client on console-fra.rpki-client.org